@mycreat-labs/integrations-sdk 0.0.0-stage → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.1.1 — 2026-11-01
+
+- Accept Notion's documented `refresh_token: null` response without fabricating
+  a refresh credential or preserving a previously rotated refresh token. The
+  response field remains required; missing, empty or malformed values are rejected.
+- Verify that non-refreshable grants remain usable without an advertised expiry,
+  require reauthorization on a definite 401 or advertised expiry, and never
+  automatically redispatch rejected or expired writes.
+
+Contract: [Notion Create a token](https://developers.notion.com/reference/create-a-token).
+This release requires no API or storage migration and does not modify the
+published `0.1.0` artifact. Consumers choose when to upgrade their pinned version.

package/README.md

@@ -1,3 +1,55 @@
-# Temporary Holding Version
+# App Integrations SDK
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Product-embedded, server-side third-party identity and integration runtime. Each product owns its users, sessions, OAuth registrations, encryption keys, database, Redis and deployment. No shared service or cross-product account is required.
+
+## Package and supported runtime
+
+`@mycreat-labs/integrations-sdk` 0.1.0 targets Node.js 22.12+ and 24, with ESM, CommonJS and declaration exports. The main entry has no ORM, NestJS, Redis or BullMQ runtime dependency. Optional adapters are imported explicitly from `/prisma`, `/postgres`, `/redis` and `/bullmq`. `/providers` exports individually configured Google, Apple, GitHub, Notion and Raindrop factories. `/testing` is explicitly test-only.
+
+The package is intended for an internal npm registry. Until a registry is configured and publication separately authorized, install the exact local `pnpm pack` artifact in each product's `vendor/` directory and commit its lockfile when committing the implementation. Do not depend on another checkout, a moving branch, or a workspace path across products. No package has been published by this implementation.
+
+## Host integration
+
+1. Copy the versioned models from `schema.prisma` into the product schema. Review and apply `migrations/0001_initial.sql` through the product migration pipeline. Existing integrations require the compatibility steps in [migration guidance](docs/migration.md). Importing the SDK never runs DDL.
+2. Inject the product's client using `createPrismaStore(database)`, its provider registrations and an explicit `createTokenVault({ activeKeyId, keys })` keyring. Each key is a base64-encoded random 32-byte value; keep real keys out of source control.
+3. Call `createIntegrationSdk({ namespace, store, vault, providers, hooks })`. Namespaces must distinguish product and environment. Missing providers are omitted; partially configured providers fail validation.
+4. In the product's existing native transaction use `sdk.withStore(bindPrismaTransaction(tx))`. Enqueue the SDK operation and product records/outbox together. Neither the bridge nor SDK opens another connection in this path.
+5. Mount the product's own authenticated routes and OAuth callbacks. Start the explicitly constructed runtime in the product's Worker. See [embedded-host example](examples/embedded-host.ts).
+
+SDK authorization transactions last ten minutes, bind to a caller-generated cryptographically random browser binding, and are atomically consumed. Product routes must protect cookies, check CSRF/origin, restrict callback/return URLs, authenticate the current owner, apply product admission and rate policies, and finish the product's own account/session flow. Desktop/extensions keep their product authorization origins and handoff protocols. A Node SDK does not run inside Swift; native apps use official login components or the system browser and their own product backend.
+
+`identity.start/complete` return a verified external identity only. `identity.startNative` issues a server-side nonce/state and `identity.verifyNative` consumes that challenge. An email is profile data, never sufficient proof for merging accounts. Provider identity namespaces are explicit and separate from platform-specific client IDs. Existing native Apple refresh/revocation and product session behavior must remain under their existing owner until deliberately migrated.
+
+## Connections and operations
+
+- `connections.start/complete/list/disconnect` manage local connections and independent consent. A fresh connection flow supersedes the previous unfinished connect flow for that same owner/provider/registration. Reauthorization checks account identity, authorization epoch and connection generation. Disconnect invalidates in-flight authorizations before scheduling remote cleanup.
+- `resources.list` returns authorized external resources. Notion actions use `create_page` with typed `NotionCreatePageInput`; Raindrop actions use `create_bookmark` with typed `RaindropCreateBookmarkInput`. Input validation and factory types are exported from `/providers`; product IDs belong in `operations.enqueue(...hostContext)`, rather than provider content.
+- `operations.enqueue/get/list/recover` use persistent idempotency and a request fingerprint. The SDK operation is the execution state source; products keep operation IDs and presentation projections. Successful content input is cleared, while status and remote receipts remain.
+- Hooks receive the host's actual native transaction. `beforeExecute` checks local account/content/admission state immediately before persisting dispatch intent; `onResult` checks again before atomically committing successful SDK state, event and host projection. Keep hooks transactional and free of remote calls. Use a consistent lock order: SDK owner, product user, operation/connection as required; host transactions and callbacks must follow the same order.
+- A remote write whose response was lost is reconciled from safe provider receipts. The SDK never promises exactly-once external writes. Without a trustworthy receipt, the operation stays `outcome_unknown` for inspection; it does not silently create another remote resource.
+
+The v1 new-connection store deliberately allows one local owner per namespace/provider/registration/remote-account identity. It rejects cross-owner rebinding rather than pretending that separate token rows imply separate upstream grants. Products needing shared installations must supply a reviewed reference-counted grant adapter; Subtic's existing shared-grant lifecycle remains in its legacy store. Products still have separate OAuth registrations, databases and keys.
+
+Notion supports upstream revocation. Raindrop does not document a supported revoke endpoint, so disconnect revokes the local connection and users can remove the application in Raindrop settings. A configured remote revocation is durable, blocks reconnect until settled, and can be retried with `operations.recover` even for a revoked connection. `eraseOwner` first persists an owner tombstone, removes content and regular work, and retains only outstanding revocation material; successful cleanup removes the remaining grant/connection records. Restore missing provider/key configuration before resolving retained cleanup work. Already-sent remote requests cannot be rolled back by a local account deletion.
+
+## Worker and infrastructure
+
+`createRuntime({ sdk, queue })` has explicit start/stop and health reporting. Use `createBullMqTransport({ connection, prefix, concurrency })` with product-owned Redis. Queue messages contain task ID/version; PostgreSQL is authoritative. Lost queue data, duplicate messages, crashed workers and expired leases are recovered from the database. The host should expose runtime health, monitor authorization/refresh failures and task age, and apply existing product notification/outbox policies.
+
+`createRedisRateLimiter` provides shared admission to API and Worker requests. Inject it through `rateLimiter`; API/resource and credential-refresh budgets use separate keys so exhausted content requests cannot starve necessary refresh. Requests wait for admission for up to ten seconds with cancellation, so multi-request operations can progress even under a one-request-per-window budget. Missing Redis fails before HTTP dispatch with a definite, safely retryable error. OAuth login traffic also needs the product's normal authentication rate controls.
+
+The explicit runtime removes expired authorization flows and superseded unreferenced revoked grants. Failed/blocked/unknown content payloads expire after seven days by default (`failedPayloadRetentionMs`); expired input cannot be automatically replayed. Revocation work is exempt. Never log credentials, request bodies or original content. Logs expose bounded error codes and provider identifiers only.
+
+## Development and verification
+
+```sh
+pnpm install --frozen-lockfile
+pnpm typecheck
+pnpm test
+pnpm build
+pnpm pack --pack-destination .artifacts
+```
+
+Database tests require an explicitly supplied `SDK_TEST_DATABASE_URL` pointing to a local database named `integration_sdk_test`; they reset only SDK test tables in that database. Run `pnpm test:integration`. Packed ESM/CommonJS boundary tests require `SDK_PACKAGE_ARCHIVE=/absolute/path/mycreat-labs-integrations-sdk-0.1.0.tgz pnpm exec vitest run test/providers.package.test.ts`.
+
+See [security and provider references](docs/security.md), [migration guidance](docs/migration.md), and [verification record](docs/verification.md). Mocked protocols and local builds do not prove real OAuth consent, third-party writes, native device acceptance or production deployment.

package/dist/adapters/bullmq.cjs

@@ -0,0 +1,110 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/adapters/bullmq.ts
+var bullmq_exports = {};
+__export(bullmq_exports, {
+  createBullMqTransport: () => createBullMqTransport
+});
+module.exports = __toCommonJS(bullmq_exports);
+var import_bullmq = require("bullmq");
+
+// src/errors.ts
+var IntegrationError = class extends Error {
+  constructor(code, disposition = "permanent_failure", retryAfterMs) {
+    super(code);
+    this.code = code;
+    this.disposition = disposition;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "IntegrationError";
+  }
+  code;
+  disposition;
+  retryAfterMs;
+  sdkError = "@mycreat-labs/integrations-sdk/v1";
+};
+
+// src/adapters/bullmq.ts
+function createBullMqTransport(options) {
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.prefix))
+    throw new IntegrationError("invalid_queue_prefix");
+  const name = options.queueName ?? "integration-operations";
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(name))
+    throw new IntegrationError("invalid_queue_name");
+  let queue;
+  let worker;
+  return {
+    async publish(messages) {
+      if (!queue) throw new IntegrationError("queue_not_started");
+      for (const message of messages) {
+        const id = `${message.taskId}-${message.version}`;
+        const previous = await queue.getJob(id);
+        if (previous && ["completed", "failed"].includes(await previous.getState()))
+          await previous.remove();
+      }
+      if (messages.length)
+        await queue.addBulk(
+          messages.map((data) => ({
+            name: "operation",
+            data,
+            opts: {
+              jobId: `${data.taskId}-${data.version}`,
+              removeOnComplete: 1e3,
+              removeOnFail: 1e3
+            }
+          }))
+        );
+    },
+    async start(handler) {
+      if (worker) return;
+      queue = new import_bullmq.Queue(name, {
+        connection: options.connection,
+        prefix: options.prefix
+      });
+      worker = new import_bullmq.Worker(
+        name,
+        async (job) => {
+          const data = job.data;
+          if (typeof data?.taskId !== "string" || !Number.isSafeInteger(data.version) || data.version < 1)
+            return;
+          await handler(data);
+        },
+        {
+          connection: options.connection,
+          prefix: options.prefix,
+          concurrency: options.concurrency ?? 2
+        }
+      );
+      worker.on("error", () => void 0);
+      queue.on("error", () => void 0);
+      await worker.waitUntilReady();
+    },
+    async stop() {
+      await worker?.close();
+      await queue?.close();
+      worker = void 0;
+      queue = void 0;
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createBullMqTransport
+});
+//# sourceMappingURL=bullmq.cjs.map

package/dist/adapters/bullmq.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/bullmq.ts","../../src/errors.ts"],"sourcesContent":["import { Queue, Worker } from \"bullmq\";\nimport type Redis from \"ioredis\";\nimport { IntegrationError } from \"../errors\";\nimport type { QueueTransport, TaskMessage } from \"../types\";\n\nexport function createBullMqTransport(options: {\n  connection: Redis;\n  prefix: string;\n  queueName?: string;\n  concurrency?: number;\n}): QueueTransport {\n  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.prefix))\n    throw new IntegrationError(\"invalid_queue_prefix\");\n  const name = options.queueName ?? \"integration-operations\";\n  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(name))\n    throw new IntegrationError(\"invalid_queue_name\");\n  let queue: Queue<TaskMessage> | undefined;\n  let worker: Worker<TaskMessage> | undefined;\n  return {\n    async publish(messages) {\n      if (!queue) throw new IntegrationError(\"queue_not_started\");\n      for (const message of messages) {\n        const id = `${message.taskId}-${message.version}`;\n        const previous = await queue.getJob(id);\n        if (\n          previous &&\n          [\"completed\", \"failed\"].includes(await previous.getState())\n        )\n          await previous.remove();\n      }\n      if (messages.length)\n        await queue.addBulk(\n          messages.map((data) => ({\n            name: \"operation\",\n            data,\n            opts: {\n              jobId: `${data.taskId}-${data.version}`,\n              removeOnComplete: 1000,\n              removeOnFail: 1000,\n            },\n          })),\n        );\n    },\n    async start(handler) {\n      if (worker) return;\n      queue = new Queue<TaskMessage>(name, {\n        connection: options.connection,\n        prefix: options.prefix,\n      });\n      worker = new Worker<TaskMessage>(\n        name,\n        async (job) => {\n          const data = job.data;\n          if (\n            typeof data?.taskId !== \"string\" ||\n            !Number.isSafeInteger(data.version) ||\n            data.version < 1\n          )\n            return;\n          await handler(data);\n        },\n        {\n          connection: options.connection,\n          prefix: options.prefix,\n          concurrency: options.concurrency ?? 2,\n        },\n      );\n      // Runtime health reports queue errors; never emit unhandled EventEmitter errors.\n      worker.on(\"error\", () => undefined);\n      queue.on(\"error\", () => undefined);\n      await worker.waitUntilReady();\n    },\n    async stop() {\n      await worker?.close();\n      await queue?.close();\n      worker = undefined;\n      queue = undefined;\n    },\n  };\n}\n","export type FailureDisposition =\n  \"retryable\" | \"requires_reauth\" | \"outcome_unknown\" | \"permanent_failure\";\nexport class IntegrationError extends Error {\n  readonly sdkError = \"@mycreat-labs/integrations-sdk/v1\";\n  constructor(\n    readonly code: string,\n    readonly disposition: FailureDisposition = \"permanent_failure\",\n    readonly retryAfterMs?: number,\n  ) {\n    super(code);\n    this.name = \"IntegrationError\";\n  }\n}\nexport function integrationError(error: unknown): IntegrationError {\n  if (error instanceof IntegrationError) return error;\n  // Bundled subpath entries and independently installed copies have separate class identities.\n  if (\n    error instanceof Error &&\n    \"sdkError\" in error &&\n    error.sdkError === \"@mycreat-labs/integrations-sdk/v1\" &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    /^[a-zA-Z0-9_]{1,100}$/.test(error.code) &&\n    \"disposition\" in error &&\n    [\n      \"retryable\",\n      \"requires_reauth\",\n      \"outcome_unknown\",\n      \"permanent_failure\",\n    ].includes(String(error.disposition))\n  ) {\n    const delay =\n      \"retryAfterMs\" in error &&\n      typeof error.retryAfterMs === \"number\" &&\n      Number.isFinite(error.retryAfterMs) &&\n      error.retryAfterMs >= 0\n        ? error.retryAfterMs\n        : undefined;\n    return new IntegrationError(\n      error.code,\n      error.disposition as FailureDisposition,\n      delay,\n    );\n  }\n  return new IntegrationError(\"provider_unavailable\", \"outcome_unknown\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAA8B;;;ACEvB,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAE1C,YACW,MACA,cAAkC,qBAClC,cACT;AACA,UAAM,IAAI;AAJD;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAAA,EAJF,WAAW;AAStB;;;ADPO,SAAS,sBAAsB,SAKnB;AACjB,MAAI,CAAC,yBAAyB,KAAK,QAAQ,MAAM;AAC/C,UAAM,IAAI,iBAAiB,sBAAsB;AACnD,QAAM,OAAO,QAAQ,aAAa;AAClC,MAAI,CAAC,yBAAyB,KAAK,IAAI;AACrC,UAAM,IAAI,iBAAiB,oBAAoB;AACjD,MAAI;AACJ,MAAI;AACJ,SAAO;AAAA,IACL,MAAM,QAAQ,UAAU;AACtB,UAAI,CAAC,MAAO,OAAM,IAAI,iBAAiB,mBAAmB;AAC1D,iBAAW,WAAW,UAAU;AAC9B,cAAM,KAAK,GAAG,QAAQ,MAAM,IAAI,QAAQ,OAAO;AAC/C,cAAM,WAAW,MAAM,MAAM,OAAO,EAAE;AACtC,YACE,YACA,CAAC,aAAa,QAAQ,EAAE,SAAS,MAAM,SAAS,SAAS,CAAC;AAE1D,gBAAM,SAAS,OAAO;AAAA,MAC1B;AACA,UAAI,SAAS;AACX,cAAM,MAAM;AAAA,UACV,SAAS,IAAI,CAAC,UAAU;AAAA,YACtB,MAAM;AAAA,YACN;AAAA,YACA,MAAM;AAAA,cACJ,OAAO,GAAG,KAAK,MAAM,IAAI,KAAK,OAAO;AAAA,cACrC,kBAAkB;AAAA,cAClB,cAAc;AAAA,YAChB;AAAA,UACF,EAAE;AAAA,QACJ;AAAA,IACJ;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,UAAI,OAAQ;AACZ,cAAQ,IAAI,oBAAmB,MAAM;AAAA,QACnC,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,eAAS,IAAI;AAAA,QACX;AAAA,QACA,OAAO,QAAQ;AACb,gBAAM,OAAO,IAAI;AACjB,cACE,OAAO,MAAM,WAAW,YACxB,CAAC,OAAO,cAAc,KAAK,OAAO,KAClC,KAAK,UAAU;AAEf;AACF,gBAAM,QAAQ,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,UACE,YAAY,QAAQ;AAAA,UACpB,QAAQ,QAAQ;AAAA,UAChB,aAAa,QAAQ,eAAe;AAAA,QACtC;AAAA,MACF;AAEA,aAAO,GAAG,SAAS,MAAM,MAAS;AAClC,YAAM,GAAG,SAAS,MAAM,MAAS;AACjC,YAAM,OAAO,eAAe;AAAA,IAC9B;AAAA,IACA,MAAM,OAAO;AACX,YAAM,QAAQ,MAAM;AACpB,YAAM,OAAO,MAAM;AACnB,eAAS;AACT,cAAQ;AAAA,IACV;AAAA,EACF;AACF;","names":[]}

package/dist/adapters/bullmq.d.cts

@@ -0,0 +1,11 @@
+import Redis from 'ioredis';
+import { Q as QueueTransport } from '../types-Y4-DoJ1A.cjs';
+
+declare function createBullMqTransport(options: {
+    connection: Redis;
+    prefix: string;
+    queueName?: string;
+    concurrency?: number;
+}): QueueTransport;
+
+export { createBullMqTransport };

package/dist/adapters/bullmq.d.ts

@@ -0,0 +1,11 @@
+import Redis from 'ioredis';
+import { Q as QueueTransport } from '../types-Y4-DoJ1A.js';
+
+declare function createBullMqTransport(options: {
+    connection: Redis;
+    prefix: string;
+    queueName?: string;
+    concurrency?: number;
+}): QueueTransport;
+
+export { createBullMqTransport };

package/dist/adapters/bullmq.js

@@ -0,0 +1,85 @@
+// src/adapters/bullmq.ts
+import { Queue, Worker } from "bullmq";
+
+// src/errors.ts
+var IntegrationError = class extends Error {
+  constructor(code, disposition = "permanent_failure", retryAfterMs) {
+    super(code);
+    this.code = code;
+    this.disposition = disposition;
+    this.retryAfterMs = retryAfterMs;
+    this.name = "IntegrationError";
+  }
+  code;
+  disposition;
+  retryAfterMs;
+  sdkError = "@mycreat-labs/integrations-sdk/v1";
+};
+
+// src/adapters/bullmq.ts
+function createBullMqTransport(options) {
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.prefix))
+    throw new IntegrationError("invalid_queue_prefix");
+  const name = options.queueName ?? "integration-operations";
+  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(name))
+    throw new IntegrationError("invalid_queue_name");
+  let queue;
+  let worker;
+  return {
+    async publish(messages) {
+      if (!queue) throw new IntegrationError("queue_not_started");
+      for (const message of messages) {
+        const id = `${message.taskId}-${message.version}`;
+        const previous = await queue.getJob(id);
+        if (previous && ["completed", "failed"].includes(await previous.getState()))
+          await previous.remove();
+      }
+      if (messages.length)
+        await queue.addBulk(
+          messages.map((data) => ({
+            name: "operation",
+            data,
+            opts: {
+              jobId: `${data.taskId}-${data.version}`,
+              removeOnComplete: 1e3,
+              removeOnFail: 1e3
+            }
+          }))
+        );
+    },
+    async start(handler) {
+      if (worker) return;
+      queue = new Queue(name, {
+        connection: options.connection,
+        prefix: options.prefix
+      });
+      worker = new Worker(
+        name,
+        async (job) => {
+          const data = job.data;
+          if (typeof data?.taskId !== "string" || !Number.isSafeInteger(data.version) || data.version < 1)
+            return;
+          await handler(data);
+        },
+        {
+          connection: options.connection,
+          prefix: options.prefix,
+          concurrency: options.concurrency ?? 2
+        }
+      );
+      worker.on("error", () => void 0);
+      queue.on("error", () => void 0);
+      await worker.waitUntilReady();
+    },
+    async stop() {
+      await worker?.close();
+      await queue?.close();
+      worker = void 0;
+      queue = void 0;
+    }
+  };
+}
+export {
+  createBullMqTransport
+};
+//# sourceMappingURL=bullmq.js.map

package/dist/adapters/bullmq.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/bullmq.ts","../../src/errors.ts"],"sourcesContent":["import { Queue, Worker } from \"bullmq\";\nimport type Redis from \"ioredis\";\nimport { IntegrationError } from \"../errors\";\nimport type { QueueTransport, TaskMessage } from \"../types\";\n\nexport function createBullMqTransport(options: {\n  connection: Redis;\n  prefix: string;\n  queueName?: string;\n  concurrency?: number;\n}): QueueTransport {\n  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(options.prefix))\n    throw new IntegrationError(\"invalid_queue_prefix\");\n  const name = options.queueName ?? \"integration-operations\";\n  if (!/^[a-zA-Z0-9_-]{1,128}$/.test(name))\n    throw new IntegrationError(\"invalid_queue_name\");\n  let queue: Queue<TaskMessage> | undefined;\n  let worker: Worker<TaskMessage> | undefined;\n  return {\n    async publish(messages) {\n      if (!queue) throw new IntegrationError(\"queue_not_started\");\n      for (const message of messages) {\n        const id = `${message.taskId}-${message.version}`;\n        const previous = await queue.getJob(id);\n        if (\n          previous &&\n          [\"completed\", \"failed\"].includes(await previous.getState())\n        )\n          await previous.remove();\n      }\n      if (messages.length)\n        await queue.addBulk(\n          messages.map((data) => ({\n            name: \"operation\",\n            data,\n            opts: {\n              jobId: `${data.taskId}-${data.version}`,\n              removeOnComplete: 1000,\n              removeOnFail: 1000,\n            },\n          })),\n        );\n    },\n    async start(handler) {\n      if (worker) return;\n      queue = new Queue<TaskMessage>(name, {\n        connection: options.connection,\n        prefix: options.prefix,\n      });\n      worker = new Worker<TaskMessage>(\n        name,\n        async (job) => {\n          const data = job.data;\n          if (\n            typeof data?.taskId !== \"string\" ||\n            !Number.isSafeInteger(data.version) ||\n            data.version < 1\n          )\n            return;\n          await handler(data);\n        },\n        {\n          connection: options.connection,\n          prefix: options.prefix,\n          concurrency: options.concurrency ?? 2,\n        },\n      );\n      // Runtime health reports queue errors; never emit unhandled EventEmitter errors.\n      worker.on(\"error\", () => undefined);\n      queue.on(\"error\", () => undefined);\n      await worker.waitUntilReady();\n    },\n    async stop() {\n      await worker?.close();\n      await queue?.close();\n      worker = undefined;\n      queue = undefined;\n    },\n  };\n}\n","export type FailureDisposition =\n  \"retryable\" | \"requires_reauth\" | \"outcome_unknown\" | \"permanent_failure\";\nexport class IntegrationError extends Error {\n  readonly sdkError = \"@mycreat-labs/integrations-sdk/v1\";\n  constructor(\n    readonly code: string,\n    readonly disposition: FailureDisposition = \"permanent_failure\",\n    readonly retryAfterMs?: number,\n  ) {\n    super(code);\n    this.name = \"IntegrationError\";\n  }\n}\nexport function integrationError(error: unknown): IntegrationError {\n  if (error instanceof IntegrationError) return error;\n  // Bundled subpath entries and independently installed copies have separate class identities.\n  if (\n    error instanceof Error &&\n    \"sdkError\" in error &&\n    error.sdkError === \"@mycreat-labs/integrations-sdk/v1\" &&\n    \"code\" in error &&\n    typeof error.code === \"string\" &&\n    /^[a-zA-Z0-9_]{1,100}$/.test(error.code) &&\n    \"disposition\" in error &&\n    [\n      \"retryable\",\n      \"requires_reauth\",\n      \"outcome_unknown\",\n      \"permanent_failure\",\n    ].includes(String(error.disposition))\n  ) {\n    const delay =\n      \"retryAfterMs\" in error &&\n      typeof error.retryAfterMs === \"number\" &&\n      Number.isFinite(error.retryAfterMs) &&\n      error.retryAfterMs >= 0\n        ? error.retryAfterMs\n        : undefined;\n    return new IntegrationError(\n      error.code,\n      error.disposition as FailureDisposition,\n      delay,\n    );\n  }\n  return new IntegrationError(\"provider_unavailable\", \"outcome_unknown\");\n}\n"],"mappings":";AAAA,SAAS,OAAO,cAAc;;;ACEvB,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAE1C,YACW,MACA,cAAkC,qBAClC,cACT;AACA,UAAM,IAAI;AAJD;AACA;AACA;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EANW;AAAA,EACA;AAAA,EACA;AAAA,EAJF,WAAW;AAStB;;;ADPO,SAAS,sBAAsB,SAKnB;AACjB,MAAI,CAAC,yBAAyB,KAAK,QAAQ,MAAM;AAC/C,UAAM,IAAI,iBAAiB,sBAAsB;AACnD,QAAM,OAAO,QAAQ,aAAa;AAClC,MAAI,CAAC,yBAAyB,KAAK,IAAI;AACrC,UAAM,IAAI,iBAAiB,oBAAoB;AACjD,MAAI;AACJ,MAAI;AACJ,SAAO;AAAA,IACL,MAAM,QAAQ,UAAU;AACtB,UAAI,CAAC,MAAO,OAAM,IAAI,iBAAiB,mBAAmB;AAC1D,iBAAW,WAAW,UAAU;AAC9B,cAAM,KAAK,GAAG,QAAQ,MAAM,IAAI,QAAQ,OAAO;AAC/C,cAAM,WAAW,MAAM,MAAM,OAAO,EAAE;AACtC,YACE,YACA,CAAC,aAAa,QAAQ,EAAE,SAAS,MAAM,SAAS,SAAS,CAAC;AAE1D,gBAAM,SAAS,OAAO;AAAA,MAC1B;AACA,UAAI,SAAS;AACX,cAAM,MAAM;AAAA,UACV,SAAS,IAAI,CAAC,UAAU;AAAA,YACtB,MAAM;AAAA,YACN;AAAA,YACA,MAAM;AAAA,cACJ,OAAO,GAAG,KAAK,MAAM,IAAI,KAAK,OAAO;AAAA,cACrC,kBAAkB;AAAA,cAClB,cAAc;AAAA,YAChB;AAAA,UACF,EAAE;AAAA,QACJ;AAAA,IACJ;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,UAAI,OAAQ;AACZ,cAAQ,IAAI,MAAmB,MAAM;AAAA,QACnC,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,eAAS,IAAI;AAAA,QACX;AAAA,QACA,OAAO,QAAQ;AACb,gBAAM,OAAO,IAAI;AACjB,cACE,OAAO,MAAM,WAAW,YACxB,CAAC,OAAO,cAAc,KAAK,OAAO,KAClC,KAAK,UAAU;AAEf;AACF,gBAAM,QAAQ,IAAI;AAAA,QACpB;AAAA,QACA;AAAA,UACE,YAAY,QAAQ;AAAA,UACpB,QAAQ,QAAQ;AAAA,UAChB,aAAa,QAAQ,eAAe;AAAA,QACtC;AAAA,MACF;AAEA,aAAO,GAAG,SAAS,MAAM,MAAS;AAClC,YAAM,GAAG,SAAS,MAAM,MAAS;AACjC,YAAM,OAAO,eAAe;AAAA,IAC9B;AAAA,IACA,MAAM,OAAO;AACX,YAAM,QAAQ,MAAM;AACpB,YAAM,OAAO,MAAM;AACnB,eAAS;AACT,cAAQ;AAAA,IACV;AAAA,EACF;AACF;","names":[]}