@geekmidas/constructs 10.0.0-alpha.11 → 10.0.0-alpha.111

package/dist/adaptors/aws.cjs

@@ -1,22 +1,26 @@
-const require_chunk = require('../chunk-DWy1uDak.cjs');
-require('../construct-interface-BfjcOD_E.cjs');
-require('../Construct-CyS3RpTL.cjs');
-const require_functions = require('../functions-i_la-N5r.cjs');
-require('../clone-Dy0cR2SZ.cjs');
-const require_Endpoint = require('../Endpoint-DcWXE-SZ.cjs');
-const require_surfaceEnv = require('../surfaceEnv-BFXEms2f.cjs');
-const require_lazyAccessors = require('../lazyAccessors-e3j2oE2m.cjs');
-const require_processAudits = require('../processAudits-CGqttuXm.cjs');
-const __geekmidas_errors = require_chunk.__toESM(require("@geekmidas/errors"));
-const __geekmidas_services = require_chunk.__toESM(require("@geekmidas/services"));
-const __middy_core = require_chunk.__toESM(require("@middy/core"));
-const __geekmidas_audit = require_chunk.__toESM(require("@geekmidas/audit"));
-const __geekmidas_audit_kysely = require_chunk.__toESM(require("@geekmidas/audit/kysely"));
-const __geekmidas_db_rls = require_chunk.__toESM(require("@geekmidas/db/rls"));
-const qs = require_chunk.__toESM(require("qs"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_rolldown_runtime = require("../rolldown-runtime-y5ARvAq5.cjs");
+const require_tracing = require("../tracing-C0ooU0V2.cjs");
+const require_functions = require("../functions-D7O5SGVc.cjs");
+const require_Endpoint = require("../Endpoint-yhR2T2Wt.cjs");
+const require_surfaceEnv = require("../surfaceEnv-CNimK76p.cjs");
+const require_readRequestBody = require("../readRequestBody-Dej_L3c4.cjs");
+const require_runSubscriber = require("../runSubscriber-D8nLXIv1.cjs");
+const require_requestLogger = require("../requestLogger-BZcXwdBs.cjs");
+let _geekmidas_events = require("@geekmidas/events");
+let _geekmidas_services = require("@geekmidas/services");
+let _geekmidas_errors = require("@geekmidas/errors");
+let qs = require("qs");
+qs = require_rolldown_runtime.__toESM(qs, 1);
+let _middy_core = require("@middy/core");
+_middy_core = require_rolldown_runtime.__toESM(_middy_core, 1);
+let _geekmidas_audit = require("@geekmidas/audit");
+let _geekmidas_audit_kysely = require("@geekmidas/audit/kysely");
+let _geekmidas_db_rls = require("@geekmidas/db/rls");
 //#region src/functions/FunctionExecutionWrapper.ts
 var FunctionExecutionWrapper = class {
+	envParser;
+	fn;
 	constructor(envParser, fn) {
 		this.envParser = envParser;
 		this.fn = fn;
@@ -26,25 +30,22 @@ var FunctionExecutionWrapper = class {
 		return this._logger || this.fn.logger;
 	}
 	get serviceDiscovery() {
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-		return serviceDiscovery;
+		return _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 	}
 	getServices() {
 		return this.serviceDiscovery.register(this.fn.services);
 	}
 	async getDatabase() {
-		if (!this.fn.databaseService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.databaseService]);
-		return services[this.fn.databaseService.serviceName];
+		if (!this.fn.databaseService) return;
+		return (await this.serviceDiscovery.register([this.fn.databaseService]))[this.fn.databaseService.serviceName];
 	}
 	/**
 	* Get the audit storage service if configured.
 	* Returns undefined if no auditor storage is configured.
 	*/
 	async getAuditStorage() {
-		if (!this.fn.auditorStorageService) return void 0;
-		const services = await this.serviceDiscovery.register([this.fn.auditorStorageService]);
-		return services[this.fn.auditorStorageService.serviceName];
+		if (!this.fn.auditorStorageService) return;
+		return (await this.serviceDiscovery.register([this.fn.auditorStorageService]))[this.fn.auditorStorageService.serviceName];
 	}
 	/**
 	* Create an auditor instance for the function.
@@ -52,8 +53,8 @@ var FunctionExecutionWrapper = class {
 	*/
 	async createAuditor() {
 		const storage = await this.getAuditStorage();
-		if (!storage) return void 0;
-		return new __geekmidas_audit.DefaultAuditor({
+		if (!storage) return;
+		return new _geekmidas_audit.DefaultAuditor({
 			actor: {
 				id: "system",
 				type: "system"
@@ -73,52 +74,45 @@ var FunctionExecutionWrapper = class {
 	async executeWithAudit(handler) {
 		const auditor = await this.createAuditor();
 		const storage = await this.getAuditStorage();
-		if (!auditor || !storage) {
-			const db$1 = await this.getDatabase();
-			return handler({ db: db$1 });
-		}
+		if (!auditor || !storage) return handler({ db: await this.getDatabase() });
 		const storageDb = storage.getDatabase?.();
 		const databaseServiceName = this.fn.databaseService?.serviceName;
 		const auditDbServiceName = this.fn.auditorStorageService?.serviceName;
-		if (storageDb && databaseServiceName && auditDbServiceName) return (0, __geekmidas_audit_kysely.withAuditableTransaction)(storageDb, auditor, async (trx) => {
-			const response$1 = await handler({
+		if (storageDb && databaseServiceName && auditDbServiceName) return (0, _geekmidas_audit_kysely.withAuditableTransaction)(storageDb, auditor, async (trx) => {
+			return await handler({
 				auditor,
 				db: trx
 			});
-			return response$1;
 		});
-		const db = await this.getDatabase();
 		const response = await handler({
 			auditor,
-			db
+			db: await this.getDatabase()
 		});
 		await auditor.flush();
 		return response;
 	}
 	async getFunctionInput(event) {
-		const parsedInput = await require_functions.FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
-		return parsedInput;
+		return await require_functions.FunctionBuilder.parseComposableStandardSchema(event, this.fn.input);
 	}
 	async publishEvents(response) {
-		await require_lazyAccessors.publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response, this.fn.publisherService);
+		await require_functions.publishEvents(this.logger, this.serviceDiscovery, this.fn.events, response);
 	}
 	async parseComposableStandardSchema(data, schema) {
 		return require_functions.FunctionBuilder.parseComposableStandardSchema(data, schema);
 	}
 };
-
 //#endregion
 //#region src/functions/AWSLambdaFunction.ts
 var AWSLambdaFunction = class extends FunctionExecutionWrapper {
+	fn;
 	constructor(envParser, fn) {
 		super(envParser, fn);
 		this.fn = fn;
 	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.fn.logger;
-			logger.error(req.error || {}, "Error processing function");
-			throw (0, __geekmidas_errors.wrapError)(req.error);
+			(req.event?.logger || this.fn.logger).error(req.error || {}, "Error processing function");
+			throw (0, _geekmidas_errors.wrapError)(req.error);
 		} };
 	}
 	baseInput() {
@@ -133,7 +127,7 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 				} else req.event.parsedInput = req.event;
 			} catch (error) {
 				this.logger.error({
-					error,
+					err: error,
 					event: req.event
 				}, "Failed to parse input");
 				throw error;
@@ -193,26 +187,25 @@ var AWSLambdaFunction = class extends FunctionExecutionWrapper {
 			db: event.db,
 			auditor: event.auditor
 		});
-		const output = await this.fn.parseOutput(result);
-		return output;
+		return await this.fn.parseOutput(result);
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		const chain = (0, __middy_core.default)(handler).use(this.loggerMiddleware()).use(this.baseInput()).use(this.error()).use(this.services()).use(this.database()).use(this.auditor()).use(this.input()).use(this.events());
+		const chain = (0, _middy_core.default)(handler).use(this.loggerMiddleware()).use(this.baseInput()).use(this.error()).use(this.services()).use(this.database()).use(this.auditor()).use(this.input()).use(this.events());
 		const wrappedHandler = async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.fn.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
-				startTime
+				startTime,
+				operation: context.functionName
 			}, () => chain(event, context));
 		};
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/crons/AWSScheduledFunction.ts
 /**
@@ -246,11 +239,11 @@ var AWSScheduledFunction = class extends AWSLambdaFunction {
 		super(envParser, cron);
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayEndpointAdaptor.ts
-var import_lodash = require_chunk.__toESM(require_Endpoint.require_lodash(), 1);
-var AmazonApiGatewayEndpoint = class {
+var import_lodash_set = /* @__PURE__ */ require_rolldown_runtime.__toESM(require_Endpoint.require_lodash_set(), 1);
+var AmazonApiGatewayEndpoint = class AmazonApiGatewayEndpoint {
+	endpoint;
 	options;
 	/**
 	* The parser this adaptor discovers services with.
@@ -270,27 +263,39 @@ var AmazonApiGatewayEndpoint = class {
 	error() {
 		return { onError: (req) => {
 			(req.event.logger || this.endpoint.logger).error(req.error || {}, "Error processing request");
-			const wrappedError = (0, __geekmidas_errors.wrapError)(req.error);
+			const wrappedError = (0, _geekmidas_errors.wrapError)(req.error);
 			req.response = {
 				statusCode: wrappedError.statusCode,
-				body: wrappedError.body
+				body: wrappedError.body,
+				...wrappedError.headers ? { headers: { ...wrappedError.headers } } : {}
 			};
 		} };
 	}
 	/**
-	* Decodes the raw body from an API Gateway event.
-	* Uses Content-Type to decide parsing strategy (like Express/Fastify/Hono):
-	* - `application/json` (or missing) → JSON.parse the decoded string
-	* - Anything else → return decoded string as-is, let the schema handle it
+	* Decodes the raw body from an API Gateway event — base64 when API
+	* Gateway says so — and reads it by its Content-Type, as every adaptor
+	* does (see {@link readRequestBody}): JSON, an HTML form's fields, or text.
 	*
-	* Defaults to JSON when no Content-Type is provided for backwards compatibility.
+	* A body with no Content-Type is read as JSON, as it always has been here.
 	*/
-	static decodeBody(body, isBase64Encoded, contentType) {
+	static async decodeBody(body, isBase64Encoded, contentType) {
 		if (!body) return void 0;
-		const raw = isBase64Encoded ? Buffer.from(body, "base64").toString("utf-8") : body;
-		const isJson = !contentType || contentType.toLowerCase().includes("application/json");
-		if (isJson) return JSON.parse(raw);
-		return raw;
+		const bytes = Buffer.from(body, isBase64Encoded ? "base64" : "utf-8");
+		const request = new Request("http://api-gateway.invalid/", {
+			method: "POST",
+			headers: contentType ? { "content-type": contentType } : {},
+			body: bytes
+		});
+		return require_readRequestBody.readRequestBody(request, contentType, { untyped: "json" });
+	}
+	/**
+	* The event's body, read only for an endpoint with a `.body()` schema —
+	* one without is handed no body, and is not refused a content type it
+	* never reads.
+	*/
+	readBody(body, isBase64Encoded, contentType) {
+		if (!this.endpoint.input?.body) return Promise.resolve(void 0);
+		return AmazonApiGatewayEndpoint.decodeBody(body, isBase64Encoded, contentType);
 	}
 	getCookies(e) {
 		const headers = e.headers;
@@ -299,36 +304,38 @@ var AmazonApiGatewayEndpoint = class {
 	input() {
 		return { before: async (req) => {
 			try {
-				const { body, query, params } = this.getInput(req.event);
+				const { body, query, params } = await this.getInput(req.event);
 				const headers = req.event.headers;
 				const header = require_Endpoint.Endpoint.createHeaders(headers);
 				const cookie = this.getCookies(req.event);
-				(0, import_lodash.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
-				(0, import_lodash.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
-				(0, import_lodash.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
-				(0, import_lodash.default)(req.event, "header", header);
-				(0, import_lodash.default)(req.event, "cookie", cookie);
+				(0, import_lodash_set.default)(req.event, "body", await this.endpoint.parseInput(body, "body"));
+				(0, import_lodash_set.default)(req.event, "query", await this.endpoint.parseInput(query, "query"));
+				(0, import_lodash_set.default)(req.event, "params", await this.endpoint.parseInput(params, "params"));
+				(0, import_lodash_set.default)(req.event, "header", header);
+				(0, import_lodash_set.default)(req.event, "cookie", cookie);
 			} catch (error) {
-				if (error && typeof error === "object" && Array.isArray(error)) throw new __geekmidas_errors.UnprocessableEntityError("Validation failed", error);
+				if (error && typeof error === "object" && Array.isArray(error)) throw new _geekmidas_errors.UnprocessableEntityError("Validation failed", error);
 				throw error;
 			}
 		} };
 	}
+	/** This request's logger: see {@link requestLogger}. */
+	requestLogger(event, context) {
+		return require_requestLogger.requestLogger(this.endpoint, {
+			requestId: context.awsRequestId,
+			host: event.headers?.host,
+			...this.getLoggerContext(event, context)
+		});
+	}
 	logger() {
 		return { before: (req) => {
-			req.event.logger = this.endpoint.logger.child({
-				route: this.endpoint.route,
-				host: req.event.headers?.host,
-				method: this.endpoint.method,
-				...this.getLoggerContext(req.event, req.context)
-			});
+			req.event.logger = (0, _geekmidas_services.currentRequestContext)()?.logger ?? this.requestLogger(req.event, req.context);
 		} };
 	}
 	services() {
 		return { before: async (req) => {
-			const _logger = req.event.logger;
-			const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-			const services = await serviceDiscovery.register(this.endpoint.services);
+			req.event.logger;
+			const services = await _geekmidas_services.ServiceDiscovery.getInstance(this.envParser).register(this.endpoint.services);
 			req.event.services = services;
 		} };
 	}
@@ -339,7 +346,7 @@ var AmazonApiGatewayEndpoint = class {
 			const header = req.event.header;
 			const cookie = req.event.cookie;
 			const session = req.event.session;
-			const isAuthorized = await this.endpoint.authorize({
+			if (!await this.endpoint.authorize({
 				header,
 				cookie,
 				services,
@@ -349,19 +356,39 @@ var AmazonApiGatewayEndpoint = class {
 				body: req.event.body,
 				query: req.event.query,
 				params: req.event.params
-			});
-			if (!isAuthorized) {
+			})) {
 				logger.warn("Forbidden access attempt");
-				throw new __geekmidas_errors.ForbiddenError("Forbidden access to the endpoint", "You do not have permission to access this resource.");
+				throw new _geekmidas_errors.ForbiddenError("Forbidden access to the endpoint", "You do not have permission to access this resource.");
 			}
 		} };
 	}
+	/**
+	* The endpoint's `.rateLimit()`, after authorization as on every adaptor:
+	* over the limit it throws a 429, which `error()` answers with its
+	* headers; under it, the `X-RateLimit-*` headers go on the response.
+	*/
+	rateLimit() {
+		return { before: async (req) => {
+			if (!this.endpoint.rateLimit) return;
+			req.event.rateLimitHeaders = await require_requestLogger.enforceRateLimit(this.endpoint.rateLimit, {
+				header: req.event.header,
+				services: req.event.services,
+				logger: req.event.logger,
+				session: req.event.session,
+				path: this.requestPath(req.event),
+				method: this.endpoint.method
+			});
+		} };
+	}
+	/** The path the request was made to, as the limiter keys a client by. */
+	requestPath(event) {
+		return event.path ?? event.rawPath ?? this.endpoint.route;
+	}
 	database() {
 		return { before: async (req) => {
 			if (!this.endpoint.databaseService) return;
-			const _logger = req.event.logger;
-			const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-			const db = await serviceDiscovery.register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
+			req.event.logger;
+			const db = await _geekmidas_services.ServiceDiscovery.getInstance(this.envParser).register([this.endpoint.databaseService]).then((s) => s[this.endpoint.databaseService?.serviceName]);
 			req.event.db = db;
 		} };
 	}
@@ -377,6 +404,7 @@ var AmazonApiGatewayEndpoint = class {
 				cookie: req.event.cookie,
 				...db !== void 0 && { db }
 			});
+			req.event.logger = (0, _geekmidas_services.currentRequestContext)()?.logger ?? req.event.logger;
 		} };
 	}
 	events() {
@@ -386,16 +414,16 @@ var AmazonApiGatewayEndpoint = class {
 			const statusCode = req.response?.statusCode ?? this.endpoint.status;
 			if (require_Endpoint.Endpoint.isSuccessStatus(statusCode)) {
 				const logger = event.logger;
-				const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-				await require_lazyAccessors.publishConstructEvents(this.endpoint, response, serviceDiscovery, logger);
+				const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+				await require_functions.publishConstructEvents(this.endpoint, response, serviceDiscovery, logger);
 			}
 		} };
 	}
 	async _handler(event) {
 		const input = this.endpoint.refineInput(event);
 		const logger = event.logger;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-		const auditContext = await require_processAudits.createAuditContext(this.endpoint, serviceDiscovery, logger, {
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+		const auditContext = await require_requestLogger.createAuditContext(this.endpoint, serviceDiscovery, logger, {
 			session: event.session,
 			header: event.header,
 			cookie: event.cookie,
@@ -412,9 +440,8 @@ var AmazonApiGatewayEndpoint = class {
 			cookie: event.cookie,
 			logger
 		}) : void 0;
-		const result = await require_processAudits.executeWithAuditTransaction(auditContext, async (auditor) => {
-			const sameDatabase = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName;
-			const baseDb = sameDatabase ? auditor?.getTransaction?.() ?? rawDb : rawDb;
+		const { output, metadata } = await require_requestLogger.executeWithAuditTransaction(auditContext, async (auditor) => {
+			const baseDb = auditContext?.storage?.databaseServiceName && auditContext.storage.databaseServiceName === this.endpoint.databaseService?.serviceName ? auditor?.getTransaction?.() ?? rawDb : rawDb;
 			const executeHandler = async (db) => {
 				const responseBuilder = new require_Endpoint.ResponseBuilder();
 				const response = await this.endpoint.handler({
@@ -428,33 +455,33 @@ var AmazonApiGatewayEndpoint = class {
 					...input
 				}, responseBuilder);
 				let data = response;
-				let metadata$1 = responseBuilder.getMetadata();
+				let metadata = responseBuilder.getMetadata();
 				if (require_Endpoint.Endpoint.hasMetadata(response)) {
 					data = response.data;
-					metadata$1 = response.metadata;
+					metadata = response.metadata;
 				}
-				const output$1 = this.endpoint.outputSchema ? await this.endpoint.parseOutput(data) : void 0;
+				const redirect = require_Endpoint.Endpoint.isRedirectStatus(metadata.status ?? this.endpoint.status);
 				return {
-					output: output$1,
-					metadata: metadata$1,
-					responseBuilder
+					output: this.endpoint.outputSchema && !redirect ? await this.endpoint.parseOutput(data) : void 0,
+					metadata,
+					responseBuilder,
+					redirect
 				};
 			};
-			if (rlsActive && rlsContext && baseDb) return (0, __geekmidas_db_rls.withRlsContext)(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: this.endpoint.rlsConfig?.prefix });
+			if (rlsActive && rlsContext && baseDb) return (0, _geekmidas_db_rls.withRlsContext)(baseDb, rlsContext, async (trx) => executeHandler(trx), { prefix: this.endpoint.rlsConfig?.prefix });
 			return executeHandler(baseDb);
-		}, async (result$1, auditor) => {
-			if (!audits?.length) return;
+		}, async (result, auditor) => {
+			if (!audits?.length || result.redirect) return;
 			for (const audit of audits) {
-				if (audit.when && !audit.when(result$1.output)) continue;
-				const payload = audit.payload(result$1.output);
-				const entityId = audit.entityId?.(result$1.output);
+				if (audit.when && !audit.when(result.output)) continue;
+				const payload = audit.payload(result.output);
+				const entityId = audit.entityId?.(result.output);
 				auditor.audit(audit.type, payload, {
 					table: audit.table,
 					entityId
 				});
 			}
 		}, { db: rawDb });
-		const { output, metadata } = result;
 		const isJsonResponse = this.endpoint.responseType === "application/json";
 		const body = output === void 0 ? void 0 : isJsonResponse ? JSON.stringify(output) : typeof output === "string" ? output : String(output);
 		event.__response = output;
@@ -463,8 +490,10 @@ var AmazonApiGatewayEndpoint = class {
 			body
 		};
 		const baseHeaders = isJsonResponse ? void 0 : { "content-type": this.endpoint.responseType };
-		if (baseHeaders || metadata.headers && Object.keys(metadata.headers).length > 0) lambdaResponse.headers = {
+		const rateLimitHeaders = event.rateLimitHeaders;
+		if (baseHeaders || rateLimitHeaders || metadata.headers && Object.keys(metadata.headers).length > 0) lambdaResponse.headers = {
 			...baseHeaders ?? {},
+			...rateLimitHeaders ?? {},
 			...metadata.headers ?? {}
 		};
 		if (metadata.cookies && metadata.cookies.size > 0) {
@@ -505,24 +534,25 @@ var AmazonApiGatewayEndpoint = class {
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		let chain = (0, __middy_core.default)(handler).use(this.logger()).use(this.error()).use(this.services()).use(this.input()).use(this.database()).use(this.session()).use(this.authorize()).use(this.events());
+		let chain = (0, _middy_core.default)(handler).use(this.logger()).use(this.error()).use(this.services()).use(this.input()).use(this.database()).use(this.session()).use(this.authorize()).use(this.rateLimit()).use(this.events());
 		const telemetryMiddleware = this.telemetry();
 		if (telemetryMiddleware) chain = chain.use(telemetryMiddleware);
 		if (this.options.telescope?.middleware) chain = chain.use(this.options.telescope.middleware);
 		const wrappedHandler = async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
-			const logger = this.endpoint.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			const logger = this.requestLogger(event, context);
+			const operation = `${this.endpoint.method} ${this.endpoint.route}`;
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
-				startTime
+				startTime,
+				operation
 			}, () => chain(event, context));
 		};
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 //#region src/endpoints/parseQueryParams.ts
 /**
@@ -543,18 +573,18 @@ function parseQueryParams(queryParams) {
 	}
 	return qs.default.parse(parts.join("&"));
 }
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV1EndpointAdaptor.ts
 var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
-	getInput(e) {
+	endpoint;
+	async getInput(e) {
 		const multiValueParams = e.multiValueQueryStringParameters || {};
 		const singleValueParams = e.queryStringParameters || {};
 		const mergedParams = {};
 		for (const [key, value] of Object.entries(singleValueParams)) if (value !== void 0) mergedParams[key] = value;
 		for (const [key, values] of Object.entries(multiValueParams)) if (values && values.length > 1) mergedParams[key] = values;
 		return {
-			body: AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["Content-Type"] ?? e.headers?.["content-type"]),
+			body: await this.readBody(e.body, e.isBase64Encoded, e.headers?.["Content-Type"] ?? e.headers?.["content-type"]),
 			query: parseQueryParams(mergedParams),
 			params: e.pathParameters || {}
 		};
@@ -579,17 +609,16 @@ var AmazonApiGatewayV1Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/endpoints/AmazonApiGatewayV2EndpointAdaptor.ts
 var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
+	endpoint;
 	getCookies(e) {
-		return require_lazyAccessors.createApiGatewayCookies(e.cookies, e.headers?.cookie);
+		return require_readRequestBody.createApiGatewayCookies(e.cookies, e.headers?.cookie);
 	}
-	getInput(e) {
-		const raw = AmazonApiGatewayEndpoint.decodeBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]);
+	async getInput(e) {
 		return {
-			body: raw,
+			body: await this.readBody(e.body, e.isBase64Encoded, e.headers?.["content-type"]),
 			query: qs.default.parse(e.rawQueryString),
 			params: e.pathParameters || {}
 		};
@@ -614,7 +643,6 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 		this.endpoint = endpoint;
 	}
 };
-
 //#endregion
 //#region src/queue/AWSLambdaQueueAdaptor.ts
 /**
@@ -629,6 +657,8 @@ var AmazonApiGatewayV2Endpoint = class extends AmazonApiGatewayEndpoint {
 * retries only those records.
 */
 var AWSLambdaQueue = class {
+	envParser;
+	queue;
 	_services;
 	constructor(envParser, queue) {
 		this.envParser = envParser;
@@ -639,10 +669,16 @@ var AWSLambdaQueue = class {
 	}
 	async getServices() {
 		if (this._services) return this._services;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
+		const serviceDiscovery = _geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
 		this._services = this.queue.services.length > 0 ? await serviceDiscovery.register(this.queue.services) : {};
 		return this._services;
 	}
+	/** The queue's database, registered as functions register theirs. */
+	async getDatabase() {
+		const service = this.queue.databaseService;
+		if (!service) return void 0;
+		return (await _geekmidas_services.ServiceDiscovery.getInstance(this.envParser).register([service]))[service.serviceName];
+	}
 	safeJsonParse(value) {
 		try {
 			return JSON.parse(value);
@@ -668,6 +704,7 @@ var AWSLambdaQueue = class {
 			req: { id: context.awsRequestId }
 		});
 		const services = await this.getServices();
+		const db = await this.getDatabase();
 		const schema = this.queue.messageSchema;
 		const batchItemFailures = [];
 		const messages = [];
@@ -685,7 +722,7 @@ var AWSLambdaQueue = class {
 			messages.push(validation.value);
 		} catch (error) {
 			logger.error({
-				error,
+				err: error,
 				messageId: record.messageId
 			}, "Failed to parse SQS record");
 			batchItemFailures.push({ itemIdentifier: record.messageId });
@@ -695,34 +732,39 @@ var AWSLambdaQueue = class {
 			await this.queue.handler({
 				messages,
 				services,
-				logger
+				logger,
+				db
 			});
 		} catch (error) {
-			logger.error((0, __geekmidas_errors.wrapError)(error), "Queue handler failed; retrying batch");
+			logger.error((0, _geekmidas_errors.wrapError)(error), "Queue handler failed; retrying batch");
 			for (const record of event.Records) if (!batchItemFailures.some((f) => f.itemIdentifier === record.messageId)) batchItemFailures.push({ itemIdentifier: record.messageId });
 		}
 		return { batchItemFailures };
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		return async (event, context) => {
+		return (async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.queue.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
-				startTime
-			}, () => handler(event, context));
-		};
+				startTime,
+				operation: `queue ${this.queue.name}`
+			}, () => (0, _geekmidas_events.consumeBatchTraced)({
+				system: "aws_sqs",
+				destination: this.queue.name
+			}, event.Records.map(require_tracing.recordCarrier), () => handler(event, context)));
+		});
 	}
 };
-
 //#endregion
 //#region src/subscribers/AWSLambdaSubscriberAdaptor.ts
 var AWSLambdaSubscriber = class {
+	envParser;
+	subscriber;
 	_logger;
-	_services;
 	constructor(envParser, subscriber) {
 		this.envParser = envParser;
 		this.subscriber = subscriber;
@@ -731,20 +773,10 @@ var AWSLambdaSubscriber = class {
 	get logger() {
 		return this._logger;
 	}
-	async getServices() {
-		if (this._services) return this._services;
-		const serviceDiscovery = __geekmidas_services.ServiceDiscovery.getInstance(this.envParser);
-		if (this.subscriber.services.length > 0) {
-			const registered = await serviceDiscovery.register(this.subscriber.services);
-			this._services = registered;
-		} else this._services = {};
-		return this._services;
-	}
 	error() {
 		return { onError: (req) => {
-			const logger = req.event?.logger || this.subscriber.logger;
-			logger.error(req.error || {}, "Error processing subscriber");
-			throw (0, __geekmidas_errors.wrapError)(req.error);
+			(req.event?.logger || this.subscriber.logger).error(req.error || {}, "Error processing subscriber");
+			throw (0, _geekmidas_errors.wrapError)(req.error);
 		} };
 	}
 	loggerMiddleware() {
@@ -762,128 +794,49 @@ var AWSLambdaSubscriber = class {
 	}
 	services() {
 		return { before: async (req) => {
-			req.event.services = await this.getServices();
+			const { services, db } = await require_runSubscriber.subscriberContext(this.subscriber, this.envParser);
+			req.event.services = services;
+			req.event.db = db;
 		} };
 	}
 	parseEvents() {
 		return { before: async (req) => {
-			const { logger,...e } = req.event;
-			const rawEvent = e;
+			const { logger, ...rawEvent } = req.event;
 			logger.info({ rawEvent });
-			const events = [];
-			if ("Records" in rawEvent) {
-				if (this.isSQSEvent(rawEvent)) for (const record of rawEvent.Records) try {
-					const event = this.parseSQSRecord(record);
-					if (this.shouldIncludeEvent(event)) events.push(event);
-				} catch (error) {
-					this.logger.error({
-						error,
-						record
-					}, "Failed to parse SQS record");
-				}
-				else if (this.isSNSEvent(rawEvent)) for (const record of rawEvent.Records) try {
-					const event = this.parseSNSRecord(record);
-					if (this.shouldIncludeEvent(event)) events.push(event);
-				} catch (error) {
-					this.logger.error({
-						error,
-						record
-					}, "Failed to parse SNS record");
-				}
-			}
-			req.event.events = events;
+			req.event.events = require_runSubscriber.subscribedEvents(this.subscriber, rawEvent, this.logger);
 		} };
 	}
-	isSQSEvent(event) {
-		const firstRecord = event.Records[0];
-		return "Records" in event && event.Records.length > 0 && firstRecord !== void 0 && "eventSource" in firstRecord && firstRecord.eventSource === "aws:sqs";
-	}
-	isSNSEvent(event) {
-		const firstRecord = event.Records[0];
-		return "Records" in event && event.Records.length > 0 && firstRecord !== void 0 && "EventSource" in firstRecord && firstRecord.EventSource === "aws:sns";
-	}
-	parseSNSRecord(record) {
-		const message = this.safeJsonParse(record.Sns.Message);
-		const messageType = record.Sns.MessageAttributes?.type?.Value;
-		if (message === null) return messageType ? {
-			type: messageType,
-			payload: record.Sns.Message
-		} : record.Sns.Message;
-		const resolvedType = messageType ?? message.type;
-		if (message.type) return message;
-		return resolvedType ? {
-			type: resolvedType,
-			payload: message
-		} : message;
-	}
-	parseSQSRecord(record) {
-		const body = this.safeJsonParse(record.body);
-		if (body === null) return record.body;
-		if (body.Type === "Notification" && body.Message) {
-			const snsMessage = this.safeJsonParse(body.Message);
-			const messageType = body.MessageAttributes?.type?.Value;
-			if (snsMessage === null) return messageType ? {
-				type: messageType,
-				payload: body.Message
-			} : body.Message;
-			if (snsMessage.type) return snsMessage;
-			const resolvedType = messageType ?? snsMessage.type;
-			return resolvedType ? {
-				type: resolvedType,
-				payload: snsMessage
-			} : snsMessage;
-		}
-		return body;
-	}
-	safeJsonParse(value) {
-		try {
-			return JSON.parse(value);
-		} catch {
-			return null;
-		}
-	}
-	shouldIncludeEvent(event) {
-		if (typeof event !== "object" || !event?.type) return true;
-		if (!this.subscriber.subscribedEvents) return true;
-		return this.subscriber.subscribedEvents.includes(event.type);
-	}
 	async _handler(event) {
-		if (event.events.length === 0) {
-			this.logger.info("No subscribed events to process");
-			return { batchItemFailures: [] };
-		}
-		const result = await this.subscriber.handler({
-			events: event.events,
-			services: event.services,
-			logger: event.logger
+		const { events, services, logger, db } = event;
+		return require_runSubscriber.runSubscriber(this.subscriber, {
+			events,
+			services,
+			logger,
+			db
 		});
-		if (this.subscriber.outputSchema && result) {
-			const validationResult = await this.subscriber.outputSchema["~standard"].validate(result);
-			if (validationResult.issues) {
-				this.logger.error({ issues: validationResult.issues }, "Subscriber output validation failed");
-				throw new Error("Subscriber output validation failed");
-			}
-			return validationResult.value;
-		}
-		return result;
 	}
 	get handler() {
 		const handler = this._handler.bind(this);
-		const chain = (0, __middy_core.default)(handler).use(this.loggerMiddleware()).use(this.parseEvents()).use(this.error()).use(this.services());
+		const chain = (0, _middy_core.default)(handler).use(this.loggerMiddleware()).use(this.parseEvents()).use(this.error()).use(this.services());
 		const wrappedHandler = async (event, context) => {
 			const startTime = Date.now();
 			const requestId = context.awsRequestId;
 			const logger = this.subscriber.logger.child({ requestId });
-			return (0, __geekmidas_services.runWithRequestContext)({
+			const operation = `subscriber ${this.subscriber.topicName ?? context.functionName}`;
+			const records = event?.Records ?? [];
+			return (0, _geekmidas_services.runWithRequestContext)({
 				logger,
 				requestId,
-				startTime
-			}, () => chain(event, context));
+				startTime,
+				operation
+			}, () => (0, _geekmidas_events.consumeBatchTraced)({
+				system: records[0]?.Sns ? "aws_sns" : "aws_sqs",
+				destination: this.subscriber.topicName ?? context.functionName
+			}, records.map(require_tracing.recordCarrier), () => chain(event, context)));
 		};
 		return wrappedHandler;
 	}
 };
-
 //#endregion
 exports.AWSLambdaFunction = AWSLambdaFunction;
 exports.AWSLambdaQueue = AWSLambdaQueue;
@@ -891,4 +844,5 @@ exports.AWSLambdaSubscriber = AWSLambdaSubscriber;
 exports.AWSScheduledFunction = AWSScheduledFunction;
 exports.AmazonApiGatewayV1Endpoint = AmazonApiGatewayV1Endpoint;
 exports.AmazonApiGatewayV2Endpoint = AmazonApiGatewayV2Endpoint;
+
 //# sourceMappingURL=aws.cjs.map