@iveri/contracts 0.38.0 → 0.40.0

package/dist/cjs/api/conduit/connection.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connection.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/connection.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/conduit/connector-auth-type.enum.d.ts

@@ -1,42 +0,0 @@
-/**
- * How a connector proves who we are to the third-party API it fronts.
- *
- * This is the field that decides whether Conduit has to hold a *renewable* credential or merely
- * a static one, and the two are very different operationally: a static key works until someone
- * rotates it, an OAuth token stops working on a schedule and something has to notice first.
- *
- * The list is deliberately short. Every member is a scheme a manifest can describe entirely as
- * data — adding a provider that uses one of these is a manifest and a credential, never a code
- * change, which is the whole promise of §11's connector manifest. A provider needing anything
- * else (a request-signing scheme, mutual TLS) does not get a special case bolted on here; it
- * gets a new member, designed once, with the same "no per-provider branches" rule applied to it.
- */
-export declare enum ConnectorAuthType {
-    /** The API is open, or the credential travels in the payload. Nothing is added to a request. */
-    NONE = "none",
-    /**
-     * A static secret sent in a header — `X-Api-Key: …`, `Authorization: Basic …`.
-     *
-     * The header name and any literal prefix come from the manifest; only the secret comes from
-     * the connection. That split is what lets one manifest serve every tenant.
-     */
-    API_KEY_HEADER = "api-key-header",
-    /** A static bearer token. Shorthand for {@link API_KEY_HEADER} with the header and prefix fixed. */
-    BEARER_STATIC = "bearer-static",
-    /**
-     * OAuth 2.0 client credentials (RFC 6749 §4.4): exchange a client id and secret for a
-     * short-lived access token, and do it again when it expires. Machine-to-machine, no user.
-     */
-    OAUTH2_CLIENT_CREDENTIALS = "oauth2-client-credentials",
-    /**
-     * OAuth 2.0 refresh token (RFC 6749 §6): a long-lived refresh token buys short-lived access
-     * tokens.
-     *
-     * **The refresh token may be rotated by the provider on every use**, and Conduit stores
-     * whichever one came back last. That single fact is why refreshing has to be serialised
-     * across replicas rather than left to race — two simultaneous refreshes rotate twice, one
-     * of the two results is stored, and the connection is dead until a human re-authorises it.
-     */
-    OAUTH2_REFRESH_TOKEN = "oauth2-refresh-token"
-}
-//# sourceMappingURL=connector-auth-type.enum.d.ts.map

package/dist/cjs/api/conduit/connector-auth-type.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector-auth-type.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connector-auth-type.enum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,oBAAY,iBAAiB;IACzB,gGAAgG;IAChG,IAAI,SAAS;IAEb;;;;;OAKG;IACH,cAAc,mBAAmB;IAEjC,oGAAoG;IACpG,aAAa,kBAAkB;IAE/B;;;OAGG;IACH,yBAAyB,8BAA8B;IAEvD;;;;;;;;OAQG;IACH,oBAAoB,yBAAyB;CAChD"}

package/dist/cjs/api/conduit/connector-auth-type.enum.js

@@ -1,46 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConnectorAuthType = void 0;
-/**
- * How a connector proves who we are to the third-party API it fronts.
- *
- * This is the field that decides whether Conduit has to hold a *renewable* credential or merely
- * a static one, and the two are very different operationally: a static key works until someone
- * rotates it, an OAuth token stops working on a schedule and something has to notice first.
- *
- * The list is deliberately short. Every member is a scheme a manifest can describe entirely as
- * data — adding a provider that uses one of these is a manifest and a credential, never a code
- * change, which is the whole promise of §11's connector manifest. A provider needing anything
- * else (a request-signing scheme, mutual TLS) does not get a special case bolted on here; it
- * gets a new member, designed once, with the same "no per-provider branches" rule applied to it.
- */
-var ConnectorAuthType;
-(function (ConnectorAuthType) {
-    /** The API is open, or the credential travels in the payload. Nothing is added to a request. */
-    ConnectorAuthType["NONE"] = "none";
-    /**
-     * A static secret sent in a header — `X-Api-Key: …`, `Authorization: Basic …`.
-     *
-     * The header name and any literal prefix come from the manifest; only the secret comes from
-     * the connection. That split is what lets one manifest serve every tenant.
-     */
-    ConnectorAuthType["API_KEY_HEADER"] = "api-key-header";
-    /** A static bearer token. Shorthand for {@link API_KEY_HEADER} with the header and prefix fixed. */
-    ConnectorAuthType["BEARER_STATIC"] = "bearer-static";
-    /**
-     * OAuth 2.0 client credentials (RFC 6749 §4.4): exchange a client id and secret for a
-     * short-lived access token, and do it again when it expires. Machine-to-machine, no user.
-     */
-    ConnectorAuthType["OAUTH2_CLIENT_CREDENTIALS"] = "oauth2-client-credentials";
-    /**
-     * OAuth 2.0 refresh token (RFC 6749 §6): a long-lived refresh token buys short-lived access
-     * tokens.
-     *
-     * **The refresh token may be rotated by the provider on every use**, and Conduit stores
-     * whichever one came back last. That single fact is why refreshing has to be serialised
-     * across replicas rather than left to race — two simultaneous refreshes rotate twice, one
-     * of the two results is stored, and the connection is dead until a human re-authorises it.
-     */
-    ConnectorAuthType["OAUTH2_REFRESH_TOKEN"] = "oauth2-refresh-token";
-})(ConnectorAuthType || (exports.ConnectorAuthType = ConnectorAuthType = {}));
-//# sourceMappingURL=connector-auth-type.enum.js.map

package/dist/cjs/api/conduit/connector-auth-type.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector-auth-type.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/connector-auth-type.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;GAYG;AACH,IAAY,iBA+BX;AA/BD,WAAY,iBAAiB;IACzB,gGAAgG;IAChG,kCAAa,CAAA;IAEb;;;;;OAKG;IACH,sDAAiC,CAAA;IAEjC,oGAAoG;IACpG,oDAA+B,CAAA;IAE/B;;;OAGG;IACH,4EAAuD,CAAA;IAEvD;;;;;;;;OAQG;IACH,kEAA6C,CAAA;AACjD,CAAC,EA/BW,iBAAiB,iCAAjB,iBAAiB,QA+B5B"}

package/dist/cjs/api/conduit/connector.type.d.ts

@@ -1,179 +0,0 @@
-import type { IsoDateTime } from '../../type/iso-date-time.type.js';
-import type { Nullable } from '../../type/nil.type.js';
-import type { UUID } from '../../type/uuid.type.js';
-import type { ConnectorAuthType } from './connector-auth-type.enum.js';
-/**
- * Credential names an OAuth manifest expects to find on a connection.
- *
- * Fixed rather than manifest-configurable: these are the field names RFC 6749 gives the token
- * request, so letting a manifest rename them would only allow it to be wrong.
- */
-export declare const CONNECTOR_CREDENTIAL_CLIENT_ID = "clientId";
-export declare const CONNECTOR_CREDENTIAL_CLIENT_SECRET = "clientSecret";
-export declare const CONNECTOR_CREDENTIAL_REFRESH_TOKEN = "refreshToken";
-/**
- * How a connector authenticates, as data.
- *
- * Flat with a discriminating {@link ConnectorAuthType} and nullable fields, matching
- * `SignatureManifest` — a discriminated union reads better in TypeScript and validates far worse
- * as a request body, and this shape has to survive `class-validator` on the way in.
- *
- * **A manifest holds no secret.** It names *where* the credential goes; the credential itself
- * lives on a connection, encrypted. That is what makes a manifest safe to return in full to
- * anyone with `conduit:connector:read` and safe to ship in the binary.
- */
-export interface ConnectorAuthManifest {
-    type: ConnectorAuthType;
-    /**
-     * Which credential on the connection holds the secret. `API_KEY_HEADER` only.
-     *
-     * OAuth manifests do not set it — they read the fixed names above, because those are defined
-     * by the grant rather than by us.
-     */
-    credentialKey: Nullable<string>;
-    /** Lowercase header the credential is sent in. `API_KEY_HEADER` only. */
-    headerName: Nullable<string>;
-    /** Literal text before the credential, e.g. `Bearer ` or `Basic `. Kept verbatim, spaces included. */
-    valuePrefix: Nullable<string>;
-    /** Token endpoint. `OAUTH2_*` only. Vetted against the SSRF blocklist like any other target. */
-    tokenUrl: Nullable<string>;
-    /** `scope` sent with the token request, when the provider wants one. */
-    scope: Nullable<string>;
-    /**
-     * Seconds shaved off a token's reported lifetime before it counts as expired.
-     *
-     * Not a nicety. A token that expires while a request is in flight fails with a 401 that looks
-     * exactly like a revoked credential, and the retry that would fix it is indistinguishable
-     * from one that never will. Refreshing slightly early makes that case rare instead of
-     * routine. Null falls back to the service default.
-     */
-    expirySkewSeconds: Nullable<number>;
-}
-/** {@link ConnectorAuthManifest} as sent on create/update: nullable fields may simply be omitted. */
-export interface ConnectorAuthManifestInput {
-    type: ConnectorAuthType;
-    credentialKey?: Nullable<string>;
-    headerName?: Nullable<string>;
-    valuePrefix?: Nullable<string>;
-    tokenUrl?: Nullable<string>;
-    scope?: Nullable<string>;
-    expirySkewSeconds?: Nullable<number>;
-}
-/**
- * One thing a connector can be asked to do.
- *
- * A dispatch names an operation by {@link key} rather than supplying a URL, and that is the
- * whole security model of the outbound side: a caller chooses from a list somebody with
- * `conduit:connector:manage` wrote down, instead of naming a host Conduit will then post to.
- * Outbound would otherwise be an open proxy with authentication attached.
- */
-export interface ConnectorOperation {
-    /** Stable identifier a dispatch names. Lowercase kebab-case: `send-message`. */
-    key: string;
-    /** Human-readable label for the admin UI. */
-    name: string;
-    method: string;
-    /**
-     * Path appended to the connector's `baseUrl`.
-     *
-     * `{name}` placeholders are filled from the connection's variables first and the dispatch's
-     * `pathParams` second. Every placeholder must resolve, or the dispatch is refused at submit
-     * time rather than dead-lettering later — the caller is still on the phone at submit time.
-     */
-    path: string;
-    description: Nullable<string>;
-}
-/** Requests per minute, and how many may arrive at once. Applied per connection. */
-export interface ConnectorRateLimit {
-    perMinute: number;
-    burst: number;
-}
-/**
- * When to try again, and when to stop.
- *
- * Per connector rather than global because providers genuinely differ: one returns 429 with a
- * generous window, another treats a burst as abuse and blocks for an hour.
- */
-export interface ConnectorRetryPolicy {
-    maxAttempts: number;
-    backoffBaseMs: number;
-    backoffMaxMs: number;
-    /**
-     * Statuses to retry **in addition** to the transient default set (5xx, 408, 425, 429).
-     *
-     * Additive, never subtractive: a manifest can say "this provider's 400 is transient", which
-     * is a fact about that provider, but it cannot claim a 502 is permanent — nothing about a
-     * gateway error is provider-specific and the ability to get it wrong buys nothing.
-     */
-    retryableStatuses: number[];
-    /**
-     * Statuses meaning the access token is stale.
-     *
-     * Handled once per attempt and unlike any other status: the token is discarded, refreshed,
-     * and the request is sent again immediately rather than after a backoff. A token that
-     * expired thirty seconds early is not a failing destination and should not be treated as one.
-     */
-    authFailureStatuses: number[];
-}
-/**
- * A third-party API, described entirely as data. §11's "connector manifest".
- *
- * Conduit contains no `if (connector === 'whatsapp')` anywhere. Adding TikTok is a manifest and
- * a credential; the code that sends the request never learns a provider's name.
- */
-export interface Connector {
-    /** Null for a built-in — it is not a row and cannot be edited or deleted. */
-    id: Nullable<UUID>;
-    /** Stable identifier a connection references. Lowercase kebab-case. */
-    key: string;
-    name: string;
-    description: Nullable<string>;
-    /** Absolute https base every operation path is appended to. */
-    baseUrl: string;
-    auth: ConnectorAuthManifest;
-    operations: ConnectorOperation[];
-    /** Null means only the service-wide default applies. */
-    rateLimit: Nullable<ConnectorRateLimit>;
-    retry: ConnectorRetryPolicy;
-    /**
-     * Ships with Conduit, in code rather than as a seeded row. Override it by defining your own
-     * under the same key — resolution checks a tenant's rows first.
-     */
-    isBuiltIn: boolean;
-    /** Null for a built-in. */
-    createdAt: Nullable<IsoDateTime>;
-    /** Null for a built-in. */
-    updatedAt: Nullable<IsoDateTime>;
-}
-/** Built-ins plus whatever one customer has defined. `GET /api/v1/connectors`. */
-export interface ConnectorsList {
-    items: Connector[];
-}
-/** `POST /api/v1/connectors`. */
-export interface CreateConnectorBody {
-    key: string;
-    name: string;
-    description?: Nullable<string>;
-    baseUrl: string;
-    auth: ConnectorAuthManifestInput;
-    operations: ConnectorOperation[];
-    rateLimit?: Nullable<ConnectorRateLimit>;
-    retry?: Nullable<ConnectorRetryPolicy>;
-}
-/**
- * `PATCH /api/v1/connectors/:id`.
- *
- * `operations` replaces the list wholesale — there is no per-operation patch. Merging would make
- * "remove an operation" unexpressible, and an operation nobody can remove is a URL Conduit will
- * post to forever.
- */
-export interface UpdateConnectorBody {
-    name?: string;
-    description?: Nullable<string>;
-    baseUrl?: string;
-    auth?: ConnectorAuthManifestInput;
-    operations?: ConnectorOperation[];
-    rateLimit?: Nullable<ConnectorRateLimit>;
-    retry?: Nullable<ConnectorRetryPolicy>;
-}
-//# sourceMappingURL=connector.type.d.ts.map

package/dist/cjs/api/conduit/connector.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/connector.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,aAAa,CAAC;AACzD,eAAO,MAAM,kCAAkC,iBAAiB,CAAC;AACjE,eAAO,MAAM,kCAAkC,iBAAiB,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IAExB;;;;;OAKG;IACH,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhC,yEAAyE;IACzE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE7B,sGAAsG;IACtG,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,gGAAgG;IAChG,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE3B,wEAAwE;IACxE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExB;;;;;;;OAOG;IACH,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,qGAAqG;AACrG,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,iBAAiB,CAAC;IACxB,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAC/B,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IAEZ,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IAEb,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;;OAMG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACjC;AAED,oFAAoF;AACpF,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;OAMG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACtB,6EAA6E;IAC7E,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEnB,uEAAuE;IACvE,GAAG,EAAE,MAAM,CAAC;IAEZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAEhB,IAAI,EAAE,qBAAqB,CAAC;IAE5B,UAAU,EAAE,kBAAkB,EAAE,CAAC;IAEjC,wDAAwD;IACxD,SAAS,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAExC,KAAK,EAAE,oBAAoB,CAAC;IAE5B;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;IAEnB,2BAA2B;IAC3B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEjC,2BAA2B;IAC3B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;CACpC;AAED,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,iCAAiC;AACjC,MAAM,WAAW,mBAAmB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,0BAA0B,CAAC;IACjC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;CAC1C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,0BAA0B,CAAC;IAClC,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;CAC1C"}

package/dist/cjs/api/conduit/connector.type.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CONNECTOR_CREDENTIAL_REFRESH_TOKEN = exports.CONNECTOR_CREDENTIAL_CLIENT_SECRET = exports.CONNECTOR_CREDENTIAL_CLIENT_ID = void 0;
-/**
- * Credential names an OAuth manifest expects to find on a connection.
- *
- * Fixed rather than manifest-configurable: these are the field names RFC 6749 gives the token
- * request, so letting a manifest rename them would only allow it to be wrong.
- */
-exports.CONNECTOR_CREDENTIAL_CLIENT_ID = 'clientId';
-exports.CONNECTOR_CREDENTIAL_CLIENT_SECRET = 'clientSecret';
-exports.CONNECTOR_CREDENTIAL_REFRESH_TOKEN = 'refreshToken';
-//# sourceMappingURL=connector.type.js.map

package/dist/cjs/api/conduit/connector.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connector.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/connector.type.ts"],"names":[],"mappings":";;;AAMA;;;;;GAKG;AACU,QAAA,8BAA8B,GAAG,UAAU,CAAC;AAC5C,QAAA,kCAAkC,GAAG,cAAc,CAAC;AACpD,QAAA,kCAAkC,GAAG,cAAc,CAAC"}

package/dist/cjs/api/conduit/delivery-status.enum.d.ts

@@ -1,39 +0,0 @@
-/**
- * Where one delivery is in its life.
- *
- * The states a processor can be interrupted in matter as much as the ones it ends in, which is
- * why `IN_FLIGHT` is a status rather than an implied one: a replica killed mid-attempt leaves
- * rows in it, and the reclaim query needs something to look for.
- */
-export declare enum DeliveryStatus {
-    /** Waiting for its next attempt time. The only state the processor claims from. */
-    PENDING = "pending",
-    /**
-     * Claimed by a replica and being attempted right now.
-     *
-     * A row stuck here past the claim timeout is assumed abandoned and reclaimed. That reclaim
-     * is where at-least-once becomes visible — a replica that died *after* the receiver
-     * processed the request will have its work redone, which is what the idempotency key is
-     * for.
-     */
-    IN_FLIGHT = "in-flight",
-    /** The destination answered 2xx. Terminal. */
-    DELIVERED = "delivered",
-    /**
-     * Every attempt was used and none succeeded, or the failure was permanent. Terminal until an
-     * operator redrives it.
-     *
-     * **This is the dead-letter queue** — a status, not a separate resource. A DLQ that lives
-     * somewhere else is a DLQ nobody looks at.
-     */
-    DEAD_LETTERED = "dead-lettered",
-    /**
-     * An operator stopped it before it succeeded. Terminal.
-     *
-     * Distinct from `DEAD_LETTERED`: dead-lettered means the gateway tried and failed, cancelled
-     * means someone decided it should not be sent. Collapsing them makes "how reliable is our
-     * delivery" unanswerable.
-     */
-    CANCELLED = "cancelled"
-}
-//# sourceMappingURL=delivery-status.enum.d.ts.map

package/dist/cjs/api/conduit/delivery-status.enum.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-status.enum.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/delivery-status.enum.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,oBAAY,cAAc;IACtB,mFAAmF;IACnF,OAAO,YAAY;IAEnB;;;;;;;OAOG;IACH,SAAS,cAAc;IAEvB,8CAA8C;IAC9C,SAAS,cAAc;IAEvB;;;;;;OAMG;IACH,aAAa,kBAAkB;IAE/B;;;;;;OAMG;IACH,SAAS,cAAc;CAC1B"}

package/dist/cjs/api/conduit/delivery-status.enum.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeliveryStatus = void 0;
-/**
- * Where one delivery is in its life.
- *
- * The states a processor can be interrupted in matter as much as the ones it ends in, which is
- * why `IN_FLIGHT` is a status rather than an implied one: a replica killed mid-attempt leaves
- * rows in it, and the reclaim query needs something to look for.
- */
-var DeliveryStatus;
-(function (DeliveryStatus) {
-    /** Waiting for its next attempt time. The only state the processor claims from. */
-    DeliveryStatus["PENDING"] = "pending";
-    /**
-     * Claimed by a replica and being attempted right now.
-     *
-     * A row stuck here past the claim timeout is assumed abandoned and reclaimed. That reclaim
-     * is where at-least-once becomes visible — a replica that died *after* the receiver
-     * processed the request will have its work redone, which is what the idempotency key is
-     * for.
-     */
-    DeliveryStatus["IN_FLIGHT"] = "in-flight";
-    /** The destination answered 2xx. Terminal. */
-    DeliveryStatus["DELIVERED"] = "delivered";
-    /**
-     * Every attempt was used and none succeeded, or the failure was permanent. Terminal until an
-     * operator redrives it.
-     *
-     * **This is the dead-letter queue** — a status, not a separate resource. A DLQ that lives
-     * somewhere else is a DLQ nobody looks at.
-     */
-    DeliveryStatus["DEAD_LETTERED"] = "dead-lettered";
-    /**
-     * An operator stopped it before it succeeded. Terminal.
-     *
-     * Distinct from `DEAD_LETTERED`: dead-lettered means the gateway tried and failed, cancelled
-     * means someone decided it should not be sent. Collapsing them makes "how reliable is our
-     * delivery" unanswerable.
-     */
-    DeliveryStatus["CANCELLED"] = "cancelled";
-})(DeliveryStatus || (exports.DeliveryStatus = DeliveryStatus = {}));
-//# sourceMappingURL=delivery-status.enum.js.map

package/dist/cjs/api/conduit/delivery-status.enum.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery-status.enum.js","sourceRoot":"","sources":["../../../../src/api/conduit/delivery-status.enum.ts"],"names":[],"mappings":";;;AAAA;;;;;;GAMG;AACH,IAAY,cAkCX;AAlCD,WAAY,cAAc;IACtB,mFAAmF;IACnF,qCAAmB,CAAA;IAEnB;;;;;;;OAOG;IACH,yCAAuB,CAAA;IAEvB,8CAA8C;IAC9C,yCAAuB,CAAA;IAEvB;;;;;;OAMG;IACH,iDAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,yCAAuB,CAAA;AAC3B,CAAC,EAlCW,cAAc,8BAAd,cAAc,QAkCzB"}

package/dist/cjs/api/conduit/delivery.type.d.ts

@@ -1,122 +0,0 @@
-import type { CursorPage } from '../../type/cursor-page.type.js';
-import type { IsoDateTime } from '../../type/iso-date-time.type.js';
-import type { Nullable } from '../../type/nil.type.js';
-import type { UUID } from '../../type/uuid.type.js';
-import type { DeliveryStatus } from './delivery-status.enum.js';
-/** One capture on its way to one destination. */
-export interface Delivery {
-    id: UUID;
-    captureId: UUID;
-    /** The route that matched. May since have been deleted — the reference is loose. */
-    routeId: UUID;
-    destinationId: UUID;
-    /**
-     * Snapshotted when the delivery was enqueued, not read from the destination now: "we sent it
-     * here" must not silently become "we sent it wherever that points today".
-     */
-    targetUrl: string;
-    method: string;
-    /**
-     * Sent as `Idempotency-Key`, stable across every retry and every redrive.
-     *
-     * **At-least-once is the only guarantee Conduit offers.** A timeout that actually succeeded,
-     * a replica that died after the request landed, and an operator redriving a dead letter all
-     * arrive with the same key — a receiver must dedupe on it.
-     */
-    idempotencyKey: string;
-    status: DeliveryStatus;
-    attemptCount: number;
-    /** Snapshotted from the destination when enqueued. */
-    maxAttempts: number;
-    nextAttemptAt: IsoDateTime;
-    lastAttemptAt: Nullable<IsoDateTime>;
-    /** Null when no response arrived. See `lastError`. */
-    lastResponseStatus: Nullable<number>;
-    lastResponseBodyPreview: Nullable<string>;
-    lastError: Nullable<string>;
-    /** Set when an operator redrove this. */
-    redrivenByUserId: Nullable<UUID>;
-    completedAt: Nullable<IsoDateTime>;
-    createdAt: IsoDateTime;
-}
-/**
- * One attempt at one delivery.
- *
- * What makes a dead letter diagnosable: "timed out, 502, 502, 401" is a different afternoon from
- * "failed after 5 attempts", and the difference is whether the receiver was down or the
- * credential is wrong.
- */
-export interface DeliveryAttempt {
-    id: UUID;
-    /** 1-based. */
-    attemptNumber: number;
-    /** Null when no response arrived at all. */
-    responseStatus: Nullable<number>;
-    responseBodyPreview: Nullable<string>;
-    errorMessage: Nullable<string>;
-    /** Wall time, so a receiver that is slow rather than broken is visible. */
-    durationMs: number;
-    isSuccess: boolean;
-    createdAt: IsoDateTime;
-}
-/** `GET /api/v1/deliveries/:id/attempts`. Oldest first — an attempt history reads as a story. */
-export interface DeliveryAttemptsList {
-    items: DeliveryAttempt[];
-}
-/** `GET /api/v1/deliveries`. Cursor-paginated: the collection is appended to while it is read. */
-export type DeliveriesPage = CursorPage<Delivery>;
-/** Query for `GET /api/v1/deliveries`. */
-export interface GetDeliveriesQuery {
-    limit?: number;
-    /** Opaque cursor from the previous page's `nextCursor`. Never parse it. */
-    after?: Nullable<string>;
-    /** `dead-lettered` is the DLQ view. The DLQ is a filter, not a separate resource. */
-    status?: Nullable<DeliveryStatus>;
-    destinationId?: Nullable<UUID>;
-    /** Everything one capture fanned out to. */
-    captureId?: Nullable<UUID>;
-}
-/**
- * `GET /api/v1/deliveries/stats`.
- *
- * **The split between the two halves is the whole design, and it is not a presentation choice.**
- * A count is only as cheap as the set it scans, and "all time" is affordable only for a set
- * something else keeps small — so the backlog is counted over all time because the processor and
- * the retention sweep bound it, while throughput is counted over a window because nothing bounds
- * the delivered rows.
- *
- * It is also the honest reading for an operator: a dead letter from three days ago is still
- * somebody's data that never arrived, and windowing it would quietly retire the problem.
- */
-export interface DeliveryStats {
-    /** Deliveries still waiting on something, over all time. */
-    backlog: DeliveryBacklog;
-    /** How far back {@link DeliveryStats.recent} reaches. Fixed by the service. */
-    windowHours: number;
-    recent: DeliveryThroughput;
-}
-export interface DeliveryBacklog {
-    /** Queued, including rows waiting out a backoff. */
-    pending: number;
-    /** Claimed by a replica and being attempted. */
-    inFlight: number;
-    /**
-     * Out of attempts. Terminal until an operator redrives one, so this number does not come
-     * down on its own — which is exactly why it is the first thing a dashboard shows.
-     */
-    deadLettered: number;
-}
-/**
- * Deliveries **created** in the window, by the state they are in now.
- *
- * Created, rather than finished, because `created_at` is indexed and the terminal transition is
- * not — and `updated_at` would not answer the question either, since a redrive touches it too. A
- * delivery's whole life is one attempt budget of capped, jittered backoff, so the only rows this
- * misplaces are the handful created in the half hour before the window opened.
- */
-export interface DeliveryThroughput {
-    delivered: number;
-    /** The denominator's other half: `delivered / (delivered + deadLettered)` is the success rate. */
-    deadLettered: number;
-}
-//# sourceMappingURL=delivery.type.d.ts.map

package/dist/cjs/api/conduit/delivery.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/delivery.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,iDAAiD;AACjD,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,IAAI,CAAC;IAEhB,oFAAoF;IACpF,OAAO,EAAE,IAAI,CAAC;IAEd,aAAa,EAAE,IAAI,CAAC;IAEpB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,EAAE,MAAM,CAAC;IAEf;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB,MAAM,EAAE,cAAc,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IAErB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IAEpB,aAAa,EAAE,WAAW,CAAC;IAC3B,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IAErC,sDAAsD;IACtD,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAErC,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5B,yCAAyC;IACzC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEjC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC5B,EAAE,EAAE,IAAI,CAAC;IAET,eAAe;IACf,aAAa,EAAE,MAAM,CAAC;IAEtB,4CAA4C;IAC5C,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEjC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IAEnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACjC,KAAK,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,kGAAkG;AAClG,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;AAElD,0CAA0C;AAC1C,MAAM,WAAW,kBAAkB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,2EAA2E;IAC3E,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,qFAAqF;IACrF,MAAM,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAElC,aAAa,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE/B,4CAA4C;IAC5C,SAAS,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,aAAa;IAC1B,4DAA4D;IAC5D,OAAO,EAAE,eAAe,CAAC;IAEzB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,CAAC;IAEpB,MAAM,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC5B,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAEhB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAElB,kGAAkG;IAClG,YAAY,EAAE,MAAM,CAAC;CACxB"}

package/dist/cjs/api/conduit/delivery.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=delivery.type.js.map

package/dist/cjs/api/conduit/delivery.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delivery.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/delivery.type.ts"],"names":[],"mappings":""}

package/dist/cjs/api/conduit/destination.type.d.ts

@@ -1,73 +0,0 @@
-import type { IsoDateTime } from '../../type/iso-date-time.type.js';
-import type { Nullable } from '../../type/nil.type.js';
-import type { UUID } from '../../type/uuid.type.js';
-/**
- * A URL Conduit delivers to, in gateway mode.
- *
- * Carries `headerNames`, never the header values. Not masked, not truncated — the values have no
- * field to appear in, the same control the endpoint shapes use for signing secrets. An operator
- * can see that `authorization` is configured; nobody can read it back.
- */
-export interface Destination {
-    id: UUID;
-    name: string;
-    description: Nullable<string>;
-    url: string;
-    /** Null means the provider's own method is reused — a gateway is a proxy, and a PUT meant a PUT. */
-    method: Nullable<string>;
-    /** Sorted, lowercase. **The values are never returned by any endpoint of this API.** */
-    headerNames: string[];
-    /** Per-attempt timeout. Null falls back to the service default. */
-    timeoutMs: Nullable<number>;
-    /** Attempts before dead-lettering. Null falls back to the service default. */
-    maxAttempts: Nullable<number>;
-    /** Stops *new* deliveries being enqueued. Does not cancel ones already queued. */
-    isActive: boolean;
-    createdAt: IsoDateTime;
-    updatedAt: IsoDateTime;
-}
-/** `GET /api/v1/destinations`. Offset-paginated — a small, slow-moving collection. */
-export interface DestinationsPage {
-    items: Destination[];
-    total: number;
-    limit: number;
-    offset: number;
-}
-/** `POST /api/v1/destinations`. */
-export interface CreateDestinationBody {
-    name: string;
-    description?: Nullable<string>;
-    /**
-     * Absolute http/https URL. Private, loopback and link-local addresses are refused unless the
-     * service is configured to allow them, which it is locally and is not anywhere else.
-     * Credentials in the URL are rejected outright — send them as a header.
-     */
-    url: string;
-    method?: Nullable<string>;
-    /**
-     * Static headers merged over the forwarded ones. **Stored encrypted and never returned.**
-     * This is where an `Authorization` header for the receiver goes.
-     */
-    headers?: Nullable<Record<string, string>>;
-    timeoutMs?: Nullable<number>;
-    maxAttempts?: Nullable<number>;
-}
-/**
- * `PATCH /api/v1/destinations/:id`.
- *
- * **`headers` has three states, not two.** Omitting it leaves the stored map untouched, `null`
- * clears it, an object replaces it wholesale. A form must never send `{}` where it means
- * "unchanged" — that strips the receiver's auth header, and the symptom is 401s on deliveries
- * that worked yesterday.
- */
-export interface UpdateDestinationBody {
-    name?: string;
-    description?: Nullable<string>;
-    url?: string;
-    method?: Nullable<string>;
-    headers?: Nullable<Record<string, string>>;
-    timeoutMs?: Nullable<number>;
-    maxAttempts?: Nullable<number>;
-    isActive?: boolean;
-}
-//# sourceMappingURL=destination.type.d.ts.map

package/dist/cjs/api/conduit/destination.type.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"destination.type.d.ts","sourceRoot":"","sources":["../../../../src/api/conduit/destination.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IAEZ,oGAAoG;IACpG,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEzB,wFAAwF;IACxF,WAAW,EAAE,MAAM,EAAE,CAAC;IAEtB,mEAAmE;IACnE,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE5B,8EAA8E;IAC9E,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9B,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAElB,SAAS,EAAE,WAAW,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC;CAC1B;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAClB;AAED,mCAAmC;AACnC,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE/B;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE1B;;;OAGG;IACH,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACtB"}

package/dist/cjs/api/conduit/destination.type.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=destination.type.js.map

package/dist/cjs/api/conduit/destination.type.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"destination.type.js","sourceRoot":"","sources":["../../../../src/api/conduit/destination.type.ts"],"names":[],"mappings":""}