@nestarc/inbox 0.0.0-stage → 0.2.0

package/dist/internal/handler-context.d.ts

@@ -0,0 +1,3 @@
+import type { InboxContext, InboxHandlerContextRunner } from "../contracts/types";
+/** A context wrapper cannot skip the handler, swallow its failure, or invoke it twice. */
+export declare function runInHandlerContext(context: InboxContext, handle: () => Promise<void>, runner?: InboxHandlerContextRunner): Promise<void>;

package/dist/internal/handler-context.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runInHandlerContext = runInHandlerContext;
+const errors_1 = require("../contracts/errors");
+/** A context wrapper cannot skip the handler, swallow its failure, or invoke it twice. */
+async function runInHandlerContext(context, handle, runner) {
+    context.signal.throwIfAborted();
+    if (!runner)
+        return handle();
+    let invocation;
+    let invalid = false;
+    let open = true;
+    const next = () => {
+        context.signal.throwIfAborted();
+        if (!open || invocation) {
+            invalid = true;
+            throw new errors_1.InboxConfigurationError("handlerContext must call next exactly once.");
+        }
+        invocation = Promise.resolve().then(() => {
+            context.signal.throwIfAborted();
+            return handle();
+        });
+        // Also observe immediately when a wrapper forgets to await or swallows rejection.
+        void invocation.catch(() => undefined);
+        return invocation;
+    };
+    try {
+        await runner(context, next);
+        if (!invocation)
+            throw new errors_1.InboxConfigurationError("handlerContext must call next exactly once.");
+        await invocation;
+        if (invalid)
+            throw new errors_1.InboxConfigurationError("handlerContext must call next exactly once.");
+    }
+    finally {
+        open = false;
+    }
+}
+//# sourceMappingURL=handler-context.js.map

package/dist/internal/handler-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-context.js","sourceRoot":"","sources":["../../src/internal/handler-context.ts"],"names":[],"mappings":";;AAOA,kDAwCC;AA/CD,gDAA8D;AAM9D,0FAA0F;AACnF,KAAK,UAAU,mBAAmB,CACvC,OAAqB,EACrB,MAA2B,EAC3B,MAAkC;IAElC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IAChC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,EAAE,CAAC;IAC7B,IAAI,UAAqC,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,IAAI,GAAG,GAAkB,EAAE;QAC/B,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;YACxB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,IAAI,gCAAuB,CAC/B,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YACvC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,kFAAkF;QAClF,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU;YACb,MAAM,IAAI,gCAAuB,CAC/B,6CAA6C,CAC9C,CAAC;QACJ,MAAM,UAAU,CAAC;QACjB,IAAI,OAAO;YACT,MAAM,IAAI,gCAAuB,CAC/B,6CAA6C,CAC9C,CAAC;IACN,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/internal/options.d.ts

@@ -0,0 +1,5 @@
+import type { InboxOptions, ResolvedWorkerOptions } from "../contracts/types";
+export declare function resolveOptions(options: InboxOptions): {
+    consumers: string[];
+    worker: ResolvedWorkerOptions;
+};

package/dist/internal/options.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveOptions = resolveOptions;
+const errors_1 = require("../contracts/errors");
+const validation_1 = require("./validation");
+function resolveOptions(options) {
+    if (!options ||
+        !options.prisma ||
+        typeof options.prisma.$transaction !== "function") {
+        throw new errors_1.InboxConfigurationError("An application-owned Prisma client with interactive transactions is required.");
+    }
+    const handlers = options.handlers ?? [];
+    if (options.handlerContext !== undefined &&
+        typeof options.handlerContext !== "function") {
+        throw new errors_1.InboxConfigurationError("handlerContext must be a function.");
+    }
+    const registered = handlers.map((handler) => {
+        (0, validation_1.boundedString)(handler.consumer, "handler.consumer", 128);
+        (0, validation_1.boundedString)(handler.eventType, "handler.eventType", 128);
+        if (!Number.isInteger(handler.schemaVersion) ||
+            handler.schemaVersion < 1 ||
+            handler.schemaVersion > 2147483647 ||
+            typeof handler.handle !== "function") {
+            throw new errors_1.InboxConfigurationError("Each handler needs an eventType, positive schemaVersion, and handle method.");
+        }
+        return handler.consumer;
+    });
+    if (new Set(registered).size !== registered.length)
+        throw new errors_1.InboxConfigurationError("Consumer handlers must be unique.");
+    const consumers = [...(options.consumers ?? registered)];
+    if (!consumers.length || new Set(consumers).size !== consumers.length)
+        throw new errors_1.InboxConfigurationError("Provide a non-empty unique consumer allowlist.");
+    consumers.forEach((name) => (0, validation_1.boundedString)(name, "consumer", 128));
+    const w = options.worker ?? {};
+    const worker = {
+        enabled: w.enabled ?? false,
+        consumers: [...(w.consumers ?? registered)],
+        concurrency: w.concurrency ?? 4,
+        pollIntervalMs: w.pollIntervalMs ?? 1000,
+        leaseMs: w.leaseMs ?? 30000,
+        heartbeatIntervalMs: w.heartbeatIntervalMs ?? 5000,
+        transactionTimeoutMs: w.transactionTimeoutMs ?? 10000,
+        transactionMaxWaitMs: w.transactionMaxWaitMs ?? 5000,
+        lockTimeoutMs: w.lockTimeoutMs ?? 1000,
+        shutdownTimeoutMs: w.shutdownTimeoutMs ?? 15000,
+        maxAttempts: w.maxAttempts ?? 8,
+        retryBaseMs: w.retryBaseMs ?? 1000,
+        retryMaxMs: w.retryMaxMs ?? 300000,
+    };
+    for (const [key, value] of Object.entries(worker)) {
+        if (key === "enabled" || key === "consumers")
+            continue;
+        if (!Number.isSafeInteger(value) ||
+            value < 1 ||
+            value > 2147483647) {
+            throw new errors_1.InboxConfigurationError(`${key} must be a positive 32-bit integer.`);
+        }
+    }
+    if (typeof worker.enabled !== "boolean" ||
+        worker.concurrency > 100 ||
+        worker.maxAttempts > 10000 ||
+        worker.heartbeatIntervalMs * 2 >= worker.leaseMs ||
+        worker.retryBaseMs > worker.retryMaxMs ||
+        worker.transactionTimeoutMs + worker.transactionMaxWaitMs > 2147483647) {
+        throw new errors_1.InboxConfigurationError("Invalid concurrency, heartbeat, retry, or attempt bounds.");
+    }
+    if (new Set(worker.consumers).size !== worker.consumers.length ||
+        worker.consumers.some((name) => !registered.includes(name)) ||
+        (worker.enabled && !worker.consumers.length)) {
+        throw new errors_1.InboxConfigurationError("Every owned consumer must have exactly one registered handler.");
+    }
+    if (options.maxPayloadBytes !== undefined &&
+        (!Number.isSafeInteger(options.maxPayloadBytes) ||
+            options.maxPayloadBytes < 1 ||
+            options.maxPayloadBytes > 16777216)) {
+        throw new errors_1.InboxConfigurationError("maxPayloadBytes must be between 1 and 16777216.");
+    }
+    if (options.maxPendingMessages !== undefined &&
+        (!Number.isSafeInteger(options.maxPendingMessages) ||
+            options.maxPendingMessages < 1 ||
+            options.maxPendingMessages > 2147483647)) {
+        throw new errors_1.InboxConfigurationError("maxPendingMessages must be a positive 32-bit integer.");
+    }
+    return { consumers, worker };
+}
+//# sourceMappingURL=options.js.map

package/dist/internal/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/internal/options.ts"],"names":[],"mappings":";;AAIA,wCAiHC;AArHD,gDAA8D;AAE9D,6CAA6C;AAE7C,SAAgB,cAAc,CAAC,OAAqB;IAIlD,IACE,CAAC,OAAO;QACR,CAAC,OAAO,CAAC,MAAM;QACf,OAAO,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,UAAU,EACjD,CAAC;QACD,MAAM,IAAI,gCAAuB,CAC/B,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,IACE,OAAO,CAAC,cAAc,KAAK,SAAS;QACpC,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU,EAC5C,CAAC;QACD,MAAM,IAAI,gCAAuB,CAAC,oCAAoC,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC1C,IAAA,0BAAa,EAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACzD,IAAA,0BAAa,EAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC3D,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC;YACxC,OAAO,CAAC,aAAa,GAAG,CAAC;YACzB,OAAO,CAAC,aAAa,GAAG,UAAU;YAClC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EACpC,CAAC;YACD,MAAM,IAAI,gCAAuB,CAC/B,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM;QAChD,MAAM,IAAI,gCAAuB,CAAC,mCAAmC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QACnE,MAAM,IAAI,gCAAuB,CAC/B,gDAAgD,CACjD,CAAC;IACJ,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0BAAa,EAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAA0B;QACpC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;QAC3B,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC;QAC/B,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACxC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;QAC3B,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI;QAClD,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,IAAI,KAAK;QACrD,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,IAAI,IAAI;QACpD,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;QACtC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,KAAK;QAC/C,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC;QAC/B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAClC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,MAAM;KACnC,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,WAAW;YAAE,SAAS;QACvD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAC3B,KAAgB,GAAG,CAAC;YACpB,KAAgB,GAAG,UAAU,EAC9B,CAAC;YACD,MAAM,IAAI,gCAAuB,CAC/B,GAAG,GAAG,qCAAqC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IACE,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QACnC,MAAM,CAAC,WAAW,GAAG,GAAG;QACxB,MAAM,CAAC,WAAW,GAAG,KAAK;QAC1B,MAAM,CAAC,mBAAmB,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO;QAChD,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU;QACtC,MAAM,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,GAAG,UAAU,EACtE,CAAC;QACD,MAAM,IAAI,gCAAuB,CAC/B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IACE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM;QAC1D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,gCAAuB,CAC/B,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC;YAC7C,OAAO,CAAC,eAAe,GAAG,CAAC;YAC3B,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,gCAAuB,CAC/B,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IACE,OAAO,CAAC,kBAAkB,KAAK,SAAS;QACxC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChD,OAAO,CAAC,kBAAkB,GAAG,CAAC;YAC9B,OAAO,CAAC,kBAAkB,GAAG,UAAU,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,gCAAuB,CAC/B,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC"}

package/dist/internal/reliability-core/abort.d.ts

@@ -0,0 +1,2 @@
+/** Cancellation rejects the owning operation; it cannot undo external side effects. */
+export declare function withAbort<T>(signal: AbortSignal, run: () => Promise<T>): Promise<T>;

package/dist/internal/reliability-core/abort.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withAbort = withAbort;
+/** Cancellation rejects the owning operation; it cannot undo external side effects. */
+function withAbort(signal, run) {
+    if (signal.aborted)
+        return Promise.reject(signal.reason);
+    return new Promise((resolve, reject) => {
+        const aborted = () => reject(signal.reason);
+        signal.addEventListener("abort", aborted, { once: true });
+        void Promise.resolve()
+            .then(() => {
+            if (signal.aborted)
+                throw signal.reason;
+            return run();
+        })
+            .then(resolve, reject)
+            .finally(() => signal.removeEventListener("abort", aborted));
+    });
+}
+//# sourceMappingURL=abort.js.map

package/dist/internal/reliability-core/abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../../src/internal/reliability-core/abort.ts"],"names":[],"mappings":";;AACA,8BAgBC;AAjBD,uFAAuF;AACvF,SAAgB,SAAS,CACvB,MAAmB,EACnB,GAAqB;IAErB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,OAAO,CAAC,OAAO,EAAE;aACnB,IAAI,CAAC,GAAG,EAAE;YACT,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC;YACxC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC,CAAC;aACD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;aACrB,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/reliability-core/index.d.ts

@@ -0,0 +1,3 @@
+export { CanonicalJsonError, assertPlainJsonObject, canonicalJson, isValidUnicode, sha256Json, } from "./json";
+export { retryDelayMs, type RetryPolicy } from "./retry";
+export { withAbort } from "./abort";

package/dist/internal/reliability-core/index.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withAbort = exports.retryDelayMs = exports.sha256Json = exports.isValidUnicode = exports.canonicalJson = exports.assertPlainJsonObject = exports.CanonicalJsonError = void 0;
+var json_1 = require("./json");
+Object.defineProperty(exports, "CanonicalJsonError", { enumerable: true, get: function () { return json_1.CanonicalJsonError; } });
+Object.defineProperty(exports, "assertPlainJsonObject", { enumerable: true, get: function () { return json_1.assertPlainJsonObject; } });
+Object.defineProperty(exports, "canonicalJson", { enumerable: true, get: function () { return json_1.canonicalJson; } });
+Object.defineProperty(exports, "isValidUnicode", { enumerable: true, get: function () { return json_1.isValidUnicode; } });
+Object.defineProperty(exports, "sha256Json", { enumerable: true, get: function () { return json_1.sha256Json; } });
+var retry_1 = require("./retry");
+Object.defineProperty(exports, "retryDelayMs", { enumerable: true, get: function () { return retry_1.retryDelayMs; } });
+var abort_1 = require("./abort");
+Object.defineProperty(exports, "withAbort", { enumerable: true, get: function () { return abort_1.withAbort; } });
+//# sourceMappingURL=index.js.map

package/dist/internal/reliability-core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/internal/reliability-core/index.ts"],"names":[],"mappings":";;;AAAA,+BAMgB;AALd,0GAAA,kBAAkB,OAAA;AAClB,6GAAA,qBAAqB,OAAA;AACrB,qGAAA,aAAa,OAAA;AACb,sGAAA,cAAc,OAAA;AACd,kGAAA,UAAU,OAAA;AAEZ,iCAAyD;AAAhD,qGAAA,YAAY,OAAA;AACrB,iCAAoC;AAA3B,kGAAA,SAAS,OAAA"}

package/dist/internal/reliability-core/json.d.ts

@@ -0,0 +1,13 @@
+/** Strict JSON data shared by durable message and request boundaries. */
+export declare class CanonicalJsonError extends TypeError {
+}
+export declare function assertPlainJsonObject(value: unknown, label: string): asserts value is Record<string, unknown>;
+/** Reject NUL and unpaired surrogates, which PostgreSQL JSON cannot store. */
+export declare function isValidUnicode(value: string): boolean;
+/** v1: sorted UTF-16 object keys, JSON number/string encoding, original array order. */
+export declare function canonicalJson(value: unknown, maxBytes?: number): string;
+/** Optional domain separation keeps message fingerprints distinct from HTTP fingerprints. */
+export declare function sha256Json(value: unknown, options?: {
+    domain?: string;
+    maxBytes?: number;
+}): string;

package/dist/internal/reliability-core/json.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CanonicalJsonError = void 0;
+exports.assertPlainJsonObject = assertPlainJsonObject;
+exports.isValidUnicode = isValidUnicode;
+exports.canonicalJson = canonicalJson;
+exports.sha256Json = sha256Json;
+const node_crypto_1 = require("node:crypto");
+/** Strict JSON data shared by durable message and request boundaries. */
+class CanonicalJsonError extends TypeError {
+}
+exports.CanonicalJsonError = CanonicalJsonError;
+function assertPlainJsonObject(value, label) {
+    if (value === null ||
+        typeof value !== "object" ||
+        Array.isArray(value) ||
+        ![Object.prototype, null].includes(Object.getPrototypeOf(value))) {
+        throw new CanonicalJsonError(`${label} must be a plain object.`);
+    }
+    for (const key of Reflect.ownKeys(value)) {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (typeof key !== "string" ||
+            !descriptor.enumerable ||
+            !("value" in descriptor)) {
+            throw new CanonicalJsonError(`${label} must contain only JSON data properties.`);
+        }
+    }
+}
+/** Reject NUL and unpaired surrogates, which PostgreSQL JSON cannot store. */
+function isValidUnicode(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code === 0)
+            return false;
+        if (code >= 0xd800 && code <= 0xdbff) {
+            const next = value.charCodeAt(++i);
+            if (!(next >= 0xdc00 && next <= 0xdfff))
+                return false;
+        }
+        else if (code >= 0xdc00 && code <= 0xdfff)
+            return false;
+    }
+    return true;
+}
+/** v1: sorted UTF-16 object keys, JSON number/string encoding, original array order. */
+function canonicalJson(value, maxBytes = 262144) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1)
+        throw new CanonicalJsonError("maxBytes must be a positive safe integer.");
+    const ancestors = new Set();
+    let nodes = 0;
+    let bytes = 0;
+    const chunks = [];
+    const emit = (fragment) => {
+        bytes += Buffer.byteLength(fragment);
+        if (bytes > maxBytes)
+            throw new CanonicalJsonError("JSON exceeds maxBytes.");
+        chunks.push(fragment);
+    };
+    const visit = (item, depth) => {
+        if (++nodes > 100000 || depth > 64)
+            throw new CanonicalJsonError("JSON exceeds its structural limit.");
+        if (item === null)
+            return emit("null");
+        if (typeof item === "boolean")
+            return emit(String(item));
+        if (typeof item === "number" && Number.isFinite(item))
+            return emit(JSON.stringify(item));
+        if (typeof item === "string") {
+            if (!isValidUnicode(item) || Buffer.byteLength(item) > maxBytes)
+                throw new CanonicalJsonError("Invalid or oversized JSON string.");
+            return emit(JSON.stringify(item));
+        }
+        if (!item || typeof item !== "object")
+            throw new CanonicalJsonError("Payload must contain only JSON values.");
+        if (ancestors.has(item))
+            throw new CanonicalJsonError("Cyclic payloads are not supported.");
+        ancestors.add(item);
+        if (Array.isArray(item)) {
+            if (item.length > 100000 ||
+                Reflect.ownKeys(item).length !== item.length + 1) {
+                throw new CanonicalJsonError("Sparse arrays and extra array properties are not supported.");
+            }
+            emit("[");
+            for (let index = 0; index < item.length; index++) {
+                if (index > 0)
+                    emit(",");
+                const descriptor = Object.getOwnPropertyDescriptor(item, String(index));
+                if (!descriptor || !("value" in descriptor))
+                    throw new CanonicalJsonError("Array accessors are not supported.");
+                visit(descriptor.value, depth + 1);
+            }
+            emit("]");
+        }
+        else {
+            assertPlainJsonObject(item, "payload");
+            emit("{");
+            let first = true;
+            for (const key of Object.keys(item).sort()) {
+                if (!first)
+                    emit(",");
+                first = false;
+                if (!isValidUnicode(key) || Buffer.byteLength(key) > maxBytes)
+                    throw new CanonicalJsonError("Invalid JSON key.");
+                emit(JSON.stringify(key));
+                emit(":");
+                visit(item[key], depth + 1);
+            }
+            emit("}");
+        }
+        ancestors.delete(item);
+    };
+    visit(value, 0);
+    return chunks.join("");
+}
+/** Optional domain separation keeps message fingerprints distinct from HTTP fingerprints. */
+function sha256Json(value, options = {}) {
+    const hash = (0, node_crypto_1.createHash)("sha256");
+    if (options.domain !== undefined) {
+        if (!options.domain || !isValidUnicode(options.domain))
+            throw new CanonicalJsonError("Fingerprint domain must be nonempty UTF-8 without NUL.");
+        hash.update(options.domain).update("\0");
+    }
+    return hash.update(canonicalJson(value, options.maxBytes)).digest("hex");
+}
+//# sourceMappingURL=json.js.map

package/dist/internal/reliability-core/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../src/internal/reliability-core/json.ts"],"names":[],"mappings":";;;AAKA,sDAwBC;AAGD,wCAUC;AAGD,sCAmEC;AAGD,gCAaC;AAhID,6CAAyC;AAEzC,yEAAyE;AACzE,MAAa,kBAAmB,SAAQ,SAAS;CAAG;AAApD,gDAAoD;AAEpD,SAAgB,qBAAqB,CACnC,KAAc,EACd,KAAa;IAEb,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAChE,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;QAChE,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,UAAU,CAAC,UAAU;YACtB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,GAAG,KAAK,0CAA0C,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAgB,cAAc,CAAC,KAAa;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxD,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAgB,aAAa,CAAC,KAAc,EAAE,QAAQ,GAAG,MAAM;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QACjD,MAAM,IAAI,kBAAkB,CAAC,2CAA2C,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACtC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,QAAQ;YAClB,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAa,EAAQ,EAAE;QACnD,IAAI,EAAE,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,EAAE;YAChC,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACrE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ;gBAC7D,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YACnC,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAC;QACzE,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YACrB,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;QACrE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IACE,IAAI,CAAC,MAAM,GAAG,MAAM;gBACpB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAChD,CAAC;gBACD,MAAM,IAAI,kBAAkB,CAC1B,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,IAAI,KAAK,GAAG,CAAC;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBACzC,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,CAAC,CAAC;gBACrE,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK;oBAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,KAAK,GAAG,KAAK,CAAC;gBACd,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,QAAQ;oBAC3D,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;gBACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,6FAA6F;AAC7F,SAAgB,UAAU,CACxB,KAAc,EACd,UAAkD,EAAE;IAEpD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YACpD,MAAM,IAAI,kBAAkB,CAC1B,wDAAwD,CACzD,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC"}

package/dist/internal/reliability-core/retry.d.ts

@@ -0,0 +1,8 @@
+export interface RetryPolicy {
+    baseMs: number;
+    maxMs: number;
+    /** Inbox uses full jitter; existing outbox consumers can keep deterministic delays. */
+    jitter?: "none" | "full";
+}
+/** attempt is one-based and includes the initial claim. A crash still consumes an attempt. */
+export declare function retryDelayMs(attempt: number, policy: RetryPolicy, random?: () => number): number;

package/dist/internal/reliability-core/retry.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retryDelayMs = retryDelayMs;
+/** attempt is one-based and includes the initial claim. A crash still consumes an attempt. */
+function retryDelayMs(attempt, policy, random = Math.random) {
+    if (!Number.isSafeInteger(attempt) ||
+        attempt < 1 ||
+        !Number.isSafeInteger(policy.baseMs) ||
+        !Number.isSafeInteger(policy.maxMs) ||
+        policy.baseMs < 0 ||
+        policy.maxMs < policy.baseMs ||
+        policy.maxMs > 2147483647 ||
+        (policy.jitter !== undefined && !["none", "full"].includes(policy.jitter))) {
+        throw new RangeError("Invalid retry attempt or bounded delay policy.");
+    }
+    const cap = policy.baseMs === 0
+        ? 0
+        : Math.min(policy.maxMs, policy.baseMs * 2 ** Math.min(attempt - 1, 31));
+    if (policy.jitter !== "full" || cap === 0)
+        return cap;
+    const sample = random();
+    if (!Number.isFinite(sample) || sample < 0 || sample >= 1)
+        throw new RangeError("Retry random source must return a value in [0, 1).");
+    return Math.floor(sample * (cap + 1));
+}
+//# sourceMappingURL=retry.js.map

package/dist/internal/reliability-core/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../../src/internal/reliability-core/retry.ts"],"names":[],"mappings":";;AAQA,oCA0BC;AA3BD,8FAA8F;AAC9F,SAAgB,YAAY,CAC1B,OAAe,EACf,MAAmB,EACnB,SAAuB,IAAI,CAAC,MAAM;IAElC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;QAC9B,OAAO,GAAG,CAAC;QACX,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM;QAC5B,MAAM,CAAC,KAAK,GAAG,UAAU;QACzB,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/internal/validation.d.ts

@@ -0,0 +1,6 @@
+import type { InboxEnvelope, InboxScope, NormalizedEnvelope } from "../contracts/types";
+export declare function boundedString(value: unknown, label: string, maxBytes: number): string;
+export declare function validateScope(value: unknown): InboxScope;
+/** Preserve the public Inbox error contract around the shared strict JSON encoder. */
+export declare function canonicalJson(value: unknown, maxBytes?: number): string;
+export declare function normalizeEnvelope(input: InboxEnvelope, consumers: string[], maxPayloadBytes?: number): NormalizedEnvelope;

package/dist/internal/validation.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.boundedString = boundedString;
+exports.validateScope = validateScope;
+exports.canonicalJson = canonicalJson;
+exports.normalizeEnvelope = normalizeEnvelope;
+const reliability_core_1 = require("./reliability-core");
+const errors_1 = require("../contracts/errors");
+function plain(value, label) {
+    try {
+        (0, reliability_core_1.assertPlainJsonObject)(value, label);
+    }
+    catch (error) {
+        if (error instanceof reliability_core_1.CanonicalJsonError)
+            throw new errors_1.InboxValidationError(error.message);
+        throw error;
+    }
+}
+function allowed(value, keys, label) {
+    if (Object.keys(value).some((key) => !keys.includes(key))) {
+        throw new errors_1.InboxValidationError(`${label} contains an unsupported field.`);
+    }
+}
+function boundedString(value, label, maxBytes) {
+    if (typeof value !== "string" ||
+        !value.trim() ||
+        !(0, reliability_core_1.isValidUnicode)(value) ||
+        Buffer.byteLength(value) > maxBytes) {
+        throw new errors_1.InboxValidationError(`${label} must be a non-empty UTF-8 string of at most ${maxBytes} bytes without NUL.`);
+    }
+    return value;
+}
+function validateScope(value) {
+    plain(value, "scope");
+    if (value.kind === "global") {
+        allowed(value, ["kind"], "scope");
+        return { kind: "global" };
+    }
+    if (value.kind === "tenant") {
+        allowed(value, ["kind", "id"], "scope");
+        return { kind: "tenant", id: boundedString(value.id, "scope.id", 128) };
+    }
+    throw new errors_1.InboxValidationError("scope.kind must be tenant or global.");
+}
+/** Preserve the public Inbox error contract around the shared strict JSON encoder. */
+function canonicalJson(value, maxBytes = 262144) {
+    try {
+        return (0, reliability_core_1.canonicalJson)(value, maxBytes);
+    }
+    catch (error) {
+        if (error instanceof reliability_core_1.CanonicalJsonError)
+            throw new errors_1.InboxValidationError(error.message.replace("maxBytes", "maxPayloadBytes"));
+        throw error;
+    }
+}
+function normalizeEnvelope(input, consumers, maxPayloadBytes = 262144) {
+    plain(input, "envelope");
+    allowed(input, [
+        "scope",
+        "source",
+        "consumer",
+        "messageId",
+        "eventType",
+        "schemaVersion",
+        "payload",
+        "correlationId",
+        "causationId",
+        "headers",
+    ], "envelope");
+    const scope = validateScope(input.scope);
+    const source = boundedString(input.source, "source", 128);
+    const consumer = boundedString(input.consumer, "consumer", 128);
+    if (!consumers.includes(consumer))
+        throw new errors_1.InboxValidationError("The consumer is not allowed by this ingress.");
+    const messageId = boundedString(input.messageId, "messageId", 256);
+    const eventType = boundedString(input.eventType, "eventType", 128);
+    if (!Number.isSafeInteger(input.schemaVersion) ||
+        input.schemaVersion < 1 ||
+        input.schemaVersion > 2147483647) {
+        throw new errors_1.InboxValidationError("schemaVersion must be a positive 32-bit integer.");
+    }
+    const payloadJson = canonicalJson(input.payload, maxPayloadBytes);
+    const payload = JSON.parse(payloadJson);
+    let fingerprint;
+    try {
+        fingerprint = (0, reliability_core_1.sha256Json)({ eventType, schemaVersion: input.schemaVersion, payload }, {
+            domain: "nestarc.inbox.fingerprint.v1",
+            maxBytes: maxPayloadBytes + 1024,
+        });
+    }
+    catch (error) {
+        if (error instanceof reliability_core_1.CanonicalJsonError)
+            throw new errors_1.InboxValidationError(error.message.replace("maxBytes", "maxPayloadBytes"));
+        throw error;
+    }
+    const normalized = {
+        scope,
+        source,
+        consumer,
+        messageId,
+        eventType,
+        schemaVersion: input.schemaVersion,
+        payload,
+        payloadJson,
+        fingerprint,
+        fingerprintVersion: 1,
+    };
+    for (const key of ["correlationId", "causationId"]) {
+        if (input[key] !== undefined)
+            normalized[key] = boundedString(input[key], key, 256);
+    }
+    if (input.headers !== undefined) {
+        plain(input.headers, "headers");
+        allowed(input.headers, ["traceparent", "tracestate"], "headers");
+        normalized.headers = {};
+        for (const key of ["traceparent", "tracestate"]) {
+            if (input.headers[key] !== undefined)
+                normalized.headers[key] = boundedString(input.headers[key], key, 512);
+        }
+    }
+    return normalized;
+}
+//# sourceMappingURL=validation.js.map

package/dist/internal/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/internal/validation.ts"],"names":[],"mappings":";;AAqCA,sCAgBC;AACD,sCAWC;AAED,sCAUC;AAED,8CAoFC;AAnKD,yDAM4B;AAC5B,gDAA2D;AAQ3D,SAAS,KAAK,CACZ,KAAc,EACd,KAAa;IAEb,IAAI,CAAC;QACH,IAAA,wCAAqB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qCAAkB;YACrC,MAAM,IAAI,6BAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,KAA8B,EAC9B,IAAc,EACd,KAAa;IAEb,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,6BAAoB,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AACD,SAAgB,aAAa,CAC3B,KAAc,EACd,KAAa,EACb,QAAgB;IAEhB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,IAAI,EAAE;QACb,CAAC,IAAA,iCAAY,EAAC,KAAK,CAAC;QACpB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,6BAAoB,CAC5B,GAAG,KAAK,gDAAgD,QAAQ,qBAAqB,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAgB,aAAa,CAAC,KAAc;IAC1C,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,6BAAoB,CAAC,sCAAsC,CAAC,CAAC;AACzE,CAAC;AACD,sFAAsF;AACtF,SAAgB,aAAa,CAAC,KAAc,EAAE,QAAQ,GAAG,MAAM;IAC7D,IAAI,CAAC;QACH,OAAO,IAAA,gCAAsB,EAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qCAAkB;YACrC,MAAM,IAAI,6BAAoB,CAC5B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,CAAC,CACrD,CAAC;QACJ,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAoB,EACpB,SAAmB,EACnB,eAAe,GAAG,MAAM;IAExB,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACzB,OAAO,CACL,KAAK,EACL;QACE,OAAO;QACP,QAAQ;QACR,UAAU;QACV,WAAW;QACX,WAAW;QACX,eAAe;QACf,SAAS;QACT,eAAe;QACf,aAAa;QACb,SAAS;KACV,EACD,UAAU,CACX,CAAC;IACF,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/B,MAAM,IAAI,6BAAoB,CAC5B,8CAA8C,CAC/C,CAAC;IACJ,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACnE,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC;QAC1C,KAAK,CAAC,aAAa,GAAG,CAAC;QACvB,KAAK,CAAC,aAAa,GAAG,UAAU,EAChC,CAAC;QACD,MAAM,IAAI,6BAAoB,CAC5B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAc,CAAC;IACrD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,IAAA,6BAAU,EACtB,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,EAC1D;YACE,MAAM,EAAE,8BAA8B;YACtC,QAAQ,EAAE,eAAe,GAAG,IAAI;SACjC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qCAAkB;YACrC,MAAM,IAAI,6BAAoB,CAC5B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,CAAC,CACrD,CAAC;QACJ,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAuB;QACrC,KAAK;QACL,MAAM;QACN,QAAQ;QACR,SAAS;QACT,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO;QACP,WAAW;QACX,WAAW;QACX,kBAAkB,EAAE,CAAC;KACtB,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,aAAa,CAAU,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAC1B,UAAU,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QACjE,UAAU,CAAC,OAAO,GAAG,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAU,EAAE,CAAC;YACzD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;gBAClC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/storage/prisma/prisma-inbox.storage.d.ts

@@ -0,0 +1,30 @@
+import type { InboxReplayOptions, InboxReplayResult } from "../../inbox-admin.service";
+import type { InboxListOptions, InboxPage, InboxPrismaClient, InboxReceipt, InboxRecord, InboxScope, InboxStats, InboxTransaction, NormalizedEnvelope } from "../../contracts/types";
+/** Internal PostgreSQL implementation. Undefined scope is reserved for privileged administration. */
+export declare class PrismaInboxStorage {
+    private readonly prisma;
+    private readonly options;
+    constructor(prisma: InboxPrismaClient, options?: {
+        maxPendingMessages?: number;
+    });
+    assertSchema(): Promise<void>;
+    accept(envelope: NormalizedEnvelope): Promise<InboxReceipt>;
+    private duplicate;
+    claim(consumers: string[], limit: number, workerId: string, leaseMs: number, maxAttempts: number): Promise<InboxRecord[]>;
+    run(claimed: InboxRecord, fn: (tx: InboxTransaction) => Promise<void>, options: {
+        timeoutMs: number;
+        maxWaitMs: number;
+        lockTimeoutMs: number;
+    }): Promise<void>;
+    heartbeat(id: string, token: string, leaseMs: number): Promise<boolean>;
+    fail(id: string, token: string, error: {
+        code: string;
+        message: string;
+    }, permanent: boolean, delayMs: number, maxAttempts: number): Promise<boolean>;
+    get(id: string, scope?: InboxScope): Promise<InboxRecord | null>;
+    list(options?: InboxListOptions, scope?: InboxScope): Promise<InboxPage>;
+    requeue(id: string, scope: InboxScope | undefined, expectedVersion: string, reason: string, actor: string): Promise<InboxRecord>;
+    replay(options: InboxReplayOptions, scope?: InboxScope): Promise<InboxReplayResult>;
+    stats(scope?: InboxScope): Promise<InboxStats>;
+    purgeCompletedPayload(before: Date, limit: number, scope?: InboxScope): Promise<number>;
+}