@headless-lms/adapter-defaults 0.2.0 → 0.3.0

package/dist/logging/index.js

@@ -22,12 +22,23 @@ var PinoLogger = class PinoLogger {
 		return new PinoLogger(this.instance.child(bindings));
 	}
 };
+/** The HTTP access-log shape: the route pattern, never the raw path or query (tokens live there). */
+function requestSerializer(req) {
+	return {
+		method: req.method,
+		route: req.routeOptions?.url,
+		remoteAddress: req.ip
+	};
+}
 /** The process-wide root: JSON lines, Error serialization under `err`.
 *  `destination` exists for tests; omitted → stdout. */
 function createRootLogger(level, destination) {
 	const instance = pino({
 		level,
-		serializers: { err: stdSerializers.err },
+		serializers: {
+			err: stdSerializers.err,
+			req: requestSerializer
+		},
 		mixin: () => requestLogContext.current()
 	}, destination);
 	return {

package/dist/logging/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/logging/index.ts"],"sourcesContent":["// Logging adapter — implements the core Logger port over pino. One root\n// instance per process: the container creates it, Fastify reuses it via\n// `loggerInstance`, and every component gets a child bound with { name }.\nimport { pino, stdSerializers, type DestinationStream, type Logger as PinoInstance } from \"pino\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { requestLogContext } from \"./request-context.js\";\n\nexport { requestLogContext, type RequestLogContext } from \"./request-context.js\";\nexport type { PinoInstance };\n\nexport type LogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\nexport class PinoLogger implements Logger {\n  constructor(private readonly instance: PinoInstance) {}\n\n  debug(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.debug(meta ?? {}, msg);\n  }\n  info(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.info(meta ?? {}, msg);\n  }\n  warn(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.warn(meta ?? {}, msg);\n  }\n  error(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.error(meta ?? {}, msg);\n  }\n  child(bindings: Record<string, unknown>): Logger {\n    return new PinoLogger(this.instance.child(bindings));\n  }\n}\n\n/** The process-wide root: JSON lines, Error serialization under `err`.\n *  `destination` exists for tests; omitted → stdout. */\nexport function createRootLogger(\n  level: LogLevel,\n  destination?: DestinationStream,\n): { instance: PinoInstance; logger: Logger } {\n  const instance = pino(\n    {\n      level,\n      serializers: { err: stdSerializers.err },\n      // Ambient request correlation (reqId/orgId); call-site meta wins on clash.\n      mixin: () => requestLogContext.current(),\n    },\n    destination,\n  );\n  return { instance, logger: new PinoLogger(instance) };\n}\n"],"mappings":";;;AAYA,IAAa,aAAb,MAAa,WAA6B;CACX;CAA7B,YAAY,UAAyC;EAAxB,KAAA,WAAA;CAAyB;CAEtD,MAAM,KAAa,MAAsC;EACvD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,GAAG;CACrC;CACA,KAAK,KAAa,MAAsC;EACtD,KAAK,SAAS,KAAK,QAAQ,CAAC,GAAG,GAAG;CACpC;CACA,KAAK,KAAa,MAAsC;EACtD,KAAK,SAAS,KAAK,QAAQ,CAAC,GAAG,GAAG;CACpC;CACA,MAAM,KAAa,MAAsC;EACvD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,GAAG;CACrC;CACA,MAAM,UAA2C;EAC/C,OAAO,IAAI,WAAW,KAAK,SAAS,MAAM,QAAQ,CAAC;CACrD;AACF;;;AAIA,SAAgB,iBACd,OACA,aAC4C;CAC5C,MAAM,WAAW,KACf;EACE;EACA,aAAa,EAAE,KAAK,eAAe,IAAI;EAEvC,aAAa,kBAAkB,QAAQ;CACzC,GACA,WACF;CACA,OAAO;EAAE;EAAU,QAAQ,IAAI,WAAW,QAAQ;CAAE;AACtD"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/logging/index.ts"],"sourcesContent":["// Logging adapter — implements the core Logger port over pino. One root\n// instance per process: the container creates it, Fastify reuses it via\n// `loggerInstance`, and every component gets a child bound with { name }.\nimport { pino, stdSerializers, type DestinationStream, type Logger as PinoInstance } from \"pino\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { requestLogContext } from \"./request-context.js\";\n\nexport { requestLogContext, type RequestLogContext } from \"./request-context.js\";\nexport type { PinoInstance };\n\nexport type LogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\nexport class PinoLogger implements Logger {\n  constructor(private readonly instance: PinoInstance) {}\n\n  debug(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.debug(meta ?? {}, msg);\n  }\n  info(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.info(meta ?? {}, msg);\n  }\n  warn(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.warn(meta ?? {}, msg);\n  }\n  error(msg: string, meta?: Record<string, unknown>): void {\n    this.instance.error(meta ?? {}, msg);\n  }\n  child(bindings: Record<string, unknown>): Logger {\n    return new PinoLogger(this.instance.child(bindings));\n  }\n}\n\ninterface LoggedRequest {\n  method?: string;\n  ip?: string;\n  routeOptions?: { url?: string };\n}\n\n/** The HTTP access-log shape: the route pattern, never the raw path or query (tokens live there). */\nfunction requestSerializer(req: LoggedRequest): Record<string, unknown> {\n  return { method: req.method, route: req.routeOptions?.url, remoteAddress: req.ip };\n}\n\n/** The process-wide root: JSON lines, Error serialization under `err`.\n *  `destination` exists for tests; omitted → stdout. */\nexport function createRootLogger(\n  level: LogLevel,\n  destination?: DestinationStream,\n): { instance: PinoInstance; logger: Logger } {\n  const instance = pino(\n    {\n      level,\n      serializers: { err: stdSerializers.err, req: requestSerializer },\n      // Ambient request correlation (reqId/orgId); call-site meta wins on clash.\n      mixin: () => requestLogContext.current(),\n    },\n    destination,\n  );\n  return { instance, logger: new PinoLogger(instance) };\n}\n"],"mappings":";;;AAYA,IAAa,aAAb,MAAa,WAA6B;CACX;CAA7B,YAAY,UAAyC;EAAxB,KAAA,WAAA;CAAyB;CAEtD,MAAM,KAAa,MAAsC;EACvD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,GAAG;CACrC;CACA,KAAK,KAAa,MAAsC;EACtD,KAAK,SAAS,KAAK,QAAQ,CAAC,GAAG,GAAG;CACpC;CACA,KAAK,KAAa,MAAsC;EACtD,KAAK,SAAS,KAAK,QAAQ,CAAC,GAAG,GAAG;CACpC;CACA,MAAM,KAAa,MAAsC;EACvD,KAAK,SAAS,MAAM,QAAQ,CAAC,GAAG,GAAG;CACrC;CACA,MAAM,UAA2C;EAC/C,OAAO,IAAI,WAAW,KAAK,SAAS,MAAM,QAAQ,CAAC;CACrD;AACF;;AASA,SAAS,kBAAkB,KAA6C;CACtE,OAAO;EAAE,QAAQ,IAAI;EAAQ,OAAO,IAAI,cAAc;EAAK,eAAe,IAAI;CAAG;AACnF;;;AAIA,SAAgB,iBACd,OACA,aAC4C;CAC5C,MAAM,WAAW,KACf;EACE;EACA,aAAa;GAAE,KAAK,eAAe;GAAK,KAAK;EAAkB;EAE/D,aAAa,kBAAkB,QAAQ;CACzC,GACA,WACF;CACA,OAAO;EAAE;EAAU,QAAQ,IAAI,WAAW,QAAQ;CAAE;AACtD"}

package/dist/storage/index.d.ts

@@ -2,6 +2,7 @@ import { Logger, ObjectStorage, PresignDownloadInput, PresignedUpload, StoredObj
 //#region src/storage/index.d.ts
 declare class StorageAdapter implements ObjectStorage {
   private readonly logger;
+  readonly uploadExpirySeconds = 0;
   constructor(logger?: Logger);
   presignUpload(_input: {
     key: string;
@@ -10,6 +11,11 @@ declare class StorageAdapter implements ObjectStorage {
   }): Promise<PresignedUpload>;
   presignDownload(_input: PresignDownloadInput): Promise<string>;
   stat(_key: string): Promise<StoredObjectInfo | null>;
+  list(_prefix: string): Promise<StoredObjectInfo[]>;
+  copy(_input: {
+    from: string;
+    to: string;
+  }): Promise<void>;
   remove(_key: string): Promise<void>;
   private fail;
 }

package/dist/storage/index.js

@@ -2,6 +2,7 @@ import { noopLogger } from "@headless-lms/core/shared/logger";
 //#region src/storage/index.ts
 var StorageAdapter = class {
 	logger;
+	uploadExpirySeconds = 0;
 	constructor(logger = noopLogger) {
 		this.logger = logger;
 	}
@@ -14,6 +15,12 @@ var StorageAdapter = class {
 	async stat(_key) {
 		return this.fail("stat");
 	}
+	async list(_prefix) {
+		return [];
+	}
+	async copy(_input) {
+		return this.fail("copy");
+	}
 	async remove(_key) {
 		return this.fail("remove");
 	}

package/dist/storage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/storage/index.ts"],"sourcesContent":["// Default when no ObjectStorage is injected — boots, fails loudly on use.\nimport type {\n  Logger,\n  ObjectStorage,\n  PresignDownloadInput,\n  PresignedUpload,\n  StoredObjectInfo,\n} from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\n\nexport class StorageAdapter implements ObjectStorage {\n  constructor(private readonly logger: Logger = noopLogger) {}\n\n  async presignUpload(_input: {\n    key: string;\n    contentType?: string;\n    expiresInSeconds?: number;\n  }): Promise<PresignedUpload> {\n    return this.fail(\"presignUpload\");\n  }\n\n  async presignDownload(_input: PresignDownloadInput): Promise<string> {\n    return this.fail(\"presignDownload\");\n  }\n\n  async stat(_key: string): Promise<StoredObjectInfo | null> {\n    return this.fail(\"stat\");\n  }\n\n  async remove(_key: string): Promise<void> {\n    return this.fail(\"remove\");\n  }\n\n  private fail(op: string): never {\n    this.logger.error(`storage ${op} failed: no storage adapter configured`);\n    throw new Error(\"not implemented\");\n  }\n}\n"],"mappings":";;AAUA,IAAa,iBAAb,MAAqD;CACtB;CAA7B,YAAY,SAAkC,YAAY;EAA7B,KAAA,SAAA;CAA8B;CAE3D,MAAM,cAAc,QAIS;EAC3B,OAAO,KAAK,KAAK,eAAe;CAClC;CAEA,MAAM,gBAAgB,QAA+C;EACnE,OAAO,KAAK,KAAK,iBAAiB;CACpC;CAEA,MAAM,KAAK,MAAgD;EACzD,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,MAAM,OAAO,MAA6B;EACxC,OAAO,KAAK,KAAK,QAAQ;CAC3B;CAEA,KAAa,IAAmB;EAC9B,KAAK,OAAO,MAAM,WAAW,GAAG,uCAAuC;EACvE,MAAM,IAAI,MAAM,iBAAiB;CACnC;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/storage/index.ts"],"sourcesContent":["// Default when no ObjectStorage is injected — boots, fails loudly on use.\nimport type {\n  Logger,\n  ObjectStorage,\n  PresignDownloadInput,\n  PresignedUpload,\n  StoredObjectInfo,\n} from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\n\nexport class StorageAdapter implements ObjectStorage {\n  readonly uploadExpirySeconds = 0;\n\n  constructor(private readonly logger: Logger = noopLogger) {}\n\n  async presignUpload(_input: {\n    key: string;\n    contentType?: string;\n    expiresInSeconds?: number;\n  }): Promise<PresignedUpload> {\n    return this.fail(\"presignUpload\");\n  }\n\n  async presignDownload(_input: PresignDownloadInput): Promise<string> {\n    return this.fail(\"presignDownload\");\n  }\n\n  async stat(_key: string): Promise<StoredObjectInfo | null> {\n    return this.fail(\"stat\");\n  }\n\n  async list(_prefix: string): Promise<StoredObjectInfo[]> {\n    return [];\n  }\n\n  async copy(_input: { from: string; to: string }): Promise<void> {\n    return this.fail(\"copy\");\n  }\n\n  async remove(_key: string): Promise<void> {\n    return this.fail(\"remove\");\n  }\n\n  private fail(op: string): never {\n    this.logger.error(`storage ${op} failed: no storage adapter configured`);\n    throw new Error(\"not implemented\");\n  }\n}\n"],"mappings":";;AAUA,IAAa,iBAAb,MAAqD;CAGtB;CAF7B,sBAA+B;CAE/B,YAAY,SAAkC,YAAY;EAA7B,KAAA,SAAA;CAA8B;CAE3D,MAAM,cAAc,QAIS;EAC3B,OAAO,KAAK,KAAK,eAAe;CAClC;CAEA,MAAM,gBAAgB,QAA+C;EACnE,OAAO,KAAK,KAAK,iBAAiB;CACpC;CAEA,MAAM,KAAK,MAAgD;EACzD,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,MAAM,KAAK,SAA8C;EACvD,OAAO,CAAC;CACV;CAEA,MAAM,KAAK,QAAqD;EAC9D,OAAO,KAAK,KAAK,MAAM;CACzB;CAEA,MAAM,OAAO,MAA6B;EACxC,OAAO,KAAK,KAAK,QAAQ;CAC3B;CAEA,KAAa,IAAmB;EAC9B,KAAK,OAAO,MAAM,WAAW,GAAG,uCAAuC;EACvE,MAAM,IAAI,MAAM,iBAAiB;CACnC;AACF"}

package/dist/webhooks/index.d.ts

@@ -1,10 +1,23 @@
 import { WebhookRequest, WebhookResponse, WebhookSender } from "@headless-lms/core/types";
 //#region src/webhooks/index.d.ts
+interface FetchWebhookSenderOptions {
+  timeoutMs?: number;
+  /** Deliver to loopback and private network addresses too. Local development and testing only. */
+  allowPrivateNetwork?: boolean;
+}
+declare class WebhookAddressRefusedError extends Error {
+  readonly host: string;
+  readonly address: string;
+  constructor(host: string, address: string);
+}
+/** POSTs each delivery to the address its host resolved to once, so DNS can't swap it after the check. */
 declare class FetchWebhookSender implements WebhookSender {
   private readonly timeoutMs;
-  constructor(timeoutMs?: number);
+  private readonly allowPrivateNetwork;
+  constructor(options?: FetchWebhookSenderOptions);
   send(request: WebhookRequest): Promise<WebhookResponse>;
+  private resolve;
 }
 //#endregion
-export { FetchWebhookSender };
+export { FetchWebhookSender, FetchWebhookSenderOptions, WebhookAddressRefusedError };
 //# sourceMappingURL=index.d.ts.map

package/dist/webhooks/index.js

@@ -1,23 +1,79 @@
+import { lookup } from "node:dns/promises";
+import { request } from "node:http";
+import { request as request$1 } from "node:https";
+import { isIP } from "node:net";
+import { isPublicIp } from "@headless-lms/core/shared/network";
 //#region src/webhooks/index.ts
 const DEFAULT_TIMEOUT_MS = 1e4;
+var WebhookAddressRefusedError = class extends Error {
+	host;
+	address;
+	constructor(host, address) {
+		super(`webhook host "${host}" resolves to ${address}, which is not a public address`);
+		this.host = host;
+		this.address = address;
+		this.name = "WebhookAddressRefusedError";
+	}
+};
+/** POSTs each delivery to the address its host resolved to once, so DNS can't swap it after the check. */
 var FetchWebhookSender = class {
 	timeoutMs;
-	constructor(timeoutMs = DEFAULT_TIMEOUT_MS) {
-		this.timeoutMs = timeoutMs;
+	allowPrivateNetwork;
+	constructor(options = {}) {
+		this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+		this.allowPrivateNetwork = options.allowPrivateNetwork ?? false;
 	}
 	async send(request) {
-		const response = await fetch(request.url, {
-			method: "POST",
-			headers: request.headers,
-			body: request.body,
-			redirect: "manual",
-			signal: AbortSignal.timeout(this.timeoutMs)
-		});
-		await response.body?.cancel();
-		return { status: response.status };
+		const url = new URL(request.url);
+		if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error(`webhook URL protocol "${url.protocol}" is not supported`);
+		const signal = AbortSignal.timeout(this.timeoutMs);
+		const addresses = await this.resolve(url.hostname.replace(/^\[(.*)\]$/, "$1"));
+		signal.throwIfAborted();
+		return post(url, request, addresses, signal);
+	}
+	async resolve(host) {
+		const family = isIP(host);
+		const addresses = family === 0 ? await lookup(host, {
+			all: true,
+			verbatim: true
+		}) : [{
+			address: host,
+			family
+		}];
+		if (addresses.length === 0) throw new Error(`webhook host "${host}" did not resolve`);
+		if (!this.allowPrivateNetwork) {
+			const refused = addresses.find(({ address }) => !isPublicIp(address));
+			if (refused) throw new WebhookAddressRefusedError(host, refused.address);
+		}
+		return addresses;
 	}
 };
+function post(url, request$2, addresses, signal) {
+	const pinned = (_hostname, options, callback) => {
+		const [first] = addresses;
+		if (options.all) callback(null, addresses);
+		else callback(null, first.address, first.family);
+	};
+	const options = {
+		method: "POST",
+		headers: {
+			...request$2.headers,
+			"content-length": Buffer.byteLength(request$2.body)
+		},
+		lookup: pinned,
+		signal
+	};
+	const send = url.protocol === "https:" ? request$1 : request;
+	return new Promise((resolve, reject) => {
+		const req = send(url, options, (res) => {
+			resolve({ status: res.statusCode ?? 0 });
+			res.destroy();
+		});
+		req.on("error", reject);
+		req.end(request$2.body);
+	});
+}
 //#endregion
-export { FetchWebhookSender };
+export { FetchWebhookSender, WebhookAddressRefusedError };
 
 //# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/webhooks/index.ts"],"sourcesContent":["import type { WebhookRequest, WebhookResponse, WebhookSender } from \"@headless-lms/core/types\";\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\n\nexport class FetchWebhookSender implements WebhookSender {\n  constructor(private readonly timeoutMs: number = DEFAULT_TIMEOUT_MS) {}\n\n  async send(request: WebhookRequest): Promise<WebhookResponse> {\n    const response = await fetch(request.url, {\n      method: \"POST\",\n      headers: request.headers,\n      body: request.body,\n      redirect: \"manual\",\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    await response.body?.cancel();\n    return { status: response.status };\n  }\n}\n"],"mappings":";AAEA,MAAM,qBAAqB;AAE3B,IAAa,qBAAb,MAAyD;CAC1B;CAA7B,YAAY,YAAqC,oBAAoB;EAAxC,KAAA,YAAA;CAAyC;CAEtE,MAAM,KAAK,SAAmD;EAC5D,MAAM,WAAW,MAAM,MAAM,QAAQ,KAAK;GACxC,QAAQ;GACR,SAAS,QAAQ;GACjB,MAAM,QAAQ;GACd,UAAU;GACV,QAAQ,YAAY,QAAQ,KAAK,SAAS;EAC5C,CAAC;EACD,MAAM,SAAS,MAAM,OAAO;EAC5B,OAAO,EAAE,QAAQ,SAAS,OAAO;CACnC;AACF"}
+{"version":3,"file":"index.js","names":["request","httpsRequest","httpRequest"],"sources":["../../src/webhooks/index.ts"],"sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport { request as httpRequest, type RequestOptions } from \"node:http\";\nimport { request as httpsRequest } from \"node:https\";\nimport { isIP, type LookupFunction } from \"node:net\";\nimport { isPublicIp } from \"@headless-lms/core/shared/network\";\nimport type { WebhookRequest, WebhookResponse, WebhookSender } from \"@headless-lms/core/types\";\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\n\nexport interface FetchWebhookSenderOptions {\n  timeoutMs?: number;\n  /** Deliver to loopback and private network addresses too. Local development and testing only. */\n  allowPrivateNetwork?: boolean;\n}\n\ninterface ResolvedAddress {\n  address: string;\n  family: number;\n}\n\nexport class WebhookAddressRefusedError extends Error {\n  constructor(\n    readonly host: string,\n    readonly address: string,\n  ) {\n    super(`webhook host \"${host}\" resolves to ${address}, which is not a public address`);\n    this.name = \"WebhookAddressRefusedError\";\n  }\n}\n\n/** POSTs each delivery to the address its host resolved to once, so DNS can't swap it after the check. */\nexport class FetchWebhookSender implements WebhookSender {\n  private readonly timeoutMs: number;\n  private readonly allowPrivateNetwork: boolean;\n\n  constructor(options: FetchWebhookSenderOptions = {}) {\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.allowPrivateNetwork = options.allowPrivateNetwork ?? false;\n  }\n\n  async send(request: WebhookRequest): Promise<WebhookResponse> {\n    const url = new URL(request.url);\n    if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n      throw new Error(`webhook URL protocol \"${url.protocol}\" is not supported`);\n    }\n    const signal = AbortSignal.timeout(this.timeoutMs);\n    const addresses = await this.resolve(url.hostname.replace(/^\\[(.*)\\]$/, \"$1\"));\n    signal.throwIfAborted();\n    return post(url, request, addresses, signal);\n  }\n\n  private async resolve(host: string): Promise<ResolvedAddress[]> {\n    const family = isIP(host);\n    const addresses =\n      family === 0\n        ? await lookup(host, { all: true, verbatim: true })\n        : [{ address: host, family }];\n    if (addresses.length === 0) {\n      throw new Error(`webhook host \"${host}\" did not resolve`);\n    }\n    if (!this.allowPrivateNetwork) {\n      const refused = addresses.find(({ address }) => !isPublicIp(address));\n      if (refused) {\n        throw new WebhookAddressRefusedError(host, refused.address);\n      }\n    }\n    return addresses;\n  }\n}\n\nfunction post(\n  url: URL,\n  request: WebhookRequest,\n  addresses: ResolvedAddress[],\n  signal: AbortSignal,\n): Promise<WebhookResponse> {\n  const pinned: LookupFunction = (_hostname, options, callback) => {\n    const [first] = addresses;\n    if (options.all) {\n      callback(null, addresses);\n    } else {\n      callback(null, first!.address, first!.family);\n    }\n  };\n  const options: RequestOptions = {\n    method: \"POST\",\n    headers: { ...request.headers, \"content-length\": Buffer.byteLength(request.body) },\n    lookup: pinned,\n    signal,\n  };\n  const send = url.protocol === \"https:\" ? httpsRequest : httpRequest;\n  return new Promise((resolve, reject) => {\n    const req = send(url, options, (res) => {\n      resolve({ status: res.statusCode ?? 0 });\n      res.destroy();\n    });\n    req.on(\"error\", reject);\n    req.end(request.body);\n  });\n}\n"],"mappings":";;;;;;AAOA,MAAM,qBAAqB;AAa3B,IAAa,6BAAb,cAAgD,MAAM;CAEzC;CACA;CAFX,YACE,MACA,SACA;EACA,MAAM,iBAAiB,KAAK,gBAAgB,QAAQ,gCAAgC;EAH3E,KAAA,OAAA;EACA,KAAA,UAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,qBAAb,MAAyD;CACvD;CACA;CAEA,YAAY,UAAqC,CAAC,GAAG;EACnD,KAAK,YAAY,QAAQ,aAAa;EACtC,KAAK,sBAAsB,QAAQ,uBAAuB;CAC5D;CAEA,MAAM,KAAK,SAAmD;EAC5D,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;EAC/B,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAC/C,MAAM,IAAI,MAAM,yBAAyB,IAAI,SAAS,mBAAmB;EAE3E,MAAM,SAAS,YAAY,QAAQ,KAAK,SAAS;EACjD,MAAM,YAAY,MAAM,KAAK,QAAQ,IAAI,SAAS,QAAQ,cAAc,IAAI,CAAC;EAC7E,OAAO,eAAe;EACtB,OAAO,KAAK,KAAK,SAAS,WAAW,MAAM;CAC7C;CAEA,MAAc,QAAQ,MAA0C;EAC9D,MAAM,SAAS,KAAK,IAAI;EACxB,MAAM,YACJ,WAAW,IACP,MAAM,OAAO,MAAM;GAAE,KAAK;GAAM,UAAU;EAAK,CAAC,IAChD,CAAC;GAAE,SAAS;GAAM;EAAO,CAAC;EAChC,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,MAAM,iBAAiB,KAAK,kBAAkB;EAE1D,IAAI,CAAC,KAAK,qBAAqB;GAC7B,MAAM,UAAU,UAAU,MAAM,EAAE,cAAc,CAAC,WAAW,OAAO,CAAC;GACpE,IAAI,SACF,MAAM,IAAI,2BAA2B,MAAM,QAAQ,OAAO;EAE9D;EACA,OAAO;CACT;AACF;AAEA,SAAS,KACP,KACA,WACA,WACA,QAC0B;CAC1B,MAAM,UAA0B,WAAW,SAAS,aAAa;EAC/D,MAAM,CAAC,SAAS;EAChB,IAAI,QAAQ,KACV,SAAS,MAAM,SAAS;OAExB,SAAS,MAAM,MAAO,SAAS,MAAO,MAAM;CAEhD;CACA,MAAM,UAA0B;EAC9B,QAAQ;EACR,SAAS;GAAE,GAAGA,UAAQ;GAAS,kBAAkB,OAAO,WAAWA,UAAQ,IAAI;EAAE;EACjF,QAAQ;EACR;CACF;CACA,MAAM,OAAO,IAAI,aAAa,WAAWC,YAAeC;CACxD,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,MAAM,KAAK,KAAK,UAAU,QAAQ;GACtC,QAAQ,EAAE,QAAQ,IAAI,cAAc,EAAE,CAAC;GACvC,IAAI,QAAQ;EACd,CAAC;EACD,IAAI,GAAG,SAAS,MAAM;EACtB,IAAI,IAAIF,UAAQ,IAAI;CACtB,CAAC;AACH"}

package/dist/workflows/index.d.ts

@@ -1,12 +1,16 @@
-import { AutomationDispatch, AutomationEngine, AutomationExecutor } from "@headless-lms/core/types";
+import { startScheduleLoop } from "./schedule.js";
+import { AutomationDispatch, AutomationEngine, AutomationExecutor, Logger } from "@headless-lms/core/types";
 //#region src/workflows/index.d.ts
 declare class InlineAutomationEngine implements AutomationEngine {
+  private readonly logger?;
   private executor;
+  private schedule;
+  constructor(logger?: Logger | undefined);
   register(executor: AutomationExecutor): void;
   dispatch(d: AutomationDispatch): Promise<void>;
   start(): Promise<void>;
   stop(): Promise<void>;
 }
 //#endregion
-export { InlineAutomationEngine };
+export { InlineAutomationEngine, startScheduleLoop };
 //# sourceMappingURL=index.d.ts.map

package/dist/workflows/index.js

@@ -1,6 +1,13 @@
+import { startScheduleLoop } from "./schedule.js";
+import { ActionFailedError, actionFailureMessage } from "@headless-lms/core/automations";
 //#region src/workflows/index.ts
 var InlineAutomationEngine = class {
+	logger;
 	executor;
+	schedule;
+	constructor(logger) {
+		this.logger = logger;
+	}
 	register(executor) {
 		this.executor = executor;
 	}
@@ -11,21 +18,33 @@ var InlineAutomationEngine = class {
 		for (let index = 0; index < d.actions.length; index++) try {
 			results.push(await executor.runAction(d, index));
 		} catch (err) {
-			const message = err?.message ?? err;
+			if (!(err instanceof ActionFailedError)) this.logger?.error("automation action failed", {
+				orgId: d.orgId,
+				automationId: d.automationId,
+				runId: d.runId,
+				index,
+				err
+			});
 			results.push({
 				index,
 				type: d.actions[index].type,
 				status: "failed",
-				error: String(message)
+				error: actionFailureMessage(err)
 			});
 			break;
 		}
 		await executor.finalize(d, results);
 	}
-	async start() {}
-	async stop() {}
+	async start() {
+		this.schedule?.stop();
+		this.schedule = startScheduleLoop(() => this.executor, this.logger);
+	}
+	async stop() {
+		this.schedule?.stop();
+		this.schedule = void 0;
+	}
 };
 //#endregion
-export { InlineAutomationEngine };
+export { InlineAutomationEngine, startScheduleLoop };
 
 //# sourceMappingURL=index.js.map

package/dist/workflows/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/workflows/index.ts"],"sourcesContent":["// Default in-process engine — runs a dispatched automation immediately, one\n// attempt per action; durable engines (Hatchet, …) are installation adapters.\nimport type {\n  AutomationActionResult,\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n} from \"@headless-lms/core/types\";\n\nexport class InlineAutomationEngine implements AutomationEngine {\n  private executor: AutomationExecutor | undefined;\n\n  register(executor: AutomationExecutor): void {\n    this.executor = executor;\n  }\n\n  async dispatch(d: AutomationDispatch): Promise<void> {\n    if (!this.executor) {\n      throw new Error(\"InlineAutomationEngine.dispatch called before register()\");\n    }\n    const executor = this.executor;\n\n    const results: AutomationActionResult[] = [];\n    for (let index = 0; index < d.actions.length; index++) {\n      try {\n        results.push(await executor.runAction(d, index));\n      } catch (err) {\n        const message = (err as { message?: unknown } | undefined)?.message ?? err;\n        results.push({\n          index,\n          type: d.actions[index]!.type,\n          status: \"failed\",\n          error: String(message),\n        });\n        break;\n      }\n    }\n\n    await executor.finalize(d, results);\n  }\n\n  async start(): Promise<void> {}\n\n  async stop(): Promise<void> {}\n}\n"],"mappings":";AASA,IAAa,yBAAb,MAAgE;CAC9D;CAEA,SAAS,UAAoC;EAC3C,KAAK,WAAW;CAClB;CAEA,MAAM,SAAS,GAAsC;EACnD,IAAI,CAAC,KAAK,UACR,MAAM,IAAI,MAAM,0DAA0D;EAE5E,MAAM,WAAW,KAAK;EAEtB,MAAM,UAAoC,CAAC;EAC3C,KAAK,IAAI,QAAQ,GAAG,QAAQ,EAAE,QAAQ,QAAQ,SAC5C,IAAI;GACF,QAAQ,KAAK,MAAM,SAAS,UAAU,GAAG,KAAK,CAAC;EACjD,SAAS,KAAK;GACZ,MAAM,UAAW,KAA2C,WAAW;GACvE,QAAQ,KAAK;IACX;IACA,MAAM,EAAE,QAAQ,MAAM,CAAE;IACxB,QAAQ;IACR,OAAO,OAAO,OAAO;GACvB,CAAC;GACD;EACF;EAGF,MAAM,SAAS,SAAS,GAAG,OAAO;CACpC;CAEA,MAAM,QAAuB,CAAC;CAE9B,MAAM,OAAsB,CAAC;AAC/B"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/workflows/index.ts"],"sourcesContent":["// Default in-process engine — runs a dispatched automation immediately, one\n// attempt per action; durable engines (Hatchet, …) are installation adapters.\nimport type {\n  AutomationActionResult,\n  AutomationDispatch,\n  AutomationEngine,\n  AutomationExecutor,\n  Logger,\n} from \"@headless-lms/core/types\";\nimport { ActionFailedError, actionFailureMessage } from \"@headless-lms/core/automations\";\nimport { startScheduleLoop } from \"./schedule.js\";\n\nexport { startScheduleLoop };\n\nexport class InlineAutomationEngine implements AutomationEngine {\n  private executor: AutomationExecutor | undefined;\n  private schedule: { stop(): void } | undefined;\n\n  constructor(private readonly logger?: Logger) {}\n\n  register(executor: AutomationExecutor): void {\n    this.executor = executor;\n  }\n\n  async dispatch(d: AutomationDispatch): Promise<void> {\n    if (!this.executor) {\n      throw new Error(\"InlineAutomationEngine.dispatch called before register()\");\n    }\n    const executor = this.executor;\n\n    const results: AutomationActionResult[] = [];\n    for (let index = 0; index < d.actions.length; index++) {\n      try {\n        results.push(await executor.runAction(d, index));\n      } catch (err) {\n        if (!(err instanceof ActionFailedError)) {\n          this.logger?.error(\"automation action failed\", {\n            orgId: d.orgId,\n            automationId: d.automationId,\n            runId: d.runId,\n            index,\n            err,\n          });\n        }\n        results.push({\n          index,\n          type: d.actions[index]!.type,\n          status: \"failed\",\n          error: actionFailureMessage(err),\n        });\n        break;\n      }\n    }\n\n    await executor.finalize(d, results);\n  }\n\n  async start(): Promise<void> {\n    this.schedule?.stop();\n    this.schedule = startScheduleLoop(() => this.executor, this.logger);\n  }\n\n  async stop(): Promise<void> {\n    this.schedule?.stop();\n    this.schedule = undefined;\n  }\n}\n"],"mappings":";;;AAcA,IAAa,yBAAb,MAAgE;CAIjC;CAH7B;CACA;CAEA,YAAY,QAAkC;EAAjB,KAAA,SAAA;CAAkB;CAE/C,SAAS,UAAoC;EAC3C,KAAK,WAAW;CAClB;CAEA,MAAM,SAAS,GAAsC;EACnD,IAAI,CAAC,KAAK,UACR,MAAM,IAAI,MAAM,0DAA0D;EAE5E,MAAM,WAAW,KAAK;EAEtB,MAAM,UAAoC,CAAC;EAC3C,KAAK,IAAI,QAAQ,GAAG,QAAQ,EAAE,QAAQ,QAAQ,SAC5C,IAAI;GACF,QAAQ,KAAK,MAAM,SAAS,UAAU,GAAG,KAAK,CAAC;EACjD,SAAS,KAAK;GACZ,IAAI,EAAE,eAAe,oBACnB,KAAK,QAAQ,MAAM,4BAA4B;IAC7C,OAAO,EAAE;IACT,cAAc,EAAE;IAChB,OAAO,EAAE;IACT;IACA;GACF,CAAC;GAEH,QAAQ,KAAK;IACX;IACA,MAAM,EAAE,QAAQ,MAAM,CAAE;IACxB,QAAQ;IACR,OAAO,qBAAqB,GAAG;GACjC,CAAC;GACD;EACF;EAGF,MAAM,SAAS,SAAS,GAAG,OAAO;CACpC;CAEA,MAAM,QAAuB;EAC3B,KAAK,UAAU,KAAK;EACpB,KAAK,WAAW,wBAAwB,KAAK,UAAU,KAAK,MAAM;CACpE;CAEA,MAAM,OAAsB;EAC1B,KAAK,UAAU,KAAK;EACpB,KAAK,WAAW,KAAA;CAClB;AACF"}

package/dist/workflows/schedule.d.ts

@@ -0,0 +1,9 @@
+import { AutomationExecutor, Logger } from "@headless-lms/core/types";
+//#region src/workflows/schedule.d.ts
+declare function fireDueSchedules(executor: AutomationExecutor, now: Date, lastFired: Map<string, number>, logger?: Logger): Promise<boolean>;
+declare function startScheduleLoop(getExecutor: () => AutomationExecutor | undefined, logger?: Logger): {
+  stop(): void;
+};
+//#endregion
+export { fireDueSchedules, startScheduleLoop };
+//# sourceMappingURL=schedule.d.ts.map

package/dist/workflows/schedule.js

@@ -0,0 +1,89 @@
+import { noopLogger } from "@headless-lms/core/shared/logger";
+import { cronMatches } from "@headless-lms/core/automations";
+//#region src/workflows/schedule.ts
+const MINUTE_MS = 6e4;
+function floorUtcMinute(at) {
+	const copy = new Date(at);
+	copy.setUTCSeconds(0, 0);
+	return copy.getTime();
+}
+function scheduleKey(schedule) {
+	return `${schedule.orgId}\0${schedule.automationId}\0${schedule.cron}`;
+}
+async function fireDueSchedules(executor, now, lastFired, logger = noopLogger) {
+	if (!executor.listSchedules || !executor.fireSchedule) return false;
+	const nowMs = floorUtcMinute(now);
+	let schedules = [];
+	try {
+		schedules = await executor.listSchedules();
+	} catch (err) {
+		logger.error("automation schedules not listed", { err });
+		return false;
+	}
+	const seen = /* @__PURE__ */ new Set();
+	for (const schedule of schedules) {
+		const key = scheduleKey(schedule);
+		seen.add(key);
+		const previous = lastFired.get(key);
+		const start = previous == null ? nowMs : previous + MINUTE_MS;
+		for (let minute = start; minute <= nowMs; minute += MINUTE_MS) {
+			const at = new Date(minute);
+			const context = {
+				orgId: schedule.orgId,
+				automationId: schedule.automationId,
+				cron: schedule.cron,
+				at: at.toISOString()
+			};
+			let due;
+			try {
+				due = cronMatches(schedule.cron, at);
+			} catch (err) {
+				logger.error("automation schedule not checked", {
+					...context,
+					err
+				});
+				break;
+			}
+			if (due) try {
+				await executor.fireSchedule(schedule.orgId, schedule.automationId, at);
+			} catch (err) {
+				logger.error("automation schedule not fired", {
+					...context,
+					err
+				});
+				if (!lastFired.has(key)) lastFired.set(key, minute - MINUTE_MS);
+				break;
+			}
+			lastFired.set(key, minute);
+		}
+	}
+	for (const key of lastFired.keys()) if (!seen.has(key)) lastFired.delete(key);
+	return true;
+}
+function startScheduleLoop(getExecutor, logger = noopLogger) {
+	const lastFired = /* @__PURE__ */ new Map();
+	let timer;
+	let running = false;
+	const tick = () => {
+		if (running) return;
+		const executor = getExecutor();
+		if (!executor) return;
+		running = true;
+		fireDueSchedules(executor, /* @__PURE__ */ new Date(), lastFired, logger).catch((err) => {
+			logger.error("automation schedule tick failed", { err });
+		}).finally(() => {
+			running = false;
+		});
+	};
+	tick();
+	timer = setInterval(tick, MINUTE_MS);
+	timer.unref?.();
+	return { stop() {
+		if (timer) clearInterval(timer);
+		timer = void 0;
+	} };
+}
+//#endregion
+export { fireDueSchedules, startScheduleLoop };
+
+//# sourceMappingURL=schedule.js.map

package/dist/workflows/schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.js","names":[],"sources":["../../src/workflows/schedule.ts"],"sourcesContent":["import type { AutomationExecutor, Logger, ScheduledAutomation } from \"@headless-lms/core/types\";\nimport { cronMatches } from \"@headless-lms/core/automations\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\n\nconst MINUTE_MS = 60_000;\n\nfunction floorUtcMinute(at: Date): number {\n  const copy = new Date(at);\n  copy.setUTCSeconds(0, 0);\n  return copy.getTime();\n}\n\nfunction scheduleKey(schedule: ScheduledAutomation): string {\n  return `${schedule.orgId}\\0${schedule.automationId}\\0${schedule.cron}`;\n}\n\nexport async function fireDueSchedules(\n  executor: AutomationExecutor,\n  now: Date,\n  lastFired: Map<string, number>,\n  logger: Logger = noopLogger,\n): Promise<boolean> {\n  if (!executor.listSchedules || !executor.fireSchedule) {\n    return false;\n  }\n  const nowMs = floorUtcMinute(now);\n  let schedules: ScheduledAutomation[] = [];\n  try {\n    schedules = await executor.listSchedules();\n  } catch (err) {\n    logger.error(\"automation schedules not listed\", { err });\n    return false;\n  }\n  const seen = new Set<string>();\n  for (const schedule of schedules) {\n    const key = scheduleKey(schedule);\n    seen.add(key);\n    const previous = lastFired.get(key);\n    const start = previous == null ? nowMs : previous + MINUTE_MS;\n    for (let minute = start; minute <= nowMs; minute += MINUTE_MS) {\n      const at = new Date(minute);\n      const context = {\n        orgId: schedule.orgId,\n        automationId: schedule.automationId,\n        cron: schedule.cron,\n        at: at.toISOString(),\n      };\n      let due: boolean;\n      try {\n        due = cronMatches(schedule.cron, at);\n      } catch (err) {\n        logger.error(\"automation schedule not checked\", { ...context, err });\n        break;\n      }\n      if (due) {\n        try {\n          await executor.fireSchedule(schedule.orgId, schedule.automationId, at);\n        } catch (err) {\n          logger.error(\"automation schedule not fired\", { ...context, err });\n          if (!lastFired.has(key)) {\n            lastFired.set(key, minute - MINUTE_MS);\n          }\n          break;\n        }\n      }\n      lastFired.set(key, minute);\n    }\n  }\n  for (const key of lastFired.keys()) {\n    if (!seen.has(key)) {\n      lastFired.delete(key);\n    }\n  }\n  return true;\n}\n\nexport function startScheduleLoop(\n  getExecutor: () => AutomationExecutor | undefined,\n  logger: Logger = noopLogger,\n): {\n  stop(): void;\n} {\n  const lastFired = new Map<string, number>();\n  let timer: ReturnType<typeof setInterval> | undefined;\n  let running = false;\n  const tick = () => {\n    if (running) {\n      return;\n    }\n    const executor = getExecutor();\n    if (!executor) {\n      return;\n    }\n    running = true;\n    void fireDueSchedules(executor, new Date(), lastFired, logger)\n      .catch((err: unknown) => {\n        logger.error(\"automation schedule tick failed\", { err });\n      })\n      .finally(() => {\n        running = false;\n      });\n  };\n  tick();\n  timer = setInterval(tick, MINUTE_MS);\n  timer.unref?.();\n  return {\n    stop() {\n      if (timer) {\n        clearInterval(timer);\n      }\n      timer = undefined;\n    },\n  };\n}\n"],"mappings":";;;AAIA,MAAM,YAAY;AAElB,SAAS,eAAe,IAAkB;CACxC,MAAM,OAAO,IAAI,KAAK,EAAE;CACxB,KAAK,cAAc,GAAG,CAAC;CACvB,OAAO,KAAK,QAAQ;AACtB;AAEA,SAAS,YAAY,UAAuC;CAC1D,OAAO,GAAG,SAAS,MAAM,IAAI,SAAS,aAAa,IAAI,SAAS;AAClE;AAEA,eAAsB,iBACpB,UACA,KACA,WACA,SAAiB,YACC;CAClB,IAAI,CAAC,SAAS,iBAAiB,CAAC,SAAS,cACvC,OAAO;CAET,MAAM,QAAQ,eAAe,GAAG;CAChC,IAAI,YAAmC,CAAC;CACxC,IAAI;EACF,YAAY,MAAM,SAAS,cAAc;CAC3C,SAAS,KAAK;EACZ,OAAO,MAAM,mCAAmC,EAAE,IAAI,CAAC;EACvD,OAAO;CACT;CACA,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,MAAM,YAAY,QAAQ;EAChC,KAAK,IAAI,GAAG;EACZ,MAAM,WAAW,UAAU,IAAI,GAAG;EAClC,MAAM,QAAQ,YAAY,OAAO,QAAQ,WAAW;EACpD,KAAK,IAAI,SAAS,OAAO,UAAU,OAAO,UAAU,WAAW;GAC7D,MAAM,KAAK,IAAI,KAAK,MAAM;GAC1B,MAAM,UAAU;IACd,OAAO,SAAS;IAChB,cAAc,SAAS;IACvB,MAAM,SAAS;IACf,IAAI,GAAG,YAAY;GACrB;GACA,IAAI;GACJ,IAAI;IACF,MAAM,YAAY,SAAS,MAAM,EAAE;GACrC,SAAS,KAAK;IACZ,OAAO,MAAM,mCAAmC;KAAE,GAAG;KAAS;IAAI,CAAC;IACnE;GACF;GACA,IAAI,KACF,IAAI;IACF,MAAM,SAAS,aAAa,SAAS,OAAO,SAAS,cAAc,EAAE;GACvE,SAAS,KAAK;IACZ,OAAO,MAAM,iCAAiC;KAAE,GAAG;KAAS;IAAI,CAAC;IACjE,IAAI,CAAC,UAAU,IAAI,GAAG,GACpB,UAAU,IAAI,KAAK,SAAS,SAAS;IAEvC;GACF;GAEF,UAAU,IAAI,KAAK,MAAM;EAC3B;CACF;CACA,KAAK,MAAM,OAAO,UAAU,KAAK,GAC/B,IAAI,CAAC,KAAK,IAAI,GAAG,GACf,UAAU,OAAO,GAAG;CAGxB,OAAO;AACT;AAEA,SAAgB,kBACd,aACA,SAAiB,YAGjB;CACA,MAAM,4BAAY,IAAI,IAAoB;CAC1C,IAAI;CACJ,IAAI,UAAU;CACd,MAAM,aAAa;EACjB,IAAI,SACF;EAEF,MAAM,WAAW,YAAY;EAC7B,IAAI,CAAC,UACH;EAEF,UAAU;EACV,iBAAsB,0BAAU,IAAI,KAAK,GAAG,WAAW,MAAM,CAAC,CAC3D,OAAO,QAAiB;GACvB,OAAO,MAAM,mCAAmC,EAAE,IAAI,CAAC;EACzD,CAAC,CAAC,CACD,cAAc;GACb,UAAU;EACZ,CAAC;CACL;CACA,KAAK;CACL,QAAQ,YAAY,MAAM,SAAS;CACnC,MAAM,QAAQ;CACd,OAAO,EACL,OAAO;EACL,IAAI,OACF,cAAc,KAAK;EAErB,QAAQ,KAAA;CACV,EACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@headless-lms/adapter-defaults",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "exports": {
     "./email": {
@@ -41,8 +41,8 @@
   ],
   "dependencies": {
     "pino": "^10.3.1",
-    "@headless-lms/adapter-db": "0.2.0",
-    "@headless-lms/core": "0.2.0"
+    "@headless-lms/adapter-db": "0.3.0",
+    "@headless-lms/core": "0.3.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",