@openora/core 0.4.0

package/dist/server/kernel/job-queue.js

@@ -0,0 +1,177 @@
+function computeBackoffMs(opts, attempt) {
+    const backoff = opts.backoff;
+    if (!backoff)
+        return 0;
+    if (backoff.type === 'fixed')
+        return backoff.delayMs;
+    return backoff.delayMs * 2 ** (attempt - 1);
+}
+const sleep = (ms) => ms <= 0 ? Promise.resolve() : new Promise((r) => setTimeout(r, ms));
+export class InProcessJobQueue {
+    logger;
+    workers = new Map();
+    // Buffered until registerWorker fires (registration happens at boot, after providers).
+    pending = new Map();
+    lanes = new Map();
+    // job id per idempotency key - dedupes duplicate enqueues.
+    activeKeys = new Map();
+    // Awaited on close() for a clean drain.
+    inFlight = new Set();
+    timers = new Set();
+    schedules = new Map();
+    counter = 0;
+    closed = false;
+    constructor(logger) {
+        this.logger = logger;
+    }
+    enqueue(queue, payload, opts = {}) {
+        if (this.closed)
+            throw new Error('[job-queue] enqueue after close()');
+        if (opts.idempotencyKey) {
+            const existing = this.activeKeys.get(opts.idempotencyKey);
+            if (existing)
+                return Promise.resolve({ id: existing });
+        }
+        const id = `job-${++this.counter}`;
+        if (opts.idempotencyKey)
+            this.activeKeys.set(opts.idempotencyKey, id);
+        const job = { id, queue, payload, opts, enqueuedAt: new Date() };
+        if (opts.delayMs && opts.delayMs > 0) {
+            const t = setTimeout(() => {
+                this.timers.delete(t);
+                this.dispatch(job);
+            }, opts.delayMs);
+            t.unref?.();
+            this.timers.add(t);
+        }
+        else {
+            queueMicrotask(() => this.dispatch(job));
+        }
+        return Promise.resolve({ id });
+    }
+    registerWorker(registration) {
+        this.workers.set(registration.queue, registration);
+        const buffered = this.pending.get(registration.queue);
+        if (buffered) {
+            this.pending.delete(registration.queue);
+            for (const job of buffered)
+                this.dispatch(job);
+        }
+    }
+    schedule(queue, scheduleId, payload, repeat) {
+        if (this.closed)
+            throw new Error('[job-queue] schedule after close()');
+        const key = `${queue}:${scheduleId}`;
+        const existing = this.schedules.get(key);
+        if (existing)
+            clearInterval(existing);
+        if (repeat.everyMs && repeat.everyMs > 0) {
+            const interval = setInterval(() => {
+                void this.enqueue(queue, payload);
+            }, repeat.everyMs);
+            interval.unref?.();
+            this.schedules.set(key, interval);
+        }
+        else if (repeat.cron) {
+            // Cron not supported in-process; a durable driver (BullMQ) provides real cron.
+            // Warn so a misconfigured dev environment is loud, not silently broken.
+            this.logger.warn({ queue, scheduleId, cron: repeat.cron }, '[job-queue] cron schedules require a durable driver (BullMQ overlay); ignored in-process');
+        }
+        return Promise.resolve();
+    }
+    unschedule(queue, scheduleId) {
+        const key = `${queue}:${scheduleId}`;
+        const interval = this.schedules.get(key);
+        if (interval) {
+            clearInterval(interval);
+            this.schedules.delete(key);
+        }
+        return Promise.resolve();
+    }
+    async close() {
+        this.closed = true;
+        for (const t of this.timers)
+            clearTimeout(t);
+        this.timers.clear();
+        for (const interval of this.schedules.values())
+            clearInterval(interval);
+        this.schedules.clear();
+        await Promise.allSettled([...this.inFlight, ...this.lanes.values()]);
+    }
+    dispatch(job) {
+        const worker = this.workers.get(job.queue);
+        if (!worker) {
+            const buf = this.pending.get(job.queue) ?? [];
+            buf.push(job);
+            this.pending.set(job.queue, buf);
+            return;
+        }
+        const orderingKey = job.opts.orderingKey;
+        if (orderingKey) {
+            const laneKey = `${job.queue}:${orderingKey}`;
+            const prev = this.lanes.get(laneKey) ?? Promise.resolve();
+            const next = prev.then(() => this.runJob(worker, job));
+            // Swallow so one lane failure doesn't poison subsequent jobs on the same key.
+            this.lanes.set(laneKey, next.then(() => undefined, () => undefined));
+            // Tidy the lane map once this is the tail.
+            void next.finally(() => {
+                if (this.lanes.get(laneKey) === undefined)
+                    return;
+            });
+        }
+        else {
+            this.track(this.runJob(worker, job));
+        }
+    }
+    track(p) {
+        this.inFlight.add(p);
+        void p.finally(() => this.inFlight.delete(p));
+    }
+    async runJob(worker, job) {
+        const attempts = Math.max(1, job.opts.attempts ?? 1);
+        let lastError;
+        for (let attempt = 1; attempt <= attempts; attempt++) {
+            const ctx = {
+                id: job.id,
+                name: job.queue,
+                payload: job.payload,
+                attempt,
+                enqueuedAt: job.enqueuedAt,
+                meta: { ...job.opts.meta, idempotencyKey: job.opts.idempotencyKey },
+            };
+            try {
+                ctx.payload = worker.schema.parse(job.payload);
+                await worker.handler(ctx);
+                this.releaseKey(job);
+                return;
+            }
+            catch (err) {
+                lastError = err instanceof Error ? err : new Error(String(err));
+                if (attempt < attempts) {
+                    await sleep(computeBackoffMs(job.opts, attempt));
+                    continue;
+                }
+                await this.deadLetter(worker, ctx, lastError);
+                this.releaseKey(job);
+                return;
+            }
+        }
+    }
+    async deadLetter(worker, ctx, error) {
+        this.logger.error({ queue: ctx.name, jobId: ctx.id, attempt: ctx.attempt, err: error.message }, '[job-queue] job exhausted retries -> dead-letter');
+        if (worker.onDeadLetter) {
+            try {
+                await worker.onDeadLetter(ctx, error);
+            }
+            catch (hookErr) {
+                this.logger.error({ queue: ctx.name, jobId: ctx.id, err: String(hookErr) }, '[job-queue] onDeadLetter hook threw');
+            }
+        }
+    }
+    releaseKey(job) {
+        if (job.opts.idempotencyKey && this.activeKeys.get(job.opts.idempotencyKey) === job.id) {
+            this.activeKeys.delete(job.opts.idempotencyKey);
+        }
+    }
+}
+//# sourceMappingURL=job-queue.js.map

package/dist/server/kernel/job-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-queue.js","sourceRoot":"","sources":["../../../src/server/kernel/job-queue.ts"],"names":[],"mappings":"AAsBA,SAAS,gBAAgB,CAAC,IAAoB,EAAE,OAAe;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IACrD,OAAO,OAAO,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAC1C,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEtE,MAAM,OAAO,iBAAiB;IAcC;IAbZ,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACxD,uFAAuF;IACtE,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC3C,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC1D,2DAA2D;IAC1C,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,wCAAwC;IACvB,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IACpC,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IAClD,SAAS,GAAG,IAAI,GAAG,EAA0C,CAAC;IACvE,OAAO,GAAG,CAAC,CAAC;IACZ,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,OAAO,CAAI,KAAgB,EAAE,OAAU,EAAE,OAAuB,EAAE;QAChE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAEtE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1D,IAAI,QAAQ;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAEtE,MAAM,GAAG,GAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QAE9E,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE;gBACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,cAAc,CAAI,YAAmC;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,YAAyB,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,QAAQ,CACN,KAAgB,EAChB,UAAkB,EAClB,OAAU,EACV,MAAqB;QAErB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,+EAA+E;YAC/E,wEAAwE;YACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EACxC,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,KAAgB,EAAE,UAAkB;QAC7C,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,UAAU,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,aAAa,CAAC,QAAQ,CAAC,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,QAAQ,CAAC,GAAgB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QACzC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACvD,8EAA8E;YAC9E,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,OAAO,EACP,IAAI,CAAC,IAAI,CACP,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CACF,CAAC;YACF,2CAA2C;YAC3C,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBACrB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;oBAAE,OAAO;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,CAAgB;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,MAAiB,EAAE,GAAgB;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,SAA4B,CAAC;QAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,GAAG,GAAwB;gBAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,KAAK;gBACf,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;aACpE,CAAC;YACF,IAAI,CAAC;gBACH,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC/C,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;oBACvB,MAAM,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;oBACjD,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAAiB,EACjB,GAAwB,EACxB,KAAY;QAEZ,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,EAC5E,kDAAkD,CACnD,CAAC;QACF,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EACxD,qCAAqC,CACtC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAgB;QACjC,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC;YACvF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/server/kernel/logger.d.ts

@@ -0,0 +1,3 @@
+import { type Logger } from 'pino';
+export declare function createLogger(name: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/server/kernel/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAEzC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD"}

package/dist/server/kernel/logger.js

@@ -0,0 +1,5 @@
+import { pino } from 'pino';
+export function createLogger(name) {
+    return pino({ name });
+}
+//# sourceMappingURL=logger.js.map

package/dist/server/kernel/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/server/kernel/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAe,MAAM,MAAM,CAAC;AAEzC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/server/kernel/orpc-error-map.d.ts

@@ -0,0 +1,5 @@
+type ORPCCode = 'BAD_REQUEST' | 'UNAUTHORIZED' | 'FORBIDDEN' | 'NOT_FOUND' | 'CONFLICT' | 'INTERNAL_SERVER_ERROR';
+type ErrorClass = new (...args: never[]) => Error;
+export declare function mapErrors<T>(map: Partial<Record<ORPCCode, ErrorClass | ErrorClass[]>>, fn: () => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=orpc-error-map.d.ts.map

package/dist/server/kernel/orpc-error-map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orpc-error-map.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/orpc-error-map.ts"],"names":[],"mappings":"AAEA,KAAK,QAAQ,GACT,aAAa,GACb,cAAc,GACd,WAAW,GACX,WAAW,GACX,UAAU,GACV,uBAAuB,CAAC;AAE5B,KAAK,UAAU,GAAG,KAAK,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK,CAAC;AAElD,wBAAsB,SAAS,CAAC,CAAC,EAC/B,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,CAAC,CAAC,EACzD,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAYZ"}

package/dist/server/kernel/orpc-error-map.js

@@ -0,0 +1,16 @@
+import { ORPCError } from '@orpc/server';
+export async function mapErrors(map, fn) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        for (const [code, classes] of Object.entries(map)) {
+            const list = Array.isArray(classes) ? classes : [classes];
+            if (list.some((C) => err instanceof C)) {
+                throw new ORPCError(code, { message: err.message });
+            }
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=orpc-error-map.js.map

package/dist/server/kernel/orpc-error-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orpc-error-map.js","sourceRoot":"","sources":["../../../src/server/kernel/orpc-error-map.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAYzC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAyD,EACzD,EAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAA4C,EAAE,CAAC;YAC7F,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/kernel/ownership.d.ts

@@ -0,0 +1,2 @@
+export declare function assertOwnership(recordUserId: string, expectedUserId: string, error: Error): void;
+//# sourceMappingURL=ownership.d.ts.map

package/dist/server/kernel/ownership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/ownership.ts"],"names":[],"mappings":"AAAA,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,CAEhG"}

package/dist/server/kernel/ownership.js

@@ -0,0 +1,5 @@
+export function assertOwnership(recordUserId, expectedUserId, error) {
+    if (recordUserId !== expectedUserId)
+        throw error;
+}
+//# sourceMappingURL=ownership.js.map

package/dist/server/kernel/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../../src/server/kernel/ownership.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,cAAsB,EAAE,KAAY;IACxF,IAAI,YAAY,KAAK,cAAc;QAAE,MAAM,KAAK,CAAC;AACnD,CAAC"}

package/dist/server/kernel/platform-config-loader.d.ts

@@ -0,0 +1,23 @@
+import { type PlatformConfig } from '@openora/core/contracts';
+/**
+ * Load + validate a PlatformConfig from a file at boot. Used by `createApp` to
+ * seed the `PLATFORM_CONFIG` Container token, and by consumers' frontends to
+ * seed the slot evaluation context.
+ *
+ * Supported file shapes:
+ * - `.json`  - parsed with JSON.parse
+ * - `.yaml` / `.yml` - parsed with a tiny KV reader (no nested structures
+ *   beyond what PlatformConfig actually needs). For richer YAML, parse it
+ *   yourself with `yaml`/`js-yaml` and call `definePlatformConfig(obj)`.
+ *
+ * If `path` is omitted or the file does not exist, returns `defaultPlatformConfig`.
+ *
+ * On parse / schema failure, throws an Error with the offending paths.
+ */
+export declare function loadPlatformConfig(path?: string): PlatformConfig;
+/**
+ * Resolve the platform config path from env, defaulting to
+ * `./platform-config.{yaml,json}` in cwd. Returns undefined if nothing is found.
+ */
+export declare function resolvePlatformConfigPath(env?: NodeJS.ProcessEnv): string | undefined;
+//# sourceMappingURL=platform-config-loader.d.ts.map

package/dist/server/kernel/platform-config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-config-loader.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/platform-config-loader.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,cAAc,EAEpB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAqBhE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,SAAS,CAOpB"}

package/dist/server/kernel/platform-config-loader.js

@@ -0,0 +1,140 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { definePlatformConfig, defaultPlatformConfig, } from '@openora/core/contracts';
+/**
+ * Load + validate a PlatformConfig from a file at boot. Used by `createApp` to
+ * seed the `PLATFORM_CONFIG` Container token, and by consumers' frontends to
+ * seed the slot evaluation context.
+ *
+ * Supported file shapes:
+ * - `.json`  - parsed with JSON.parse
+ * - `.yaml` / `.yml` - parsed with a tiny KV reader (no nested structures
+ *   beyond what PlatformConfig actually needs). For richer YAML, parse it
+ *   yourself with `yaml`/`js-yaml` and call `definePlatformConfig(obj)`.
+ *
+ * If `path` is omitted or the file does not exist, returns `defaultPlatformConfig`.
+ *
+ * On parse / schema failure, throws an Error with the offending paths.
+ */
+export function loadPlatformConfig(path) {
+    if (!path)
+        return defaultPlatformConfig;
+    const abs = resolve(path);
+    if (!existsSync(abs))
+        return defaultPlatformConfig;
+    const raw = readFileSync(abs, 'utf8');
+    const ext = abs.split('.').pop()?.toLowerCase();
+    let parsed;
+    if (ext === 'json') {
+        parsed = JSON.parse(raw);
+    }
+    else if (ext === 'yaml' || ext === 'yml') {
+        parsed = parseTrivialYaml(raw);
+    }
+    else {
+        throw new Error(`[platform-config] unsupported extension ".${ext}" for ${abs}. ` +
+            `Use .json, .yaml, or .yml.`);
+    }
+    return definePlatformConfig(parsed);
+}
+/**
+ * Resolve the platform config path from env, defaulting to
+ * `./platform-config.{yaml,json}` in cwd. Returns undefined if nothing is found.
+ */
+export function resolvePlatformConfigPath(env = process.env) {
+    if (env.PLATFORM_CONFIG_PATH)
+        return env.PLATFORM_CONFIG_PATH;
+    for (const candidate of ['platform-config.yaml', 'platform-config.yml', 'platform-config.json']) {
+        const abs = resolve(candidate);
+        if (existsSync(abs))
+            return abs;
+    }
+    return undefined;
+}
+function parseTrivialYaml(input) {
+    const root = { indent: -1, children: [] };
+    const stack = [root];
+    const lines = input.split('\n');
+    for (const rawLine of lines) {
+        const line = rawLine.replace(/#.*$/, '').trimEnd();
+        if (!line.trim())
+            continue;
+        const indent = line.length - line.trimStart().length;
+        const body = line.trimStart();
+        while (stack[stack.length - 1].indent >= indent)
+            stack.pop();
+        const parent = stack[stack.length - 1];
+        if (body.startsWith('- ')) {
+            const inner = body.slice(2).trim();
+            const item = { indent, isListItem: true, children: [] };
+            const colon = inner.indexOf(':');
+            if (colon !== -1) {
+                item.children.push({
+                    indent: indent + 2,
+                    key: inner.slice(0, colon).trim(),
+                    value: inner.slice(colon + 1).trim() || undefined,
+                    children: [],
+                });
+            }
+            else {
+                item.value = inner;
+            }
+            parent.children.push(item);
+            stack.push(item);
+        }
+        else {
+            const colon = body.indexOf(':');
+            if (colon === -1)
+                continue;
+            const key = body.slice(0, colon).trim();
+            const value = body.slice(colon + 1).trim();
+            const node = { indent, key, value: value || undefined, children: [] };
+            parent.children.push(node);
+            stack.push(node);
+        }
+    }
+    function build(node) {
+        if (node.children.length === 0) {
+            return parseScalar(node.value);
+        }
+        if (node.children.every((c) => c.isListItem)) {
+            return node.children.map((c) => {
+                if (c.children.length > 0) {
+                    const obj = {};
+                    for (const kv of c.children) {
+                        if (kv.key !== undefined)
+                            obj[kv.key] = build(kv);
+                    }
+                    return obj;
+                }
+                return parseScalar(c.value);
+            });
+        }
+        const obj = {};
+        for (const c of node.children) {
+            if (c.key !== undefined)
+                obj[c.key] = build(c);
+        }
+        return obj;
+    }
+    function parseScalar(v) {
+        if (v === undefined || v === '')
+            return undefined;
+        if (v === 'true')
+            return true;
+        if (v === 'false')
+            return false;
+        if (v === 'null' || v === '~')
+            return null;
+        if (/^-?\d+$/.test(v))
+            return Number.parseInt(v, 10);
+        if (/^-?\d+\.\d+$/.test(v))
+            return Number.parseFloat(v);
+        if ((v.startsWith('"') && v.endsWith('"')) || (v.startsWith("'") && v.endsWith("'"))) {
+            return v.slice(1, -1);
+        }
+        return v;
+    }
+    return build(root);
+}
+//# sourceMappingURL=platform-config-loader.js.map

package/dist/server/kernel/platform-config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-config-loader.js","sourceRoot":"","sources":["../../../src/server/kernel/platform-config-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAGtB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,qBAAqB,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC;IAEhD,IAAI,MAAe,CAAC;IACpB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;SAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,SAAS,GAAG,IAAI;YAC9D,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IAED,OAAO,oBAAoB,CAAC,MAA6B,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,GAAG,CAAC,oBAAoB;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC;IAC9D,KAAK,MAAM,SAAS,IAAI,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAChG,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IAQrC,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAChD,MAAM,KAAK,GAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE9B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,IAAI,MAAM;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAExC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,MAAM,EAAE,MAAM,GAAG,CAAC;oBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE;oBACjC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;oBACjD,QAAQ,EAAE,EAAE;iBACb,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,CAAC;YACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAC5E,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,IAAU;QACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,GAAG,GAA4B,EAAE,CAAC;oBACxC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;wBAC5B,IAAI,EAAE,CAAC,GAAG,KAAK,SAAS;4BAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;oBACpD,CAAC;oBACD,OAAO,GAAG,CAAC;gBACb,CAAC;gBACD,OAAO,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,WAAW,CAAC,CAAqB;QACxC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QAClD,IAAI,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/server/kernel/rate-limiter.d.ts

@@ -0,0 +1,20 @@
+import { ORPCError } from '@orpc/server';
+import type { RateLimiterAdapter, RateLimitOptions, RateLimitResult } from '@openora/core/contracts';
+export declare class InProcessRateLimiter implements RateLimiterAdapter {
+    private readonly windows;
+    private readonly sweeper;
+    constructor();
+    consume(key: string, opts: RateLimitOptions): Promise<RateLimitResult>;
+    private sweep;
+    close(): void;
+}
+/** A 429 (TOO_MANY_REQUESTS) error carrying the client-facing back-off hint in its data. */
+export declare function makeRateLimitError(retryAfterMs: number): ORPCError<'TOO_MANY_REQUESTS', {
+    retryAfterMs: number;
+}>;
+/**
+ * Consume one unit for `key`; throw a 429 with retryAfterMs when the limit is exceeded.
+ * No-ops when `limiter` is undefined so call sites don't need an optional-guard wrapper.
+ */
+export declare function assertRateLimit(limiter: RateLimiterAdapter | undefined, key: string, opts: RateLimitOptions): Promise<void>;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/server/kernel/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AAejC,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;;IAOzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAiBtE,OAAO,CAAC,KAAK;IAOb,KAAK,IAAI,IAAI;CAId;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,MAAM,GACnB,SAAS,CAAC,mBAAmB,EAAE;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAK1D;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/server/kernel/rate-limiter.js

@@ -0,0 +1,53 @@
+import { ORPCError } from '@orpc/server';
+const SWEEP_INTERVAL_MS = 60_000;
+export class InProcessRateLimiter {
+    windows = new Map();
+    sweeper;
+    constructor() {
+        this.sweeper = setInterval(() => this.sweep(), SWEEP_INTERVAL_MS);
+        this.sweeper.unref?.();
+    }
+    consume(key, opts) {
+        const now = Date.now();
+        const existing = this.windows.get(key);
+        if (!existing || now >= existing.resetAt) {
+            this.windows.set(key, { count: 1, resetAt: now + opts.windowMs });
+            return Promise.resolve({ allowed: true, retryAfterMs: 0 });
+        }
+        if (existing.count < opts.limit) {
+            existing.count += 1;
+            return Promise.resolve({ allowed: true, retryAfterMs: 0 });
+        }
+        return Promise.resolve({ allowed: false, retryAfterMs: existing.resetAt - now });
+    }
+    sweep() {
+        const now = Date.now();
+        for (const [key, window] of this.windows) {
+            if (now >= window.resetAt)
+                this.windows.delete(key);
+        }
+    }
+    close() {
+        clearInterval(this.sweeper);
+        this.windows.clear();
+    }
+}
+/** A 429 (TOO_MANY_REQUESTS) error carrying the client-facing back-off hint in its data. */
+export function makeRateLimitError(retryAfterMs) {
+    return new ORPCError('TOO_MANY_REQUESTS', {
+        message: 'Too many requests. Please try again later.',
+        data: { retryAfterMs },
+    });
+}
+/**
+ * Consume one unit for `key`; throw a 429 with retryAfterMs when the limit is exceeded.
+ * No-ops when `limiter` is undefined so call sites don't need an optional-guard wrapper.
+ */
+export async function assertRateLimit(limiter, key, opts) {
+    if (!limiter)
+        return;
+    const { allowed, retryAfterMs } = await limiter.consume(key, opts);
+    if (!allowed)
+        throw makeRateLimitError(retryAfterMs);
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/server/kernel/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/server/kernel/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAkBzC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,MAAM,OAAO,oBAAoB;IACd,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,OAAO,CAAiC;IAEzD;QACE,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,IAAsB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK;QACH,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAChC,YAAoB;IAEpB,OAAO,IAAI,SAAS,CAAC,mBAAmB,EAAE;QACxC,OAAO,EAAE,4CAA4C;QACrD,IAAI,EAAE,EAAE,YAAY,EAAE;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuC,EACvC,GAAW,EACX,IAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO;QAAE,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;AACvD,CAAC"}

package/dist/server/kernel/realtime-authorizer.d.ts

@@ -0,0 +1,10 @@
+import type { RealtimeClientAuthorizer, RealtimeClientAuthorizerInput, RealtimeConnectionGrant } from '@openora/core/contracts';
+export type SseClientAuthorizerOptions = {
+    streamPath?: string;
+};
+export declare class SseClientAuthorizer implements RealtimeClientAuthorizer {
+    private readonly streamPath;
+    constructor(options?: SseClientAuthorizerOptions);
+    issueGrant(input: RealtimeClientAuthorizerInput): RealtimeConnectionGrant;
+}
+//# sourceMappingURL=realtime-authorizer.d.ts.map

package/dist/server/kernel/realtime-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-authorizer.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/realtime-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,mBAAoB,YAAW,wBAAwB;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,OAAO,GAAE,0BAA+B;IAIpD,UAAU,CAAC,KAAK,EAAE,6BAA6B,GAAG,uBAAuB;CAG1E"}

package/dist/server/kernel/realtime-authorizer.js

@@ -0,0 +1,10 @@
+export class SseClientAuthorizer {
+    streamPath;
+    constructor(options = {}) {
+        this.streamPath = options.streamPath ?? '/chat/stream';
+    }
+    issueGrant(input) {
+        return { provider: 'sse', streamPath: this.streamPath, channels: input.channels };
+    }
+}
+//# sourceMappingURL=realtime-authorizer.js.map

package/dist/server/kernel/realtime-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-authorizer.js","sourceRoot":"","sources":["../../../src/server/kernel/realtime-authorizer.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,mBAAmB;IACb,UAAU,CAAS;IAEpC,YAAY,UAAsC,EAAE;QAClD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC;IACzD,CAAC;IAED,UAAU,CAAC,KAAoC;QAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACpF,CAAC;CACF"}

package/dist/server/kernel/realtime-transport.d.ts

@@ -0,0 +1,8 @@
+import type { RealtimeTransport, RealtimePresence } from '@openora/core/contracts';
+export declare class InProcessRealtimeTransport implements RealtimeTransport {
+    private readonly channels;
+    readonly presence: RealtimePresence;
+    publish<T>(channel: string, event: T): void;
+    subscribe<T>(channel: string, handler: (event: T) => void): () => void;
+}
+//# sourceMappingURL=realtime-transport.d.ts.map

package/dist/server/kernel/realtime-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/realtime-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA0BnF,qBAAa,0BAA2B,YAAW,iBAAiB;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAA2B;IAE9D,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAa3C,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI;CAWvE"}

package/dist/server/kernel/realtime-transport.js

@@ -0,0 +1,52 @@
+class InProcessPresence {
+    members = new Map();
+    join(channel, memberId) {
+        const set = this.members.get(channel) ?? new Set();
+        set.add(memberId);
+        this.members.set(channel, set);
+    }
+    leave(channel, memberId) {
+        const set = this.members.get(channel);
+        if (!set)
+            return;
+        set.delete(memberId);
+        if (set.size === 0)
+            this.members.delete(channel);
+    }
+    count(channel) {
+        return this.members.get(channel)?.size ?? 0;
+    }
+}
+// Reference adoption: chat message fan-out + big-win feed. See ADR-0007.
+export class InProcessRealtimeTransport {
+    channels = new Map();
+    presence = new InProcessPresence();
+    publish(channel, event) {
+        const subscribers = this.channels.get(channel);
+        if (!subscribers)
+            return;
+        // Snapshot so a handler that unsubscribes mid-iteration can't corrupt the loop.
+        for (const handler of Array.from(subscribers)) {
+            try {
+                handler(event);
+            }
+            catch {
+                // failing subscriber must not break fan-out to others
+            }
+        }
+    }
+    subscribe(channel, handler) {
+        const set = this.channels.get(channel) ?? new Set();
+        set.add(handler);
+        this.channels.set(channel, set);
+        return () => {
+            const current = this.channels.get(channel);
+            if (!current)
+                return;
+            current.delete(handler);
+            if (current.size === 0)
+                this.channels.delete(channel);
+        };
+    }
+}
+//# sourceMappingURL=realtime-transport.js.map

package/dist/server/kernel/realtime-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.js","sourceRoot":"","sources":["../../../src/server/kernel/realtime-transport.ts"],"names":[],"mappings":"AAIA,MAAM,iBAAiB;IACJ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE1D,IAAI,CAAC,OAAe,EAAE,QAAgB;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,QAAgB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACnD,QAAQ,GAAqB,IAAI,iBAAiB,EAAE,CAAC;IAE9D,OAAO,CAAI,OAAe,EAAE,KAAQ;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,gFAAgF;QAChF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,CAAI,OAAe,EAAE,OAA2B;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAW,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,OAAkB,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,CAAC,MAAM,CAAC,OAAkB,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/server/kernel/redis-cache.d.ts

@@ -0,0 +1,12 @@
+import type { CacheAdapter } from '@openora/core/contracts';
+import type { RedisClient } from './redis-client.js';
+export declare class RedisCache implements CacheAdapter {
+    private readonly client;
+    constructor(client: RedisClient);
+    get<T>(key: string): Promise<T | undefined>;
+    set<T>(key: string, value: T, opts: {
+        ttlMs: number;
+    }): Promise<void>;
+    delete(key: string | string[]): Promise<void>;
+}
+//# sourceMappingURL=redis-cache.d.ts.map