@heavybit/shared-lib 2.1.0 → 2.7.0

package/dist/types/socket/ticket.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Short-lived socket handshake tickets. The browser cannot send its in-memory access token on a
+ * WebSocket upgrade header, so it asks the API for a ticket (≤ 60 s) and passes it in the Socket.IO
+ * `auth` payload. A ticket is `v1.<base64url claims>.<base64url HMAC-SHA256>`, signed over a domain
+ * separator so a ticket minted for another app or purpose never verifies here.
+ *
+ * Dependency-free (no socket.io), so the issuer can sign tickets without the socket stack.
+ */
+/** Longest allowed ticket lifetime (and the default), in seconds. */
+export declare const SOCKET_TICKET_MAX_TTL_SECONDS = 60;
+/** Shortest accepted signing secret. */
+export declare const MIN_SOCKET_TICKET_SECRET_LENGTH = 32;
+/** What the issuer puts in a ticket. */
+export interface SocketTicketInput {
+    userId: string;
+    /** Who the ticket is for (e.g. the front-end app); the server checks it. */
+    aud: string;
+    /** Resource ids the user may act on, keyed by scope name (as in `AuthUser.scopes`). */
+    scopes?: Record<string, string[]>;
+    permissions?: string[];
+    isSuperAdmin?: boolean;
+}
+/** Verified ticket claims. */
+export interface SocketTicketClaims {
+    userId: string;
+    aud: string;
+    scopes: Record<string, string[]>;
+    permissions: string[];
+    isSuperAdmin: boolean;
+    /** Unique id, so a server can make tickets single-use. */
+    jti: string;
+    /** Issued-at and expiry, epoch seconds. */
+    iat: number;
+    exp: number;
+}
+/** Signing and verification settings. */
+export interface SocketTicketKeyOptions {
+    /** Shared HMAC secret (at least 32 characters). */
+    secret: string;
+    /** Domain separator, e.g. `myapp-socket-ticket:v1`. */
+    domain: string;
+    /** Clock (tests). */
+    now?: () => Date;
+}
+/** Why a ticket was refused. */
+export type SocketTicketRejection = 'missing' | 'malformed' | 'bad_signature' | 'expired' | 'wrong_audience';
+/** Result of {@link verifySocketTicket}. */
+export type SocketTicketResult = {
+    ok: true;
+    claims: SocketTicketClaims;
+} | {
+    ok: false;
+    reason: SocketTicketRejection;
+};
+/**
+ * Signs a ticket.
+ *
+ * @param input User, audience, scopes and permissions.
+ * @param options Secret, domain separator and `ttlSeconds` (1–60, default 60).
+ * @returns The ticket string.
+ * @example signSocketTicket({ userId, aud: 'admin-app', scopes: { tenant: [tenantId] }, permissions }, { secret, domain: 'myapp-socket-ticket:v1' })
+ */
+export declare function signSocketTicket(input: SocketTicketInput, options: SocketTicketKeyOptions & {
+    ttlSeconds?: number;
+}): string;
+/**
+ * Verifies a ticket's signature, domain, lifetime and audience. Never throws for a bad ticket.
+ *
+ * @param ticket The string from the handshake.
+ * @param options Secret, domain separator and the accepted audience(s).
+ * @returns The claims, or the rejection reason.
+ * @example const result = verifySocketTicket(socket.handshake.auth.ticket, { secret, domain, audience: 'admin-app' });
+ */
+export declare function verifySocketTicket(ticket: unknown, options: SocketTicketKeyOptions & {
+    audience: string | readonly string[];
+}): SocketTicketResult;
+/** Name of the room for one scope id, e.g. `tenant:01J…`. */
+export declare const scopeRoom: (scope: string, scopeId: string) => string;
+/**
+ * True when the ticket holder may join the room of `scopeId` in `scope`: the id is in the ticket's scope
+ * ids (or the holder is a super admin) and, when given, the holder has `permission`.
+ *
+ * @param claims Verified ticket claims.
+ * @param scope Scope name, e.g. `tenant`.
+ * @param scopeId The id whose room is requested.
+ * @param permission Permission the room needs (optional).
+ * @example canJoinScopeRoom(claims, 'tenant', tenantId, 'widgets.view')
+ */
+export declare function canJoinScopeRoom(claims: SocketTicketClaims, scope: string, scopeId: string, permission?: string): boolean;
+//# sourceMappingURL=ticket.d.ts.map

package/dist/types/socket/ticket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ticket.d.ts","sourceRoot":"","sources":["../../../src/socket/ticket.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AAEH,qEAAqE;AACrE,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,wCAAwC;AACxC,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAKlD,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,uFAAuF;IACvF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,8BAA8B;AAC9B,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,yCAAyC;AACzC,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,gCAAgC;AAChC,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE7G,4CAA4C;AAC5C,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAazH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,sBAAsB,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAoB5H;AAcD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,kBAAkB,CAelJ;AAED,6DAA6D;AAC7D,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,EAAE,SAAS,MAAM,WAA0B,CAAC;AAEnF;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAIzH"}

package/dist/types/testing/index.d.ts

@@ -1,6 +1,8 @@
+import { type IdentityProtocol } from '../identity/index.js';
 import { type EnvelopeMeta } from '../messaging/envelope.js';
-import type { CommandBus, EventBus, QueueSendOptions, QueueSender } from '../messaging/publisher.js';
+import type { CommandBus, DelayedSender, EventBus, QueueSendOptions, QueueSender } from '../messaging/publisher.js';
 import type { AuthUser, EventEnvelope, Logger } from '../types/index.js';
+/** One line captured by {@link RecordingLogger}. */
 export interface LogLine {
     level: keyof Logger;
     message: string;
@@ -16,11 +18,22 @@ export declare class RecordingLogger implements Logger {
 }
 /** An AuthUser for tests. */
 export declare function makeAuthUser(overrides?: Partial<AuthUser>): AuthUser;
-/** Gateway-signed identity headers for route tests (use with supertest `.set()`). */
-export declare function identityHeaders(user: AuthUser, secret: string): Record<string, string>;
-/** Records everything published/sent so tests can assert on events, commands and direct queue sends. */
-export declare class RecordingBus implements EventBus, CommandBus, QueueSender {
-    private readonly source;
+/**
+ * Gateway-signed (v2) identity headers for route tests (use with supertest `.set()`). The method and path
+ * must match the request the test sends.
+ *
+ * @example request(app).get('/v1/items').set(identityHeaders({ user, secret, protocol, method: 'GET', path: '/v1/items' }));
+ */
+export declare function identityHeaders(input: {
+    user: AuthUser;
+    secret: string;
+    protocol: IdentityProtocol;
+    method: string;
+    path: string;
+    now?: number;
+}): Record<string, string>;
+/** Records everything published/sent so tests can assert on events, commands, queue sends and delayed sends. */
+export declare class RecordingBus implements EventBus, CommandBus, QueueSender, DelayedSender {
     readonly events: EventEnvelope[];
     readonly commands: EventEnvelope[];
     readonly queued: Array<{
@@ -28,14 +41,22 @@ export declare class RecordingBus implements EventBus, CommandBus, QueueSender {
         payload: unknown;
         options: QueueSendOptions;
     }>;
+    readonly delayed: Array<{
+        queue: string;
+        payload: unknown;
+        delayMs: number;
+        options: QueueSendOptions;
+    }>;
     failWith: Error | null;
-    constructor(source?: string);
-    publish<T>(type: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
+    publish<T extends object>(routingKey: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
     publishEnvelope(envelope: EventEnvelope): Promise<void>;
-    send<T>(command: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
+    send<T extends object>(command: string, data: T, meta?: EnvelopeMeta): Promise<EventEnvelope<T>>;
     sendEnvelope(envelope: EventEnvelope): Promise<void>;
     sendToQueue(queue: string, payload: unknown, options?: QueueSendOptions): Promise<void>;
-    eventsOfType(type: string): EventEnvelope[];
+    scheduleDelayed(queue: string, payload: unknown, delayMs: number, options?: QueueSendOptions): Promise<void>;
+    /** Published events with this routing key. */
+    eventsOfType(routingKey: string): EventEnvelope[];
+    /** Sent commands with this name. */
     commandsOfType(command: string): EventEnvelope[];
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/types/testing/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/testing/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACrG,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEzE,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kGAAkG;AAClG,qBAAa,eAAgB,YAAW,MAAM;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IAC/B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;CACjE;AAED,6BAA6B;AAC7B,wBAAgB,YAAY,CAAC,SAAS,GAAE,OAAO,CAAC,QAAQ,CAAM,GAAG,QAAQ,CAExE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEtF;AAED,wGAAwG;AACxG,qBAAa,YAAa,YAAW,QAAQ,EAAE,UAAU,EAAE,WAAW;IAMxD,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM;IACtC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAM;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAM;IAC5F,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAQ;gBAED,MAAM,SAAS;IAEtC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOjF,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOjF,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE;IAI3C,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE;CAGjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/testing/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACpH,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEzE,oDAAoD;AACpD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,kGAAkG;AAClG,qBAAa,eAAgB,YAAW,MAAM;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAM;IAC/B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;CACjE;AAED,6BAA6B;AAC7B,wBAAgB,YAAY,CAAC,SAAS,GAAE,OAAO,CAAC,QAAQ,CAAM,GAAG,QAAQ,CAExE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEzK;AAED,gHAAgH;AAChH,qBAAa,YAAa,YAAW,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa;IACnF,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAM;IACtC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAM;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAM;IAC5F,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAM;IAC9G,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAQ;IAExB,OAAO,CAAC,CAAC,SAAS,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOtG,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,IAAI,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAOhG,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAKpD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3F,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtH,8CAA8C;IAC9C,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,EAAE;IAIjD,oCAAoC;IACpC,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,EAAE;CAGjD"}

package/dist/types/types/index.d.ts

@@ -12,6 +12,12 @@ export interface AuthUser {
     scopes: Record<string, string[]>;
     attrs: Record<string, unknown>;
     sessionId?: string;
+    /** Platform super admin: satisfies every permission check. Set only from the gateway-signed identity. */
+    isSuperAdmin?: boolean;
+    /** True when the session completed its one-time-code (second factor) check. */
+    otpVerified?: boolean;
+    /** Epoch milliseconds of the caller's last step-up verification, as verified by the gateway. */
+    stepUpAt?: number;
 }
 /** Offset pagination metadata (page/limit with totals). For large or growing lists prefer {@link CursorPageMeta}. */
 export interface PaginationMeta {
@@ -73,22 +79,28 @@ export interface PageQuery {
     limit: number;
 }
 /** Envelope carried by every domain event. */
-export interface EventEnvelope<T = Record<string, unknown>> {
+/**
+ * Fields every envelope's `data` carries next to the payload. Payloads must not use these names.
+ */
+export interface EnvelopeData {
+    /** ULID; the AMQP `messageId` and the consumers' dedupe key. */
     eventId: string;
-    type: string;
+    /** Payload schema version (starts at 1). */
     version: number;
-    occurredAt: string;
-    source: string;
-    correlationId?: string;
-    actor?: {
-        userId: string | null;
-    };
-    aggregate?: {
-        type: string;
-        id: string;
-        version?: number;
-    };
-    data: T;
+    /** The user whose action raised the message; `null` for the system, absent when unknown. */
+    actorUserId?: string | null;
+}
+/**
+ * Message envelope `{ routingKey, data, timestamp }`. `data` is the payload plus {@link EnvelopeData};
+ * app-specific fields (for example the tenant id) are payload fields the app's schemas define.
+ *
+ * @example { routingKey: 'thing.created', data: { eventId: '01J…', version: 1, actorUserId: '01J…', thingId: '01J…' }, timestamp: '2026-01-01T00:00:00.000Z' }
+ */
+export interface EventEnvelope<T extends object = Record<string, unknown>> {
+    routingKey: string;
+    data: T & EnvelopeData;
+    /** ISO-8601 time the envelope was built. */
+    timestamp: string;
 }
 /** Minimal logger contract every module accepts (winston, pino and console all satisfy it). */
 export interface Logger {

package/dist/types/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qHAAqH;AACrH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,KAAK,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAClC,SAAS,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC;CACT;AAED,+FAA+F;AAC/F,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yGAAyG;IACzG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qHAAqH;AACrH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,OAAO;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,mGAAmG;IACnG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,KAAK,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,IAAI,EAAE,cAAc,CAAC;CACtB;AAED,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,8CAA8C;AAC9C;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvE,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,GAAG,YAAY,CAAC;IACvB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+FAA+F;AAC/F,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heavybit/shared-lib",
-  "version": "2.1.0",
+  "version": "2.7.0",
   "description": "App-agnostic building blocks for Express/TypeScript microservices: gateway identity, access scoping, RabbitMQ events/commands/RPC with retries and DLQs, outbox, cache-aside, rate limiting, sockets, signing, logging and config.",
   "license": "MIT",
   "type": "module",
@@ -137,6 +137,8 @@
     "argon2": "^0.44.0",
     "bcryptjs": "^3.0.2",
     "cors": "^2.8.5",
+    "decimal.js": "^10.6.0",
+    "drizzle-orm": "^0.45.4",
     "google-libphonenumber": "^3.2.40",
     "helmet": "^8.1.0",
     "ioredis": "^5.4.2",