@end-close/relay 0.12.0

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AASvB,eAAO,MAAM,mBAAmB,0CAAwC,CAAA;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAS/D,eAAO,MAAM,cAAc;;;;;;;;;IAQzB,CAAA;AACF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAA;AAKrD,eAAO,MAAM,gBAAgB,aAE6D,CAAA;AAI1F,eAAO,MAAM,wBAAwB;;;;;;;;;;;;IASnC,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEzE,wBAAgB,SAAS,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAEzD;AACD,wBAAgB,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,aAAa,EAAE,CAGtE;AACD,4CAA4C;AAC5C,wBAAgB,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED,QAAA,MAAM,aAAa;;;;;;;;;IAMjB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA;AAOnD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAK5B,CAAA;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYhC,CAAA;AAIF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqCxB,CAAA;AAEJ,0FAA0F;AAC1F,eAAO,MAAM,eAAe,sCAAuC,CAAA;AAEnE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBtB,CAAA;AAOF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAInB,CAAA;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AACrD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AACvD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA"}

package/dist/config/schema.js

@@ -0,0 +1,156 @@
+import { z } from 'zod';
+import { keyNameIsSensitive } from '../mask/defaults.js';
+// Dot-notation path into the webhook payload, e.g. "batchId", "batch.id",
+// "transactions.*.id" (a `*` segment fans out over an array).
+const dotPath = z
+    .string()
+    .regex(/^[^\s.]+(\.[^\s.]+)*$/, 'must be a dot-notation path like batchId or batch.id');
+export const transformNameSchema = z.enum(['trim', 'lowercase', 'hash']);
+// A mapped field: either a bare source path, or an object with optional transforms
+// (single or array, applied in order).
+//   external_id: transferId
+//   customer_email: { source: CustomerEmail, transform: hash }
+//   customer_email: { source: CustomerEmail, transform: [trim, lowercase, hash] }
+// Strict, so a stray key (a typo, or `enrich` where it is not allowed) is an error
+// rather than silently ignored.
+export const fieldRefSchema = z.union([
+    dotPath,
+    z
+        .object({
+        source: dotPath,
+        transform: z.union([transformNameSchema, z.array(transformNameSchema).min(1)]).optional(),
+    })
+        .strict(),
+]);
+// Name of an enrichment registered by the host via createRelay({ enrichments }). Only
+// `description` and `metadata` entries may name one: the value at `source` (after any
+// transforms) is handed to the host function and its return value is what is forwarded.
+export const enrichNameSchema = z
+    .string()
+    .regex(/^[a-z][a-z0-9_]*$/, 'enrichment name must be a lowercase snake_case identifier');
+//   resident_name: { source: PayorId, enrich: resident_name }
+//   resident_unit: { source: PayorId, transform: trim, enrich: resident_unit }
+export const enrichableFieldRefSchema = z.union([
+    dotPath,
+    z
+        .object({
+        source: dotPath,
+        transform: z.union([transformNameSchema, z.array(transformNameSchema).min(1)]).optional(),
+        enrich: enrichNameSchema.optional(),
+    })
+        .strict(),
+]);
+export function refSource(ref) {
+    return typeof ref === 'string' ? ref : ref.source;
+}
+export function refTransforms(ref) {
+    if (typeof ref === 'string' || ref.transform === undefined)
+        return [];
+    return Array.isArray(ref.transform) ? ref.transform : [ref.transform];
+}
+/** The enrichment a field names, if any. */
+export function refEnrichment(ref) {
+    return typeof ref === 'string' ? undefined : ref.enrich;
+}
+const dateRefSchema = z.union([
+    dotPath,
+    z.object({
+        source: dotPath,
+        format: z.enum(['iso8601', 'mdy_hms']).default('iso8601'),
+    }),
+]);
+// A secret reference: the NAME the host's SecretResolver resolves (an env var in the
+// application). The value itself never appears in config or the database. The field is
+// deliberately named as a reference so a value is never mistaken for it.
+const secretRef = z.string().min(1);
+export const payabliAuthSchema = z.object({
+    mode: z.literal('static_header'),
+    header: z.string().default('authorization'),
+    secret_env: secretRef,
+    allowed_ips: z.array(z.string()).default([]),
+});
+export const genericHmacAuthSchema = z.object({
+    mode: z.literal('hmac'),
+    header: z.string(),
+    algorithm: z.enum(['sha256', 'sha512']).default('sha256'),
+    secret_env: secretRef,
+    // What gets signed: '{body}' or '{timestamp}.{body}'
+    signed_content: z.enum(['body', 'timestamp.body']).default('body'),
+    timestamp_header: z.string().optional(),
+    tolerance_seconds: z.number().int().positive().default(300),
+    // Where this processor keeps its stable event ID / event type in the payload.
+    event_id: dotPath.optional(),
+    event_type: dotPath.optional(),
+});
+// How a webhook event becomes an End Close record. This block is the complete answer to
+// "what leaves our network": only fields named here are forwarded, ever.
+export const recordMapSchema = z
+    .object({
+    data_stream_key: z.string().min(1),
+    external_id: fieldRefSchema,
+    // Source of a string amount like "3,762.87"; converted to integer cents.
+    amount: fieldRefSchema,
+    direction: z.enum(['credit', 'debit']),
+    // Optional payload timestamp. Absent -> the record is dated by receive time.
+    date: dateRefSchema.optional(),
+    description: enrichableFieldRefSchema.optional(),
+    currency: z
+        .string()
+        .regex(/^[A-Za-z]{3}$/)
+        .optional(),
+    // Extra fields to forward, as output_name: source. Output names are what End Close
+    // property definitions see, so choose clean snake_case names.
+    metadata: z.record(z.string().regex(/^[a-z][a-z0-9_]*$/), enrichableFieldRefSchema).default({}),
+})
+    .superRefine((map, ctx) => {
+    for (const [outputKey, ref] of Object.entries(map.metadata)) {
+        const sourceLeaf = refSource(ref).split('.').at(-1);
+        const hashed = refTransforms(ref).includes('hash');
+        const enriched = refEnrichment(ref) !== undefined;
+        for (const name of [outputKey, sourceLeaf]) {
+            if (!keyNameIsSensitive(name))
+                continue;
+            // `hash` protects the source value. An enriched field forwards whatever the host
+            // returns, so hashing the input does not make a sensitive output name safe.
+            if (hashed && !(enriched && name === outputKey))
+                continue;
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ['metadata', outputKey],
+                message: enriched && name === outputKey
+                    ? `"${name}" matches the hard denylist (cvv/ssn/account number/...); an enriched field cannot use it as an output name`
+                    : `"${name}" matches the hard denylist (cvv/ssn/account number/...); it cannot be forwarded in clear — use transform: hash or remove it`,
+            });
+        }
+    }
+});
+/** Built-in processor adapters. Hosts may register more via createRelay({ adapters }). */
+export const BUILTIN_SOURCES = ['payabli', 'generic_hmac'];
+export const routeSchema = z.object({
+    id: z
+        .string()
+        .regex(/^[a-z0-9][a-z0-9-_]*$/, 'route id must be a lowercase slug'),
+    // The processor adapter name: a built-in, or one registered by the host.
+    source: z.string().regex(/^[a-z0-9][a-z0-9_-]*$/, 'source must be a lowercase slug'),
+    auth: z.discriminatedUnion('mode', [payabliAuthSchema, genericHmacAuthSchema]),
+    // Payload event types accepted by this route (adapter-extracted; glob '*' allowed).
+    // Non-matching events persist locally as dropped_by_filter and are never forwarded.
+    events: z.array(z.string()).min(1).optional(),
+    map: recordMapSchema,
+    max_body_bytes: z
+        .number()
+        .int()
+        .positive()
+        .max(10 * 1024 * 1024)
+        .default(1024 * 1024),
+});
+// The config document is ROUTES ONLY (strict: unknown top-level keys are rejected).
+// Everything else (End Close endpoint, ports, dispatch/retention tuning) is a boot-time
+// runtime setting from the environment — see src/config/runtime.ts. Consequence: every
+// applied config change takes effect live; there is no "restart pending" state.
+export const relayConfigSchema = z
+    .object({
+    routes: z.array(routeSchema).min(1),
+})
+    .strict();
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExD,0EAA0E;AAC1E,8DAA8D;AAC9D,MAAM,OAAO,GAAG,CAAC;KACd,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,EAAE,sDAAsD,CAAC,CAAA;AAEzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;AAGxE,mFAAmF;AACnF,uCAAuC;AACvC,4BAA4B;AAC5B,+DAA+D;AAC/D,kFAAkF;AAClF,mFAAmF;AACnF,gCAAgC;AAChC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,OAAO;IACP,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KAC1F,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAA;AAGF,sFAAsF;AACtF,sFAAsF;AACtF,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,KAAK,CAAC,mBAAmB,EAAE,2DAA2D,CAAC,CAAA;AAE1F,8DAA8D;AAC9D,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC9C,OAAO;IACP,CAAC;SACE,MAAM,CAAC;QACN,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzF,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACpC,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAA;AAGF,MAAM,UAAU,SAAS,CAAC,GAAuB;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;AACnD,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACrE,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACvE,CAAC;AACD,4CAA4C;AAC5C,MAAM,UAAU,aAAa,CAAC,GAAuB;IACnD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;AACzD,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5B,OAAO;IACP,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;KAC1D,CAAC;CACH,CAAC,CAAA;AAGF,qFAAqF;AACrF,uFAAuF;AACvF,yEAAyE;AACzE,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAEnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAC3C,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzD,UAAU,EAAE,SAAS;IACrB,qDAAqD;IACrD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAClE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3D,8EAA8E;IAC9E,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAA;AAEF,wFAAwF;AACxF,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,WAAW,EAAE,cAAc;IAC3B,yEAAyE;IACzE,MAAM,EAAE,cAAc;IACtB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtC,6EAA6E;IAC7E,IAAI,EAAE,aAAa,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,eAAe,CAAC;SACtB,QAAQ,EAAE;IACb,mFAAmF;IACnF,8DAA8D;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChG,CAAC;KACD,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAA;QACpD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,SAAS,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBAAE,SAAQ;YACvC,iFAAiF;YACjF,4EAA4E;YAC5E,IAAI,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC;gBAAE,SAAQ;YACzD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;gBAC7B,OAAO,EAAE,QAAQ,IAAI,IAAI,KAAK,SAAS;oBACrC,CAAC,CAAC,IAAI,IAAI,6GAA6G;oBACvH,CAAC,CAAC,IAAI,IAAI,8HAA8H;aAC3I,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAA;AAEJ,0FAA0F;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,cAAc,CAAU,CAAA;AAEnE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CAAC,uBAAuB,EAAE,mCAAmC,CAAC;IACtE,yEAAyE;IACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,EAAE,iCAAiC,CAAC;IACpF,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAC9E,oFAAoF;IACpF,oFAAoF;IACpF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,GAAG,EAAE,eAAe;IACpB,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;SACrB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;CACxB,CAAC,CAAA;AAGF,oFAAoF;AACpF,wFAAwF;AACxF,uFAAuF;AACvF,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAA"}

package/dist/crypto/at-rest.d.ts

@@ -0,0 +1,6 @@
+export declare function encrypt(key: Buffer, plaintext: Buffer): {
+    ciphertext: Buffer;
+    iv: Buffer;
+};
+export declare function decrypt(key: Buffer, ciphertext: Buffer, iv: Buffer): Buffer;
+//# sourceMappingURL=at-rest.d.ts.map

package/dist/crypto/at-rest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"at-rest.d.ts","sourceRoot":"","sources":["../../src/crypto/at-rest.ts"],"names":[],"mappings":"AAOA,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAK1F;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAM3E"}

package/dist/crypto/at-rest.js

@@ -0,0 +1,19 @@
+import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';
+// AES-256-GCM with a per-row random IV. Ciphertext layout: <ciphertext><16-byte auth tag>.
+const ALGO = 'aes-256-gcm';
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+export function encrypt(key, plaintext) {
+    const iv = randomBytes(IV_BYTES);
+    const cipher = createCipheriv(ALGO, key, iv);
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final(), cipher.getAuthTag()]);
+    return { ciphertext, iv };
+}
+export function decrypt(key, ciphertext, iv) {
+    const tag = ciphertext.subarray(ciphertext.length - TAG_BYTES);
+    const body = ciphertext.subarray(0, ciphertext.length - TAG_BYTES);
+    const decipher = createDecipheriv(ALGO, key, iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(body), decipher.final()]);
+}
+//# sourceMappingURL=at-rest.js.map

package/dist/crypto/at-rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"at-rest.js","sourceRoot":"","sources":["../../src/crypto/at-rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE3E,2FAA2F;AAC3F,MAAM,IAAI,GAAG,aAAa,CAAA;AAC1B,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IACjG,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,UAAkB,EAAE,EAAU;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAChD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;AACjE,CAAC"}

package/dist/crypto/keys.d.ts

@@ -0,0 +1,2 @@
+export declare function deriveKey(envName: string, raw: string | undefined): Buffer;
+//# sourceMappingURL=keys.d.ts.map

package/dist/crypto/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/crypto/keys.ts"],"names":[],"mappings":"AAOA,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAK1E"}

package/dist/crypto/keys.js

@@ -0,0 +1,12 @@
+import { createHash } from 'node:crypto';
+// RELAY_DATA_KEY and MASKING_HMAC_KEY are operator-supplied strings (32+ chars of entropy
+// recommended). We derive fixed-length keys by hashing so any string works, but refuse
+// obviously weak values.
+const MIN_KEY_CHARS = 16;
+export function deriveKey(envName, raw) {
+    if (!raw || raw.length < MIN_KEY_CHARS) {
+        throw new Error(`${envName} must be set to at least ${MIN_KEY_CHARS} characters`);
+    }
+    return createHash('sha256').update(raw, 'utf8').digest();
+}
+//# sourceMappingURL=keys.js.map

package/dist/crypto/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/crypto/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,0FAA0F;AAC1F,uFAAuF;AACvF,yBAAyB;AACzB,MAAM,aAAa,GAAG,EAAE,CAAA;AAExB,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,GAAuB;IAChE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,4BAA4B,aAAa,aAAa,CAAC,CAAA;IACnF,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;AAC1D,CAAC"}

package/dist/engine/codec.d.ts

@@ -0,0 +1,12 @@
+export interface PayloadCodec {
+    encode(plain: Buffer): {
+        payload: Buffer;
+        iv: Buffer | null;
+    };
+    decode(payload: Buffer, iv: Buffer | null): Buffer;
+}
+/** AES-256-GCM under a 32-byte key (see crypto/keys.ts deriveKey). */
+export declare function aesGcmCodec(key: Buffer): PayloadCodec;
+/** Stores payloads as-is. Only appropriate when the store itself is encrypted or trusted. */
+export declare const plainCodec: PayloadCodec;
+//# sourceMappingURL=codec.d.ts.map

package/dist/engine/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/engine/codec.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IAC7D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAAA;CACnD;AAED,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,CAWrD;AAED,6FAA6F;AAC7F,eAAO,MAAM,UAAU,EAAE,YAGxB,CAAA"}

package/dist/engine/codec.js

@@ -0,0 +1,21 @@
+import { encrypt, decrypt } from '../crypto/at-rest.js';
+/** AES-256-GCM under a 32-byte key (see crypto/keys.ts deriveKey). */
+export function aesGcmCodec(key) {
+    return {
+        encode(plain) {
+            const { ciphertext, iv } = encrypt(key, plain);
+            return { payload: ciphertext, iv };
+        },
+        decode(payload, iv) {
+            if (!iv)
+                throw new Error('encrypted payload has no iv');
+            return decrypt(key, payload, iv);
+        },
+    };
+}
+/** Stores payloads as-is. Only appropriate when the store itself is encrypted or trusted. */
+export const plainCodec = {
+    encode: (plain) => ({ payload: plain, iv: null }),
+    decode: (payload) => payload,
+};
+//# sourceMappingURL=codec.js.map

package/dist/engine/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/engine/codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAWvD,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO;QACL,MAAM,CAAC,KAAK;YACV,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;QACpC,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;YACvD,OAAO,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAClC,CAAC;KACF,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO;CAC7B,CAAA"}

package/dist/engine/hooks.d.ts

@@ -0,0 +1,84 @@
+export type IngestOutcome = 'accepted' | 'duplicate' | 'filtered' | 'rejected_auth' | 'rejected_size' | 'rejected_json' | 'panic';
+export type ForwardResult = 'delivered' | 'retried' | 'parked';
+/**
+ * applied: the field was filled. omitted: the enrichment returned undefined. failed: it
+ * threw or timed out (the event retries). rejected: its result or the reference was
+ * invalid (the event parks).
+ */
+export type EnrichOutcome = 'applied' | 'omitted' | 'failed' | 'rejected';
+export type EngineErrorKind = 'dispatch_cycle' | 'ingest_persist' | 'prune' | 'recover_delivering';
+export interface RelayEvents {
+    /** Every ingest request that reached a known route, by outcome. */
+    ingest: {
+        routeId: string;
+        outcome: IngestOutcome;
+        eventType: string | null;
+        bodyBytes: number;
+    };
+    /** A new event row was persisted (not emitted for duplicates). */
+    stored: {
+        routeId: string;
+        id: string;
+        filtered: boolean;
+    };
+    /** Per-event forwarding results. */
+    forward: {
+        routeId: string;
+        result: ForwardResult;
+        count: number;
+    };
+    /** Per-event outcome of a dispatch attempt, keyed by the store id `ingest` returned. */
+    settled: {
+        id: string;
+        routeId: string;
+        result: ForwardResult;
+        error?: string;
+    };
+    /** One event confirmed delivered; carries the timestamps for lag measurement. */
+    delivered: {
+        routeId: string;
+        receivedAt: string;
+        deliveredAt: string;
+    };
+    /** One host enrichment call for one field of one event. Names only, never values. */
+    enrich: {
+        routeId: string;
+        id: string;
+        field: string;
+        enrichment: string;
+        result: EnrichOutcome;
+        error?: string;
+    };
+    'batch.forwarded': {
+        routeId: string;
+        events: number;
+        bulkRequestId: string;
+    };
+    /** A whole batch was permanently rejected by End Close. */
+    'batch.parked': {
+        routeId: string;
+        status: number;
+        events: number;
+    };
+    prune: {
+        wiped: number;
+        deleted: number;
+    };
+    /** An operational failure inside the engine (already logged). */
+    error: {
+        kind: EngineErrorKind;
+        error: unknown;
+        op?: string;
+        routeId?: string;
+    };
+}
+export type RelayEventName = keyof RelayEvents;
+export type RelayHandler<E extends RelayEventName> = (payload: RelayEvents[E]) => void;
+export declare class RelayHooks {
+    private handlers;
+    /** Subscribe; returns an unsubscribe function. */
+    on<E extends RelayEventName>(name: E, handler: RelayHandler<E>): () => void;
+    /** Handlers must not throw; a throwing handler is isolated so it cannot break the engine. */
+    emit<E extends RelayEventName>(name: E, payload: RelayEvents[E]): void;
+}
+//# sourceMappingURL=hooks.d.ts.map

package/dist/engine/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/engine/hooks.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,WAAW,GACX,UAAU,GACV,eAAe,GACf,eAAe,GACf,eAAe,GACf,OAAO,CAAA;AACX,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAA;AAC9D;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAEzE,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,OAAO,GAAG,oBAAoB,CAAA;AAElG,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,aAAa,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;IAChG,kEAAkE;IAClE,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1D,oCAAoC;IACpC,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,wFAAwF;IACxF,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/E,iFAAiF;IACjF,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IACvE,qFAAqF;IACrF,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjH,iBAAiB,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7E,2DAA2D;IAC3D,cAAc,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IACnE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,iEAAiE;IACjE,KAAK,EAAE;QAAE,IAAI,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAChF;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,WAAW,CAAA;AAC9C,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,cAAc,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,CAAA;AAEtF,qBAAa,UAAU;IAErB,OAAO,CAAC,QAAQ,CAA6D;IAE7E,kDAAkD;IAClD,EAAE,CAAC,CAAC,SAAS,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAW3E,6FAA6F;IAC7F,IAAI,CAAC,CAAC,SAAS,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI;CAWvE"}

package/dist/engine/hooks.js

@@ -0,0 +1,34 @@
+// Typed, metadata-only events the engine emits. Hosts subscribe to drive metrics,
+// telemetry, or their own observability; the engine itself depends on none of them.
+// Payloads carry route ids, counts, timestamps, field names and error kinds — never
+// webhook data or enriched values.
+export class RelayHooks {
+    // Internally untyped; the public on/emit signatures enforce payload types.
+    handlers = new Map();
+    /** Subscribe; returns an unsubscribe function. */
+    on(name, handler) {
+        let set = this.handlers.get(name);
+        if (!set) {
+            set = new Set();
+            this.handlers.set(name, set);
+        }
+        const h = handler;
+        set.add(h);
+        return () => set.delete(h);
+    }
+    /** Handlers must not throw; a throwing handler is isolated so it cannot break the engine. */
+    emit(name, payload) {
+        const set = this.handlers.get(name);
+        if (!set)
+            return;
+        for (const h of set) {
+            try {
+                h(payload);
+            }
+            catch {
+                // observers never affect ingest or dispatch
+            }
+        }
+    }
+}
+//# sourceMappingURL=hooks.js.map

package/dist/engine/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/engine/hooks.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,oFAAoF;AACpF,oFAAoF;AACpF,mCAAmC;AA4CnC,MAAM,OAAO,UAAU;IACrB,2EAA2E;IACnE,QAAQ,GAAG,IAAI,GAAG,EAAmD,CAAA;IAE7E,kDAAkD;IAClD,EAAE,CAA2B,IAAO,EAAE,OAAwB;QAC5D,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;YACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC9B,CAAC;QACD,MAAM,CAAC,GAAG,OAAqC,CAAA;QAC/C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACV,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC;IAED,6FAA6F;IAC7F,IAAI,CAA2B,IAAO,EAAE,OAAuB;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,CAAC,CAAC,OAAO,CAAC,CAAA;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/engine/ingest.d.ts

@@ -0,0 +1,39 @@
+import type { EventEmitter } from 'node:events';
+import { type ControlStore, type EventStore, type RouteProvider } from './store.js';
+import type { PayloadCodec } from './codec.js';
+import type { ProcessorAdapter, RawRequest } from '../ingest/adapters/types.js';
+import { RelayHooks, type IngestOutcome } from './hooks.js';
+import { type Logger } from '../logger.js';
+import type { SecretResolver } from './secrets.js';
+export interface IngestDeps {
+    store: EventStore;
+    control: ControlStore;
+    routes: RouteProvider;
+    secrets: SecretResolver;
+    /** How buffered payloads are stored (encrypted or plain). */
+    codec: PayloadCodec;
+    /** Emits 'event' whenever a new deliverable event lands, so the dispatcher wakes immediately. */
+    signal?: EventEmitter;
+    hooks?: RelayHooks;
+    logger?: Logger;
+    /** Additional processor adapters keyed by route `source` (override built-ins by name). */
+    adapters?: Record<string, ProcessorAdapter>;
+}
+export type IngestResultOutcome = IngestOutcome | 'unknown_route' | 'secret_unavailable' | 'unknown_source' | 'persist_failed' | 'unavailable';
+/** HTTP-shaped so any host can answer the processor without knowing the engine's rules. */
+export interface IngestResult {
+    status: 200 | 400 | 401 | 404 | 413 | 500 | 503;
+    body: {
+        status: string;
+    } | {
+        error: string;
+    };
+    outcome: IngestResultOutcome;
+    /** Store id of the buffered event; present for `accepted` and `filtered`. Correlate with the `settled` hook. */
+    id?: string;
+}
+export declare function eventTypeMatches(patterns: string[], eventType: string | null): boolean;
+/** Idempotency key for one inbound event: stable across redeliveries of the same processor event. */
+export declare function eventIdempotencyKey(source: string, eventId: string): string;
+export declare function ingestWebhook(deps: IngestDeps, routeId: string, raw: RawRequest): Promise<IngestResult>;
+//# sourceMappingURL=ingest.d.ts.map

package/dist/engine/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../../src/engine/ingest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAqC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AACtH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE/E,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAWlD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,aAAa,CAAA;IACrB,OAAO,EAAE,cAAc,CAAA;IACvB,6DAA6D;IAC7D,KAAK,EAAE,YAAY,CAAA;IACnB,iGAAiG;IACjG,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,eAAe,GACf,oBAAoB,GACpB,gBAAgB,GAChB,gBAAgB,GAChB,aAAa,CAAA;AAEjB,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;IAC/C,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5C,OAAO,EAAE,mBAAmB,CAAA;IAC5B,gHAAgH;IAChH,EAAE,CAAC,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAMtF;AAED,qGAAqG;AACrG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,YAAY,CAAC,CAgBvB"}

package/dist/engine/ingest.js

@@ -0,0 +1,131 @@
+import { createHash } from 'node:crypto';
+import { StoreError, StoreUnavailableError } from './store.js';
+import { adapterFor, hasAdapter } from '../ingest/adapters/registry.js';
+import { RelayHooks } from './hooks.js';
+import { noopLogger } from '../logger.js';
+import { jsonTopLevelKeys, requestHeaderNames } from '../util/payload-shape.js';
+import { escapeRe } from '../util/strings.js';
+// The framework-agnostic ingest path: verify → encrypt → persist → ack. A host adapts its
+// HTTP request into a RawRequest and maps the IngestResult back onto its response.
+// Headers persisted alongside the payload for debugging/replay. Auth headers are
+// deliberately excluded — secrets never reach the database.
+const PERSISTED_HEADERS = ['content-type', 'user-agent'];
+export function eventTypeMatches(patterns, eventType) {
+    if (patterns.length === 0)
+        return true;
+    if (eventType === null)
+        return false;
+    return patterns.some((p) => p.includes('*') ? new RegExp(`^${p.split('*').map(escapeRe).join('.*')}$`).test(eventType) : p === eventType);
+}
+/** Idempotency key for one inbound event: stable across redeliveries of the same processor event. */
+export function eventIdempotencyKey(source, eventId) {
+    return 'sha256:' + createHash('sha256').update(`${source}:${eventId}`).digest('hex');
+}
+export async function ingestWebhook(deps, routeId, raw) {
+    const hooks = deps.hooks ?? new RelayHooks();
+    const logger = deps.logger ?? noopLogger;
+    try {
+        return await ingestInner(deps, routeId, raw, hooks, logger);
+    }
+    catch (err) {
+        // Any store failure (route lookup, killswitch, insert): 503 when the store says it is
+        // temporarily unavailable so the processor retries, 500 otherwise. Never the raw error.
+        if (!(err instanceof StoreError))
+            throw err;
+        logger.error('ingest store failure', { route: routeId, op: err.op, error: err.message });
+        hooks.emit('error', { kind: 'ingest_persist', error: err, routeId, op: err.op });
+        if (err instanceof StoreUnavailableError) {
+            return { status: 503, body: { error: 'temporarily unavailable' }, outcome: 'unavailable' };
+        }
+        return { status: 500, body: { error: 'internal error' }, outcome: 'persist_failed' };
+    }
+}
+async function ingestInner(deps, routeId, raw, hooks, logger) {
+    const { store, control, routes, secrets, codec, signal } = deps;
+    const route = await routes.get(routeId);
+    if (!route)
+        return { status: 404, body: { error: 'unknown route' }, outcome: 'unknown_route' };
+    const { rawBody } = raw;
+    const bodyBytes = Buffer.isBuffer(rawBody) ? rawBody.length : 0;
+    const ingested = (outcome, eventType = null) => hooks.emit('ingest', { routeId, outcome, eventType, bodyBytes });
+    // Panic refuses at the door; the processor's own retries carry the window.
+    if ((await control.getKillswitch()) === 'panic') {
+        ingested('panic');
+        return { status: 503, body: { error: 'relay is in panic mode' }, outcome: 'panic' };
+    }
+    if (!Buffer.isBuffer(rawBody) || rawBody.length === 0) {
+        ingested('rejected_json');
+        return { status: 400, body: { error: 'empty body' }, outcome: 'rejected_json' };
+    }
+    if (rawBody.length > route.max_body_bytes) {
+        ingested('rejected_size');
+        return { status: 413, body: { error: 'body too large' }, outcome: 'rejected_size' };
+    }
+    if (!hasAdapter(route.source, deps.adapters)) {
+        logger.error('ingest route has no adapter', { route: routeId, source: route.source });
+        return { status: 500, body: { error: 'internal error' }, outcome: 'unknown_source' };
+    }
+    const adapter = adapterFor(route.source, deps.adapters);
+    const secret = secrets.resolve(route.auth.secret_env);
+    if (secret === undefined) {
+        logger.error('ingest secret unavailable', { route: routeId, secret_env: route.auth.secret_env });
+        return { status: 500, body: { error: 'internal error' }, outcome: 'secret_unavailable' };
+    }
+    const verdict = adapter.verify(raw, route, { secret });
+    if (!verdict.ok) {
+        ingested('rejected_auth');
+        logger.warn('ingest rejected', { route: routeId, reason: verdict.reason });
+        return { status: 401, body: { error: 'verification failed' }, outcome: 'rejected_auth' };
+    }
+    let body;
+    try {
+        body = JSON.parse(rawBody.toString('utf8'));
+    }
+    catch {
+        ingested('rejected_json');
+        return { status: 400, body: { error: 'invalid JSON' }, outcome: 'rejected_json' };
+    }
+    const eventId = adapter.extractEventId(body, raw, route);
+    const eventType = adapter.extractEventType(body, raw, route);
+    const filtered = Boolean(route.events && !eventTypeMatches(route.events, eventType));
+    // Shape-only debug metadata (no values).
+    logger.debug('ingest shape', {
+        route: routeId,
+        event_type: eventType,
+        body_bytes: rawBody.length,
+        remote_ip: raw.remoteIp,
+        header_names: requestHeaderNames(raw.headers),
+        payload_keys: jsonTopLevelKeys(body),
+    });
+    const { payload, iv } = codec.encode(rawBody);
+    const headersJson = JSON.stringify(Object.fromEntries(PERSISTED_HEADERS.map((h) => [h, raw.headers[h]]).filter(([, v]) => v !== undefined)));
+    const inserted = await store.insert({
+        route_id: routeId,
+        source: route.source,
+        event_id: eventId,
+        event_type: eventType,
+        payload,
+        payload_iv: iv,
+        headers_json: headersJson,
+        received_at: new Date().toISOString(),
+        status: filtered ? 'dropped_by_filter' : 'pending',
+        idempotency_key: eventIdempotencyKey(route.source, eventId),
+    });
+    if (inserted.duplicate) {
+        ingested('duplicate', eventType);
+        logger.info('duplicate event acked', { route: routeId, event_type: eventType });
+        return { status: 200, body: { status: 'duplicate' }, outcome: 'duplicate' };
+    }
+    ingested(filtered ? 'filtered' : 'accepted', eventType);
+    hooks.emit('stored', { routeId, id: inserted.id, filtered });
+    logger.info('event ingested', { route: routeId, event_type: eventType, filtered });
+    if (!filtered)
+        signal?.emit('event', routeId);
+    return {
+        status: 200,
+        body: { status: filtered ? 'filtered' : 'accepted' },
+        outcome: filtered ? 'filtered' : 'accepted',
+        id: inserted.id,
+    };
+}
+//# sourceMappingURL=ingest.js.map

package/dist/engine/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../src/engine/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAA0D,MAAM,YAAY,CAAA;AAEtH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAGvE,OAAO,EAAE,UAAU,EAAsB,MAAM,YAAY,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAe,MAAM,cAAc,CAAA;AAEtD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC/E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,0FAA0F;AAC1F,mFAAmF;AAEnF,iFAAiF;AACjF,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;AAkCxD,MAAM,UAAU,gBAAgB,CAAC,QAAkB,EAAE,SAAwB;IAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7G,CAAA;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,mBAAmB,CAAC,MAAc,EAAE,OAAe;IACjE,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAgB,EAChB,OAAe,EACf,GAAe;IAEf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,CAAA;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sFAAsF;QACtF,wFAAwF;QACxF,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC;YAAE,MAAM,GAAG,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QACxF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;QAChF,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;QAC5F,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAA;IACtF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAgB,EAChB,OAAe,EACf,GAAe,EACf,KAAiB,EACjB,MAAc;IAEd,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAE/D,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IAE9F,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IACvB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/D,MAAM,QAAQ,GAAG,CAAC,OAAsB,EAAE,YAA2B,IAAI,EAAE,EAAE,CAC3E,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;IAElE,2EAA2E;IAC3E,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;QAChD,QAAQ,CAAC,OAAO,CAAC,CAAA;QACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;IACrF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,QAAQ,CAAC,eAAe,CAAC,CAAA;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,QAAQ,CAAC,eAAe,CAAC,CAAA;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IACrF,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAA;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QAChG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAA;IAC1F,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,QAAQ,CAAC,eAAe,CAAC,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1F,CAAC;IAED,IAAI,IAAU,CAAA;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,CAAC,eAAe,CAAC,CAAA;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAA;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;IACpF,yCAAyC;IACzC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;QAC3B,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,YAAY,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAAkC,CAAC;QACxE,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;KACrC,CAAC,CAAA;IAEF,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAChC,MAAM,CAAC,WAAW,CAChB,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACrF,CACF,CAAA;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,SAAS;QACrB,OAAO;QACP,UAAU,EAAE,EAAE;QACd,YAAY,EAAE,WAAW;QACzB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;QAClD,eAAe,EAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;KAC5D,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAChC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAA;QAC/E,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;IAC7E,CAAC;IAED,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACvD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC5D,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClF,IAAI,CAAC,QAAQ;QAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAC7C,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;QAC3C,EAAE,EAAE,QAAQ,CAAC,EAAE;KAChB,CAAA;AACH,CAAC"}

package/dist/engine/memory-store.d.ts

@@ -0,0 +1,35 @@
+import type { EventRecord, EventStatus, EventStore, EventStoreAdmin, EventSummary, InsertResult, Lease, NewEvent, RouteStats } from './store.js';
+export declare class MemoryEventStore implements EventStore, EventStoreAdmin {
+    private rows;
+    private byKey;
+    private nextId;
+    insert(e: NewEvent): Promise<InsertResult>;
+    routesWithDueEvents(now: string): Promise<string[]>;
+    claimDue(routeId: string, now: string, limit: number, lease: Lease): Promise<EventRecord[]>;
+    markDelivered(ids: string[], deliveredAt: string, bulkRequestId: string | null): Promise<void>;
+    markFailed(ids: string[], nextAttemptAt: string, error: string): Promise<void>;
+    markParked(ids: string[], error: string): Promise<void>;
+    releaseDelivering(ids: string[], nextAttemptAt: string, error: string): Promise<number>;
+    recoverDelivering(now: string, owner?: string): Promise<number>;
+    parkExpired(now: string, maxAgeMs: number): Promise<number>;
+    pruneBatch(now: string, deliveredDays: number, ledgerDays: number, limit: number): Promise<{
+        wiped: number;
+        deleted: number;
+    }>;
+    getById(id: string): Promise<EventRecord | undefined>;
+    list(filter: {
+        status?: EventStatus;
+        route?: string;
+        limit?: number;
+    }): Promise<EventSummary[]>;
+    countByStatus(): Promise<Record<string, number>>;
+    perRouteStats(): Promise<RouteStats[]>;
+    replay(id: string): Promise<boolean>;
+    replayAllParked(): Promise<number>;
+    private requeue;
+    private isDue;
+    private pick;
+    private clearLease;
+}
+export declare function memoryStore(): MemoryEventStore;
+//# sourceMappingURL=memory-store.d.ts.map