@openora/core 0.4.1-canary.27 → 0.4.1-canary.30

package/dist/server/auth/permissions.d.ts

@@ -16,6 +16,7 @@ export declare const statement: {
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
 };
 export declare const ac: {
     newRole<const TRoleStatements extends import("better-auth/plugins/access").Statements>(statements: import("better-auth/plugins/access").RoleInput<{
@@ -36,6 +37,7 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     }, TRoleStatements>): import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<TRoleStatements>, {
         readonly player: readonly ["view", "update", "ban", "adjust-balance"];
         readonly transaction: readonly ["view", "refund"];
@@ -54,6 +56,7 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     }>;
     statements: {
         readonly player: readonly ["view", "update", "ban", "adjust-balance"];
@@ -73,6 +76,7 @@ export declare const ac: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     };
 };
 export declare const adminRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
@@ -93,6 +97,7 @@ export declare const adminRole: import("better-auth/plugins/access").Role<import
     readonly sessions: ["view", "revoke"];
     readonly 'player-note': ["view", "create"];
     readonly 'tag-rule': ["view", "update"];
+    readonly 'chat-room': ["view", "create", "update", "delete"];
 }>, {
     readonly player: readonly ["view", "update", "ban", "adjust-balance"];
     readonly transaction: readonly ["view", "refund"];
@@ -111,6 +116,7 @@ export declare const adminRole: import("better-auth/plugins/access").Role<import
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
 }>;
 export declare const supportRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
     readonly player: ["view", "update"];
@@ -136,6 +142,7 @@ export declare const supportRole: import("better-auth/plugins/access").Role<impo
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
 }>;
 export declare const contentManagerRole: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
     readonly content: ["create", "update", "delete", "publish"];
@@ -158,6 +165,7 @@ export declare const contentManagerRole: import("better-auth/plugins/access").Ro
     readonly sessions: readonly ["view", "revoke"];
     readonly 'player-note': readonly ["view", "create"];
     readonly 'tag-rule': readonly ["view", "update"];
+    readonly 'chat-room': readonly ["view", "create", "update", "delete"];
 }>;
 export declare const roles: {
     readonly admin: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
@@ -178,6 +186,7 @@ export declare const roles: {
         readonly sessions: ["view", "revoke"];
         readonly 'player-note': ["view", "create"];
         readonly 'tag-rule': ["view", "update"];
+        readonly 'chat-room': ["view", "create", "update", "delete"];
     }>, {
         readonly player: readonly ["view", "update", "ban", "adjust-balance"];
         readonly transaction: readonly ["view", "refund"];
@@ -196,6 +205,7 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     }>;
     readonly support: import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
         readonly player: ["view", "update"];
@@ -221,6 +231,7 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     }>;
     readonly 'content-manager': import("better-auth/plugins/access").Role<import("better-auth/plugins/access").ExactRoleStatements<{
         readonly content: ["create", "update", "delete", "publish"];
@@ -243,6 +254,7 @@ export declare const roles: {
         readonly sessions: readonly ["view", "revoke"];
         readonly 'player-note': readonly ["view", "create"];
         readonly 'tag-rule': readonly ["view", "update"];
+        readonly 'chat-room': readonly ["view", "create", "update", "delete"];
     }>;
 };
 export type RoleName = keyof typeof roles;

package/dist/server/auth/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;CAkBZ,CAAC;AAEX,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiC,CAAC;AAEjD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBpB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAG7B,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAC;AAC1C,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,SAAS,CAAC;AAClD,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;CAmBZ,CAAC;AAEX,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAiC,CAAC;AAEjD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBpB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;EAMtB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;EAG7B,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,KAAK,CAAC;AAC1C,MAAM,MAAM,YAAY,GAAG,MAAM,OAAO,SAAS,CAAC;AAClD,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/server/auth/permissions.js

@@ -17,6 +17,7 @@ export const statement = {
     sessions: ['view', 'revoke'],
     'player-note': ['view', 'create'],
     'tag-rule': ['view', 'update'],
+    'chat-room': ['view', 'create', 'update', 'delete'],
 };
 export const ac = createAccessControl(statement);
 export const adminRole = ac.newRole({
@@ -37,6 +38,7 @@ export const adminRole = ac.newRole({
     sessions: ['view', 'revoke'],
     'player-note': ['view', 'create'],
     'tag-rule': ['view', 'update'],
+    'chat-room': ['view', 'create', 'update', 'delete'],
 });
 export const supportRole = ac.newRole({
     player: ['view', 'update'],

package/dist/server/auth/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAU;IAC5D,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACxC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC5C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC3D,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAU;IAC5D,MAAM,EAAE,CAAC,MAAM,CAAU;IACzB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAU;IACvE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;IAC/D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAClC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU;IACjE,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAU;IACtD,SAAS,EAAE,CAAC,MAAM,CAAU;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAU;IACrD,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACrC,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAC1C,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;CAC/B,CAAC;AAEX,MAAM,CAAC,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACnD,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;IACnC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;IAC9D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IACtD,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACzB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5B,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,CAAC,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,WAAW;IACpB,iBAAiB,EAAE,kBAAkB;CAC7B,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/server/auth/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAU;IAC5D,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACxC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC5C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU;IAC3D,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAU;IAC5D,MAAM,EAAE,CAAC,MAAM,CAAU;IACzB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAU;IACvE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;IAC/D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAClC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU;IACjE,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAU;IACtD,SAAS,EAAE,CAAC,MAAM,CAAU;IAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAU;IACrD,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACtC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACrC,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IAC1C,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU;IACvC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC;IAClC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC;IACnD,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC/B,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;IACnC,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,UAAU,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,CAAC;IACnD,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC;IAC9D,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IACtD,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACzB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IACxD,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC7C,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC;IAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC7B,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC5B,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IACjC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC9B,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC;IAChB,SAAS,EAAE,CAAC,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;IAClD,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,WAAW;IACpB,iBAAiB,EAAE,kBAAkB;CAC7B,CAAC"}

package/dist/server/db/__tests__/migrate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=migrate.test.d.ts.map

package/dist/server/db/__tests__/migrate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.d.ts","sourceRoot":"","sources":["../../../../src/server/db/__tests__/migrate.test.ts"],"names":[],"mappings":""}

package/dist/server/db/__tests__/migrate.test.js

@@ -0,0 +1,50 @@
+import { describe, expect, it, vi } from 'vitest';
+import { applyMigrationsIndividually, withMigrationAdvisoryLock } from '../migrate.js';
+const migrations = [
+    {
+        sql: ["ALTER TYPE room_category ADD VALUE 'private-chats';"],
+        folderMillis: 1,
+        hash: 'one',
+        bps: true,
+    },
+    {
+        sql: ["UPDATE chat_room SET category = 'private-chats';"],
+        folderMillis: 2,
+        hash: 'two',
+        bps: true,
+    },
+];
+describe('applyMigrationsIndividually', () => {
+    it('commits each migration file before applying the next one', async () => {
+        const apply = vi.fn(async () => undefined);
+        await applyMigrationsIndividually({ migrations, apply });
+        expect(apply).toHaveBeenCalledTimes(2);
+        expect(apply).toHaveBeenNthCalledWith(1, migrations[0]);
+        expect(apply).toHaveBeenNthCalledWith(2, migrations[1]);
+    });
+});
+describe('withMigrationAdvisoryLock', () => {
+    it('holds the journal lock until the migration work completes', async () => {
+        const query = vi.fn(async () => undefined);
+        const action = vi.fn(async () => undefined);
+        await withMigrationAdvisoryLock({ query }, 'drizzle.__drizzle_migrations_chat', action);
+        expect(query).toHaveBeenNthCalledWith(1, 'SELECT pg_advisory_lock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+        expect(action).toHaveBeenCalledOnce();
+        expect(query).toHaveBeenNthCalledWith(2, 'SELECT pg_advisory_unlock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+    });
+    it('releases the lock when migration work fails', async () => {
+        const query = vi.fn(async () => undefined);
+        const failure = new Error('migration failed');
+        await expect(withMigrationAdvisoryLock({ query }, 'drizzle.__drizzle_migrations_chat', async () => {
+            throw failure;
+        })).rejects.toThrow(failure);
+        expect(query).toHaveBeenNthCalledWith(2, 'SELECT pg_advisory_unlock(hashtext($1))', [
+            'drizzle.__drizzle_migrations_chat',
+        ]);
+    });
+});
+//# sourceMappingURL=migrate.test.js.map

package/dist/server/db/__tests__/migrate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.test.js","sourceRoot":"","sources":["../../../../src/server/db/__tests__/migrate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,2BAA2B,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAEvF,MAAM,UAAU,GAAoB;IAClC;QACE,GAAG,EAAE,CAAC,qDAAqD,CAAC;QAC5D,YAAY,EAAE,CAAC;QACf,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,IAAI;KACV;IACD;QACE,GAAG,EAAE,CAAC,kDAAkD,CAAC;QACzD,YAAY,EAAE,CAAC;QACf,IAAI,EAAE,KAAK;QACX,GAAG,EAAE,IAAI;KACV;CACF,CAAC;AAEF,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAE3C,MAAM,2BAA2B,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAEzD,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,yBAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,mCAAmC,EAAE,MAAM,CAAC,CAAC;QAExF,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,uCAAuC,EAAE;YAChF,mCAAmC;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,yCAAyC,EAAE;YAClF,mCAAmC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE9C,MAAM,MAAM,CACV,yBAAyB,CAAC,EAAE,KAAK,EAAE,EAAE,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,OAAO,CAAC;QAChB,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3B,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,yCAAyC,EAAE;YAClF,mCAAmC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/db/migrate.d.ts

@@ -1,4 +1,5 @@
 import 'dotenv/config';
+import { type MigrationMeta } from 'drizzle-orm/migrator';
 export type RunMigrationsOptions = {
     /** Absolute path to the drizzle migrations folder (the dir holding the .sql + meta/). */
     migrationsFolder: string;
@@ -15,8 +16,21 @@ export type RunMigrationsOptions = {
      */
     extensions?: string[];
 };
+type SqlClient = {
+    query(sql: string, values?: unknown[]): Promise<unknown>;
+};
+/**
+ * Serializes migration runners for one journal. The lock is session-scoped, so
+ * it remains held while each migration uses its own transaction connection.
+ */
+export declare function withMigrationAdvisoryLock<T>(client: SqlClient, lockName: string, action: () => Promise<T>): Promise<T>;
+export declare function applyMigrationsIndividually({ migrations, apply, }: {
+    migrations: MigrationMeta[];
+    apply: (migration: MigrationMeta) => Promise<void>;
+}): Promise<void>;
 /** Apply one migration set against the admin connection. Idempotent: drizzle skips already-recorded migrations. */
 export declare function runMigrations(opts: RunMigrationsOptions): Promise<void>;
 /** Apply the engine `outbox` migration set (the only engine-owned table); domain modules ship their own `migrate`. */
 export declare function migrate(databaseUrl?: string): Promise<void>;
+export {};
 //# sourceMappingURL=migrate.d.ts.map

package/dist/server/db/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/server/db/migrate.ts"],"names":[],"mappings":"AAKA,OAAO,eAAe,CAAC;AAMvB,MAAM,MAAM,oBAAoB,GAAG;IACjC,yFAAyF;IACzF,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAUF,mHAAmH;AACnH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,iBAkB7D;AAED,sHAAsH;AACtH,wBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,iBAO3C"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../../src/server/db/migrate.ts"],"names":[],"mappings":"AAMA,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG9E,MAAM,MAAM,oBAAoB,GAAG;IACjC,yFAAyF;IACzF,gBAAgB,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAcF,KAAK,SAAS,GAAG;IACf,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AAEF;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAC/C,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,cAQzB;AAED,wBAAsB,2BAA2B,CAAC,EAChD,UAAU,EACV,KAAK,GACN,EAAE;IACD,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD,iBAIA;AAED,mHAAmH;AACnH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,iBAiE7D;AAED,sHAAsH;AACtH,wBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,iBAO3C"}

package/dist/server/db/migrate.js

@@ -1,12 +1,12 @@
-// Uses drizzle-orm's migrator, NOT drizzle-kit (dev-only authoring tool). Each migration
-// set ships its compiled SQL in the package tarball (the per-module `drizzle/` dirs land in
-// `dist/**` via copy-drizzle), so a consumer runs migrations straight from node_modules with
-// no source checkout. Every module owns its own journal + tracking table and calls
-// `runMigrations`; this file owns only the engine `outbox` set. See ADR-0022/0020/0027.
+// Uses Drizzle's generated migration journal, but executes one file per database transaction.
+// PostgreSQL enum values cannot be used until the transaction that adds them has committed.
+// Each migration set ships its compiled SQL in the package tarball (the per-module `drizzle/`
+// dirs land in `dist/**` via copy-drizzle), so a consumer runs migrations straight from
+// node_modules with no source checkout. Every module owns its own journal + tracking table and
+// calls `runMigrations`; this file owns only the engine `outbox` set. See ADR-0022/0020/0027.
 import 'dotenv/config';
 import { fileURLToPath } from 'node:url';
-import { drizzle } from 'drizzle-orm/node-postgres';
-import { migrate as drizzleMigrate } from 'drizzle-orm/node-postgres/migrator';
+import { readMigrationFiles } from 'drizzle-orm/migrator';
 import { Pool } from 'pg';
 function migrateUrl(override) {
     const url = override ?? process.env['DATABASE_ADMIN_URL'] ?? process.env['DATABASE_URL'];
@@ -15,6 +15,27 @@ function migrateUrl(override) {
     }
     return url;
 }
+function quoteIdentifier(identifier) {
+    return `"${identifier.replaceAll('"', '""')}"`;
+}
+/**
+ * Serializes migration runners for one journal. The lock is session-scoped, so
+ * it remains held while each migration uses its own transaction connection.
+ */
+export async function withMigrationAdvisoryLock(client, lockName, action) {
+    await client.query('SELECT pg_advisory_lock(hashtext($1))', [lockName]);
+    try {
+        return await action();
+    }
+    finally {
+        await client.query('SELECT pg_advisory_unlock(hashtext($1))', [lockName]);
+    }
+}
+export async function applyMigrationsIndividually({ migrations, apply, }) {
+    for (const migration of migrations) {
+        await apply(migration);
+    }
+}
 /** Apply one migration set against the admin connection. Idempotent: drizzle skips already-recorded migrations. */
 export async function runMigrations(opts) {
     const pool = new Pool({ connectionString: migrateUrl(opts.databaseUrl) });
@@ -25,12 +46,49 @@ export async function runMigrations(opts) {
             }
             await pool.query(`CREATE EXTENSION IF NOT EXISTS ${ext}`);
         }
-        const db = drizzle(pool, { casing: 'snake_case' });
-        await drizzleMigrate(db, {
+        const migrationsTable = opts.migrationsTable ?? '__drizzle_migrations';
+        const migrationsSchema = opts.migrationsSchema ?? 'drizzle';
+        const migrationConfig = {
             migrationsFolder: opts.migrationsFolder,
-            ...(opts.migrationsTable ? { migrationsTable: opts.migrationsTable } : {}),
-            ...(opts.migrationsSchema ? { migrationsSchema: opts.migrationsSchema } : {}),
-        });
+            migrationsTable,
+            migrationsSchema,
+        };
+        const schema = quoteIdentifier(migrationsSchema);
+        const table = quoteIdentifier(migrationsTable);
+        await pool.query(`CREATE SCHEMA IF NOT EXISTS ${schema}`);
+        await pool.query(`CREATE TABLE IF NOT EXISTS ${schema}.${table} (id SERIAL PRIMARY KEY, hash text NOT NULL, created_at bigint)`);
+        const lockClient = await pool.connect();
+        try {
+            await withMigrationAdvisoryLock(lockClient, `${migrationsSchema}.${migrationsTable}`, async () => {
+                const applied = await lockClient.query(`SELECT hash FROM ${schema}.${table}`);
+                const appliedHashes = new Set(applied.rows.map(({ hash }) => hash));
+                const pending = readMigrationFiles(migrationConfig).filter((migration) => !appliedHashes.has(migration.hash));
+                await applyMigrationsIndividually({
+                    migrations: pending,
+                    apply: async (migration) => {
+                        const client = await pool.connect();
+                        try {
+                            await client.query('BEGIN');
+                            for (const statement of migration.sql) {
+                                await client.query(statement);
+                            }
+                            await client.query(`INSERT INTO ${schema}.${table} (hash, created_at) VALUES ($1, $2)`, [migration.hash, migration.folderMillis]);
+                            await client.query('COMMIT');
+                        }
+                        catch (error) {
+                            await client.query('ROLLBACK');
+                            throw error;
+                        }
+                        finally {
+                            client.release();
+                        }
+                    },
+                });
+            });
+        }
+        finally {
+            lockClient.release();
+        }
     }
     finally {
         await pool.end();

package/dist/server/db/migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../../src/server/db/migrate.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,4FAA4F;AAC5F,6FAA6F;AAC7F,mFAAmF;AACnF,wFAAwF;AACxF,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAmB1B,SAAS,UAAU,CAAC,QAAiB;IACnC,MAAM,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QACnD,MAAM,cAAc,CAAC,EAAE,EAAE;YACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,OAAO,CAAC,WAAoB;IAC1C,OAAO,aAAa,CAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxF,eAAe,EAAE,6BAA6B;QAC9C,gBAAgB,EAAE,SAAS;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../../src/server/db/migrate.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,4FAA4F;AAC5F,8FAA8F;AAC9F,wFAAwF;AACxF,+FAA+F;AAC/F,8FAA8F;AAC9F,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAsB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAmB1B,SAAS,UAAU,CAAC,QAAiB;IACnC,MAAM,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAMD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAiB,EACjB,QAAgB,EAChB,MAAwB;IAExB,MAAM,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,EAChD,UAAU,EACV,KAAK,GAIN;IACC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,sBAAsB,CAAC;QACvE,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;QAC5D,MAAM,eAAe,GAAG;YACtB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,eAAe;YACf,gBAAgB;SACjB,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,8BAA8B,MAAM,IAAI,KAAK,iEAAiE,CAC/G,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,yBAAyB,CAC7B,UAAU,EACV,GAAG,gBAAgB,IAAI,eAAe,EAAE,EACxC,KAAK,IAAI,EAAE;gBACT,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC,oBAAoB,MAAM,IAAI,KAAK,EAAE,CACtC,CAAC;gBACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC,MAAM,CACxD,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAClD,CAAC;gBACF,MAAM,2BAA2B,CAAC;oBAChC,UAAU,EAAE,OAAO;oBACnB,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;wBACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;wBACpC,IAAI,CAAC;4BACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;4BAC5B,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;gCACtC,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;4BAChC,CAAC;4BACD,MAAM,MAAM,CAAC,KAAK,CAChB,eAAe,MAAM,IAAI,KAAK,qCAAqC,EACnE,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CACzC,CAAC;4BACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAC/B,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;4BAC/B,MAAM,KAAK,CAAC;wBACd,CAAC;gCAAS,CAAC;4BACT,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;YACL,CAAC,CACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,OAAO,CAAC,WAAoB;IAC1C,OAAO,aAAa,CAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxF,eAAe,EAAE,6BAA6B;QAC9C,gBAAgB,EAAE,SAAS;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/kernel/index.d.ts

@@ -9,6 +9,8 @@ export { createRedisClient, type RedisClient } from './redis-client.js';
 export { RedisCache } from './redis-cache.js';
 export { RedisRateLimiter } from './redis-rate-limiter.js';
 export { RedisStreamsBroker } from './redis-streams-broker.js';
+export { InProcessRealtimeTransport } from './realtime-transport.js';
+export { SseClientAuthorizer } from './realtime-authorizer.js';
 export { Container } from './container.js';
 export type { Factory } from './container.js';
 export { createLogger } from './logger.js';

package/dist/server/kernel/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,YAAY,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/server/kernel/index.js

@@ -7,6 +7,8 @@ export { createRedisClient } from './redis-client.js';
 export { RedisCache } from './redis-cache.js';
 export { RedisRateLimiter } from './redis-rate-limiter.js';
 export { RedisStreamsBroker } from './redis-streams-broker.js';
+export { InProcessRealtimeTransport } from './realtime-transport.js';
+export { SseClientAuthorizer } from './realtime-authorizer.js';
 export { Container } from './container.js';
 export { createLogger } from './logger.js';
 export { setErrorReporter, reportError } from './error-reporter.js';

package/dist/server/kernel/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/kernel/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAoB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAG/D,iDAAiD;AACjD,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/kernel/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAoB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAG/D,iDAAiD;AACjD,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/server/kernel/realtime-authorizer.d.ts

@@ -0,0 +1,8 @@
+import type { RealtimeClientAuthorizer, RealtimeClientAuthorizerInput, RealtimeConnectionGrant } from '@openora/core/contracts';
+/** First-party SSE grant; the session cookie authorizes the stream itself. */
+export declare class SseClientAuthorizer implements RealtimeClientAuthorizer {
+    private readonly streamPath;
+    constructor(streamPath?: string);
+    issueGrant(input: RealtimeClientAuthorizerInput): RealtimeConnectionGrant;
+}
+//# sourceMappingURL=realtime-authorizer.d.ts.map

package/dist/server/kernel/realtime-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-authorizer.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/realtime-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,yBAAyB,CAAC;AAEjC,8EAA8E;AAC9E,qBAAa,mBAAoB,YAAW,wBAAwB;IACtD,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,SAAiB;IAExD,UAAU,CAAC,KAAK,EAAE,6BAA6B,GAAG,uBAAuB;CAG1E"}

package/dist/server/kernel/realtime-authorizer.js

@@ -0,0 +1,11 @@
+/** First-party SSE grant; the session cookie authorizes the stream itself. */
+export class SseClientAuthorizer {
+    streamPath;
+    constructor(streamPath = '/chat/stream') {
+        this.streamPath = streamPath;
+    }
+    issueGrant(input) {
+        return { provider: 'sse', streamPath: this.streamPath, channels: input.channels };
+    }
+}
+//# sourceMappingURL=realtime-authorizer.js.map

package/dist/server/kernel/realtime-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-authorizer.js","sourceRoot":"","sources":["../../../src/server/kernel/realtime-authorizer.ts"],"names":[],"mappings":"AAMA,8EAA8E;AAC9E,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,aAAa,cAAc;QAA3B,eAAU,GAAV,UAAU,CAAiB;IAAG,CAAC;IAE5D,UAAU,CAAC,KAAoC;QAC7C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACpF,CAAC;CACF"}

package/dist/server/kernel/realtime-transport.d.ts

@@ -0,0 +1,9 @@
+import type { RealtimePresence, RealtimeTransport } from '@openora/core/contracts';
+/** First-party process-local fan-out used by the default SSE transport. */
+export declare class InProcessRealtimeTransport implements RealtimeTransport {
+    private readonly channels;
+    readonly presence: RealtimePresence;
+    publish<T>(channel: string, event: T): void;
+    subscribe<T>(channel: string, handler: (event: T) => void): () => void;
+}
+//# sourceMappingURL=realtime-transport.d.ts.map

package/dist/server/kernel/realtime-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.d.ts","sourceRoot":"","sources":["../../../src/server/kernel/realtime-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAmCnF,2EAA2E;AAC3E,qBAAa,0BAA2B,YAAW,iBAAiB;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAA2B;IAE9D,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI;IAe3C,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI;CAevE"}

package/dist/server/kernel/realtime-transport.js

@@ -0,0 +1,63 @@
+class InProcessPresence {
+    members = new Map();
+    join(channel, memberId, connectionId) {
+        const channelMembers = this.members.get(channel) ?? new Map();
+        const connections = channelMembers.get(memberId) ?? new Set();
+        connections.add(connectionId);
+        channelMembers.set(memberId, connections);
+        this.members.set(channel, channelMembers);
+    }
+    leave(channel, memberId, connectionId) {
+        const channelMembers = this.members.get(channel);
+        const connections = channelMembers?.get(memberId);
+        if (!channelMembers || !connections) {
+            return;
+        }
+        connections.delete(connectionId);
+        if (connections.size === 0) {
+            channelMembers.delete(memberId);
+        }
+        if (channelMembers.size === 0) {
+            this.members.delete(channel);
+        }
+    }
+    count(channel) {
+        return this.members.get(channel)?.size ?? 0;
+    }
+}
+/** First-party process-local fan-out used by the default SSE transport. */
+export class InProcessRealtimeTransport {
+    channels = new Map();
+    presence = new InProcessPresence();
+    publish(channel, event) {
+        const subscribers = this.channels.get(channel);
+        if (!subscribers) {
+            return;
+        }
+        // Snapshot so a handler that unsubscribes mid-iteration can't corrupt the loop.
+        for (const handler of Array.from(subscribers)) {
+            try {
+                handler(event);
+            }
+            catch {
+                // One disconnected subscriber must not stop fan-out to others.
+            }
+        }
+    }
+    subscribe(channel, handler) {
+        const subscribers = this.channels.get(channel) ?? new Set();
+        subscribers.add(handler);
+        this.channels.set(channel, subscribers);
+        return () => {
+            const current = this.channels.get(channel);
+            if (!current) {
+                return;
+            }
+            current.delete(handler);
+            if (current.size === 0) {
+                this.channels.delete(channel);
+            }
+        };
+    }
+}
+//# sourceMappingURL=realtime-transport.js.map

package/dist/server/kernel/realtime-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime-transport.js","sourceRoot":"","sources":["../../../src/server/kernel/realtime-transport.ts"],"names":[],"mappings":"AAIA,MAAM,iBAAiB;IACJ,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAEvE,IAAI,CAAC,OAAe,EAAE,QAAgB,EAAE,YAAoB;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAuB,CAAC;QACnF,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACtE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9B,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,QAAgB,EAAE,YAAoB;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,cAAc,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QACD,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACnD,QAAQ,GAAqB,IAAI,iBAAiB,EAAE,CAAC;IAE9D,OAAO,CAAI,OAAe,EAAE,KAAQ;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,gFAAgF;QAChF,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,CAAI,OAAe,EAAE,OAA2B;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAW,CAAC;QACrE,WAAW,CAAC,GAAG,CAAC,OAAkB,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,OAAO,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,OAAkB,CAAC,CAAC;YACnC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;CACF"}

package/dist/server/plugin-host/core-plugins.d.ts

@@ -0,0 +1,16 @@
+import type { PluginEntry } from './load-plugins.js';
+/**
+ * The full set of built-in platform plugins, as a ready-to-spread
+ * `PluginEntry[]` for a consumer's `extensions.config.ts`.
+ *
+ * Each path is resolved through `@openora/core`'s own package exports, so it
+ * points at the installed package's compiled plugin - the npm dependency in a
+ * deployed consumer, or the linked workspace checkout in local development.
+ * This replaces hand-maintained filesystem paths that assumed an adjacent core
+ * checkout.
+ *
+ * Compose your registry as `[...corePlugins(), ...overlays]`. To opt a module
+ * out, filter by id: `corePlugins().filter((p) => p.id !== 'chat')`.
+ */
+export declare function corePlugins(): PluginEntry[];
+//# sourceMappingURL=core-plugins.d.ts.map

package/dist/server/plugin-host/core-plugins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-plugins.d.ts","sourceRoot":"","sources":["../../../src/server/plugin-host/core-plugins.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBrD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,IAAI,WAAW,EAAE,CAK3C"}

package/dist/server/plugin-host/core-plugins.js

@@ -0,0 +1,36 @@
+import { createRequire } from 'node:module';
+const nodeRequire = createRequire(import.meta.url);
+const CORE_PLUGIN_MODULES = [
+    { id: 'audit', specifier: '@openora/core/audit/plugin' },
+    { id: 'iam', specifier: '@openora/core/iam/plugin' },
+    { id: 'identity', specifier: '@openora/core/pam/plugins/identity' },
+    { id: 'notifications', specifier: '@openora/core/engagement/plugins/notifications' },
+    { id: 'compliance', specifier: '@openora/core/compliance/plugins/compliance' },
+    { id: 'wallet', specifier: '@openora/core/wallet/plugins/wallet' },
+    { id: 'gaming', specifier: '@openora/core/casino/plugins/gaming' },
+    { id: 'lobby', specifier: '@openora/core/casino/plugins/lobby' },
+    { id: 'chat', specifier: '@openora/core/engagement/plugins/chat' },
+    { id: 'profile', specifier: '@openora/core/pam/plugins/profile' },
+    { id: 'admin-console', specifier: '@openora/core/admin-console/plugin' },
+    { id: 'cms', specifier: '@openora/core/cms/plugins/cms' },
+];
+/**
+ * The full set of built-in platform plugins, as a ready-to-spread
+ * `PluginEntry[]` for a consumer's `extensions.config.ts`.
+ *
+ * Each path is resolved through `@openora/core`'s own package exports, so it
+ * points at the installed package's compiled plugin - the npm dependency in a
+ * deployed consumer, or the linked workspace checkout in local development.
+ * This replaces hand-maintained filesystem paths that assumed an adjacent core
+ * checkout.
+ *
+ * Compose your registry as `[...corePlugins(), ...overlays]`. To opt a module
+ * out, filter by id: `corePlugins().filter((p) => p.id !== 'chat')`.
+ */
+export function corePlugins() {
+    return CORE_PLUGIN_MODULES.map(({ id, specifier }) => ({
+        id,
+        path: nodeRequire.resolve(specifier),
+    }));
+}
+//# sourceMappingURL=core-plugins.js.map

package/dist/server/plugin-host/core-plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-plugins.js","sourceRoot":"","sources":["../../../src/server/plugin-host/core-plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEnD,MAAM,mBAAmB,GAAqD;IAC5E,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,4BAA4B,EAAE;IACxD,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,0BAA0B,EAAE;IACpD,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,oCAAoC,EAAE;IACnE,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,gDAAgD,EAAE;IACpF,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,6CAA6C,EAAE;IAC9E,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,qCAAqC,EAAE;IAClE,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,qCAAqC,EAAE;IAClE,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,oCAAoC,EAAE;IAChE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,uCAAuC,EAAE;IAClE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,mCAAmC,EAAE;IACjE,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,oCAAoC,EAAE;IACxE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,+BAA+B,EAAE;CAC1D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE;QACF,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACrC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/server/plugin-host/index.d.ts

@@ -5,4 +5,5 @@ export { loadPlugins } from './load-plugins.js';
 export type { PluginEntry } from './load-plugins.js';
 export { applyServiceManifest, parseServiceManifest } from './service-manifest.js';
 export { loadExtensions } from './load-extensions.js';
+export { corePlugins } from './core-plugins.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/plugin-host/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/plugin-host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EACV,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/plugin-host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,YAAY,EACV,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server/plugin-host/index.js

@@ -3,4 +3,5 @@ export { ModuleRegistryImpl } from './module-registry.js';
 export { loadPlugins } from './load-plugins.js';
 export { applyServiceManifest, parseServiceManifest } from './service-manifest.js';
 export { loadExtensions } from './load-extensions.js';
+export { corePlugins } from './core-plugins.js';
 //# sourceMappingURL=index.js.map

package/dist/server/plugin-host/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/plugin-host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/plugin-host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server/runtime/assert-durable-seams.d.ts

@@ -8,8 +8,9 @@ import { type AnyToken } from '@openora/core/contracts';
  * Modeled on `assertSealedServicesBound` (`compliance/assert.ts`) - same `has(token)`
  * shape, same "list every gap, don't stop at the first" style.
  *
- * `REALTIME_TRANSPORT` is deliberately excluded: it stays lazy and throws on first
- * use, since not every deployment serves realtime traffic.
+ * `REALTIME_TRANSPORT` is excluded: `createApp` binds `InProcessRealtimeTransport` as
+ * the default for single-process SSE deployments. Infra overlays (e.g. Ably) rebind it
+ * via last-wins `container.register`. Not listed here because it always has a binding.
  */
 export type DurableSeamContainerView = {
     has(token: AnyToken<unknown>): boolean;