@heavybit/shared-lib 0.0.0-stage → 1.2.0

package/dist/types/scheduling/index.d.ts

@@ -0,0 +1,33 @@
+import type { Redis } from 'ioredis';
+import type { Logger } from '../types/index.js';
+export interface DistributedLock {
+    /** Runs `fn` only if the lock is free; returns false when another replica holds it. */
+    runExclusive(key: string, ttlMs: number, fn: () => Promise<void>): Promise<boolean>;
+}
+/** Redis lock (SET NX PX + token-checked release). Without Redis, a per-process lock. */
+export declare function createLock(redis: Redis | null, prefix?: string): DistributedLock;
+export interface ScheduledJobOptions {
+    name: string;
+    intervalMs: number;
+    work: () => Promise<void>;
+    /** When set, only one replica runs each tick. */
+    lock?: DistributedLock;
+    logger?: Logger;
+    runOnStart?: boolean;
+}
+/**
+ * Interval job that never overlaps itself, can be triggered early by events (`trigger()`), and
+ * optionally runs on one replica at a time.
+ */
+export declare class ScheduledJob {
+    private readonly options;
+    private timer;
+    private running;
+    private readonly logger;
+    constructor(options: ScheduledJobOptions);
+    start(): void;
+    stop(): void;
+    get isRunning(): boolean;
+    trigger(): Promise<void>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/scheduling/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/scheduling/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACrF;AAID,yFAAyF;AACzF,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,SAAU,GAAG,eAAe,CAqBjF;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,iDAAiD;IACjD,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,qBAAa,YAAY;IAKX,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEH,OAAO,EAAE,mBAAmB;IAIzD,KAAK,IAAI,IAAI;IAOb,IAAI,IAAI,IAAI;IAKZ,IAAI,SAAS,IAAI,OAAO,CAEvB;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAa/B"}

package/dist/types/security/index.d.ts

@@ -0,0 +1,20 @@
+export interface SignedUrlParams {
+    exp: number;
+    sig: string;
+    /** Present for prefix signatures: every path under `sp` is covered. */
+    sp?: string;
+}
+export interface UrlSigner {
+    /** Signs one path (e.g. a download). Returns the query params to append. */
+    sign(path: string, ttlSec: number): SignedUrlParams;
+    /** Signs a path prefix (e.g. an HLS directory: manifest + segments share one token). */
+    signPrefix(prefix: string, ttlSec: number): SignedUrlParams;
+    /** Builds `path?exp=…&sig=…[&sp=…]`. */
+    signedPath(path: string, ttlSec: number, options?: {
+        prefix?: string;
+    }): string;
+    verify(path: string, params: Partial<Record<keyof SignedUrlParams, string | undefined>>, now?: number): boolean;
+}
+/** HMAC-SHA256 expiring URL signatures for private files (streams, downloads, originals). */
+export declare function createUrlSigner(secret: string): UrlSigner;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/security/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,uEAAuE;IACvE,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACxB,4EAA4E;IAC5E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC;IACpD,wFAAwF;IACxF,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC;IAC5D,wCAAwC;IACxC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAChF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACjH;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CA8BzD"}

package/dist/types/socket/index.d.ts

@@ -0,0 +1,30 @@
+import type { Server as HttpServer } from 'node:http';
+import { Server, type ServerOptions, type Socket } from 'socket.io';
+import type { AuthUser, Logger } from '../types/index.js';
+export interface SocketServerOptions {
+    /** Socket.IO path, e.g. `/ws/notifications` (the gateway proxies the same path). */
+    path: string;
+    corsOrigins?: string[];
+    /** Resolves the connecting user; return null to reject. See `gatewaySocketAuth`. */
+    authenticate: (socket: Socket) => Promise<AuthUser | null> | AuthUser | null;
+    /**
+     * Rooms the user joins on connect. Clients can never join arbitrary rooms, so room membership
+     * is always derived server-side from the verified identity. Default: `user:<id>`.
+     */
+    rooms?: (user: AuthUser) => string[];
+    /** Enables multi-replica fan-out via `@socket.io/redis-adapter`. */
+    adapter?: ServerOptions['adapter'];
+    serverOptions?: Partial<ServerOptions>;
+    logger?: Logger;
+}
+export interface SocketEmitter {
+    io: Server;
+    emitToUser(userId: string, event: string, payload: unknown): void;
+    emitToRoom(room: string, event: string, payload: unknown): void;
+    close(): Promise<void>;
+}
+export declare const userRoom: (userId: string) => string;
+export declare function createSocketServer(httpServer: HttpServer, options: SocketServerOptions): SocketEmitter;
+/** Trusts the gateway-signed identity headers forwarded on the WebSocket upgrade request. */
+export declare function gatewaySocketAuth(secret: string): (socket: Socket) => AuthUser | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/socket/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/socket/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAGpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC7E;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;IACrC,oEAAoE;IACpE,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAClE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,WAAqB,CAAC;AAE7D,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,mBAAmB,GAAG,aAAa,CAmCtG;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,IACtC,QAAQ,MAAM,KAAG,QAAQ,GAAG,IAAI,CAIzC"}

package/dist/types/testing/index.d.ts

@@ -0,0 +1,41 @@
+import { type EnvelopeMeta } from '../messaging/envelope.js';
+import type { CommandBus, EventBus, QueueSendOptions, QueueSender } from '../messaging/publisher.js';
+import type { AuthUser, EventEnvelope, Logger } from '../types/index.js';
+export interface LogLine {
+    level: keyof Logger;
+    message: string;
+    meta: Record<string, unknown>;
+}
+/** A logger spy: records every line (level, message, meta) so tests can assert on log context. */
+export declare class RecordingLogger implements Logger {
+    readonly lines: LogLine[];
+    debug(message: string, meta?: Record<string, unknown>): void;
+    info(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+}
+/** An AuthUser for tests. */
+export declare function makeAuthUser(overrides?: Partial<AuthUser>): AuthUser;
+/** Gateway-signed identity headers for route tests (use with supertest `.set()`). */
+export declare function identityHeaders(user: AuthUser, secret: string): Record<string, string>;
+/** Records everything published/sent so tests can assert on events, commands and direct queue sends. */
+export declare class RecordingBus implements EventBus, CommandBus, QueueSender {
+    private readonly source;
+    readonly events: EventEnvelope[];
+    readonly commands: EventEnvelope[];
+    readonly queued: Array<{
+        queue: string;
+        payload: unknown;
+        options: QueueSendOptions;
+    }>;
+    failWith: Error | null;
+    constructor(source?: string);
+    publish<T>(type: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
+    publishEnvelope(envelope: EventEnvelope): Promise<void>;
+    send<T>(command: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
+    sendEnvelope(envelope: EventEnvelope): Promise<void>;
+    sendToQueue(queue: string, payload: unknown, options?: QueueSendOptions): Promise<void>;
+    eventsOfType(type: string): EventEnvelope[];
+    commandsOfType(command: string): EventEnvelope[];
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/testing/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEzE,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kGAAkG;AAClG,qBAAa,eAAgB,YAAW,MAAM;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IAC/B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;CACjE;AAED,6BAA6B;AAC7B,wBAAgB,YAAY,CAAC,SAAS,GAAE,OAAO,CAAC,QAAQ,CAAM,GAAG,QAAQ,CAExE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEtF;AAED,wGAAwG;AACxG,qBAAa,YAAa,YAAW,QAAQ,EAAE,UAAU,EAAE,WAAW;IAMxD,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM;IACtC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAM;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAM;IAC5F,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAQ;gBAED,MAAM,SAAS;IAEtC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOjF,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOjF,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE;IAI3C,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE;CAGjD"}

package/dist/types/types/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The caller as established by the API gateway. App-agnostic:
+ * - `scopes` carries resource IDs the user may act on, keyed by scope name
+ *   (e.g. `{ profile: ['01J…'] }` in a media app, `{ company: ['01J…'] }` in a B2B app).
+ * - `attrs` carries small app-specific claims (e.g. `{ accountType: 'creator' }`).
+ */
+export interface AuthUser {
+    id: string;
+    email: string;
+    roles: string[];
+    permissions: string[];
+    scopes: Record<string, string[]>;
+    attrs: Record<string, unknown>;
+    sessionId?: string;
+}
+export interface PaginationMeta {
+    page: number;
+    limit: number;
+    total: number;
+    totalPages: number;
+    hasNext: boolean;
+    hasPrev: boolean;
+}
+export interface ApiResponse<T = unknown> {
+    success: boolean;
+    message: string;
+    code?: string;
+    data?: T;
+    meta?: PaginationMeta;
+    errors?: Record<string, string[]>;
+}
+export interface PaginatedResult<T> {
+    data: T[];
+    meta: PaginationMeta;
+}
+export interface PageQuery {
+    page: number;
+    limit: number;
+}
+/** Envelope carried by every domain event. */
+export interface EventEnvelope<T = Record<string, unknown>> {
+    eventId: string;
+    type: string;
+    version: number;
+    occurredAt: string;
+    source: string;
+    correlationId?: string;
+    actor?: {
+        userId: string | null;
+    };
+    aggregate?: {
+        type: string;
+        id: string;
+        version?: number;
+    };
+    data: T;
+}
+/** Minimal logger contract every module accepts (winston, pino and console all satisfy it). */
+export interface Logger {
+    debug(message: string, meta?: Record<string, unknown>): void;
+    info(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC;CACT;AAED,+FAA+F;AAC/F,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D"}

package/dist/types/validation/index.d.ts

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+export declare const idSchema: z.ZodString;
+export declare const idParamSchema: z.ZodObject<{
+    id: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+}, {
+    id: string;
+}>;
+export declare const paginationSchema: z.ZodObject<{
+    page: z.ZodDefault<z.ZodNumber>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    page: number;
+    limit: number;
+}, {
+    page?: number | undefined;
+    limit?: number | undefined;
+}>;
+export declare const sortOrderSchema: z.ZodDefault<z.ZodEnum<["asc", "desc"]>>;
+export declare const emailSchema: z.ZodString;
+export declare const slugSchema: z.ZodString;
+/** Length-first password rule (NIST 800-63B): 8–128 chars, no composition rules. Tighten per app if needed. */
+export declare const passwordSchema: z.ZodString;
+/** Accepts `true/false/1/0/yes/no` from query strings. */
+export declare const booleanish: z.ZodEffects<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false", "1", "0", "yes", "no"]>]>, boolean, boolean | "0" | "1" | "true" | "false" | "yes" | "no">;
+/** Comma list or repeated query param → string[]. */
+export declare const csvList: z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>, string[], string | string[]>;
+/** Converts Zod issues into the `{ field: [messages] }` shape used by the error envelope. */
+export declare function zodIssuesToErrors(error: z.ZodError): Record<string, string[]>;
+/** Parses `input` or throws a ValidationError (422). */
+export declare function parseOrThrow<S extends z.ZodTypeAny>(schema: S, input: unknown): z.infer<S>;
+export { z };
+//# sourceMappingURL=index.d.ts.map

package/dist/types/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,QAAQ,aAA6C,CAAC;AAEnE,eAAO,MAAM,aAAa;;;;;;EAA6B,CAAC;AAExD,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAEH,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAEvE,eAAO,MAAM,WAAW,aAA0E,CAAC;AAEnG,eAAO,MAAM,UAAU,aAAwF,CAAC;AAEhH,+GAA+G;AAC/G,eAAO,MAAM,cAAc,aAA+F,CAAC;AAE3H,0DAA0D;AAC1D,eAAO,MAAM,UAAU,+JAAoJ,CAAC;AAE5K,qDAAqD;AACrD,eAAO,MAAM,OAAO,uGAA0I,CAAC;AAE/J,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAO7E;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAI1F;AAED,OAAO,EAAE,CAAC,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,183 @@
 {
   "name": "@heavybit/shared-lib",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.2.0",
+  "description": "App-agnostic building blocks for Express/TypeScript microservices: gateway identity, access scoping, RabbitMQ events/commands/RPC with retries and DLQs, outbox, cache-aside, rate limiting, sockets, signing, logging and config.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/types/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/types/index.d.ts",
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js"
+    },
+    "./express": {
+      "types": "./dist/types/express/index.d.ts",
+      "import": "./dist/esm/express/index.js",
+      "require": "./dist/cjs/express/index.js"
+    },
+    "./messaging": {
+      "types": "./dist/types/messaging/index.d.ts",
+      "import": "./dist/esm/messaging/index.js",
+      "require": "./dist/cjs/messaging/index.js"
+    },
+    "./cache": {
+      "types": "./dist/types/cache/index.d.ts",
+      "import": "./dist/esm/cache/index.js",
+      "require": "./dist/cjs/cache/index.js"
+    },
+    "./database": {
+      "types": "./dist/types/database/index.d.ts",
+      "import": "./dist/esm/database/index.js",
+      "require": "./dist/cjs/database/index.js"
+    },
+    "./knex": {
+      "types": "./dist/types/knex/index.d.ts",
+      "import": "./dist/esm/knex/index.js",
+      "require": "./dist/cjs/knex/index.js"
+    },
+    "./socket": {
+      "types": "./dist/types/socket/index.d.ts",
+      "import": "./dist/esm/socket/index.js",
+      "require": "./dist/cjs/socket/index.js"
+    },
+    "./rate-limit": {
+      "types": "./dist/types/rate-limit/index.d.ts",
+      "import": "./dist/esm/rate-limit/index.js",
+      "require": "./dist/cjs/rate-limit/index.js"
+    },
+    "./scheduling": {
+      "types": "./dist/types/scheduling/index.d.ts",
+      "import": "./dist/esm/scheduling/index.js",
+      "require": "./dist/cjs/scheduling/index.js"
+    },
+    "./security": {
+      "types": "./dist/types/security/index.d.ts",
+      "import": "./dist/esm/security/index.js",
+      "require": "./dist/cjs/security/index.js"
+    },
+    "./http": {
+      "types": "./dist/types/http/index.d.ts",
+      "import": "./dist/esm/http/index.js",
+      "require": "./dist/cjs/http/index.js"
+    },
+    "./testing": {
+      "types": "./dist/types/testing/index.d.ts",
+      "import": "./dist/esm/testing/index.js",
+      "require": "./dist/cjs/testing/index.js"
+    },
+    "./metrics": {
+      "types": "./dist/types/metrics/index.d.ts",
+      "import": "./dist/esm/metrics/index.js",
+      "require": "./dist/cjs/metrics/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "typesVersions": {
+    "*": {
+      "express": [
+        "dist/types/express/index.d.ts"
+      ],
+      "messaging": [
+        "dist/types/messaging/index.d.ts"
+      ],
+      "cache": [
+        "dist/types/cache/index.d.ts"
+      ],
+      "database": [
+        "dist/types/database/index.d.ts"
+      ],
+      "knex": [
+        "dist/types/knex/index.d.ts"
+      ],
+      "socket": [
+        "dist/types/socket/index.d.ts"
+      ],
+      "rate-limit": [
+        "dist/types/rate-limit/index.d.ts"
+      ],
+      "scheduling": [
+        "dist/types/scheduling/index.d.ts"
+      ],
+      "security": [
+        "dist/types/security/index.d.ts"
+      ],
+      "http": [
+        "dist/types/http/index.d.ts"
+      ],
+      "testing": [
+        "dist/types/testing/index.d.ts"
+      ],
+      "metrics": [
+        "dist/types/metrics/index.d.ts"
+      ]
+    }
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "build": "npm run clean && tsc -p tsconfig.esm.json && tsc -p tsconfig.cjs.json && tsc -p tsconfig.types.json && node scripts/write-dist-package-types.mjs",
+    "prepare": "npm run build",
+    "test": "jest --runInBand",
+    "prepublishOnly": "npm test && npm run build"
+  },
+  "dependencies": {
+    "@types/amqplib": "^0.10.7",
+    "@types/cors": "^2.8.17",
+    "amqplib": "^0.10.8",
+    "argon2": "^0.44.0",
+    "bcryptjs": "^3.0.2",
+    "cors": "^2.8.5",
+    "google-libphonenumber": "^3.2.40",
+    "helmet": "^8.1.0",
+    "ioredis": "^5.4.2",
+    "jsonwebtoken": "^9.0.2",
+    "knex": "^3.1.0",
+    "mysql2": "^3.11.4",
+    "prom-client": "^15.1.3",
+    "rate-limiter-flexible": "^5.0.5",
+    "socket.io": "^4.8.1",
+    "ulid": "^3.0.1",
+    "undici": "^7.30.0",
+    "winston": "^3.17.0",
+    "zod": "^3.24.1"
+  },
+  "peerDependencies": {
+    "@socket.io/redis-adapter": ">=8.0.0",
+    "express": ">=4.18.0"
+  },
+  "peerDependenciesMeta": {
+    "@socket.io/redis-adapter": {
+      "optional": true
+    },
+    "express": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@socket.io/redis-adapter": "^8.3.0",
+    "@types/express": "^5.0.0",
+    "@types/google-libphonenumber": "^7.4.30",
+    "@types/jest": "^29.5.14",
+    "@types/jsonwebtoken": "^9.0.7",
+    "@types/node": "^22.10.0",
+    "@types/supertest": "^6.0.2",
+    "express": "^5.1.0",
+    "jest": "^29.7.0",
+    "supertest": "^7.0.0",
+    "ts-jest": "^29.4.6",
+    "typescript": "^5.7.2"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.