@endora-commerce/platform 0.100.0

package/dist/env/index.js

@@ -0,0 +1,427 @@
+/**
+ * The 23 inputs the host and the platform read.
+ *
+ * Order is the order a prompt asks in: the values without which nothing runs
+ * first, then the addresses the platform composes links from, then the knobs.
+ * An operator meeting this for the first time is asked for the database before
+ * they are asked about proxy hops.
+ *
+ * The last two arrived with the liveness probe (D-229), which used to be the
+ * `health_checks` module and is now `http/health.ts`. Their sentences are that
+ * manifest's, carried across rather than rewritten: they were written for this
+ * probe and a rewrite would be a translation round-trip for no gain.
+ */
+export const PLATFORM_ENVIRONMENT_INPUTS = [
+    {
+        name: 'DATABASE_URL',
+        describes: {
+            en: 'The PostgreSQL database this instance stores everything in, as a connection URL.',
+            pl: 'Baza PostgreSQL, w której ta instancja przechowuje wszystko, jako URL połączenia.',
+        },
+        requirement: { kind: 'required' },
+        // The URL carries the password. Treated as a secret so it is never echoed,
+        // even though the host and port halves of it are not sensitive.
+        secret: true,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'REDIS_URL',
+        describes: {
+            en: 'The Redis this instance uses for caching and for its background job queues.',
+            pl: 'Redis używany przez tę instancję do cache i kolejek zadań w tle.',
+        },
+        requirement: { kind: 'required' },
+        secret: true,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'SESSION_COOKIE_SECRET',
+        describes: {
+            en: "The key this instance signs session cookies with. Changing it signs every operator and customer out.",
+            pl: 'Klucz, którym ta instancja podpisuje ciasteczka sesji. Zmiana wylogowuje wszystkich operatorów i klientów.',
+        },
+        requirement: { kind: 'required' },
+        secret: true,
+        // The one class `input-resolution.md` §4 permits: its only required
+        // properties are that it is unguessable and per-environment, and two random
+        // keys are interchangeable. It is never generated at boot (R4.4) — a
+        // signing key that changed on restart would invalidate every session.
+        generable: true,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'PUBLIC_API_BASE_URL',
+        describes: {
+            en: "The origin this backend is reachable at from the public internet. Payment gateways call back to it and outbound e-mail links are built from it.",
+            pl: 'Adres, pod którym backend jest dostępny z internetu. Bramki płatnicze wywołują go zwrotnie, a linki w wysyłanych e-mailach są z niego budowane.',
+        },
+        requirement: { kind: 'required' },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: 'backend',
+    },
+    {
+        name: 'CORS_ALLOWED_ORIGINS',
+        describes: {
+            en: "The origins allowed to call this backend from a browser, comma-separated. The storefront's and the admin's own addresses go here — including when they are hosted elsewhere.",
+            pl: 'Adresy, które mogą wywoływać ten backend z przeglądarki, rozdzielone przecinkami. Należą tu adresy sklepu i panelu administracyjnego — także wtedy, gdy są hostowane gdzie indziej.',
+        },
+        requirement: { kind: 'required' },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        // Read by the backend, and by the backend alone. Its *value* names the
+        // other two trees, which is exactly why a rule keyed on the spelling would
+        // scope it wrongly — see `environment-inputs.ts`' header.
+        consumers: ['backend'],
+        // `null`, and the near miss earns the line: the value is a **list** of
+        // origins and two of them are members. "The address of" is singular, so a
+        // consumer that pointed every storefront address at one place would collapse
+        // this list to one entry and lock the admin out of its own backend.
+        addressOf: null,
+    },
+    {
+        name: 'STOREFRONT_BASE_URL',
+        describes: {
+            en: 'The address of the storefront this backend serves, used for the links it puts in e-mail and for on-demand page revalidation.',
+            pl: 'Adres sklepu obsługiwanego przez ten backend, używany w linkach wysyłanych e-mailem i przy odświeżaniu stron na żądanie.',
+        },
+        requirement: { kind: 'required' },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: 'storefront',
+    },
+    {
+        name: 'REVALIDATE_SECRET',
+        describes: {
+            en: 'The shared key the backend authenticates itself with when it asks the storefront to refresh a cached page. It must be the same string in both trees.',
+            pl: 'Wspólny klucz, którym backend uwierzytelnia się, prosząc sklep o odświeżenie strony z cache. W obu drzewach musi to być ten sam ciąg.',
+        },
+        requirement: { kind: 'required' },
+        secret: true,
+        // Deliberately not generable — see this file's header. One string, two
+        // repositories, and a per-tree generator writes two.
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend', 'storefront'],
+        addressOf: null,
+    },
+    {
+        name: 'DEFAULT_SALES_CHANNEL_CODE',
+        describes: {
+            en: 'The code of the sales channel this instance serves by default. Every storefront request that names no channel is answered on it.',
+            pl: 'Kod domyślnego kanału sprzedaży tej instancji. Każde żądanie sklepu, które nie wskazuje kanału, jest obsługiwane na nim.',
+        },
+        // A channel always exists (D-47…D-51) and Constitution XII forbids a
+        // "no channel" path, so an unset code is a **required input missing** and
+        // never a value anybody may invent.
+        requirement: { kind: 'required' },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'BACKEND_PUBLIC_URL',
+        describes: {
+            en: 'An override for the public origin, read in preference to PUBLIC_API_BASE_URL. Set it when the address the backend advertises differs from the one it is called at.',
+            pl: 'Nadpisanie publicznego adresu, odczytywane przed PUBLIC_API_BASE_URL. Ustaw je, gdy adres ogłaszany przez backend różni się od tego, pod którym jest wywoływany.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the public origin is PUBLIC_API_BASE_URL, which is the usual case.',
+                pl: 'publicznym adresem jest PUBLIC_API_BASE_URL, co jest zwykłym przypadkiem.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: 'backend',
+    },
+    {
+        name: 'SETTINGS_SECRET_ENCRYPTION_KEY',
+        describes: {
+            en: 'The key settings marked secret are encrypted with at rest — an API token a module stores, for instance. Base64, 32 bytes.',
+            pl: 'Klucz, którym szyfrowane są ustawienia oznaczone jako sekretne — na przykład token API zapisany przez moduł. Base64, 32 bajty.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'secret settings cannot be read or written, so any module configured through one stops working.',
+                pl: 'nie można odczytać ani zapisać ustawień z sekretami, więc każdy moduł konfigurowany w ten sposób przestaje działać.',
+            },
+        },
+        secret: true,
+        generable: true,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'NEWSLETTER_TOKEN_SECRET',
+        describes: {
+            en: 'The key newsletter confirmation and unsubscribe links are signed with.',
+            pl: 'Klucz, którym podpisywane są linki potwierdzenia i wypisania z newslettera.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'newsletter links are signed with the session key instead, so rotating that key invalidates every outstanding confirmation link.',
+                pl: 'linki newslettera są podpisywane kluczem sesji, więc jego rotacja unieważnia wszystkie niepotwierdzone jeszcze linki.',
+            },
+        },
+        secret: true,
+        generable: true,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'SALES_CHANNEL_HOST_MAP',
+        describes: {
+            en: 'Which hostname serves which sales channel, as comma-separated `host=code` pairs, for an instance serving several storefronts from one backend.',
+            pl: 'Która nazwa hosta obsługuje który kanał sprzedaży, jako pary `host=kod` rozdzielone przecinkami, dla instancji obsługującej kilka sklepów z jednego backendu.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'a request that names no channel is answered on the default one, so several storefronts cannot be told apart by their hostname.',
+                pl: 'żądanie bez wskazanego kanału jest obsługiwane na kanale domyślnym, więc kilku sklepów nie da się rozróżnić po nazwie hosta.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'PORT',
+        describes: {
+            en: 'The TCP port the backend listens on.',
+            pl: 'Port TCP, na którym nasłuchuje backend.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the port cannot be chosen, so two instances cannot run side by side on one host.',
+                pl: 'nie można wybrać portu, więc dwie instancje nie uruchomią się obok siebie na jednym hoście.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'BACKEND_ROLE',
+        describes: {
+            en: 'Which half of the backend this process runs: the HTTP API, the background workers, or both.',
+            pl: 'Którą część backendu uruchamia ten proces: API HTTP, procesy w tle, czy oba.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'one process serves the API and runs every queue consumer, so the two cannot be scaled or restarted separately.',
+                pl: 'jeden proces obsługuje API i wszystkie kolejki, więc nie da się ich skalować ani restartować osobno.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'TRUSTED_PROXY_HOPS',
+        describes: {
+            en: 'How many reverse proxies sit in front of this backend, so it knows which forwarded address is really the client.',
+            pl: 'Ile odwrotnych proxy stoi przed tym backendem, aby wiedział, który przekazany adres jest naprawdę adresem klienta.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the client address is whoever opened the socket, so behind a proxy every request looks as if it came from the proxy — which is what rate limiting and audit records then say.',
+                pl: 'adresem klienta jest ten, kto otworzył połączenie, więc za proxy każde żądanie wygląda, jakby przyszło od proxy — i tak zapiszą je limity oraz dziennik audytu.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'TRUSTED_PROXY_ADDRESSES',
+        describes: {
+            en: 'Which proxy addresses or ranges this backend believes about the client address, instead of counting hops.',
+            pl: 'Którym adresom lub zakresom proxy backend wierzy w kwestii adresu klienta, zamiast liczyć przeskoki.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the client address is whoever opened the socket, unless a hop count is configured instead.',
+                pl: 'adresem klienta jest ten, kto otworzył połączenie, chyba że skonfigurowano zamiast tego liczbę przeskoków.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'BACKEND_RATE_LIMIT_MAX',
+        describes: {
+            en: 'How many requests one client may make in the rate-limiting window.',
+            pl: 'Ile żądań może wykonać jeden klient w oknie limitowania.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: "the limit cannot be tuned to this instance's traffic.",
+                pl: 'limitu nie da się dostroić do ruchu tej instancji.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'BACKEND_RATE_LIMIT_DISABLED',
+        describes: {
+            en: 'Turns request rate limiting off entirely. Intended for load testing, never for a served instance.',
+            pl: 'Całkowicie wyłącza limitowanie żądań. Przeznaczone do testów obciążeniowych, nigdy dla działającej instancji.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'rate limiting stays on, which is what a served instance wants.',
+                pl: 'limitowanie żądań pozostaje włączone, czego oczekuje działająca instancja.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'LOG_LEVEL',
+        describes: {
+            en: 'How much the backend writes to its log.',
+            pl: 'Jak dużo backend zapisuje w dzienniku.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the log carries the platform default, which is enough to see requests and errors but not to trace one.',
+                pl: 'dziennik ma domyślny poziom platformy, wystarczający, by widzieć żądania i błędy, ale nie by prześledzić jedno z nich.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'DB_DEBUG',
+        describes: {
+            en: 'Logs every SQL statement the backend runs, in development.',
+            pl: 'Loguje każde zapytanie SQL wykonywane przez backend, w trybie deweloperskim.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'SQL statements are not logged, so a slow or wrong query has to be found another way.',
+                pl: 'zapytania SQL nie są logowane, więc wolne lub błędne zapytanie trzeba znaleźć inaczej.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'NODE_ENV',
+        describes: {
+            en: "Which mode the backend runs in. `production` turns on the checks that refuse to boot on a missing secret; anything else is a development run.",
+            pl: 'W jakim trybie działa backend. `production` włącza kontrole, które odmawiają startu przy brakującym sekrecie; każda inna wartość to uruchomienie deweloperskie.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'the backend runs as a development instance, which is the wrong posture for a served one: the boot-time refusals that protect a production secret do not apply.',
+                pl: 'backend działa jak instancja deweloperska, co jest złą postawą dla działającego sklepu: nie obowiązują wtedy kontrole startowe chroniące produkcyjne sekrety.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        // The storefront reads its own `NODE_ENV` on its own process and declares
+        // it itself. The two are not one value two trees must agree about — they
+        // are two processes, possibly on two machines — so this entry names the
+        // backend alone. `REVALIDATE_SECRET` above is the contrasting case.
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'MEILISEARCH_URL',
+        describes: {
+            en: 'Where the health endpoint looks for the search engine when it reports whether this instance is whole.',
+            pl: 'Gdzie punkt kontroli stanu szuka silnika wyszukiwania, gdy raportuje, czy ta instancja jest sprawna.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'The probe reaches for the search engine at the platform’s own address, so a shop that runs it elsewhere is reported degraded while it is working.',
+                pl: 'Sonda szuka silnika wyszukiwania pod adresem wbudowanym w platformę, więc sklep, który uruchamia go gdzie indziej, jest raportowany jako niesprawny, choć działa.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+    {
+        name: 'npm_package_version',
+        describes: {
+            en: 'The version this instance reports in its health payload. The package manager sets it when it starts the server; an operator has nothing to choose here.',
+            pl: 'Wersja, którą ta instancja podaje w odpowiedzi kontroli stanu. Ustawia ją menedżer pakietów przy starcie serwera; operator nie ma tu nic do wyboru.',
+        },
+        requirement: {
+            kind: 'optional',
+            without: {
+                en: 'The health payload carries no usable version, so one deployment cannot be told apart from the one before it.',
+                pl: 'Odpowiedź kontroli stanu nie niesie użytecznej wersji, więc nie da się odróżnić jednego wdrożenia od poprzedniego.',
+            },
+        },
+        secret: false,
+        generable: false,
+        owner: { kind: 'platform' },
+        consumers: ['backend'],
+        addressOf: null,
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/env/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/env/index.ts"],"names":[],"mappings":"AAsDA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAgC;IACtE;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE;YACT,EAAE,EAAE,kFAAkF;YACtF,EAAE,EAAE,mFAAmF;SACxF;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,2EAA2E;QAC3E,gEAAgE;QAChE,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE;YACT,EAAE,EAAE,6EAA6E;YACjF,EAAE,EAAE,kEAAkE;SACvE;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE;YACT,EAAE,EAAE,sGAAsG;YAC1G,EAAE,EAAE,4GAA4G;SACjH;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,IAAI;QACZ,oEAAoE;QACpE,4EAA4E;QAC5E,qEAAqE;QACrE,sEAAsE;QACtE,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE;YACT,EAAE,EAAE,iJAAiJ;YACrJ,EAAE,EAAE,iJAAiJ;SACtJ;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,SAAS,EAAE;YACT,EAAE,EAAE,8KAA8K;YAClL,EAAE,EAAE,qLAAqL;SAC1L;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,uEAAuE;QACvE,2EAA2E;QAC3E,0DAA0D;QAC1D,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,uEAAuE;QACvE,0EAA0E;QAC1E,6EAA6E;QAC7E,oEAAoE;QACpE,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE;YACT,EAAE,EAAE,8HAA8H;YAClI,EAAE,EAAE,0HAA0H;SAC/H;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,YAAY;KACxB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE;YACT,EAAE,EAAE,sJAAsJ;YAC1J,EAAE,EAAE,uIAAuI;SAC5I;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,IAAI;QACZ,uEAAuE;QACvE,qDAAqD;QACrD,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;QACpC,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,SAAS,EAAE;YACT,EAAE,EAAE,kIAAkI;YACtI,EAAE,EAAE,0HAA0H;SAC/H;QACD,qEAAqE;QACrE,0EAA0E;QAC1E,oCAAoC;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QACjC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE;YACT,EAAE,EAAE,oKAAoK;YACxK,EAAE,EAAE,kKAAkK;SACvK;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,oEAAoE;gBACxE,EAAE,EAAE,2EAA2E;aAChF;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,SAAS;KACrB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,SAAS,EAAE;YACT,EAAE,EAAE,2HAA2H;YAC/H,EAAE,EAAE,gIAAgI;SACrI;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,gGAAgG;gBACpG,EAAE,EAAE,qHAAqH;aAC1H;SACF;QACD,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE;YACT,EAAE,EAAE,wEAAwE;YAC5E,EAAE,EAAE,6EAA6E;SAClF;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,iIAAiI;gBACrI,EAAE,EAAE,uHAAuH;aAC5H;SACF;QACD,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EAAE;YACT,EAAE,EAAE,gJAAgJ;YACpJ,EAAE,EAAE,+JAA+J;SACpK;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,gIAAgI;gBACpI,EAAE,EAAE,8HAA8H;aACnI;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE;YACT,EAAE,EAAE,sCAAsC;YAC1C,EAAE,EAAE,yCAAyC;SAC9C;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,kFAAkF;gBACtF,EAAE,EAAE,6FAA6F;aAClG;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE;YACT,EAAE,EAAE,6FAA6F;YACjG,EAAE,EAAE,8EAA8E;SACnF;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,gHAAgH;gBACpH,EAAE,EAAE,sGAAsG;aAC3G;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,SAAS,EAAE;YACT,EAAE,EAAE,kHAAkH;YACtH,EAAE,EAAE,oHAAoH;SACzH;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,+KAA+K;gBACnL,EAAE,EAAE,iKAAiK;aACtK;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE;YACT,EAAE,EAAE,2GAA2G;YAC/G,EAAE,EAAE,sGAAsG;SAC3G;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,4FAA4F;gBAChG,EAAE,EAAE,4GAA4G;aACjH;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,SAAS,EAAE;YACT,EAAE,EAAE,oEAAoE;YACxE,EAAE,EAAE,0DAA0D;SAC/D;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,uDAAuD;gBAC3D,EAAE,EAAE,oDAAoD;aACzD;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE;YACT,EAAE,EAAE,mGAAmG;YACvG,EAAE,EAAE,+GAA+G;SACpH;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,gEAAgE;gBACpE,EAAE,EAAE,4EAA4E;aACjF;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE;YACT,EAAE,EAAE,yCAAyC;YAC7C,EAAE,EAAE,wCAAwC;SAC7C;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,wGAAwG;gBAC5G,EAAE,EAAE,wHAAwH;aAC7H;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE;YACT,EAAE,EAAE,4DAA4D;YAChE,EAAE,EAAE,8EAA8E;SACnF;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,sFAAsF;gBAC1F,EAAE,EAAE,wFAAwF;aAC7F;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE;YACT,EAAE,EAAE,+IAA+I;YACnJ,EAAE,EAAE,iKAAiK;SACtK;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,gKAAgK;gBACpK,EAAE,EAAE,+JAA+J;aACpK;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE;YACT,EAAE,EAAE,uGAAuG;YAC3G,EAAE,EAAE,sGAAsG;SAC3G;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,mJAAmJ;gBACvJ,EAAE,EAAE,mKAAmK;aACxK;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,SAAS,EAAE;YACT,EAAE,EAAE,yJAAyJ;YAC7J,EAAE,EAAE,qJAAqJ;SAC1J;QACD,WAAW,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE;gBACP,EAAE,EAAE,8GAA8G;gBAClH,EAAE,EAAE,oHAAoH;aACzH;SACF;QACD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3B,SAAS,EAAE,CAAC,SAAS,CAAC;QACtB,SAAS,EAAE,IAAI;KAChB;CACF,CAAC"}

package/dist/events/bus.d.ts

@@ -0,0 +1,29 @@
+/**
+ * In-process typed event bus (R-17). Every module emits named events here; other
+ * modules and the webhook bridge subscribe. Durable delivery (retries, external URLs)
+ * is handled by the webhook-delivery worker — this bus is in-process only.
+ *
+ * Emissions are buffered inside a per-request scope (if an ambient scope exists) so
+ * an aborted transaction does not leak half-domain events. Outside of a scope the
+ * handlers fire synchronously.
+ */
+export interface EventBase {
+    eventId: string;
+    occurredAt: string;
+}
+type Handler<P> = (payload: P) => void | Promise<void>;
+export declare class EventBus<Events extends Record<string, EventBase> = Record<string, EventBase>> {
+    private readonly handlers;
+    on<K extends keyof Events & string>(eventName: K, handler: Handler<Events[K]>): () => void;
+    emit<K extends keyof Events & string>(eventName: K, payload: Events[K]): void;
+    /**
+     * Run fn inside a scope that buffers emitted events. If fn succeeds, buffered events
+     * are dispatched. If fn throws, they are dropped.
+     */
+    run<T>(fn: () => Promise<T>): Promise<T>;
+    private dispatch;
+}
+/** Singleton used by the backend. Tests construct their own instance. */
+export declare const eventBus: EventBus<Record<string, EventBase>>;
+export {};
+//# sourceMappingURL=bus.d.ts.map

package/dist/events/bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bus.d.ts","sourceRoot":"","sources":["../../src/events/bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAQvD,qBAAa,QAAQ,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;IACxF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8C;IAEvE,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAY1F,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI;IAS7E;;;OAGG;IACG,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;YAWhC,QAAQ;CAavB;AAED,yEAAyE;AACzE,eAAO,MAAM,QAAQ,qCAAiB,CAAC"}

package/dist/events/bus.js

@@ -0,0 +1,67 @@
+/**
+ * In-process typed event bus (R-17). Every module emits named events here; other
+ * modules and the webhook bridge subscribe. Durable delivery (retries, external URLs)
+ * is handled by the webhook-delivery worker — this bus is in-process only.
+ *
+ * Emissions are buffered inside a per-request scope (if an ambient scope exists) so
+ * an aborted transaction does not leak half-domain events. Outside of a scope the
+ * handlers fire synchronously.
+ */
+import { AsyncLocalStorage } from 'async_hooks';
+const scopeStorage = new AsyncLocalStorage();
+export class EventBus {
+    handlers = new Map();
+    on(eventName, handler) {
+        const list = this.handlers.get(eventName) ?? [];
+        list.push(handler);
+        this.handlers.set(eventName, list);
+        return () => {
+            const current = this.handlers.get(eventName);
+            if (!current)
+                return;
+            const idx = current.indexOf(handler);
+            if (idx >= 0)
+                current.splice(idx, 1);
+        };
+    }
+    emit(eventName, payload) {
+        const scope = scopeStorage.getStore();
+        if (scope) {
+            scope.pending.push({ eventName, payload });
+            return;
+        }
+        void this.dispatch(eventName, payload);
+    }
+    /**
+     * Run fn inside a scope that buffers emitted events. If fn succeeds, buffered events
+     * are dispatched. If fn throws, they are dropped.
+     */
+    async run(fn) {
+        const scope = { pending: [] };
+        return scopeStorage.run(scope, async () => {
+            const result = await fn();
+            for (const entry of scope.pending) {
+                await this.dispatch(entry.eventName, entry.payload);
+            }
+            return result;
+        });
+    }
+    async dispatch(eventName, payload) {
+        const list = this.handlers.get(eventName);
+        if (!list || list.length === 0)
+            return;
+        for (const handler of list) {
+            try {
+                await handler(payload);
+            }
+            catch (err) {
+                // Handlers are isolated; one failure MUST NOT break the others or the emitter.
+                // Logging is delegated to the Fastify request logger where available.
+                console.warn(JSON.stringify({ level: 'warn', msg: 'event handler threw', eventName, error: String(err) }));
+            }
+        }
+    }
+}
+/** Singleton used by the backend. Tests construct their own instance. */
+export const eventBus = new EventBus();
+//# sourceMappingURL=bus.js.map

package/dist/events/bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bus.js","sourceRoot":"","sources":["../../src/events/bus.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAahD,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAS,CAAC;AAEpD,MAAM,OAAO,QAAQ;IACF,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEvE,EAAE,CAAkC,SAAY,EAAE,OAA2B;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAA2B,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAA2B,CAAC,CAAC;YACzD,IAAI,GAAG,IAAI,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,CAAkC,SAAY,EAAE,OAAkB;QACpE,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,KAAK,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAI,EAAoB;QAC/B,MAAM,KAAK,GAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,OAAgB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACvC,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+EAA+E;gBAC/E,sEAAsE;gBACtE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/dist/events/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The in-process event bus' published surface. Peer of `kernel/`, `http/`,
+ * `tenancy/`, `commands/`; becomes the `./events` subpath of
+ * `@endora-commerce/platform` (feature 080, D-160.1/D-160.7), and that subpath
+ * is the boundary a future `@endora-commerce/events` would take (D-160.6).
+ *
+ * **This barrel is a package boundary in waiting, so it carries this
+ * directory's symbols and nothing else.**
+ *
+ * The `eventBus` **singleton** is deliberately absent. A module registers its
+ * subscriptions through `ctx.subscribe`, which gates them on the module's
+ * effective state (Principle XVII); a bare `eventBus.on` in a module is what
+ * `check:subscribe-seam` refuses, and publishing the instance here would
+ * re-open by bare specifier the seam that check closed by relative path. The
+ * class travels because a composition root constructs one and the type is what
+ * a module's own declarations name.
+ */
+export { EventBus, type EventBase } from './bus.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/events/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC"}

package/dist/events/index.js

@@ -0,0 +1,19 @@
+/**
+ * The in-process event bus' published surface. Peer of `kernel/`, `http/`,
+ * `tenancy/`, `commands/`; becomes the `./events` subpath of
+ * `@endora-commerce/platform` (feature 080, D-160.1/D-160.7), and that subpath
+ * is the boundary a future `@endora-commerce/events` would take (D-160.6).
+ *
+ * **This barrel is a package boundary in waiting, so it carries this
+ * directory's symbols and nothing else.**
+ *
+ * The `eventBus` **singleton** is deliberately absent. A module registers its
+ * subscriptions through `ctx.subscribe`, which gates them on the module's
+ * effective state (Principle XVII); a bare `eventBus.on` in a module is what
+ * `check:subscribe-seam` refuses, and publishing the instance here would
+ * re-open by bare specifier the seam that check closed by relative path. The
+ * class travels because a composition root constructs one and the type is what
+ * a module's own declarations name.
+ */
+export { EventBus } from './bus.js';
+//# sourceMappingURL=index.js.map

package/dist/events/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/events/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,EAAkB,MAAM,UAAU,CAAC"}

package/dist/http/cursor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Opaque cursor encoding shared by every list endpoint.
+ * The backend composes a composite key (for example `${createdAt}:${id}`) and emits it
+ * as base64url via these helpers; clients treat the cursor as opaque and pass it back.
+ * See specs/001-b2b-platform-foundation/contracts/README.md.
+ */
+export declare function encodeCursor(key: string): string;
+/** Returns undefined on malformed input so callers can 400 the request. */
+export declare function decodeCursor(cursor: string): string | undefined;
+//# sourceMappingURL=cursor.d.ts.map

package/dist/http/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["../../src/http/cursor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO/D"}

package/dist/http/cursor.js

@@ -0,0 +1,20 @@
+/**
+ * Opaque cursor encoding shared by every list endpoint.
+ * The backend composes a composite key (for example `${createdAt}:${id}`) and emits it
+ * as base64url via these helpers; clients treat the cursor as opaque and pass it back.
+ * See specs/001-b2b-platform-foundation/contracts/README.md.
+ */
+export function encodeCursor(key) {
+    return Buffer.from(key, 'utf8').toString('base64url');
+}
+/** Returns undefined on malformed input so callers can 400 the request. */
+export function decodeCursor(cursor) {
+    try {
+        const decoded = Buffer.from(cursor, 'base64url').toString('utf8');
+        return decoded.length > 0 ? decoded : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=cursor.js.map

package/dist/http/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["../../src/http/cursor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}