@ketvietlab/ketjs 0.1.1

package/dist/server/tenants.d.ts

@@ -0,0 +1,108 @@
+import type { AdapterPool } from '../data/pool.ts';
+import type { AppRegistry } from '../kernel/apps.ts';
+import type { Adapter, Manifest } from '../types.ts';
+import type { ThemeRuntime } from '../theme/render.ts';
+import type { Sessions } from './session.ts';
+import type { Joints } from '../theme/joints.ts';
+import type { IncomingMessage } from 'node:http';
+import type { RuntimeConfig } from './config.ts';
+export type TenantSpec = {
+    /**
+     * Which tenant a request belongs to. Null means this deployment does not serve
+     * it — answered as such rather than falling back to a default, because a default
+     * tenant is how one customer's request quietly reads another's data.
+     */
+    resolve: (url: URL, req: IncomingMessage) => string | null;
+    /** Open the datastore for one tenant. The app's, because drivers are the app's. */
+    open: (key: string, config: RuntimeConfig) => Adapter | Promise<Adapter>;
+    /**
+     * Every tenant this deployment serves. Needed to migrate the fleet, and to fail
+     * at boot rather than at 3am if one of them cannot be opened.
+     */
+    list: () => Promise<string[]>;
+    /** How many datastores stay open at once. Postgres has a hard connection ceiling. */
+    max?: number;
+    idleMs?: number;
+};
+/** What a request resolves to: its database, and what is switched on in it. */
+export type Tenant = {
+    key: string;
+    adapter: Adapter;
+    apps: AppRegistry;
+    live: Manifest;
+    /** Compiled against what this tenant has installed, and cached with it. */
+    theme: ThemeRuntime | null;
+    /**
+     * Extension points for one locale.
+     *
+     * KTL binds its `_` filter when it compiles, so a runtime is per language as
+     * well as per installed set — one bound to the deployment default made every
+     * fill answer in that language while the page around it answered in the
+     * reader's, which is what a sidebar entry in the wrong language looks like.
+     */
+    joints: (locale: string) => Joints;
+    /**
+     * Whose logins these are.
+     *
+     * Per tenant when the tenant is known before the cookie is read — which it is
+     * when tenants arrive by subdomain, because the Host says so. An app on one
+     * domain for every tenant cannot do that (reading the session needs the
+     * database, knowing the database needs the session), and supplies one shared
+     * store instead. Both are expressible; neither is assumed.
+     */
+    sessions: Sessions | null;
+};
+export type Tenants = {
+    keyOf: (url: URL, req: IncomingMessage) => string;
+    /** The pool, when there is one — the HTTP layer leases from it directly. */
+    pool: AdapterPool | null;
+    /**
+     * Lease a tenant's datastore for the duration of `fn`.
+     *
+     * Scoped rather than handed out, because the pool has a bounded size: an adapter
+     * that escapes its lease is a connection nobody gives back.
+     */
+    with: <T>(key: string, fn: (t: Tenant) => Promise<T>) => Promise<T>;
+    ofRequest: <T>(url: URL, req: IncomingMessage, fn: (t: Tenant) => Promise<T>) => Promise<T>;
+    keys: () => Promise<string[]>;
+    close: () => Promise<void>;
+};
+export declare function createTenants(o: {
+    spec: TenantSpec;
+    pool: AdapterPool;
+    manifest: Manifest;
+    autoInstall: boolean;
+    /**
+     * Run once per datastore, before anything reads it — this is where the schema
+     * arrives. A tenant database nobody migrated is a tenant with no tables, and
+     * every query against it fails in a way that looks like a bug in the query.
+     */
+    prepare?: (key: string, adapter: Adapter) => Promise<void>;
+    /** Run once, after the registry exists: the bootstrap set for a new tenant. */
+    onFirstTouch?: (key: string, apps: AppRegistry, adapter: Adapter) => Promise<void>;
+    /**
+     * Compiles the theme for one tenant's installed set. Cached, because compiling
+     * every template on every request would be the most expensive thing here.
+     */
+    theme?: (live: Manifest) => ThemeRuntime;
+    joints: (live: Manifest, locale: string) => Joints;
+    /** Built once per tenant, against that tenant's own datastore. */
+    sessions?: (adapter: Adapter) => Promise<Sessions>;
+}): Tenants;
+/**
+ * One datastore, expressed as the same interface.
+ *
+ * Not a special case in the caller: two code paths through the thing that decides
+ * whose data a request sees is exactly how one of them rots. Every existing test
+ * exercises this implementation, and the pooled one differs only in where the
+ * adapter comes from.
+ */
+export declare function singleTenant(o: {
+    adapter: Adapter;
+    apps: AppRegistry;
+    manifest: Manifest;
+    theme?: (live: Manifest) => ThemeRuntime;
+    joints: (live: Manifest, locale: string) => Joints;
+    sessions?: Sessions | null;
+}): Tenants;
+//# sourceMappingURL=tenants.d.ts.map

package/dist/server/tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/server/tenants.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,GAAG,IAAI,CAAA;IAC1D,mFAAmF;IACnF,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACxE;;;OAGG;IACH,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7B,qFAAqF;IACrF,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,+EAA+E;AAC/E,MAAM,MAAM,MAAM,GAAG;IACnB,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,QAAQ,CAAA;IACd,2EAA2E;IAC3E,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;IAC1B;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IAClC;;;;;;;;OAQG;IACH,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,KAAK,MAAM,CAAA;IACjD,4EAA4E;IAC5E,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB;;;;;OAKG;IACH,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IACnE,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3F,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B,CAAA;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE;IAC/B,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,QAAQ,CAAA;IAClB,WAAW,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1D,+EAA+E;IAC/E,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAClF;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,YAAY,CAAA;IACxC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IAClD,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CACnD,GAAG,OAAO,CAwGV;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,QAAQ,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,YAAY,CAAA;IACxC,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IAClD,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CAC3B,GAAG,OAAO,CA2CV"}

package/dist/server/tenants.js

@@ -0,0 +1,172 @@
+// One deployment, many databases.
+//
+// This is Odoo's model and it is the one that makes per-tenant module sets work at
+// all: the code ships with the deployment, the decision about what is switched on
+// lives in each database. `ket_app` per database is `ir_module_module` per
+// database, and D7 makes it cheaper here — every schema exists everywhere, so
+// enabling a module for a tenant is one UPDATE rather than a migration. Measured:
+// 400 empty tables cost 17 MB, and adding a column across all of them 43 ms.
+//
+// What this file exists to prevent is subtler than a missing feature. Until now
+// `bootApp` opened one adapter and built one AppRegistry at boot, so `live()` —
+// the restricted manifest — was computed once. Serving two tenants through that
+// would not crash; it would show tenant B the module set of tenant A. Wrong
+// answers are worse than errors, so the registry is per datastore and the manifest
+// is resolved per request.
+import { createAppRegistry, restrictManifest } from '../kernel/apps.js';
+import { KetError } from '../kernel/errors.js';
+export function createTenants(o) {
+    // One registry per datastore, kept: building it runs DDL, and doing that per
+    // request would put a CREATE TABLE IF NOT EXISTS in front of every page.
+    const registries = new Map();
+    const registryFor = (key, adapter) => {
+        let r = registries.get(key);
+        if (!r) {
+            r = (async () => {
+                await o.prepare?.(key, adapter);
+                const made = await createAppRegistry(o.manifest, adapter, { autoInstall: o.autoInstall });
+                await o.onFirstTouch?.(key, made, adapter);
+                return made;
+            })();
+            // Cached before it resolves, so two concurrent first requests for one tenant
+            // do not both run the DDL and both try to install the bootstrap set.
+            registries.set(key, r);
+        }
+        return r;
+    };
+    const keyOf = (url, req) => {
+        const key = o.spec.resolve(url, req);
+        if (!key) {
+            throw new KetError({
+                code: 'E_UNKNOWN_TENANT',
+                message: `no tenant for ${req.headers.host ?? url.host}`,
+                hint: 'tenants.resolve returned null — this deployment does not serve that host',
+            });
+        }
+        return key;
+    };
+    /**
+     * Both caches are keyed by tenant AND by what is installed, so switching an app
+     * on rebuilds rather than serving a stale answer until restart.
+     *
+     * The restricted manifest is worth caching for the same reason the theme is,
+     * and it always was: 0.015 ms a call against KetSuite's manifest, which is
+     * nothing until it is every request, and 0.0003 ms once kept. A deployment with
+     * one database benefits most, because its installed set almost never changes.
+     */
+    const lives = new Map();
+    const themes = new Map();
+    const jointsBy = new Map();
+    const sessions = new Map();
+    const sessionsFor = (key, adapter) => {
+        if (!o.sessions)
+            return null;
+        let s = sessions.get(key);
+        if (!s) {
+            s = o.sessions(adapter);
+            sessions.set(key, s);
+        }
+        return s;
+    };
+    const themeFor = (key, live) => {
+        if (!o.theme)
+            return null;
+        const stamp = `${key}::${live.order.join(',')}`;
+        let t = themes.get(stamp);
+        if (!t) {
+            t = o.theme(live);
+            themes.set(stamp, t);
+        }
+        return t;
+    };
+    const withTenant = (key, fn) => o.pool.with(key, async (adapter) => {
+        const apps = await registryFor(key, adapter);
+        // Resolved per request. The whole reason this file exists: computing it once
+        // would show one tenant the module set of another.
+        const stamp = `${key}::${[...(await apps.enabled())].sort().join(',')}`;
+        let live = lives.get(stamp);
+        if (!live) {
+            live = restrictManifest(o.manifest, await apps.enabled());
+            lives.set(stamp, live);
+        }
+        const jointsFor = (locale) => {
+            const k = `${stamp}::${locale}`;
+            let made = jointsBy.get(k);
+            if (!made) {
+                made = o.joints(live, locale);
+                jointsBy.set(k, made);
+            }
+            return made;
+        };
+        return fn({
+            key,
+            adapter,
+            apps,
+            live,
+            theme: themeFor(key, live),
+            joints: jointsFor,
+            sessions: await (sessionsFor(key, adapter) ?? Promise.resolve(null)),
+        });
+    });
+    return {
+        keyOf,
+        pool: o.pool,
+        with: withTenant,
+        ofRequest: (url, req, fn) => withTenant(keyOf(url, req), fn),
+        keys: () => o.spec.list(),
+        close: () => o.pool.close(),
+    };
+}
+/**
+ * One datastore, expressed as the same interface.
+ *
+ * Not a special case in the caller: two code paths through the thing that decides
+ * whose data a request sees is exactly how one of them rots. Every existing test
+ * exercises this implementation, and the pooled one differs only in where the
+ * adapter comes from.
+ */
+export function singleTenant(o) {
+    const lives = new Map();
+    const themes = new Map();
+    const jointsBy = new Map();
+    const run = async (key, fn) => {
+        const stamp = [...(await o.apps.enabled())].sort().join(',');
+        let live = lives.get(stamp);
+        if (!live) {
+            live = restrictManifest(o.manifest, await o.apps.enabled());
+            lives.set(stamp, live);
+        }
+        let theme = null;
+        if (o.theme) {
+            theme = themes.get(stamp) ?? o.theme(live);
+            themes.set(stamp, theme);
+        }
+        const jointsFor = (locale) => {
+            const k = `${stamp}::${locale}`;
+            let made = jointsBy.get(k);
+            if (!made) {
+                made = o.joints(live, locale);
+                jointsBy.set(k, made);
+            }
+            return made;
+        };
+        return fn({
+            key,
+            adapter: o.adapter,
+            apps: o.apps,
+            live,
+            theme,
+            joints: jointsFor,
+            sessions: o.sessions ?? null,
+        });
+    };
+    return {
+        keyOf: () => '',
+        pool: null,
+        with: run,
+        ofRequest: (_url, _req, fn) => run('', fn),
+        keys: async () => [''],
+        close: async () => { },
+    };
+}
+//# sourceMappingURL=tenants.js.map

package/dist/server/tenants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenants.js","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/tenants.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,mFAAmF;AACnF,kFAAkF;AAClF,2EAA2E;AAC3E,8EAA8E;AAC9E,kFAAkF;AAClF,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,mFAAmF;AACnF,2BAA2B;AAE3B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AA0E9C,MAAM,UAAU,aAAa,CAAC,CAqB7B;IACC,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAgC,CAAA;IAC1D,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,OAAgB,EAAwB,EAAE;QAC1E,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBACd,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;gBAC/B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;gBACzF,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;gBAC1C,OAAO,IAAI,CAAA;YACb,CAAC,CAAC,EAAE,CAAA;YACJ,6EAA6E;YAC7E,qEAAqE;YACrE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,CAAC,GAAQ,EAAE,GAAoB,EAAU,EAAE;QACvD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,iBAAiB,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE;gBACxD,IAAI,EAAE,0EAA0E;aACjF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC,CAAA;IAED;;;;;;;;OAQG;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAA;IACrD,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,OAAgB,EAA4B,EAAE;QAC9E,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC5B,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;YACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,IAAc,EAAuB,EAAE;QACpE,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,KAAK,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;QAC/C,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACjB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,MAAM,UAAU,GAAG,CAAI,GAAW,EAAE,EAA6B,EAAc,EAAE,CAC/E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC5C,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;QACvE,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;YACzD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACxB,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE;YAC3C,MAAM,CAAC,GAAG,GAAG,KAAK,KAAK,MAAM,EAAE,CAAA;YAC/B,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC7B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QACD,OAAO,EAAE,CAAC;YACR,GAAG;YACH,OAAO;YACP,IAAI;YACJ,IAAI;YACJ,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;YAC1B,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SACrE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEJ,OAAO;QACL,KAAK;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5D,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;KAC5B,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,CAO5B;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,MAAM,GAAG,GAAG,KAAK,EAAK,GAAW,EAAE,EAA6B,EAAc,EAAE;QAC9E,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5D,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;YAC3D,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,KAAK,GAAwB,IAAI,CAAA;QACrC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC1B,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,MAAc,EAAU,EAAE;YAC3C,MAAM,CAAC,GAAG,GAAG,KAAK,KAAK,MAAM,EAAE,CAAA;YAC/B,IAAI,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;gBAC7B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;YACvB,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QACD,OAAO,EAAE,CAAC;YACR,GAAG;YACH,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;SAC7B,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE;QACf,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,GAAG;QACT,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACtB,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACtB,CAAA;AACH,CAAC"}

package/dist/server/transport/index.d.ts

@@ -0,0 +1,5 @@
+export { effectTransport, unavailableTransport, validateOutboundMessage } from './types.ts';
+export { memoryTransport } from './memory.ts';
+export type { OpenTransport, OutboundMessage, OutboundTransport, TransportAddress, TransportEffect, TransportReceipt, } from './types.ts';
+export type { MemoryTransport } from './memory.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/transport/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/transport/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,YAAY,EACV,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/server/transport/index.js

@@ -0,0 +1,3 @@
+export { effectTransport, unavailableTransport, validateOutboundMessage } from './types.js';
+export { memoryTransport } from './memory.js';
+//# sourceMappingURL=index.js.map

package/dist/server/transport/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/transport/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA"}

package/dist/server/transport/memory.d.ts

@@ -0,0 +1,14 @@
+import type { OutboundMessage, OutboundTransport, TransportReceipt } from './types.ts';
+export type MemoryTransport = OutboundTransport & {
+    deliveries(): Array<{
+        message: OutboundMessage;
+        receipt: TransportReceipt;
+    }>;
+    attempts(idempotencyKey: string): number;
+};
+/** Deterministic provider double with retry failure injection and provider-side deduplication. */
+export declare function memoryTransport(options?: {
+    now?: () => Date;
+    fail?: (message: OutboundMessage, attempt: number) => Error | null;
+}): MemoryTransport;
+//# sourceMappingURL=memory.d.ts.map

package/dist/server/transport/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/transport/memory.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAEtF,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG;IAChD,UAAU,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAA;IAC5E,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAA;CACzC,CAAA;AAED,kGAAkG;AAClG,wBAAgB,eAAe,CAC7B,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,KAAK,KAAK,GAAG,IAAI,CAAA;CAAO,GACrG,eAAe,CA+BjB"}

package/dist/server/transport/memory.js

@@ -0,0 +1,36 @@
+import { validateOutboundMessage } from './types.js';
+/** Deterministic provider double with retry failure injection and provider-side deduplication. */
+export function memoryTransport(options = {}) {
+    const receipts = new Map();
+    const attemptCounts = new Map();
+    const now = options.now ?? (() => new Date());
+    return {
+        name: 'memory',
+        async send(message, sendOptions) {
+            validateOutboundMessage(message);
+            if (sendOptions?.signal?.aborted)
+                throw sendOptions.signal.reason ?? new Error('transport send aborted');
+            const attempt = (attemptCounts.get(message.idempotencyKey) ?? 0) + 1;
+            attemptCounts.set(message.idempotencyKey, attempt);
+            const previous = receipts.get(message.idempotencyKey);
+            if (previous)
+                return { ...previous.receipt, deduplicated: true };
+            const failure = options.fail?.(message, attempt);
+            if (failure)
+                throw failure;
+            const accepted = [...message.to, ...(message.cc ?? []), ...(message.bcc ?? [])].map((recipient) => recipient.address);
+            const receipt = {
+                providerMessageId: `memory:${message.idempotencyKey}`,
+                acceptedAt: now().toISOString(),
+                accepted,
+                rejected: [],
+                deduplicated: false,
+            };
+            receipts.set(message.idempotencyKey, { message: structuredClone(message), receipt });
+            return receipt;
+        },
+        deliveries: () => [...receipts.values()].map((delivery) => structuredClone(delivery)),
+        attempts: (idempotencyKey) => attemptCounts.get(idempotencyKey) ?? 0,
+    };
+}
+//# sourceMappingURL=memory.js.map

package/dist/server/transport/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/transport/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAQpD,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAC7B,OAAO,GAA6F,EAAE;IAEtG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmE,CAAA;IAC3F,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC7C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW;YAC7B,uBAAuB,CAAC,OAAO,CAAC,CAAA;YAChC,IAAI,WAAW,EAAE,MAAM,EAAE,OAAO;gBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;YACxG,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACpE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YACrD,IAAI,QAAQ;gBAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;YAChE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAChD,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAA;YAC1B,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CACjF,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CACjC,CAAA;YACD,MAAM,OAAO,GAAqB;gBAChC,iBAAiB,EAAE,UAAU,OAAO,CAAC,cAAc,EAAE;gBACrD,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC/B,QAAQ;gBACR,QAAQ,EAAE,EAAE;gBACZ,YAAY,EAAE,KAAK;aACpB,CAAA;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;YACpF,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACrF,QAAQ,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC;KACrE,CAAA;AACH,CAAC"}

package/dist/server/transport/types.d.ts

@@ -0,0 +1,44 @@
+export type TransportAddress = {
+    address: string;
+    name?: string;
+};
+export type OutboundMessage = {
+    /** Stable across retries; a provider that supports idempotency must use it verbatim. */
+    idempotencyKey: string;
+    from: TransportAddress;
+    to: TransportAddress[];
+    cc?: TransportAddress[];
+    bcc?: TransportAddress[];
+    replyTo?: TransportAddress;
+    subject: string;
+    text: string;
+    html?: string;
+    headers?: Record<string, string>;
+};
+export type TransportReceipt = {
+    providerMessageId: string;
+    acceptedAt: string;
+    accepted: string[];
+    rejected: Array<{
+        address: string;
+        reason: string;
+    }>;
+    /** True when the provider returned the result of an earlier call with the same key. */
+    deduplicated: boolean;
+};
+export type OutboundTransport = {
+    name: string;
+    send(message: OutboundMessage, options?: {
+        signal?: AbortSignal;
+    }): Promise<TransportReceipt>;
+    close?(): Promise<void>;
+};
+export type OpenTransport = (config: import('../config.ts').RuntimeConfig) => OutboundTransport | Promise<OutboundTransport>;
+export type TransportEffect = 'transport:send';
+/** Validate the provider boundary independently of any particular email SDK. */
+export declare function validateOutboundMessage(message: OutboundMessage): void;
+/** Apply the declared-effect boundary before an external side effect begins. */
+export declare function effectTransport(transport: OutboundTransport, effects: readonly string[], operation: string): OutboundTransport;
+/** Default keeps apps without email bootable and fails only if a job actually sends. */
+export declare function unavailableTransport(): OutboundTransport;
+//# sourceMappingURL=types.d.ts.map

package/dist/server/transport/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/server/transport/types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,eAAe,GAAG;IAC5B,wFAAwF;IACxF,cAAc,EAAE,MAAM,CAAA;IACtB,IAAI,EAAE,gBAAgB,CAAA;IACtB,EAAE,EAAE,gBAAgB,EAAE,CAAA;IACtB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACvB,GAAG,CAAC,EAAE,gBAAgB,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE,gBAAgB,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,EAAE,MAAM,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpD,uFAAuF;IACvF,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC7F,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,CAC1B,MAAM,EAAE,OAAO,cAAc,EAAE,aAAa,KACzC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;AAEnD,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAA;AAW9C,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAsCtE;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAC7B,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,SAAS,EAAE,MAAM,GAChB,iBAAiB,CAcnB;AAED,wFAAwF;AACxF,wBAAgB,oBAAoB,IAAI,iBAAiB,CAWxD"}

package/dist/server/transport/types.js

@@ -0,0 +1,79 @@
+import { KetError } from '../../kernel/errors.js';
+const noNewline = (label, value) => {
+    if (value.includes('\r') || value.includes('\n'))
+        throw new KetError({
+            code: 'E_TRANSPORT_MESSAGE',
+            message: `${label} contains a newline`,
+            hint: 'transport envelope headers must be single-line values',
+        });
+};
+/** Validate the provider boundary independently of any particular email SDK. */
+export function validateOutboundMessage(message) {
+    if (!message || typeof message !== 'object')
+        throw new KetError({ code: 'E_TRANSPORT_MESSAGE', message: 'outbound message must be an object' });
+    if (typeof message.idempotencyKey !== 'string' || !message.idempotencyKey.trim())
+        throw new KetError({
+            code: 'E_TRANSPORT_MESSAGE',
+            message: 'outbound message needs a non-empty idempotencyKey',
+        });
+    if (message.idempotencyKey.length > 200)
+        throw new KetError({
+            code: 'E_TRANSPORT_MESSAGE',
+            message: 'outbound idempotencyKey exceeds 200 characters',
+        });
+    noNewline('idempotencyKey', message.idempotencyKey);
+    if (typeof message.subject !== 'string' || typeof message.text !== 'string')
+        throw new KetError({ code: 'E_TRANSPORT_MESSAGE', message: 'outbound subject and text must be strings' });
+    noNewline('subject', message.subject);
+    const recipients = [...(message.to ?? []), ...(message.cc ?? []), ...(message.bcc ?? [])];
+    if (!recipients.length)
+        throw new KetError({
+            code: 'E_TRANSPORT_MESSAGE',
+            message: 'outbound message needs at least one recipient',
+        });
+    const addresses = [message.from, ...recipients, ...(message.replyTo ? [message.replyTo] : [])];
+    for (const [index, recipient] of addresses.entries()) {
+        if (!recipient || typeof recipient.address !== 'string' || !recipient.address.trim())
+            throw new KetError({
+                code: 'E_TRANSPORT_MESSAGE',
+                message: `outbound address ${index} is empty`,
+            });
+        noNewline(`address ${index}`, recipient.address);
+        if (recipient.name !== undefined)
+            noNewline(`address name ${index}`, recipient.name);
+    }
+    for (const [name, value] of Object.entries(message.headers ?? {})) {
+        noNewline('header name', name);
+        noNewline(`header ${name}`, value);
+    }
+}
+/** Apply the declared-effect boundary before an external side effect begins. */
+export function effectTransport(transport, effects, operation) {
+    return {
+        name: transport.name,
+        send(message, options) {
+            if (!effects.includes('transport:send'))
+                throw new KetError({
+                    code: 'E_EFFECT_NOT_DECLARED',
+                    message: `"${operation}" attempted transport:send but declares effects [${effects.join(', ') || 'none'}]`,
+                    hint: 'add "transport:send" to the job effects, or stop sending through the outbound transport',
+                });
+            validateOutboundMessage(message);
+            return transport.send(message, options);
+        },
+    };
+}
+/** Default keeps apps without email bootable and fails only if a job actually sends. */
+export function unavailableTransport() {
+    return {
+        name: 'unavailable',
+        async send() {
+            throw new KetError({
+                code: 'E_TRANSPORT_UNAVAILABLE',
+                message: 'no outbound transport is configured for this app',
+                hint: 'provide serve.openTransport in the app deployment',
+            });
+        },
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/server/transport/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../packages/ketjs/src/server/transport/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAuCjD,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,GAAG,KAAK,qBAAqB;YACtC,IAAI,EAAE,uDAAuD;SAC9D,CAAC,CAAA;AACN,CAAC,CAAA;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAA;IACpG,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE;QAC9E,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAA;IACJ,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG;QACrC,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAA;IACJ,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACnD,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QACzE,MAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAA;IAC3G,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;IACzF,IAAI,CAAC,UAAU,CAAC,MAAM;QACpB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAA;IACJ,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE;YAClF,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,oBAAoB,KAAK,WAAW;aAC9C,CAAC,CAAA;QACJ,SAAS,CAAC,WAAW,KAAK,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS,CAAC,gBAAgB,KAAK,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;IACtF,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAClE,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAC9B,SAAS,CAAC,UAAU,IAAI,EAAE,EAAE,KAAK,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAC7B,SAA4B,EAC5B,OAA0B,EAC1B,SAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBACrC,MAAM,IAAI,QAAQ,CAAC;oBACjB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,IAAI,SAAS,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;oBACzG,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAA;YACJ,uBAAuB,CAAC,OAAO,CAAC,CAAA;YAChC,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACzC,CAAC;KACF,CAAA;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,kDAAkD;gBAC3D,IAAI,EAAE,mDAAmD;aAC1D,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/server/worker.d.ts

@@ -0,0 +1,33 @@
+import type { AppSpec } from '../kernel/workspace.ts';
+import type { Manifest } from '../types.ts';
+export type WorkerLog = {
+    event: 'started' | 'completed' | 'retrying' | 'discarded' | 'cancelled' | 'handler_ignored_abort';
+    workerId: string;
+    tenant: string;
+    jobId: string;
+    job: string;
+    queue: string;
+    attempt: number;
+    durationMs?: number;
+    error?: string;
+};
+export type BootedWorker = {
+    workerId: string;
+    manifest: Manifest;
+    /** Claim one fair pass without starting a permanent loop. */
+    runOnce(): Promise<number>;
+    /** Keep claiming until no due work and all claimed jobs have settled. */
+    drain(): Promise<number>;
+    /** Start adaptive polling. Idempotent. */
+    start(): void;
+    close(): Promise<void>;
+};
+export declare function bootWorker(spec: AppSpec, options?: {
+    env?: Record<string, string | undefined>;
+    workerId?: string;
+    now?: () => Date;
+    random?: () => number;
+    log?: (entry: WorkerLog) => void;
+}): Promise<BootedWorker>;
+export declare function serveWorker(spec: AppSpec, options?: Parameters<typeof bootWorker>[1]): Promise<BootedWorker>;
+//# sourceMappingURL=worker.d.ts.map

package/dist/server/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/server/worker.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AACrD,OAAO,KAAK,EAAuB,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGhE,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,uBAAuB,CAAA;IACjG,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,QAAQ,CAAA;IAClB,6DAA6D;IAC7D,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1B,yEAAyE;IACzE,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACxB,0CAA0C;IAC1C,KAAK,IAAI,IAAI,CAAA;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB,CAAA;AAkED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,OAAO,EACb,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAA;CAC5B,GACL,OAAO,CAAC,YAAY,CAAC,CAwWvB;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAM,GAC7C,OAAO,CAAC,YAAY,CAAC,CAMvB"}