@end-close/relay-sqlite 0.12.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 End Close
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,39 @@
+# @end-close/relay-sqlite
+
+SQLite `EventStore` and `ControlStore` for [`@end-close/relay`](https://www.npmjs.com/package/@end-close/relay).
+This is the store the End Close relay application ships with: rollback journal,
+`synchronous=FULL`, safe on network filesystems (EFS/NFS), migrations inlined in the package.
+
+```sh
+npm install @end-close/relay @end-close/relay-sqlite
+```
+
+Install both at the same version. `@end-close/relay` is a peer dependency; the two packages are
+released together in lockstep with the relay application.
+
+## Usage
+
+```ts
+import { createRelay } from '@end-close/relay'
+import { SqliteEventStore, SqliteControlStore, openDb, migrate } from '@end-close/relay-sqlite'
+
+const db = openDb('/var/lib/myapp/relay.db')
+migrate(db)
+
+const relay = createRelay({
+  store: new SqliteEventStore(db),
+  control: new SqliteControlStore(db),   // killswitch + per-route pause
+  // ...routes, secrets, endclose, encryption, maskingKey — see @end-close/relay
+})
+```
+
+`openDb` configures the connection (journal mode, busy timeout, foreign keys); `migrate` applies
+the schema idempotently and is safe to run on every boot. Several relay instances may share one
+database file; claiming is lease-based.
+
+Requires Node `>=22.12`. Depends on `better-sqlite3`, which ships prebuilt binaries for the
+common platforms.
+
+See the [engine README](https://github.com/End-Close/endclose-relay/tree/main/packages/core#readme)
+for the full embedding guide, and [`COMPATIBILITY.md`](https://github.com/End-Close/endclose-relay/blob/main/packages/core/COMPATIBILITY.md)
+for what is a stable contract.

package/dist/busy.d.ts

@@ -0,0 +1,13 @@
+import { type Logger } from '@end-close/relay';
+export declare const SQLITE_BUSY_TIMEOUT_MS = 15000;
+export declare const BUSY_RETRY_ATTEMPTS = 3;
+export declare const INGEST_BUSY_RETRY_ATTEMPTS = 2;
+export declare function isSqliteBusy(err: unknown): boolean;
+export interface BusyRetryOpts {
+    attempts?: number;
+    delayMs?: number;
+    logger?: Logger;
+}
+/** Retry a synchronous SQLite call after SQLITE_BUSY; sqlite's busy_timeout already waited once. */
+export declare function withBusyRetry<T>(op: string, fn: () => T, opts?: BusyRetryOpts): Promise<T>;
+//# sourceMappingURL=busy.d.ts.map

package/dist/busy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"busy.d.ts","sourceRoot":"","sources":["../src/busy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAE1D,eAAO,MAAM,sBAAsB,QAAS,CAAA;AAC5C,eAAO,MAAM,mBAAmB,IAAI,CAAA;AACpC,eAAO,MAAM,0BAA0B,IAAI,CAAA;AAI3C,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGlD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,oGAAoG;AACpG,wBAAsB,aAAa,CAAC,CAAC,EACnC,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,CAAC,EACX,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,CAAC,CAAC,CA6BZ"}

package/dist/busy.js

@@ -0,0 +1,45 @@
+import { noopLogger } from '@end-close/relay';
+export const SQLITE_BUSY_TIMEOUT_MS = 15_000;
+export const BUSY_RETRY_ATTEMPTS = 3;
+export const INGEST_BUSY_RETRY_ATTEMPTS = 2;
+const DEFAULT_DELAY_MS = 200;
+export function isSqliteBusy(err) {
+    const code = err?.code;
+    return typeof code === 'string' && (code === 'SQLITE_BUSY' || code.startsWith('SQLITE_BUSY_'));
+}
+/** Retry a synchronous SQLite call after SQLITE_BUSY; sqlite's busy_timeout already waited once. */
+export async function withBusyRetry(op, fn, opts = {}) {
+    const attempts = opts.attempts ?? BUSY_RETRY_ATTEMPTS;
+    const delayMs = opts.delayMs ?? DEFAULT_DELAY_MS;
+    const logger = opts.logger ?? noopLogger;
+    let last;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            return fn();
+        }
+        catch (err) {
+            last = err;
+            if (!isSqliteBusy(err) || i === attempts - 1) {
+                if (isSqliteBusy(err)) {
+                    logger.warn('sqlite busy exhausted', {
+                        op,
+                        attempts,
+                        error: err.message,
+                    });
+                }
+                throw err;
+            }
+            logger.warn('sqlite busy, retrying', {
+                op,
+                attempt: i + 1,
+                error: err.message,
+            });
+            await sleep(delayMs * (i + 1));
+        }
+    }
+    throw last;
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=busy.js.map

package/dist/busy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"busy.js","sourceRoot":"","sources":["../src/busy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAe,MAAM,kBAAkB,CAAA;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAA;AACpC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAA;AAE3C,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAA;IACpD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAA;AAChG,CAAC;AAQD,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU,EACV,EAAW,EACX,OAAsB,EAAE;IAExB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAA;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAA;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;IACxC,IAAI,IAAa,CAAA;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,CAAA;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,GAAG,CAAA;YACV,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;wBACnC,EAAE;wBACF,QAAQ;wBACR,KAAK,EAAG,GAAa,CAAC,OAAO;qBAC9B,CAAC,CAAA;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAA;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,EAAE;gBACF,OAAO,EAAE,CAAC,GAAG,CAAC;gBACd,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAC9C,CAAC"}

package/dist/db.d.ts

@@ -0,0 +1,4 @@
+import Database from 'better-sqlite3';
+export type Db = Database.Database;
+export declare function openDb(path: string): Db;
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAKrC,MAAM,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAA;AAElC,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE,CAavC"}

package/dist/db.js

@@ -0,0 +1,20 @@
+import Database from 'better-sqlite3';
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { SQLITE_BUSY_TIMEOUT_MS } from './busy.js';
+export function openDb(path) {
+    if (path !== ':memory:')
+        mkdirSync(dirname(path), { recursive: true });
+    const db = new Database(path);
+    // DELETE (rollback journal), not WAL: WAL needs shared-memory primitives that network
+    // filesystems (EFS/NFS) do not provide correctly. Durability comes from synchronous=FULL
+    // below — an acked webhook must survive power loss (the store-and-forward contract).
+    db.pragma('journal_mode = DELETE');
+    db.pragma('synchronous = FULL');
+    db.pragma('foreign_keys = ON');
+    // EFS lock/fsync can exceed a few seconds; sqlite retries internally up to this timeout
+    // before throwing SQLITE_BUSY. Application-level retries sit on top (see withBusyRetry).
+    db.pragma(`busy_timeout = ${SQLITE_BUSY_TIMEOUT_MS}`);
+    return db;
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAIlD,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,IAAI,KAAK,UAAU;QAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7B,sFAAsF;IACtF,yFAAyF;IACzF,qFAAqF;IACrF,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAA;IAClC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IAC/B,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;IAC9B,wFAAwF;IACxF,yFAAyF;IACzF,EAAE,CAAC,MAAM,CAAC,kBAAkB,sBAAsB,EAAE,CAAC,CAAA;IACrD,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { openDb, type Db } from './db.js';
+export { migrate, MIGRATIONS, type Migration } from './migrations.js';
+export { withBusyRetry, isSqliteBusy } from './busy.js';
+export { SqliteEventStore, SqliteControlStore, runSqlite } from './store.js';
+export { EventsRepo, type EventRow } from './repo/events.js';
+export { KvRepo, ROUTE_PAUSED_PREFIX, type GlobalKillswitch } from './repo/kv.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,8 @@
+// @end-close/relay-sqlite — SQLite storage for the End Close relay engine.
+export { openDb } from './db.js';
+export { migrate, MIGRATIONS } from './migrations.js';
+export { withBusyRetry, isSqliteBusy } from './busy.js';
+export { SqliteEventStore, SqliteControlStore, runSqlite } from './store.js';
+export { EventsRepo } from './repo/events.js';
+export { KvRepo, ROUTE_PAUSED_PREFIX } from './repo/kv.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,OAAO,EAAE,MAAM,EAAW,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAkB,MAAM,iBAAiB,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAiB,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAyB,MAAM,cAAc,CAAA"}

package/dist/migrations.d.ts

@@ -0,0 +1,8 @@
+import type { Db } from './db.js';
+export interface Migration {
+    name: string;
+    sql: string;
+}
+export declare const MIGRATIONS: Migration[];
+export declare function migrate(db: Db, sets?: Migration[][]): void;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAA;AAOjC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,eAAO,MAAM,UAAU,EAAE,SAAS,EA0CjC,CAAA;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,GAAE,SAAS,EAAE,EAAiB,GAAG,IAAI,CAuBxE"}

package/dist/migrations.js

@@ -0,0 +1,62 @@
+export const MIGRATIONS = [
+    {
+        name: '001_init.sql',
+        sql: `
+CREATE TABLE events (
+  id              INTEGER PRIMARY KEY,
+  route_id        TEXT NOT NULL,
+  source          TEXT NOT NULL,
+  event_id        TEXT NOT NULL,
+  event_type      TEXT,
+  payload_enc     BLOB NOT NULL,
+  payload_iv      BLOB NOT NULL,
+  headers_json    TEXT NOT NULL,
+  received_at     TEXT NOT NULL,
+  status          TEXT NOT NULL DEFAULT 'pending'
+                  CHECK (status IN ('pending','retry','delivering','delivered','parked','dropped_by_filter')),
+  attempts        INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at TEXT,
+  delivered_at    TEXT,
+  bulk_request_id TEXT,
+  last_error      TEXT,
+  idempotency_key TEXT NOT NULL,
+  UNIQUE (idempotency_key)
+);
+CREATE INDEX idx_events_dispatch ON events (status, next_attempt_at, route_id, id);
+CREATE INDEX idx_events_route_status ON events (route_id, status);
+
+CREATE TABLE kv (
+  key        TEXT PRIMARY KEY,
+  value      TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+`,
+    },
+    {
+        // Lease-based claiming: a crashed or slow instance's rows are recoverable by others.
+        name: '002_leases.sql',
+        sql: `
+ALTER TABLE events ADD COLUMN claimed_by TEXT;
+ALTER TABLE events ADD COLUMN lease_until TEXT;
+`,
+    },
+];
+export function migrate(db, sets = [MIGRATIONS]) {
+    db.exec('CREATE TABLE IF NOT EXISTS schema_migrations (name TEXT PRIMARY KEY, applied_at TEXT NOT NULL)');
+    const applied = new Set(db
+        .prepare('SELECT name FROM schema_migrations')
+        .all()
+        .map((r) => r.name));
+    for (const set of sets) {
+        for (const m of set) {
+            if (applied.has(m.name))
+                continue;
+            const run = db.transaction(() => {
+                db.exec(m.sql);
+                db.prepare('INSERT INTO schema_migrations (name, applied_at) VALUES (?, ?)').run(m.name, new Date().toISOString());
+            });
+            run();
+        }
+    }
+}
+//# sourceMappingURL=migrations.js.map

package/dist/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,UAAU,GAAgB;IACrC;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BR;KACE;IACD;QACE,qFAAqF;QACrF,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE;;;CAGR;KACE;CACF,CAAA;AAED,MAAM,UAAU,OAAO,CAAC,EAAM,EAAE,OAAsB,CAAC,UAAU,CAAC;IAChE,EAAE,CAAC,IAAI,CACL,gGAAgG,CACjG,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE;SACC,OAAO,CAAC,oCAAoC,CAAC;SAC7C,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAsB,CAAC,IAAI,CAAC,CAC5C,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACjC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC9B,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;gBACd,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC,CAAC,GAAG,CAC9E,CAAC,CAAC,IAAI,EACN,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAA;YACH,CAAC,CAAC,CAAA;YACF,GAAG,EAAE,CAAA;QACP,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/repo/events.d.ts

@@ -0,0 +1,93 @@
+import type { Db } from '../db.js';
+import type { EventStatus, RouteStats } from '@end-close/relay';
+export type { EventStatus, RouteStats };
+/** A raw row of the events table. */
+export interface EventRow {
+    id: number;
+    route_id: string;
+    source: string;
+    event_id: string;
+    event_type: string | null;
+    payload_enc: Buffer;
+    payload_iv: Buffer;
+    headers_json: string;
+    received_at: string;
+    status: EventStatus;
+    attempts: number;
+    next_attempt_at: string | null;
+    delivered_at: string | null;
+    bulk_request_id: string | null;
+    last_error: string | null;
+    idempotency_key: string;
+    claimed_by: string | null;
+    lease_until: string | null;
+}
+export interface InsertEvent {
+    route_id: string;
+    source: string;
+    event_id: string;
+    event_type: string | null;
+    payload_enc: Buffer;
+    payload_iv: Buffer;
+    headers_json: string;
+    received_at: string;
+    status: EventStatus;
+    idempotency_key: string;
+}
+export type EventSummary = Omit<EventRow, 'payload_enc' | 'payload_iv' | 'headers_json' | 'idempotency_key' | 'claimed_by' | 'lease_until'>;
+export declare class EventsRepo {
+    private db;
+    constructor(db: Db);
+    /** Returns the new row id, or null if the idempotency key already exists (duplicate delivery). */
+    insert(e: InsertEvent): number | null;
+    /** Claim due events for a route, oldest first, mark them 'delivering' and lease them. */
+    claimDue(routeId: string, now: string, limit: number, owner: string, leaseUntil: string): EventRow[];
+    markDelivered(ids: number[], deliveredAt: string, bulkRequestId: string | null): void;
+    markFailed(ids: number[], nextAttemptAt: string, error: string): void;
+    markParked(ids: number[], error: string): void;
+    /**
+     * Rows stuck in 'delivering' whose lease expired (or that belong to `owner`, or that
+     * predate leases) go back to 'retry'.
+     */
+    recoverDelivering(now: string, owner?: string): number;
+    /**
+     * Return leftover 'delivering' rows to 'retry' without touching already-settled rows.
+     * Used when a dispatch batch throws after claimDue. Increments attempts so a persist
+     * failure after a successful POST backs off instead of tight-looping.
+     */
+    releaseDelivering(ids: number[], nextAttemptAt: string, error: string): number;
+    routesWithDueEvents(now: string): string[];
+    countByStatus(): Record<string, number>;
+    getById(id: number): EventRow | undefined;
+    /** Park events that have been retrying longer than maxAgeMs (never silently dropped). */
+    parkExpired(now: string, maxAgeMs: number): number;
+    perRouteStats(): RouteStats[];
+    /** Payload-free event listing for the admin plane. */
+    list(filter: {
+        status?: EventStatus;
+        route?: string;
+        limit?: number;
+    }): EventSummary[];
+    /** Re-queue a parked event. Attempts reset so backoff starts fresh. */
+    replay(id: number): boolean;
+    replayAllParked(): number;
+    /**
+     * Retention. Terminal events (delivered / dropped_by_filter) lose their payload after
+     * `deliveredDays` (row kept as the idempotency ledger) and the row itself after
+     * `ledgerDays`. Parked events are never touched — they are unresolved by definition.
+     */
+    prune(now: string, deliveredDays: number, ledgerDays: number): {
+        wiped: number;
+        deleted: number;
+    };
+    /**
+     * One short exclusive lock: wipe a limited set of expired payloads, or delete a
+     * limited set of expired ledger rows, not both. Caller loops (and yields) so ingest
+     * and dispatch can run between batches on EFS.
+     */
+    pruneBatch(now: string, deliveredDays: number, ledgerDays: number, limit: number): {
+        wiped: number;
+        deleted: number;
+    };
+}
+//# sourceMappingURL=events.d.ts.map

package/dist/repo/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/repo/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,UAAU,CAAA;AAElC,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE/D,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;AAEvC,qCAAqC;AACrC,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,WAAW,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,WAAW,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,YAAY,GAAG,IAAI,CAC7B,QAAQ,EACR,aAAa,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,GAAG,YAAY,GAAG,aAAa,CACjG,CAAA;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,EAAE;IAE1B,kGAAkG;IAClG,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAerC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,EAAE;IA6BpG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAWrF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAWrE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAU9C;;;OAGG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAUtD;;;;OAIG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAW9E,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAW1C,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAOvC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAIzC,yFAAyF;IACzF,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM;IAUlD,aAAa,IAAI,UAAU,EAAE;IAkC7B,sDAAsD;IACtD,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY,EAAE;IAqBtF,uEAAuE;IACvE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAW3B,eAAe,IAAI,MAAM;IASzB;;;;OAIG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IAYjG;;;;OAIG;IACH,UAAU,CACR,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,GACZ;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAqCtC"}

package/dist/repo/events.js

@@ -0,0 +1,227 @@
+export class EventsRepo {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Returns the new row id, or null if the idempotency key already exists (duplicate delivery). */
+    insert(e) {
+        const res = this.db
+            .prepare(`INSERT INTO events
+           (route_id, source, event_id, event_type, payload_enc, payload_iv,
+            headers_json, received_at, status, next_attempt_at, idempotency_key)
+         VALUES
+           (@route_id, @source, @event_id, @event_type, @payload_enc, @payload_iv,
+            @headers_json, @received_at, @status, @received_at, @idempotency_key)
+         ON CONFLICT (idempotency_key) DO NOTHING`)
+            .run(e);
+        return res.changes === 0 ? null : Number(res.lastInsertRowid);
+    }
+    /** Claim due events for a route, oldest first, mark them 'delivering' and lease them. */
+    claimDue(routeId, now, limit, owner, leaseUntil) {
+        const claim = this.db.transaction(() => {
+            const rows = this.db
+                .prepare(`SELECT * FROM events
+           WHERE route_id = ? AND status IN ('pending','retry') AND next_attempt_at <= ?
+           ORDER BY id ASC LIMIT ?`)
+                .all(routeId, now, limit);
+            if (rows.length > 0) {
+                const ids = rows.map((r) => r.id);
+                this.db
+                    .prepare(`UPDATE events SET status = 'delivering', next_attempt_at = ?, claimed_by = ?, lease_until = ?
+             WHERE id IN (${ids.map(() => '?').join(',')})`)
+                    .run(now, owner, leaseUntil, ...ids);
+                for (const r of rows) {
+                    r.status = 'delivering';
+                    r.next_attempt_at = now;
+                    r.claimed_by = owner;
+                    r.lease_until = leaseUntil;
+                }
+            }
+            return rows;
+        });
+        return claim();
+    }
+    markDelivered(ids, deliveredAt, bulkRequestId) {
+        if (ids.length === 0)
+            return;
+        this.db
+            .prepare(`UPDATE events SET status = 'delivered', delivered_at = ?, bulk_request_id = ?, last_error = NULL,
+           claimed_by = NULL, lease_until = NULL
+         WHERE id IN (${ids.map(() => '?').join(',')})`)
+            .run(deliveredAt, bulkRequestId, ...ids);
+    }
+    markFailed(ids, nextAttemptAt, error) {
+        if (ids.length === 0)
+            return;
+        this.db
+            .prepare(`UPDATE events SET status = 'retry', attempts = attempts + 1,
+           next_attempt_at = ?, last_error = ?, claimed_by = NULL, lease_until = NULL
+         WHERE id IN (${ids.map(() => '?').join(',')})`)
+            .run(nextAttemptAt, error.slice(0, 500), ...ids);
+    }
+    markParked(ids, error) {
+        if (ids.length === 0)
+            return;
+        this.db
+            .prepare(`UPDATE events SET status = 'parked', last_error = ?, claimed_by = NULL, lease_until = NULL
+         WHERE id IN (${ids.map(() => '?').join(',')})`)
+            .run(error.slice(0, 500), ...ids);
+    }
+    /**
+     * Rows stuck in 'delivering' whose lease expired (or that belong to `owner`, or that
+     * predate leases) go back to 'retry'.
+     */
+    recoverDelivering(now, owner) {
+        return this.db
+            .prepare(`UPDATE events SET status = 'retry', next_attempt_at = ?, claimed_by = NULL, lease_until = NULL
+         WHERE status = 'delivering'
+           AND (lease_until IS NULL OR lease_until < ? OR claimed_by = ?)`)
+            .run(now, now, owner ?? null).changes;
+    }
+    /**
+     * Return leftover 'delivering' rows to 'retry' without touching already-settled rows.
+     * Used when a dispatch batch throws after claimDue. Increments attempts so a persist
+     * failure after a successful POST backs off instead of tight-looping.
+     */
+    releaseDelivering(ids, nextAttemptAt, error) {
+        if (ids.length === 0)
+            return 0;
+        return this.db
+            .prepare(`UPDATE events SET status = 'retry', attempts = attempts + 1,
+           next_attempt_at = ?, last_error = ?, claimed_by = NULL, lease_until = NULL
+         WHERE status = 'delivering' AND id IN (${ids.map(() => '?').join(',')})`)
+            .run(nextAttemptAt, error.slice(0, 500), ...ids).changes;
+    }
+    routesWithDueEvents(now) {
+        return this.db
+            .prepare(`SELECT DISTINCT route_id FROM events
+           WHERE status IN ('pending','retry') AND next_attempt_at <= ?`)
+            .all(now).map((r) => r.route_id);
+    }
+    countByStatus() {
+        const rows = this.db
+            .prepare('SELECT status, COUNT(*) AS n FROM events GROUP BY status')
+            .all();
+        return Object.fromEntries(rows.map((r) => [r.status, r.n]));
+    }
+    getById(id) {
+        return this.db.prepare('SELECT * FROM events WHERE id = ?').get(id);
+    }
+    /** Park events that have been retrying longer than maxAgeMs (never silently dropped). */
+    parkExpired(now, maxAgeMs) {
+        const cutoff = new Date(Date.parse(now) - maxAgeMs).toISOString();
+        return this.db
+            .prepare(`UPDATE events SET status = 'parked', last_error = 'retry window exhausted'
+         WHERE status = 'retry' AND received_at < ?`)
+            .run(cutoff).changes;
+    }
+    perRouteStats() {
+        const counts = this.db
+            .prepare('SELECT route_id, status, COUNT(*) AS n FROM events GROUP BY route_id, status')
+            .all();
+        const extremes = this.db
+            .prepare(`SELECT route_id,
+                MAX(delivered_at) AS last_delivered_at,
+                MIN(CASE WHEN status IN ('pending','retry') THEN received_at END) AS oldest_pending_at
+         FROM events GROUP BY route_id`)
+            .all();
+        const byRoute = new Map();
+        for (const row of counts) {
+            const stats = byRoute.get(row.route_id) ??
+                { route_id: row.route_id, counts: {}, last_delivered_at: null, oldest_pending_at: null };
+            stats.counts[row.status] = row.n;
+            byRoute.set(row.route_id, stats);
+        }
+        for (const row of extremes) {
+            const stats = byRoute.get(row.route_id);
+            if (stats) {
+                stats.last_delivered_at = row.last_delivered_at;
+                stats.oldest_pending_at = row.oldest_pending_at;
+            }
+        }
+        return [...byRoute.values()];
+    }
+    /** Payload-free event listing for the admin plane. */
+    list(filter) {
+        const clauses = [];
+        const params = [];
+        if (filter.status) {
+            clauses.push('status = ?');
+            params.push(filter.status);
+        }
+        if (filter.route) {
+            clauses.push('route_id = ?');
+            params.push(filter.route);
+        }
+        const where = clauses.length ? `WHERE ${clauses.join(' AND ')}` : '';
+        return this.db
+            .prepare(`SELECT id, route_id, source, event_id, event_type, received_at, status,
+                attempts, next_attempt_at, delivered_at, bulk_request_id, last_error
+         FROM events ${where} ORDER BY id DESC LIMIT ?`)
+            .all(...params, filter.limit ?? 50);
+    }
+    /** Re-queue a parked event. Attempts reset so backoff starts fresh. */
+    replay(id) {
+        return (this.db
+            .prepare(`UPDATE events SET status = 'retry', attempts = 0, next_attempt_at = ?, last_error = NULL
+           WHERE id = ? AND status = 'parked'`)
+            .run(new Date().toISOString(), id).changes === 1);
+    }
+    replayAllParked() {
+        return this.db
+            .prepare(`UPDATE events SET status = 'retry', attempts = 0, next_attempt_at = ?, last_error = NULL
+         WHERE status = 'parked'`)
+            .run(new Date().toISOString()).changes;
+    }
+    /**
+     * Retention. Terminal events (delivered / dropped_by_filter) lose their payload after
+     * `deliveredDays` (row kept as the idempotency ledger) and the row itself after
+     * `ledgerDays`. Parked events are never touched — they are unresolved by definition.
+     */
+    prune(now, deliveredDays, ledgerDays) {
+        let wiped = 0;
+        let deleted = 0;
+        for (;;) {
+            const batch = this.pruneBatch(now, deliveredDays, ledgerDays, 500);
+            wiped += batch.wiped;
+            deleted += batch.deleted;
+            if (batch.wiped === 0 && batch.deleted === 0)
+                break;
+        }
+        return { wiped, deleted };
+    }
+    /**
+     * One short exclusive lock: wipe a limited set of expired payloads, or delete a
+     * limited set of expired ledger rows, not both. Caller loops (and yields) so ingest
+     * and dispatch can run between batches on EFS.
+     */
+    pruneBatch(now, deliveredDays, ledgerDays, limit) {
+        const wipeCutoff = new Date(Date.parse(now) - deliveredDays * 86_400_000).toISOString();
+        const deleteCutoff = new Date(Date.parse(now) - ledgerDays * 86_400_000).toISOString();
+        const wipeIds = this.db
+            .prepare(`SELECT id FROM events
+           WHERE status IN ('delivered','dropped_by_filter')
+             AND received_at < ? AND length(payload_enc) > 0
+           LIMIT ?`)
+            .all(wipeCutoff, limit).map((r) => r.id);
+        if (wipeIds.length > 0) {
+            const wiped = this.db
+                .prepare(`UPDATE events SET payload_enc = x'', payload_iv = x'', headers_json = '{}'
+           WHERE id IN (${wipeIds.map(() => '?').join(',')})`)
+                .run(...wipeIds).changes;
+            return { wiped, deleted: 0 };
+        }
+        const deleteIds = this.db
+            .prepare(`SELECT id FROM events
+           WHERE status IN ('delivered','dropped_by_filter') AND received_at < ?
+           LIMIT ?`)
+            .all(deleteCutoff, limit).map((r) => r.id);
+        if (deleteIds.length === 0)
+            return { wiped: 0, deleted: 0 };
+        const deleted = this.db
+            .prepare(`DELETE FROM events WHERE id IN (${deleteIds.map(() => '?').join(',')})`)
+            .run(...deleteIds).changes;
+        return { wiped: 0, deleted };
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/repo/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/repo/events.ts"],"names":[],"mappings":"AA8CA,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,EAAM;QAAN,OAAE,GAAF,EAAE,CAAI;IAAG,CAAC;IAE9B,kGAAkG;IAClG,MAAM,CAAC,CAAc;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;;;;;;kDAM0C,CAC3C;aACA,GAAG,CAAC,CAAC,CAAC,CAAA;QACT,OAAO,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;IAC/D,CAAC;IAED,yFAAyF;IACzF,QAAQ,CAAC,OAAe,EAAE,GAAW,EAAE,KAAa,EAAE,KAAa,EAAE,UAAkB;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;iBACjB,OAAO,CACN;;mCAEyB,CAC1B;iBACA,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAe,CAAA;YACzC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBACjC,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;4BACgB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChD;qBACA,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,CAAA;gBACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,CAAC,CAAC,MAAM,GAAG,YAAY,CAAA;oBACvB,CAAC,CAAC,eAAe,GAAG,GAAG,CAAA;oBACvB,CAAC,CAAC,UAAU,GAAG,KAAK,CAAA;oBACpB,CAAC,CAAC,WAAW,GAAG,UAAU,CAAA;gBAC5B,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAC,CAAA;QACF,OAAO,KAAK,EAAE,CAAA;IAChB,CAAC;IAED,aAAa,CAAC,GAAa,EAAE,WAAmB,EAAE,aAA4B;QAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC5B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;wBAEgB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChD;aACA,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,CAAA;IAC5C,CAAC;IAED,UAAU,CAAC,GAAa,EAAE,aAAqB,EAAE,KAAa;QAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC5B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;wBAEgB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChD;aACA,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAA;IACpD,CAAC;IAED,UAAU,CAAC,GAAa,EAAE,KAAa;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAC5B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;wBACgB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAChD;aACA,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAA;IACrC,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,GAAW,EAAE,KAAc;QAC3C,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;0EAEkE,CACnE;aACA,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAA;IACzC,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,GAAa,EAAE,aAAqB,EAAE,KAAa;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAA;QAC9B,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;kDAE0C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1E;aACA,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,OAAO,CAAA;IAC5D,CAAC;IAED,mBAAmB,CAAC,GAAW;QAC7B,OACE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;wEAC8D,CAC/D;aACA,GAAG,CAAC,GAAG,CACX,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC;IAED,aAAa;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,0DAA0D,CAAC;aACnE,GAAG,EAAqC,CAAA;QAC3C,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyB,CAAA;IAC7F,CAAC;IAED,yFAAyF;IACzF,WAAW,CAAC,GAAW,EAAE,QAAgB;QACvC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;QACjE,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;oDAC4C,CAC7C;aACA,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAA;IACxB,CAAC;IAED,aAAa;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CAAC,8EAA8E,CAAC;aACvF,GAAG,EAA4D,CAAA;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;aACrB,OAAO,CACN;;;uCAG+B,CAChC;aACA,GAAG,EAIH,CAAA;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAA;QAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACxB,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAiB,CAAA;YAC1G,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACvC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAA;gBAC/C,KAAK,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAA;YACjD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,MAAgE;QACnE,MAAM,OAAO,GAAa,EAAE,CAAA;QAC5B,MAAM,MAAM,GAAc,EAAE,CAAA;QAC5B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC5B,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACpE,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;uBAEe,KAAK,2BAA2B,CAChD;aACA,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAmB,CAAA;IACzD,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,EAAU;QACf,OAAO,CACL,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;8CACoC,CACrC;aACA,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,CAAC,CACnD,CAAA;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;iCACyB,CAC1B;aACA,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAA;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAW,EAAE,aAAqB,EAAE,UAAkB;QAC1D,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,CAAC,CAAA;YAClE,KAAK,IAAI,KAAK,CAAC,KAAK,CAAA;YACpB,OAAO,IAAI,KAAK,CAAC,OAAO,CAAA;YACxB,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAK;QACrD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC3B,CAAC;IAED;;;;OAIG;IACH,UAAU,CACR,GAAW,EACX,aAAqB,EACrB,UAAkB,EAClB,KAAa;QAEb,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,aAAa,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QACvF,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QACtF,MAAM,OAAO,GACX,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;mBAGS,CACV;aACA,GAAG,CAAC,UAAU,EAAE,KAAK,CACzB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAClB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;iBAClB,OAAO,CACN;0BACgB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CACpD;iBACA,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,CAAA;YAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;QAC9B,CAAC;QACD,MAAM,SAAS,GACb,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;mBAES,CACV;aACA,GAAG,CAAC,YAAY,EAAE,KAAK,CAC3B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;aACpB,OAAO,CAAC,mCAAmC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;aACjF,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAA;QAC5B,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAA;IAC9B,CAAC;CACF"}

package/dist/repo/kv.d.ts

@@ -0,0 +1,19 @@
+import type { Killswitch } from '@end-close/relay';
+import type { Db } from '../db.js';
+export type GlobalKillswitch = Killswitch;
+/** kv key prefix for per-route pause flags: `route_paused.<routeId>` = '1'. */
+export declare const ROUTE_PAUSED_PREFIX = "route_paused.";
+export declare class KvRepo {
+    private db;
+    constructor(db: Db);
+    get(key: string): string | undefined;
+    set(key: string, value: string): void;
+    delete(key: string): void;
+    globalKillswitch(): GlobalKillswitch;
+    setGlobalKillswitch(state: GlobalKillswitch): void;
+    isRoutePaused(routeId: string): boolean;
+    setRoutePaused(routeId: string, paused: boolean): void;
+    /** Every paused route id in one query. */
+    pausedRoutes(): Set<string>;
+}
+//# sourceMappingURL=kv.d.ts.map

package/dist/repo/kv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv.d.ts","sourceRoot":"","sources":["../../src/repo/kv.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,UAAU,CAAA;AAElC,MAAM,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAEzC,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,kBAAkB,CAAA;AAElD,qBAAa,MAAM;IACL,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,EAAE;IAE1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAOpC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IASrC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIzB,gBAAgB,IAAI,gBAAgB;IAKpC,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAIlD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIvC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAKtD,0CAA0C;IAC1C,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;CAM5B"}