@generazioneai/events 0.0.1 → 0.1.1

package/dist/types.d.ts

@@ -0,0 +1,116 @@
+/** Busta di ogni evento (versione 1). Il corpo del messaggio NATS è questo oggetto in JSON. */
+export interface EventEnvelope<T = unknown> {
+    v: 1;
+    /** UUID v7, uguale a `Nats-Msg-Id`. */
+    id: string;
+    subject: string;
+    aggregateType: string;
+    aggregateId: string;
+    aggregateVersion: number;
+    /** ISO 8601 UTC del momento in cui l'evento è stato scritto nell'outbox. */
+    occurredAt: string;
+    /** Azienda di riferimento (anche in `Gen-Tenant`). */
+    juridicalId?: string;
+    /** Solo id e stati, mai dati personali. */
+    data: T;
+}
+/** Servizi che pubblicano o consumano eventi (contratto del treno 3+4). */
+export type EventsService = 'id' | 'hr' | 'train' | 'ops' | 'notify' | 'ai' | 'sign' | 'bill' | 'audit';
+/** `EVENTS_MODE`: off = niente; outbox = si scrive l'outbox ma non si pubblica né si consuma; on = tutto. */
+export type EventsMode = 'off' | 'outbox' | 'on';
+/** `EVENTS_SIGNATURE`: off = nessuna firma; shadow = firma e verifica senza rifiutare; enforce = rifiuta le firme assenti o errate. */
+export type EventsSignatureMode = 'off' | 'shadow' | 'enforce';
+/** Il pezzo di Prisma che serve alla libreria dentro una transazione (il `tx` di `$transaction(async tx => …)`). */
+export interface PrismaTx {
+    $executeRawUnsafe(query: string, ...values: any[]): Promise<number>;
+    $queryRawUnsafe<T = unknown>(query: string, ...values: any[]): Promise<T>;
+}
+/** Il pezzo di `PrismaService` che serve alla libreria. Un client di transazione NON ha `$transaction`: così si riconosce. */
+export interface PrismaLike extends PrismaTx {
+    $transaction<R>(fn: (tx: PrismaTx) => Promise<R>, options?: {
+        timeout?: number;
+        maxWait?: number;
+    }): Promise<R>;
+}
+export interface SignParams {
+    eventId: string;
+    subject: string;
+    juridicalId?: string | null;
+}
+/** Produce il JWT di `Gen-Sig` (audience `events`). Con authz 0.7: `(p) => signEventToken(ctx, { eventId: p.eventId, subject: p.subject })`. */
+export type EventSigner = (params: SignParams) => string | Promise<string>;
+export interface VerifyParams {
+    eventId: string;
+    subject: string;
+    mode: Exclude<EventsSignatureMode, 'off'>;
+}
+/** Verifica `Gen-Sig`; lancia se non valida. Con authz 0.7: `(t, p) => verifyEventToken(t, p)`. `token` è `undefined` se manca. */
+export type EventVerifier = (token: string | undefined, params: VerifyParams) => void | Promise<void>;
+export interface OnEventOptions {
+    /** Nome del consumer durevole: `<servizio>.<gestore>` (es. `hr.employment-changed`). Unico nel cluster. */
+    consumer: string;
+    /** Messaggi senza ack tollerati dal consumer (default 100). */
+    maxAckPending?: number;
+}
+export type EventHandler<T = any> = (evt: EventEnvelope<T>, tx: PrismaTx) => Promise<void>;
+export interface EnqueueParams<T = unknown> {
+    /** `evt.<servizio>.<entità>.<fatto>` al passato. */
+    subject: string;
+    aggregate: {
+        type: string;
+        id: string;
+        version: number;
+    };
+    juridicalId?: string | null;
+    /** Diventa `data` della busta. Solo id e stati. */
+    data: T;
+}
+export interface EventsModuleOptions {
+    service: EventsService;
+    /** Default `EVT_<SERVICE>`. */
+    stream?: string;
+    /** La classe (o il token) di `PrismaService` da risolvere dal contenitore di Nest, oppure direttamente l'istanza. */
+    prisma: unknown;
+    /** Default: `EVENTS_MODE` o `off`. */
+    mode?: EventsMode;
+    /** Default: `EVENTS_SIGNATURE` o `off`. */
+    signatureMode?: EventsSignatureMode;
+    signer?: EventSigner;
+    verifier?: EventVerifier;
+    /** Default: `EVENTS_NATS_URL` o `NATS_URL`. */
+    natsUrl?: string;
+    /** Opzioni di connessione aggiuntive (`@nats-io/transport-node`); di serie `NATS_NKEY_SEED` → autenticazione nkey. */
+    connection?: Record<string, unknown>;
+    /** Se creare lo stream del servizio all'avvio (default true). */
+    createStream?: boolean;
+    /** Repliche dello stream (default 3; 1 in sviluppo). Env `EVENTS_STREAM_REPLICAS`. */
+    streamReplicas?: number;
+    /**
+     * Tetto in byte dello stream (default 5 GiB). JetStream lo **riserva** sul `max_file_store` del server alla creazione: con un NATS
+     * piccolo (sviluppo, staging, CI) due stream da 5 GiB possono non starci e l'avvio degli eventi resta a riprovare. Env `EVENTS_STREAM_MAX_BYTES`.
+     */
+    streamMaxBytes?: number;
+    /** Attese fra le consegne: default 10s, 1m, 5m, 30m, 2h, 6h, 12h (8 consegne). */
+    retryScheduleMs?: number[];
+    /** Intervallo del relay (default 500 ms). */
+    relayIntervalMs?: number;
+    /** Durata di ogni attesa del consumer prima di ricontrollare lo stop (default 5000 ms, minimo 1000 imposto da JetStream). */
+    pollMs?: number;
+    /** Righe dell'outbox per giro (default 100). */
+    relayBatchSize?: number;
+    /** Giorni di conservazione delle righe pubblicate (default 7) e dell'inbox (default 30). */
+    outboxRetentionDays?: number;
+    inboxRetentionDays?: number;
+    /** Per leggere il `traceparent` corrente al momento di `enqueue` (lo fornisce `@generazioneai/telemetry`). */
+    traceparent?: () => string | undefined;
+}
+export declare const DEFAULT_RETRY_SCHEDULE_MS: number[];
+export interface ResolvedEventsOptions extends Required<Pick<EventsModuleOptions, 'service' | 'stream' | 'mode' | 'signatureMode' | 'createStream' | 'streamReplicas' | 'streamMaxBytes' | 'retryScheduleMs' | 'relayIntervalMs' | 'relayBatchSize' | 'pollMs' | 'outboxRetentionDays' | 'inboxRetentionDays'>> {
+    natsUrl?: string;
+    signer?: EventSigner;
+    verifier?: EventVerifier;
+    connection?: Record<string, unknown>;
+    traceparent?: () => string | undefined;
+}
+export declare function resolveOptions(o: EventsModuleOptions, env?: NodeJS.ProcessEnv): ResolvedEventsOptions;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,CAAC,EAAE,CAAC,CAAC;IACL,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,IAAI,EAAE,CAAC,CAAC;CACT;AAED,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAExG,6GAA6G;AAC7G,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,GAAG,IAAI,CAAC;AACjD,uIAAuI;AACvI,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE/D,oHAAoH;AACpH,MAAM,WAAW,QAAQ;IACvB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,eAAe,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC3E;AAED,8HAA8H;AAC9H,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C,YAAY,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACjH;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AACD,gJAAgJ;AAChJ,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE3E,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;CAC3C;AACD,mIAAmI;AACnI,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEtG,MAAM,WAAW,cAAc;IAC7B,2GAA2G;IAC3G,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,aAAa,CAAC;IACvB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qHAAqH;IACrH,MAAM,EAAE,OAAO,CAAC;IAChB,sCAAsC;IACtC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sHAAsH;IACtH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,iEAAiE;IACjE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6HAA6H;IAC7H,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4FAA4F;IAC5F,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8GAA8G;IAC9G,WAAW,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,eAAO,MAAM,yBAAyB,UAA0E,CAAC;AAEjH,MAAM,WAAW,qBACf,SAAQ,QAAQ,CACd,IAAI,CACF,mBAAmB,EACjB,SAAS,GACT,QAAQ,GACR,MAAM,GACN,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,QAAQ,GACR,qBAAqB,GACrB,oBAAoB,CACvB,CACF;IACD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,qBAAqB,CAyBlH"}

package/dist/types.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_RETRY_SCHEDULE_MS = void 0;
+exports.resolveOptions = resolveOptions;
+exports.DEFAULT_RETRY_SCHEDULE_MS = [10_000, 60_000, 300_000, 1_800_000, 7_200_000, 21_600_000, 43_200_000];
+function resolveOptions(o, env = process.env) {
+    const mode = (o.mode ?? env.EVENTS_MODE ?? 'off');
+    const sig = (o.signatureMode ?? env.EVENTS_SIGNATURE ?? 'off');
+    if (!['off', 'outbox', 'on'].includes(mode))
+        throw new Error(`EVENTS_MODE non valido: ${mode}`);
+    if (!['off', 'shadow', 'enforce'].includes(sig))
+        throw new Error(`EVENTS_SIGNATURE non valido: ${sig}`);
+    return {
+        service: o.service,
+        stream: o.stream ?? `EVT_${o.service.toUpperCase()}`,
+        mode,
+        signatureMode: sig,
+        createStream: o.createStream ?? true,
+        streamReplicas: o.streamReplicas ?? (env.EVENTS_STREAM_REPLICAS ? Number(env.EVENTS_STREAM_REPLICAS) : 3),
+        streamMaxBytes: o.streamMaxBytes ?? (env.EVENTS_STREAM_MAX_BYTES ? Number(env.EVENTS_STREAM_MAX_BYTES) : 5 * 1024 ** 3),
+        retryScheduleMs: o.retryScheduleMs ?? exports.DEFAULT_RETRY_SCHEDULE_MS,
+        relayIntervalMs: o.relayIntervalMs ?? 500,
+        relayBatchSize: o.relayBatchSize ?? 100,
+        pollMs: o.pollMs ?? 5_000,
+        outboxRetentionDays: o.outboxRetentionDays ?? 7,
+        inboxRetentionDays: o.inboxRetentionDays ?? 30,
+        natsUrl: o.natsUrl ?? env.EVENTS_NATS_URL ?? env.NATS_URL,
+        signer: o.signer,
+        verifier: o.verifier,
+        connection: o.connection,
+        traceparent: o.traceparent,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AA0IA,wCAyBC;AArDY,QAAA,yBAAyB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AA4BjH,SAAgB,cAAc,CAAC,CAAsB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACzF,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAK,GAAG,CAAC,WAA0B,IAAI,KAAK,CAAe,CAAC;IAChF,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,IAAK,GAAG,CAAC,gBAAwC,IAAI,KAAK,CAAwB,CAAC;IAC/G,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACxG,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE;QACpD,IAAI;QACJ,aAAa,EAAE,GAAG;QAClB,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;QACpC,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACvH,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,iCAAyB;QAC/D,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,GAAG;QACzC,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,GAAG;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK;QACzB,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,CAAC;QAC/C,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,EAAE;QAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,QAAQ;QACzD,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC;AACJ,CAAC"}

package/dist/uuid.d.ts

@@ -0,0 +1,7 @@
+/**
+ * UUID v7 (RFC 9562): 48 bit di millisecondi + 12 bit di contatore monotono nello stesso millisecondo + 62 bit casuali.
+ * Gli id si ordinano come testo nell'ordine in cui sono stati generati (da questo processo).
+ */
+export declare function uuidv7(now?: number): string;
+export declare const UUID_RE: RegExp;
+//# sourceMappingURL=uuid.d.ts.map

package/dist/uuid.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.d.ts","sourceRoot":"","sources":["../src/uuid.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,wBAAgB,MAAM,CAAC,GAAG,GAAE,MAAmB,GAAG,MAAM,CAgBvD;AAED,eAAO,MAAM,OAAO,QAAoE,CAAC"}

package/dist/uuid.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UUID_RE = void 0;
+exports.uuidv7 = uuidv7;
+const crypto_1 = require("crypto");
+let lastMs = 0;
+let seq = 0;
+/**
+ * UUID v7 (RFC 9562): 48 bit di millisecondi + 12 bit di contatore monotono nello stesso millisecondo + 62 bit casuali.
+ * Gli id si ordinano come testo nell'ordine in cui sono stati generati (da questo processo).
+ */
+function uuidv7(now = Date.now()) {
+    if (now <= lastMs) {
+        now = lastMs;
+        seq = (seq + 1) & 0xfff;
+        if (seq === 0)
+            now = ++lastMs; // contatore esaurito: avanza il millisecondo
+    }
+    else {
+        seq = (0, crypto_1.randomBytes)(2).readUInt16BE(0) & 0x1ff; // parte bassa, lascia spazio al contatore
+    }
+    lastMs = now;
+    const b = (0, crypto_1.randomBytes)(16);
+    b.writeUIntBE(now, 0, 6);
+    b[6] = 0x70 | ((seq >> 8) & 0x0f);
+    b[7] = seq & 0xff;
+    b[8] = (b[8] & 0x3f) | 0x80;
+    const h = b.toString('hex');
+    return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}`;
+}
+exports.UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+//# sourceMappingURL=uuid.js.map

package/dist/uuid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uuid.js","sourceRoot":"","sources":["../src/uuid.ts"],"names":[],"mappings":";;;AASA,wBAgBC;AAzBD,mCAAqC;AAErC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,GAAG,GAAG,CAAC,CAAC;AAEZ;;;GAGG;AACH,SAAgB,MAAM,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7C,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,CAAC;QACb,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;QACxB,IAAI,GAAG,KAAK,CAAC;YAAE,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,6CAA6C;IAC9E,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC1F,CAAC;IACD,MAAM,GAAG,GAAG,CAAC;IACb,MAAM,CAAC,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAEY,QAAA,OAAO,GAAG,iEAAiE,CAAC"}

package/package.json

@@ -1,8 +1,70 @@
 {
   "name": "@generazioneai/events",
-  "version": "0.0.1",
-  "description": "Segnaposto: il pacchetto vero arriva con la 0.1.0 dal repo GenerazioneAI-SRL/authz.",
+  "version": "0.1.1",
+  "description": "Eventi durevoli fra i servizi (ADR-009): outbox transazionale, relay su NATS JetStream, consumer durevoli con inbox idempotente, riprove con attesa crescente e dead letter comune.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "sql",
+    "prisma",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/GenerazioneAI-SRL/authz.git",
+    "directory": "packages/events"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "npm run clean && tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "test": "jest --maxWorkers=2",
+    "typecheck": "tsc -p tsconfig.spec.json",
+    "test:prepare": "prisma generate --config test/prisma/prisma.config.ts"
+  },
+  "dependencies": {
+    "@opentelemetry/api": "~1.9.0",
+    "@nats-io/jetstream": "^3.4.0",
+    "@nats-io/transport-node": "^3.4.0"
+  },
+  "peerDependencies": {
+    "@generazioneai/authz": "^0.7.0",
+    "@nestjs/common": "^11.0.0 || ^12.0.0",
+    "@nestjs/core": "^11.0.0 || ^12.0.0",
+    "reflect-metadata": "^0.2.0"
+  },
+  "peerDependenciesMeta": {
+    "@generazioneai/authz": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@nestjs/common": "^11.2.7",
+    "@nestjs/core": "^11.2.7",
+    "@nestjs/testing": "^11.2.7",
+    "@prisma/adapter-pg": "^7.8.0",
+    "@prisma/client": "^7.8.0",
+    "@types/node": "^22.0.0",
+    "@types/pg": "^8.15.0",
+    "pg": "^8.16.0",
+    "prisma": "^7.8.0",
+    "rxjs": "^7.8.1",
+    "typescript": "^5.1.3"
+  },
+  "keywords": [
+    "jetstream",
+    "nats",
+    "outbox",
+    "events"
+  ],
   "license": "UNLICENSED",
-  "repository": { "type": "git", "url": "git+https://github.com/GenerazioneAI-SRL/authz.git", "directory": "packages/events" },
-  "files": ["README.md"]
+  "homepage": "https://github.com/GenerazioneAI-SRL/authz/tree/main/packages/events#readme"
 }

package/prisma/events.prisma

@@ -0,0 +1,30 @@
+// @generazioneai/events 0.1.0 — da copiare nello schema del servizio (con prismaSchemaFolder: prisma/schema/events.prisma).
+// Poi `prisma migrate dev --name events_outbox` (o l'SQL di sql/001-events-outbox-inbox.sql nel registro, per HR).
+// I nomi delle tabelle e delle colonne sono quelli che la libreria usa nelle sue query: non cambiarli.
+model OutboxEvent {
+  id               String    @id @db.Uuid // UUID v7: ordinato nel tempo
+  subject          String // evt.id.employment.changed
+  aggregateType    String
+  aggregateId      String
+  aggregateVersion Int
+  juridicalId      String? // l'azienda, anche in Gen-Tenant
+  payload          Json // `data` della busta: solo id e stati
+  headers          Json? // { occurredAt, traceparent? }
+  createdAt        DateTime  @default(now())
+  publishedAt      DateTime?
+  attempts         Int       @default(0)
+  lastError        String?
+
+  @@index([publishedAt, id])
+  @@map("outbox_events")
+}
+
+model InboxProcessed {
+  consumer    String
+  eventId     String   @db.Uuid
+  processedAt DateTime @default(now())
+
+  @@id([consumer, eventId])
+  @@index([processedAt])
+  @@map("inbox_processed")
+}

package/sql/001-events-outbox-inbox-rientro.sql

@@ -0,0 +1,3 @@
+-- Rientro di 001-events-outbox-inbox.sql: perde gli eventi non ancora pubblicati e l'inbox. Solo con EVENTS_MODE=off.
+DROP TABLE IF EXISTS "inbox_processed";
+DROP TABLE IF EXISTS "outbox_events";

package/sql/001-events-outbox-inbox.sql

@@ -0,0 +1,28 @@
+-- @generazioneai/events 0.1.0: outbox e inbox. Solo aggiunte; il rientro è 001-events-outbox-inbox-rientro.sql.
+-- Equivalente SQL di prisma/events.prisma (stesse colonne e tipi di quelli che Prisma 7 genera): copiare nella migrazione
+-- del servizio (Prisma: `prisma migrate`; HR: nel registro SQL con `-- db:` e il suo -rientro).
+CREATE TABLE IF NOT EXISTS "outbox_events" (
+  "id"               UUID         NOT NULL,
+  "subject"          TEXT         NOT NULL,
+  "aggregateType"    TEXT         NOT NULL,
+  "aggregateId"      TEXT         NOT NULL,
+  "aggregateVersion" INTEGER      NOT NULL,
+  "juridicalId"      TEXT,
+  "payload"          JSONB        NOT NULL,
+  "headers"          JSONB,
+  "createdAt"        TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  "publishedAt"      TIMESTAMP(3),
+  "attempts"         INTEGER      NOT NULL DEFAULT 0,
+  "lastError"        TEXT,
+  CONSTRAINT "outbox_events_pkey" PRIMARY KEY ("id")
+);
+-- il relay legge solo le righe non pubblicate, in ordine di id (UUID v7 = ordine di scrittura)
+CREATE INDEX IF NOT EXISTS "outbox_events_publishedAt_id_idx" ON "outbox_events" ("publishedAt", "id");
+
+CREATE TABLE IF NOT EXISTS "inbox_processed" (
+  "consumer"    TEXT         NOT NULL,
+  "eventId"     UUID         NOT NULL,
+  "processedAt" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  CONSTRAINT "inbox_processed_pkey" PRIMARY KEY ("consumer", "eventId")
+);
+CREATE INDEX IF NOT EXISTS "inbox_processed_processedAt_idx" ON "inbox_processed" ("processedAt");