@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/server/kernel/redis-rate-limiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redis-rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/redis-rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBrD;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,kBAAkB;IAG7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAEhC,MAAM,EAAE,WAAW;IAE1C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAwB5E,OAAO,CAAC,WAAW;CAUpB"}
+{"version":3,"file":"redis-rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/redis-rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBrD;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,kBAAkB;IAG7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAEhC,MAAM,EAAE,WAAW;IAE1C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmBtE,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBvC,OAAO,CAAC,WAAW;CAUpB"}

package/dist/server/kernel/redis-rate-limiter.js

@@ -51,6 +51,17 @@ export class RedisRateLimiter {
             return this.unavailable(opts, { keyPrefix: key.split(':')[0], err });
         }
     }
+    async reset(key) {
+        if (!this.client.isReady) {
+            return;
+        }
+        try {
+            await this.client.del(PREFIX + key);
+        }
+        catch (err) {
+            this.logger.warn({ keyPrefix: key.split(':')[0], err }, 'rate limiter reset failed');
+        }
+    }
     // Backend unreachable: fail-open by default to keep availability (throttling pauses
     // during an outage); fail-closed for keys that opt into 'deny' where an unthrottled
     // window is worse than a 429 (credential guessing).

package/dist/server/kernel/redis-rate-limiter.js.map

@@ -1 +1 @@
-{"version":3,"file":"redis-rate-limiter.js","sourceRoot":"","sources":["../../../src/server/kernel/redis-rate-limiter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,GAAG,KAAK,CAAC;AAErB,iFAAiF;AACjF,mFAAmF;AACnF,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,mFAAmF;AACnF,yEAAyE;AACzE,qFAAqF;AACrF,MAAM,cAAc,GAAG;;;;;;CAMtB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAgB;IAGE;IAFZ,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAE7D,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAsB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACnD,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC;gBACpB,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,oFAAoF;IACpF,oDAAoD;IACpD,oFAAoF;IACpF,0DAA0D;IAClD,WAAW,CAAC,IAAsB,EAAE,GAA4B;QACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,OAAO,EAAE,EACxD,kCAAkC,CACnC,CAAC;QACF,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;CACF"}
+{"version":3,"file":"redis-rate-limiter.js","sourceRoot":"","sources":["../../../src/server/kernel/redis-rate-limiter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,GAAG,KAAK,CAAC;AAErB,iFAAiF;AACjF,mFAAmF;AACnF,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,mFAAmF;AACnF,yEAAyE;AACzE,qFAAqF;AACrF,MAAM,cAAc,GAAG;;;;;;CAMtB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAgB;IAGE;IAFZ,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;IAE7D,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAsB;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBACnD,IAAI,EAAE,CAAC,MAAM,GAAG,GAAG,CAAC;gBACpB,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,oFAAoF;IACpF,oDAAoD;IACpD,oFAAoF;IACpF,0DAA0D;IAClD,WAAW,CAAC,IAAsB,EAAE,GAA4B;QACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,OAAO,EAAE,EACxD,kCAAkC,CACnC,CAAC;QACF,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;CACF"}

package/dist/server/kernel/redis-streams-broker.d.ts

@@ -0,0 +1,65 @@
+import type { MessageBrokerAdapter, EventEnvelope, BrokerHandler, SubscribeOptions } from '@openora/core/contracts';
+import type { RedisClient } from './redis-client.js';
+type RedisStreamsBrokerOptions = {
+    serviceName: string;
+    startId?: '$' | '0';
+};
+/**
+ * Durable `MESSAGE_BROKER` reference driver on Redis Streams, auto-bound by
+ * `createApp` when `REDIS_URL` is set (ADR-0030 - production is distributed-only,
+ * core ships no in-process default).
+ *
+ * Every `subscribe(topic, handler)` call for the same (topic, group) - default
+ * group is the deployment's `serviceName` - coalesces into ONE Redis consumer-group
+ * loop that fans out to every registered local handler, then XACKs once: an event
+ * is delivered to exactly one replica of the service (competing consumers across
+ * replicas via the shared group), and that replica runs every local handler for
+ * the topic (matches in-process fan-out semantics, but once per cluster, not once
+ * per replica). A distinct `SERVICE_NAME` per split service gives each service its
+ * own copy of every event; `createApp` requires one as soon as `SERVICE_MANIFEST`
+ * is set, since the group name is a durable identity and can't be derived from a
+ * module list that reorders and grows.
+ *
+ * Blocking `XREADGROUP` runs on a `client.duplicate()`d connection per loop, never
+ * on the shared client - `publish` (`XADD`, non-blocking) uses the shared client,
+ * so a blocked read never stalls the cache/rate-limiter commands sharing it.
+ * `publish` awaits the XADD and lets errors propagate (the `OutboxRelay` marks a
+ * row published only after this resolves - it must be reliable, not a silent
+ * no-op). Handler errors are guarded + logged, then the entry is XACKed regardless
+ * (matches `EventBus.on` - no per-handler retry; must-not-lose events use the
+ * outbox). A crash before XACK leaves the entry pending; `XAUTOCLAIM` periodically
+ * reclaims idle-pending entries so at-least-once delivery survives a replica crash.
+ *
+ * At-least-once holds from group creation onward, NOT before it. A group is created
+ * at `startId` (default `$`) on first subscribe and persists in Redis from then on,
+ * so restarts and outages are covered: the group keeps its cursor, undelivered
+ * entries wait in the stream, and pending ones are reclaimed. The one uncovered
+ * window is a group's FIRST-EVER creation - a service extracted after events were
+ * already flowing starts from `$` and never sees the backlog. `startId: '0'` closes
+ * that window by replaying everything still retained (up to STREAM_MAXLEN), at the
+ * cost of re-running every handler for those events: safe on a fresh deploy (empty
+ * streams), a duplicate-side-effect hazard for a late-added service, since core has
+ * no dedup layer - `EventBus.on` invokes handlers directly, and `eventId` is a key
+ * consumers must dedup on themselves.
+ *
+ * `orderingKey` is NOT honoured - Redis Streams have no partitioning, so per-key
+ * ordering across concurrent consumers isn't guaranteed (same footnote as
+ * `BullMqJobQueue`'s `orderingKey`).
+ */
+export declare class RedisStreamsBroker implements MessageBrokerAdapter {
+    private readonly client;
+    private readonly logger;
+    private readonly serviceName;
+    private readonly startId;
+    private readonly consumerId;
+    private readonly loops;
+    constructor(client: RedisClient, opts: RedisStreamsBrokerOptions);
+    publish(envelope: EventEnvelope): Promise<void>;
+    subscribe(topic: string, handler: BrokerHandler, options?: SubscribeOptions): () => void;
+    close(): Promise<void>;
+    private startLoop;
+    private reclaimPending;
+    private dispatch;
+}
+export {};
+//# sourceMappingURL=redis-streams-broker.d.ts.map

package/dist/server/kernel/redis-streams-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-streams-broker.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/redis-streams-broker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,gBAAgB,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA4BrD,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IAOpB,OAAO,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;CACrB,CAAC;AAgBF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,qBAAa,kBAAmB,YAAW,oBAAoB;IAQ3D,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAY;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;gBAGtC,MAAM,EAAE,WAAW,EACpC,IAAI,EAAE,yBAAyB;IAM3B,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IASrD,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAwBlF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,OAAO,CAAC,SAAS;YAqEH,cAAc;YAyBd,QAAQ;CA6BvB"}

package/dist/server/kernel/redis-streams-broker.js

@@ -0,0 +1,203 @@
+import { randomUUID } from 'node:crypto';
+import { createLogger } from './logger.js';
+const STREAM_PREFIX = 'oss:evt:';
+const STREAM_MAXLEN = 10_000;
+const READ_COUNT = 10;
+const BLOCK_MS = 5_000;
+const CLAIM_INTERVAL_MS = 30_000;
+const CLAIM_MIN_IDLE_MS = 60_000;
+const RETRY_DELAY_MS = 2_000;
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function streamKey(topic) {
+    return STREAM_PREFIX + topic;
+}
+function isBusyGroupError(err) {
+    return err instanceof Error && err.message.includes('BUSYGROUP');
+}
+/**
+ * Durable `MESSAGE_BROKER` reference driver on Redis Streams, auto-bound by
+ * `createApp` when `REDIS_URL` is set (ADR-0030 - production is distributed-only,
+ * core ships no in-process default).
+ *
+ * Every `subscribe(topic, handler)` call for the same (topic, group) - default
+ * group is the deployment's `serviceName` - coalesces into ONE Redis consumer-group
+ * loop that fans out to every registered local handler, then XACKs once: an event
+ * is delivered to exactly one replica of the service (competing consumers across
+ * replicas via the shared group), and that replica runs every local handler for
+ * the topic (matches in-process fan-out semantics, but once per cluster, not once
+ * per replica). A distinct `SERVICE_NAME` per split service gives each service its
+ * own copy of every event; `createApp` requires one as soon as `SERVICE_MANIFEST`
+ * is set, since the group name is a durable identity and can't be derived from a
+ * module list that reorders and grows.
+ *
+ * Blocking `XREADGROUP` runs on a `client.duplicate()`d connection per loop, never
+ * on the shared client - `publish` (`XADD`, non-blocking) uses the shared client,
+ * so a blocked read never stalls the cache/rate-limiter commands sharing it.
+ * `publish` awaits the XADD and lets errors propagate (the `OutboxRelay` marks a
+ * row published only after this resolves - it must be reliable, not a silent
+ * no-op). Handler errors are guarded + logged, then the entry is XACKed regardless
+ * (matches `EventBus.on` - no per-handler retry; must-not-lose events use the
+ * outbox). A crash before XACK leaves the entry pending; `XAUTOCLAIM` periodically
+ * reclaims idle-pending entries so at-least-once delivery survives a replica crash.
+ *
+ * At-least-once holds from group creation onward, NOT before it. A group is created
+ * at `startId` (default `$`) on first subscribe and persists in Redis from then on,
+ * so restarts and outages are covered: the group keeps its cursor, undelivered
+ * entries wait in the stream, and pending ones are reclaimed. The one uncovered
+ * window is a group's FIRST-EVER creation - a service extracted after events were
+ * already flowing starts from `$` and never sees the backlog. `startId: '0'` closes
+ * that window by replaying everything still retained (up to STREAM_MAXLEN), at the
+ * cost of re-running every handler for those events: safe on a fresh deploy (empty
+ * streams), a duplicate-side-effect hazard for a late-added service, since core has
+ * no dedup layer - `EventBus.on` invokes handlers directly, and `eventId` is a key
+ * consumers must dedup on themselves.
+ *
+ * `orderingKey` is NOT honoured - Redis Streams have no partitioning, so per-key
+ * ordering across concurrent consumers isn't guaranteed (same footnote as
+ * `BullMqJobQueue`'s `orderingKey`).
+ */
+export class RedisStreamsBroker {
+    client;
+    logger = createLogger('message-broker');
+    serviceName;
+    startId;
+    consumerId = randomUUID();
+    loops = new Map();
+    constructor(client, opts) {
+        this.client = client;
+        this.serviceName = opts.serviceName;
+        this.startId = opts.startId ?? '$';
+    }
+    async publish(envelope) {
+        await this.client.xAdd(streamKey(envelope.topic), '*', { data: JSON.stringify(envelope) }, { TRIM: { strategy: 'MAXLEN', strategyModifier: '~', threshold: STREAM_MAXLEN } });
+    }
+    subscribe(topic, handler, options) {
+        const group = options?.consumerGroup ?? this.serviceName;
+        const key = streamKey(topic);
+        const loopKey = `${key}::${group}`;
+        let loop = this.loops.get(loopKey);
+        if (!loop) {
+            loop = this.startLoop(key, group);
+            this.loops.set(loopKey, loop);
+        }
+        loop.handlers.add(handler);
+        return () => {
+            const current = this.loops.get(loopKey);
+            if (!current || !current.handlers.delete(handler)) {
+                return;
+            }
+            if (current.handlers.size === 0) {
+                this.loops.delete(loopKey);
+                current.stop();
+            }
+        };
+    }
+    async close() {
+        const loops = [...this.loops.values()];
+        this.loops.clear();
+        for (const loop of loops) {
+            loop.stop();
+        }
+        await Promise.allSettled(loops.map((loop) => loop.done));
+    }
+    startLoop(key, group) {
+        const handlers = new Set();
+        const reader = this.client.duplicate();
+        reader.on('error', (err) => this.logger.error({ err, key, group }, 'stream reader connection error'));
+        let stopped = false;
+        let lastClaimAt = 0;
+        const stop = () => {
+            stopped = true;
+            // Rejects the in-flight blocking XREADGROUP (if any) immediately, instead of
+            // waiting up to BLOCK_MS for it to time out on its own.
+            reader.destroy();
+        };
+        // `ready` gates connecting + group creation, and stays false until BOTH have
+        // succeeded - so a Redis outage at loop start retries the whole handshake with
+        // backoff rather than permanently abandoning this (topic, group)'s consumption.
+        const done = (async () => {
+            let ready = false;
+            while (!stopped) {
+                try {
+                    if (!ready) {
+                        if (!reader.isOpen) {
+                            await reader.connect();
+                        }
+                        try {
+                            await reader.xGroupCreate(key, group, this.startId, { MKSTREAM: true });
+                        }
+                        catch (err) {
+                            if (!isBusyGroupError(err)) {
+                                throw err;
+                            }
+                        }
+                        ready = true;
+                    }
+                    if (Date.now() - lastClaimAt > CLAIM_INTERVAL_MS) {
+                        lastClaimAt = Date.now();
+                        await this.reclaimPending(reader, key, group, handlers);
+                    }
+                    const reply = (await reader.xReadGroup(group, this.consumerId, { key, id: '>' }, { COUNT: READ_COUNT, BLOCK: BLOCK_MS }));
+                    if (!reply) {
+                        continue;
+                    }
+                    for (const stream of reply) {
+                        for (const message of stream.messages) {
+                            await this.dispatch(reader, key, group, message, handlers);
+                        }
+                    }
+                }
+                catch (err) {
+                    if (stopped) {
+                        break;
+                    }
+                    ready = false;
+                    this.logger.error({ err, key, group }, 'stream loop error, retrying');
+                    await delay(RETRY_DELAY_MS);
+                }
+            }
+        })();
+        return { handlers, stop, done };
+    }
+    async reclaimPending(reader, key, group, handlers) {
+        try {
+            const claimed = (await reader.xAutoClaim(key, group, this.consumerId, CLAIM_MIN_IDLE_MS, '0-0', { COUNT: READ_COUNT }));
+            for (const message of claimed.messages) {
+                if (message) {
+                    await this.dispatch(reader, key, group, message, handlers);
+                }
+            }
+        }
+        catch (err) {
+            this.logger.error({ err, key, group }, 'stream reclaim failed');
+        }
+    }
+    async dispatch(reader, key, group, message, handlers) {
+        const raw = message.message['data'];
+        if (raw === undefined) {
+            await reader.xAck(key, group, message.id);
+            return;
+        }
+        let envelope;
+        try {
+            envelope = JSON.parse(raw);
+        }
+        catch (err) {
+            this.logger.error({ err, key, group, id: message.id }, 'stream envelope parse failed');
+            await reader.xAck(key, group, message.id);
+            return;
+        }
+        for (const fn of handlers) {
+            try {
+                await fn(envelope);
+            }
+            catch (err) {
+                this.logger.error({ err, topic: envelope.topic }, 'message broker handler threw');
+            }
+        }
+        await reader.xAck(key, group, message.id);
+    }
+}
+//# sourceMappingURL=redis-streams-broker.js.map

package/dist/server/kernel/redis-streams-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-streams-broker.js","sourceRoot":"","sources":["../../../src/server/kernel/redis-streams-broker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,aAAa,GAAG,UAAU,CAAC;AACjC,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,QAAQ,GAAG,KAAK,CAAC;AACvB,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAgCD,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,aAAa,GAAG,KAAK,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,OAAO,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAM,OAAO,kBAAkB;IAQV;IAPF,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACxC,WAAW,CAAS;IACpB,OAAO,CAAY;IACnB,UAAU,GAAG,UAAU,EAAE,CAAC;IAC1B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD,YACmB,MAAmB,EACpC,IAA+B;QADd,WAAM,GAAN,MAAM,CAAa;QAGpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAuB;QACnC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EACzB,GAAG,EACH,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAClC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,OAAsB,EAAE,OAA0B;QACzE,MAAM,KAAK,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,WAAW,CAAC;QACzD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,GAAG,GAAG,KAAK,KAAK,EAAE,CAAC;QAEnC,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3B,OAAO,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,SAAS,CAAC,GAAW,EAAE,KAAa;QAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CACzE,CAAC;QAEF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,OAAO,GAAG,IAAI,CAAC;YACf,6EAA6E;YAC7E,wDAAwD;YACxD,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,6EAA6E;QAC7E,+EAA+E;QAC/E,gFAAgF;QAChF,MAAM,IAAI,GAAG,CAAC,KAAK,IAAmB,EAAE;YACtC,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;4BACnB,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;wBACzB,CAAC;wBACD,IAAI,CAAC;4BACH,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC1E,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gCAC3B,MAAM,GAAG,CAAC;4BACZ,CAAC;wBACH,CAAC;wBACD,KAAK,GAAG,IAAI,CAAC;oBACf,CAAC;oBACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,iBAAiB,EAAE,CAAC;wBACjD,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACzB,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;oBAC1D,CAAC;oBACD,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CACpC,KAAK,EACL,IAAI,CAAC,UAAU,EACf,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAChB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,CACvC,CAAoB,CAAC;oBACtB,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,SAAS;oBACX,CAAC;oBACD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;wBAC3B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;4BACtC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM;oBACR,CAAC;oBACD,KAAK,GAAG,KAAK,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,6BAA6B,CAAC,CAAC;oBACtE,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,MAAmB,EACnB,GAAW,EACX,KAAa,EACb,QAA4B;QAE5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CACtC,GAAG,EACH,KAAK,EACL,IAAI,CAAC,UAAU,EACf,iBAAiB,EACjB,KAAK,EACL,EAAE,KAAK,EAAE,UAAU,EAAE,CACtB,CAAqB,CAAC;YACvB,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAmB,EACnB,GAAW,EACX,KAAa,EACb,OAAsB,EACtB,QAA4B;QAE5B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,QAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACvF,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/server/kernel/request-context.d.ts

@@ -1,12 +1,16 @@
 import { AsyncLocalStorage } from 'node:async_hooks';
+import type { ClientMeta } from '@openora/core/contracts';
 export type RequestContext = {
     userId?: string;
     traceId: string;
+    clientMeta?: ClientMeta;
 };
 export type RequestStorage = AsyncLocalStorage<RequestContext>;
 export declare const requestStorage: RequestStorage;
 export declare function getCurrentRequestContext(): RequestContext | undefined;
 /** The active request's trace id for event correlation, or undefined on system/background paths. */
 export declare function getCurrentTraceId(): string | undefined;
+/** The active request's caller metadata, for an event emitted from a callback the request cannot thread it into. */
+export declare function getCurrentClientMeta(): ClientMeta;
 export declare function withRequestContext<T>(ctx: RequestContext, fn: () => T): T;
 //# sourceMappingURL=request-context.d.ts.map

package/dist/server/kernel/request-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;AAE/D,eAAO,MAAM,cAAc,EAAE,cAAwD,CAAC;AAEtF,wBAAgB,wBAAwB,IAAI,cAAc,GAAG,SAAS,CAErE;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEzE"}
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;AAE/D,eAAO,MAAM,cAAc,EAAE,cAAwD,CAAC;AAEtF,wBAAgB,wBAAwB,IAAI,cAAc,GAAG,SAAS,CAErE;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAEtD;AAED,oHAAoH;AACpH,wBAAgB,oBAAoB,IAAI,UAAU,CAEjD;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEzE"}

package/dist/server/kernel/request-context.js

@@ -7,6 +7,10 @@ export function getCurrentRequestContext() {
 export function getCurrentTraceId() {
     return requestStorage.getStore()?.traceId;
 }
+/** The active request's caller metadata, for an event emitted from a callback the request cannot thread it into. */
+export function getCurrentClientMeta() {
+    return requestStorage.getStore()?.clientMeta ?? { ip: null, userAgent: null };
+}
 export function withRequestContext(ctx, fn) {
     return requestStorage.run(ctx, fn);
 }

package/dist/server/kernel/request-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../../src/server/kernel/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AASrD,MAAM,CAAC,MAAM,cAAc,GAAmB,IAAI,iBAAiB,EAAkB,CAAC;AAEtF,MAAM,UAAU,wBAAwB;IACtC,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,GAAmB,EAAE,EAAW;IACpE,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../../src/server/kernel/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAWrD,MAAM,CAAC,MAAM,cAAc,GAAmB,IAAI,iBAAiB,EAAkB,CAAC;AAEtF,MAAM,UAAU,wBAAwB;IACtC,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC;AAC5C,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC,QAAQ,EAAE,EAAE,UAAU,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,GAAmB,EAAE,EAAW;IACpE,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/dist/server/kernel/router-utils.d.ts

@@ -1,16 +1,23 @@
+import type { ClientMeta } from '@openora/core/contracts';
 export type NodeHeaders = Record<string, string | string[] | undefined>;
 type RequestLike = {
     headers: NodeHeaders;
 };
 export type AuthContext = {
     userId: string;
+    sessionId?: string | undefined;
 };
 export type OssContext = {
     request: RequestLike;
+    clientMeta: ClientMeta;
     auth?: AuthContext;
     resHeaders?: Headers;
     rawBody?: string;
 };
 export declare function getUserId(context: unknown): string;
+export declare function getSessionId(context: unknown): string | undefined;
+export declare function extractClientMeta(headers: NodeHeaders, opts?: {
+    trustForwarded?: boolean;
+}): ClientMeta;
 export {};
 //# sourceMappingURL=router-utils.d.ts.map

package/dist/server/kernel/router-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router-utils.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/router-utils.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAExE,KAAK,WAAW,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAG5C,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAoBF,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAElD"}
+{"version":3,"file":"router-utils.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/router-utils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAExE,KAAK,WAAW,GAAG;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAG5C,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IAGf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IAGrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AA0BF,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEjE;AAOD,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAClC,UAAU,CAaZ"}

package/dist/server/kernel/router-utils.js

@@ -1,18 +1,47 @@
 import { ORPCError } from '@orpc/server';
+import { AuthGuardReasonSchema } from '@openora/core/contracts';
 function resolveAuth(context) {
     if (typeof context !== 'object' ||
         context === null ||
         !('request' in context) ||
         typeof context.request !== 'object') {
-        throw new ORPCError('UNAUTHORIZED', { message: 'Missing request context' });
+        throw new ORPCError('UNAUTHORIZED', {
+            message: 'Missing request context',
+            data: { reason: AuthGuardReasonSchema.enum.missing_request_context },
+        });
     }
     const auth = context.auth;
     if (!auth?.userId) {
-        throw new ORPCError('UNAUTHORIZED', { message: 'Authentication required' });
+        throw new ORPCError('UNAUTHORIZED', {
+            message: 'Authentication required',
+            data: { reason: AuthGuardReasonSchema.enum.authentication_required },
+        });
     }
     return auth;
 }
 export function getUserId(context) {
     return resolveAuth(context).userId;
 }
+export function getSessionId(context) {
+    return resolveAuth(context).sessionId;
+}
+// Extracts IP only from headers; does not trust X-Forwarded-For without a
+// validated proxy boundary. Geo/rate-limit checks use this - a spoofed
+// X-Forwarded-For bypasses both. Use extractClientMeta({ headers, trustForwarded: true })
+// only when Node receives requests exclusively through a trusted reverse proxy
+// (Cloudflare, nginx, etc configured to strip and replace the header).
+export function extractClientMeta(headers, opts) {
+    let ip = null;
+    if (opts?.trustForwarded) {
+        const fwd = headers['x-forwarded-for'];
+        const first = Array.isArray(fwd) ? fwd[0] : fwd;
+        ip = first?.split(',')[0]?.trim() || null;
+    }
+    if (!ip) {
+        const real = headers['x-real-ip'];
+        ip = (Array.isArray(real) ? real[0] : real) || null;
+    }
+    const ua = headers['user-agent'];
+    return { ip: ip ?? null, userAgent: (Array.isArray(ua) ? ua[0] : ua) ?? null };
+}
 //# sourceMappingURL=router-utils.js.map

package/dist/server/kernel/router-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"router-utils.js","sourceRoot":"","sources":["../../../src/server/kernel/router-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAqBzC,SAAS,WAAW,CAAC,OAAgB;IACnC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QACvB,OAAQ,OAAmC,CAAC,OAAO,KAAK,QAAQ,EAChE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAI,OAAkC,CAAC,IAAI,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACrC,CAAC"}
+{"version":3,"file":"router-utils.js","sourceRoot":"","sources":["../../../src/server/kernel/router-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAyBhE,SAAS,WAAW,CAAC,OAAgB;IACnC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,KAAK,IAAI;QAChB,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC;QACvB,OAAQ,OAAmC,CAAC,OAAO,KAAK,QAAQ,EAChE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE;YAClC,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,uBAAuB,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAI,OAAkC,CAAC,IAAI,CAAC;IACtD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE;YAClC,OAAO,EAAE,yBAAyB;YAClC,IAAI,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,uBAAuB,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAgB;IACxC,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC;AACxC,CAAC;AAED,0EAA0E;AAC1E,uEAAuE;AACvE,0FAA0F;AAC1F,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,UAAU,iBAAiB,CAC/B,OAAoB,EACpB,IAAmC;IAEnC,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAChD,EAAE,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAClC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IACtD,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;AACjF,CAAC"}

package/dist/server/plugin-host/__tests__/core-plugins.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=core-plugins.test.d.ts.map

package/dist/server/plugin-host/__tests__/core-plugins.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-plugins.test.d.ts","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/core-plugins.test.ts"],"names":[],"mappings":""}

package/dist/server/plugin-host/__tests__/core-plugins.test.js

@@ -0,0 +1,27 @@
+import { describe, it, expect } from 'vitest';
+import { corePlugins } from '../core-plugins.js';
+async function loadDefaults() {
+    const entries = corePlugins();
+    const loaded = await Promise.all(entries.map(async (entry) => {
+        const mod = (await import(entry.path));
+        return { entry, plugin: mod.default };
+    }));
+    return loaded;
+}
+describe('corePlugins', () => {
+    it('resolves every entry to an importable plugin whose id matches the entry id', async () => {
+        const loaded = await loadDefaults();
+        for (const { entry, plugin } of loaded) {
+            expect(plugin.id, `entry ${entry.id} resolves to a plugin`).toBe(entry.id);
+        }
+    }, 20000);
+    it('is a self-contained dependency graph - every dependsOn is present in the set', async () => {
+        const loaded = await loadDefaults();
+        const present = new Set(loaded.map(({ plugin }) => plugin.id));
+        const missing = loaded.flatMap(({ plugin }) => (plugin.dependsOn ?? [])
+            .filter((dep) => !present.has(dep))
+            .map((dep) => `${plugin.id} -> ${dep}`));
+        expect(missing).toEqual([]);
+    });
+});
+//# sourceMappingURL=core-plugins.test.js.map

package/dist/server/plugin-host/__tests__/core-plugins.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-plugins.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/core-plugins.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD,KAAK,UAAU,YAAY;IACzB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAA8B,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACxC,CAAC,CAAC,CACH,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5C,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;aACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/plugin-host/__tests__/load-plugins.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=load-plugins.test.d.ts.map

package/dist/server/plugin-host/__tests__/load-plugins.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-plugins.test.d.ts","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/load-plugins.test.ts"],"names":[],"mappings":""}

package/dist/server/plugin-host/__tests__/load-plugins.test.js

@@ -0,0 +1,31 @@
+import { describe, expect, it } from 'vitest';
+import { assertEntryMatchesPlugin, topoSort } from '../load-plugins.js';
+function plugin(id, dependsOn = []) {
+    return {
+        id,
+        dependsOn,
+        register() { },
+    };
+}
+describe('topoSort', () => {
+    it('places dependencies before dependents', () => {
+        const sorted = topoSort([plugin('feature', ['foundation']), plugin('foundation')]);
+        expect(sorted.map(({ id }) => id)).toEqual(['foundation', 'feature']);
+    });
+    it('rejects an unregistered dependency', () => {
+        expect(() => topoSort([plugin('feature', ['missing'])])).toThrow('Plugin "feature" depends on "missing" which is not registered');
+    });
+    it('rejects a dependency cycle', () => {
+        expect(() => topoSort([plugin('a', ['b']), plugin('b', ['c']), plugin('c', ['a'])])).toThrow('Circular plugin dependency: a -> b -> c -> a');
+    });
+});
+describe('assertEntryMatchesPlugin', () => {
+    const entry = (id) => ({ id, path: `./${id}.js` });
+    it('accepts a registry entry that resolves the same plugin id', () => {
+        expect(() => assertEntryMatchesPlugin(entry('wallet'), plugin('wallet'))).not.toThrow();
+    });
+    it('rejects a registry entry that resolves a different plugin id', () => {
+        expect(() => assertEntryMatchesPlugin(entry('wallet'), plugin('tag'))).toThrow(/does not match the plugin's own id "tag"/);
+    });
+});
+//# sourceMappingURL=load-plugins.test.js.map

package/dist/server/plugin-host/__tests__/load-plugins.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-plugins.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/load-plugins.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAoB,MAAM,oBAAoB,CAAC;AAE1F,SAAS,MAAM,CAAC,EAAU,EAAE,YAAsB,EAAE;IAClD,OAAO;QACL,EAAE;QACF,SAAS;QACT,QAAQ,KAAI,CAAC;KACd,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEnF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC9D,+DAA+D,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC1F,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAe,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAExE,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAC5E,0CAA0C,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/plugin-host/__tests__/module-registry.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"module-registry.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/module-registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,SAAS,WAAW;IAClB,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAS,KAAK,CAAC,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAS,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAe,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,iBAAiB,CAAS,kBAAkB,CAAC,CAAC;QAC7D,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAS,kBAAkB,CAAC,CAAC;QAC7D,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"module-registry.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/module-registry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAc,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,SAAS,WAAW;IAClB,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,WAAW,CAAS,KAAK,CAAC,CAAC;QACzC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAS,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAkC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAC9E,eAAe,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,iBAAiB,CAAS,kBAAkB,CAAC,CAAC;QAC7D,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAS,kBAAkB,CAAC,CAAC;QAC7D,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAU,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/plugin-host/__tests__/required-ports.test.js

@@ -3,6 +3,7 @@ import { Container } from '../../kernel/index.js';
 import { createToken } from '@openora/core/contracts';
 import { assertRequiredPorts } from '../load-plugins.js';
 const WALLET_COMMANDS = createToken('WALLET_COMMANDS');
+const catalog = { WALLET_COMMANDS };
 const consumer = {
     id: 'gaming',
     requiresPorts: [WALLET_COMMANDS],

package/dist/server/plugin-host/__tests__/required-ports.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"required-ports.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/required-ports.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,MAAM,eAAe,GAAG,WAAW,CAAwB,iBAAiB,CAAC,CAAC;AAE9E,MAAM,QAAQ,GAAW;IACvB,EAAE,EAAE,QAAQ;IACZ,aAAa,EAAE,CAAC,eAAe,CAAC;IAChC,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;CACnB,CAAC;AAEF,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAW,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"required-ports.test.js","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/required-ports.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAqB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,MAAM,eAAe,GAAG,WAAW,CAAwB,iBAAiB,CAAC,CAAC;AAC9E,MAAM,OAAO,GAAG,EAAE,eAAe,EAAyB,CAAC;AAE3D,MAAM,QAAQ,GAA2B;IACvC,EAAE,EAAE,QAAQ;IACZ,aAAa,EAAE,CAAC,eAAe,CAAC;IAChC,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;CACnB,CAAC;AAEF,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,SAAS,GAAG,IAAI,SAAS,EAAkB,CAAC;QAClD,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,SAAS,GAAG,IAAI,SAAS,EAAkB,CAAC;QAClD,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,SAAS,GAAG,IAAI,SAAS,EAAkB,CAAC;QAClD,MAAM,KAAK,GAA2B,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/plugin-host/__tests__/typed-plugin.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=typed-plugin.test.d.ts.map

package/dist/server/plugin-host/__tests__/typed-plugin.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typed-plugin.test.d.ts","sourceRoot":"","sources":["../../../../src/server/plugin-host/__tests__/typed-plugin.test.ts"],"names":[],"mappings":""}