@rei-standard/amsg-server 2.6.0-next.13 → 2.6.0-next.15

package/dist/chunk-TFFBMYA2.cjs

@@ -0,0 +1,95 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/server/adapters/pg-shared.js
+async function claimTask(query, taskId, expectedNextSendAt, leaseUntil, serializeGroup = null) {
+  const grouped = typeof serializeGroup === "string" && serializeGroup.length > 0;
+  const params = [leaseUntil, taskId, expectedNextSendAt];
+  let setClause = "lease_until = $1, updated_at = NOW()";
+  let groupGuard = "";
+  if (grouped) {
+    params.push(serializeGroup);
+    setClause = "lease_until = $1, serialize_group = $4, updated_at = NOW()";
+    groupGuard = `
+        AND NOT EXISTS (
+          SELECT 1 FROM scheduled_messages busy
+           WHERE busy.serialize_group = $4 AND busy.id <> $2
+             AND busy.status = 'pending' AND busy.lease_until > NOW()
+        )`;
+  }
+  const rows = await query(
+    `UPDATE scheduled_messages
+        SET ${setClause}
+      WHERE id = $2 AND status = 'pending'
+        AND date_trunc('milliseconds', next_send_at)
+          = date_trunc('milliseconds', $3::timestamptz)
+        AND (lease_until IS NULL OR lease_until <= NOW())${groupGuard}
+     RETURNING id`,
+    params
+  );
+  if (rows.length === 0) return false;
+  if (!grouped) return true;
+  const conflict = await query(
+    `SELECT 1 FROM scheduled_messages busy
+      WHERE busy.serialize_group = $1 AND busy.id <> $2
+        AND busy.status = 'pending' AND busy.lease_until > NOW()
+      LIMIT 1`,
+    [serializeGroup, taskId]
+  );
+  if (conflict.length === 0) return true;
+  await query(
+    "UPDATE scheduled_messages SET lease_until = NULL, updated_at = NOW() WHERE id = $1",
+    [taskId]
+  );
+  return false;
+}
+async function renewTaskLease(query, taskId, leaseUntil) {
+  const rows = await query(
+    `UPDATE scheduled_messages SET lease_until = $1
+      WHERE id = $2 AND status = 'pending' AND lease_until IS NOT NULL
+     RETURNING id`,
+    [leaseUntil, taskId]
+  );
+  return rows.length > 0;
+}
+async function getTaskStatusInfo(query, uuid, userId) {
+  const rows = await query(
+    "SELECT status, last_error FROM scheduled_messages WHERE uuid = $1 AND user_id = $2 LIMIT 1",
+    [uuid, userId]
+  );
+  if (rows.length === 0) return null;
+  return { status: rows[0].status, last_error: _nullishCoalesce(rows[0].last_error, () => ( null)) };
+}
+async function getPushSubscription(query, userId) {
+  const rows = await query(
+    "SELECT subscription, updated_at FROM push_subscriptions WHERE user_id = $1 LIMIT 1",
+    [userId]
+  );
+  if (rows.length === 0) return null;
+  return { subscription: rows[0].subscription, updated_at: Number(rows[0].updated_at) };
+}
+async function upsertPushSubscription(query, userId, encryptedSubscription, updatedAt) {
+  const rows = await query(
+    `INSERT INTO push_subscriptions (user_id, subscription, updated_at)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (user_id) DO UPDATE SET
+       subscription = EXCLUDED.subscription,
+       updated_at = EXCLUDED.updated_at
+     RETURNING user_id`,
+    [userId, encryptedSubscription, updatedAt]
+  );
+  return rows.length > 0;
+}
+async function deletePushSubscription(query, userId) {
+  const rows = await query(
+    "DELETE FROM push_subscriptions WHERE user_id = $1 RETURNING user_id",
+    [userId]
+  );
+  return rows.length > 0;
+}
+
+
+
+
+
+
+
+
+exports.claimTask = claimTask; exports.renewTaskLease = renewTaskLease; exports.getTaskStatusInfo = getTaskStatusInfo; exports.getPushSubscription = getPushSubscription; exports.upsertPushSubscription = upsertPushSubscription; exports.deletePushSubscription = deletePushSubscription;

package/dist/chunk-UYROU4L3.mjs

@@ -0,0 +1,95 @@
+// src/server/adapters/pg-shared.js
+async function claimTask(query, taskId, expectedNextSendAt, leaseUntil, serializeGroup = null) {
+  const grouped = typeof serializeGroup === "string" && serializeGroup.length > 0;
+  const params = [leaseUntil, taskId, expectedNextSendAt];
+  let setClause = "lease_until = $1, updated_at = NOW()";
+  let groupGuard = "";
+  if (grouped) {
+    params.push(serializeGroup);
+    setClause = "lease_until = $1, serialize_group = $4, updated_at = NOW()";
+    groupGuard = `
+        AND NOT EXISTS (
+          SELECT 1 FROM scheduled_messages busy
+           WHERE busy.serialize_group = $4 AND busy.id <> $2
+             AND busy.status = 'pending' AND busy.lease_until > NOW()
+        )`;
+  }
+  const rows = await query(
+    `UPDATE scheduled_messages
+        SET ${setClause}
+      WHERE id = $2 AND status = 'pending'
+        AND date_trunc('milliseconds', next_send_at)
+          = date_trunc('milliseconds', $3::timestamptz)
+        AND (lease_until IS NULL OR lease_until <= NOW())${groupGuard}
+     RETURNING id`,
+    params
+  );
+  if (rows.length === 0) return false;
+  if (!grouped) return true;
+  const conflict = await query(
+    `SELECT 1 FROM scheduled_messages busy
+      WHERE busy.serialize_group = $1 AND busy.id <> $2
+        AND busy.status = 'pending' AND busy.lease_until > NOW()
+      LIMIT 1`,
+    [serializeGroup, taskId]
+  );
+  if (conflict.length === 0) return true;
+  await query(
+    "UPDATE scheduled_messages SET lease_until = NULL, updated_at = NOW() WHERE id = $1",
+    [taskId]
+  );
+  return false;
+}
+async function renewTaskLease(query, taskId, leaseUntil) {
+  const rows = await query(
+    `UPDATE scheduled_messages SET lease_until = $1
+      WHERE id = $2 AND status = 'pending' AND lease_until IS NOT NULL
+     RETURNING id`,
+    [leaseUntil, taskId]
+  );
+  return rows.length > 0;
+}
+async function getTaskStatusInfo(query, uuid, userId) {
+  const rows = await query(
+    "SELECT status, last_error FROM scheduled_messages WHERE uuid = $1 AND user_id = $2 LIMIT 1",
+    [uuid, userId]
+  );
+  if (rows.length === 0) return null;
+  return { status: rows[0].status, last_error: rows[0].last_error ?? null };
+}
+async function getPushSubscription(query, userId) {
+  const rows = await query(
+    "SELECT subscription, updated_at FROM push_subscriptions WHERE user_id = $1 LIMIT 1",
+    [userId]
+  );
+  if (rows.length === 0) return null;
+  return { subscription: rows[0].subscription, updated_at: Number(rows[0].updated_at) };
+}
+async function upsertPushSubscription(query, userId, encryptedSubscription, updatedAt) {
+  const rows = await query(
+    `INSERT INTO push_subscriptions (user_id, subscription, updated_at)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (user_id) DO UPDATE SET
+       subscription = EXCLUDED.subscription,
+       updated_at = EXCLUDED.updated_at
+     RETURNING user_id`,
+    [userId, encryptedSubscription, updatedAt]
+  );
+  return rows.length > 0;
+}
+async function deletePushSubscription(query, userId) {
+  const rows = await query(
+    "DELETE FROM push_subscriptions WHERE user_id = $1 RETURNING user_id",
+    [userId]
+  );
+  return rows.length > 0;
+}
+
+export {
+  claimTask,
+  renewTaskLease,
+  getTaskStatusInfo,
+  getPushSubscription,
+  upsertPushSubscription,
+  deletePushSubscription
+};

package/dist/cloudflare/single-user-worker.d.ts

@@ -2,3 +2,5 @@ export function createSingleUserCloudflareWorker(buildConfig: any): {
     fetch: (request: any, env: any) => Promise<Response>;
     scheduled: (event: any, env: any) => Promise<void>;
 };
+export const CORS_ALLOW_HEADERS: "Content-Type, X-User-Id, X-Payload-Encrypted, X-Encryption-Version, X-Response-Encrypted, X-Client-Token";
+export const CORS_ALLOW_METHODS: "GET, POST, PUT, DELETE, OPTIONS";

package/dist/cloudflare.cjs

@@ -17,7 +17,8 @@
 
 
 
-var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
+var _chunkTCKPLM3Pcjs = require('./chunk-TCKPLM3P.cjs');
+require('./chunk-OUPM4HAV.cjs');
 
 
 
@@ -37,4 +38,4 @@ var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunk5IOYCCFDcjs.MAX_PUSH_PAYLOAD_BYTES; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunk5IOYCCFDcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunk5IOYCCFDcjs.advanceOccurrence; exports.createD1Adapter = _chunk5IOYCCFDcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunk5IOYCCFDcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunk5IOYCCFDcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunk5IOYCCFDcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunk5IOYCCFDcjs.decryptFromStorage; exports.decryptPayload = _chunk5IOYCCFDcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunk5IOYCCFDcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunk5IOYCCFDcjs.encryptForStorage; exports.isValidTimeZoneId = _chunk5IOYCCFDcjs.isValidTimeZoneId; exports.measurePushPayload = _chunk5IOYCCFDcjs.measurePushPayload; exports.nextFutureOccurrence = _chunk5IOYCCFDcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunk5IOYCCFDcjs.planNextOccurrence; exports.runScheduledTick = _chunk5IOYCCFDcjs.runScheduledTick;
+exports.MAX_PUSH_PAYLOAD_BYTES = _chunkTCKPLM3Pcjs.MAX_PUSH_PAYLOAD_BYTES; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkTCKPLM3Pcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkTCKPLM3Pcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkTCKPLM3Pcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkTCKPLM3Pcjs.advanceOccurrence; exports.createD1Adapter = _chunkTCKPLM3Pcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkTCKPLM3Pcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkTCKPLM3Pcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkTCKPLM3Pcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkTCKPLM3Pcjs.decryptFromStorage; exports.decryptPayload = _chunkTCKPLM3Pcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkTCKPLM3Pcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkTCKPLM3Pcjs.encryptForStorage; exports.isValidTimeZoneId = _chunkTCKPLM3Pcjs.isValidTimeZoneId; exports.measurePushPayload = _chunkTCKPLM3Pcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkTCKPLM3Pcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkTCKPLM3Pcjs.planNextOccurrence; exports.runScheduledTick = _chunkTCKPLM3Pcjs.runScheduledTick;

package/dist/cloudflare.mjs

@@ -17,7 +17,8 @@ import {
   nextFutureOccurrence,
   planNextOccurrence,
   runScheduledTick
-} from "./chunk-TV7N3RTH.mjs";
+} from "./chunk-D3DQF647.mjs";
+import "./chunk-34I2YSWE.mjs";
 export {
   MAX_PUSH_PAYLOAD_BYTES,
   PUSH_ENVELOPE_RESERVED_BYTES,

package/dist/handlers/outbox.d.ts

@@ -0,0 +1,7 @@
+export function createOutboxHandler(ctx: any): {
+    GET: (url: any, headers: any) => Promise<any>;
+    POST: (headers: any, body: any) => Promise<any>;
+};
+export const MAX_OUTBOX_PAGE_SIZE: 100;
+export const DEFAULT_OUTBOX_PAGE_SIZE: 50;
+export const MAX_OUTBOX_ACK_IDS: 200;

package/dist/index.cjs

@@ -39,7 +39,21 @@
 
 
 
-var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkTCKPLM3Pcjs = require('./chunk-TCKPLM3P.cjs');
+require('./chunk-OUPM4HAV.cjs');
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -55,11 +69,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-3ASBLLCM.cjs")));
+      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-ZWA2U7IZ.cjs")));
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-IEZTAR43.cjs")));
+      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-Q4VU6D75.cjs")));
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -72,7 +86,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunk5IOYCCFDcjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkTCKPLM3Pcjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -85,7 +99,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunk5IOYCCFDcjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkTCKPLM3Pcjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -99,7 +113,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunk5IOYCCFDcjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkTCKPLM3Pcjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -219,7 +233,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunk5IOYCCFDcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkTCKPLM3Pcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -228,14 +242,6 @@ function createSendNotificationsHandler(ctx) {
 // src/server/tenant/blob-store.js
 var _crypto = require('crypto');
 var inMemoryNamespaces = /* @__PURE__ */ new Map();
-function base64UrlEncode(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(input) {
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLength = (4 - normalized.length % 4) % 4;
-  return Buffer.from(normalized + "=".repeat(padLength), "base64");
-}
 function getKekBuffer(kek) {
   const value = String(kek || "").trim();
   if (!value) {
@@ -249,16 +255,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${base64UrlEncode(iv)}.${base64UrlEncode(authTag)}.${base64UrlEncode(ciphertext)}`;
+  return `v1.${_chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, iv)}.${_chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = base64UrlDecode(parts[1]);
-  const authTag = base64UrlDecode(parts[2]);
-  const ciphertext = base64UrlDecode(parts[3]);
+  const iv = _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -326,7 +332,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -342,8 +348,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _chunk5IOYCCFDcjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _chunk5IOYCCFDcjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, _chunkTCKPLM3Pcjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkTCKPLM3Pcjs.bytesToBase64Url.call(void 0, _chunkTCKPLM3Pcjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -362,17 +368,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunk5IOYCCFDcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunkTCKPLM3Pcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunk5IOYCCFDcjs.utf8Decode.call(void 0, _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunkTCKPLM3Pcjs.utf8Decode.call(void 0, _chunkTCKPLM3Pcjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -446,8 +452,17 @@ function createTenantContextManager(options) {
   async function getOrCreateAdapter(dbConfig) {
     const cacheKey = `${dbConfig.driver}:${dbConfig.connectionString}`;
     if (!adapterCache.has(cacheKey)) {
-      const adapter = await adapterFactory(dbConfig);
-      adapterCache.set(cacheKey, adapter);
+      const created = (async () => {
+        const adapter = await adapterFactory(dbConfig);
+        if (typeof adapter.initSchema === "function") {
+          await adapter.initSchema();
+        }
+        return adapter;
+      })().catch((error) => {
+        adapterCache.delete(cacheKey);
+        throw error;
+      });
+      adapterCache.set(cacheKey, created);
     }
     return adapterCache.get(cacheKey);
   }
@@ -583,14 +598,14 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunk5IOYCCFDcjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunk5IOYCCFDcjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkTCKPLM3Pcjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkTCKPLM3Pcjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunk5IOYCCFDcjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunk5IOYCCFDcjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunk5IOYCCFDcjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunk5IOYCCFDcjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunk5IOYCCFDcjs.createPushSubscriptionHandler.call(void 0, ctx)
+      updateMessage: _chunkTCKPLM3Pcjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkTCKPLM3Pcjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkTCKPLM3Pcjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkTCKPLM3Pcjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkTCKPLM3Pcjs.createPushSubscriptionHandler.call(void 0, ctx)
     }
   };
 }
@@ -625,4 +640,17 @@ async function createReiServer(config) {
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunk5IOYCCFDcjs.MAX_PUSH_PAYLOAD_BYTES; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunk5IOYCCFDcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunk5IOYCCFDcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunk5IOYCCFDcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunk5IOYCCFDcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunk5IOYCCFDcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunk5IOYCCFDcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunk5IOYCCFDcjs.decryptFromStorage; exports.decryptPayload = _chunk5IOYCCFDcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunk5IOYCCFDcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunk5IOYCCFDcjs.encryptForStorage; exports.isValidISO8601 = _chunk5IOYCCFDcjs.isValidISO8601; exports.isValidTimeZoneId = _chunk5IOYCCFDcjs.isValidTimeZoneId; exports.isValidUUID = _chunk5IOYCCFDcjs.isValidUUID; exports.isValidUUIDv4 = _chunk5IOYCCFDcjs.isValidUUIDv4; exports.isValidUrl = _chunk5IOYCCFDcjs.isValidUrl; exports.measurePushPayload = _chunk5IOYCCFDcjs.measurePushPayload; exports.nextFutureOccurrence = _chunk5IOYCCFDcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunk5IOYCCFDcjs.planNextOccurrence; exports.runScheduledTick = _chunk5IOYCCFDcjs.runScheduledTick; exports.validateAvatarUrl = _chunk5IOYCCFDcjs.validateAvatarUrl; exports.validateLlmMessagesArray = _chunk5IOYCCFDcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunk5IOYCCFDcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunk5IOYCCFDcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.CORS_ALLOW_HEADERS = _chunkTCKPLM3Pcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkTCKPLM3Pcjs.CORS_ALLOW_METHODS; exports.DEFAULT_CLAIM_LEASE_MS = _chunkTCKPLM3Pcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkTCKPLM3Pcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkTCKPLM3Pcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkTCKPLM3Pcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkTCKPLM3Pcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkTCKPLM3Pcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkTCKPLM3Pcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkTCKPLM3Pcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkTCKPLM3Pcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkTCKPLM3Pcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkTCKPLM3Pcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkTCKPLM3Pcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkTCKPLM3Pcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkTCKPLM3Pcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkTCKPLM3Pcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkTCKPLM3Pcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkTCKPLM3Pcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkTCKPLM3Pcjs.decryptFromStorage; exports.decryptPayload = _chunkTCKPLM3Pcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkTCKPLM3Pcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkTCKPLM3Pcjs.encryptForStorage; exports.isNonRetryableError = _chunkTCKPLM3Pcjs.isNonRetryableError; exports.isValidISO8601 = _chunkTCKPLM3Pcjs.isValidISO8601; exports.isValidTimeZoneId = _chunkTCKPLM3Pcjs.isValidTimeZoneId; exports.isValidUUID = _chunkTCKPLM3Pcjs.isValidUUID; exports.isValidUUIDv4 = _chunkTCKPLM3Pcjs.isValidUUIDv4; exports.isValidUrl = _chunkTCKPLM3Pcjs.isValidUrl; exports.measurePushPayload = _chunkTCKPLM3Pcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkTCKPLM3Pcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkTCKPLM3Pcjs.planNextOccurrence; exports.runScheduledTick = _chunkTCKPLM3Pcjs.runScheduledTick; exports.runTask = _chunkTCKPLM3Pcjs.runTask; exports.sanitizeErrorSummary = _chunkTCKPLM3Pcjs.sanitizeErrorSummary; exports.validateAvatarUrl = _chunkTCKPLM3Pcjs.validateAvatarUrl; exports.validateLlmMessagesArray = _chunkTCKPLM3Pcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkTCKPLM3Pcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkTCKPLM3Pcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.d.cts

@@ -45,8 +45,6 @@ export function createReiServer(config: ReiServerConfig): Promise<ReiServer>;
 export { createAdapter } from "./adapters/factory.js";
 export { createD1Adapter } from "./adapters/d1.js";
 export { createSingleUserServer } from "./single-user.js";
-export { runScheduledTick } from "./lib/run-tick.js";
-export { createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export type VapidConfig = {
     /**
      * - VAPID contact email (e.g. mailto:…).
@@ -137,6 +135,10 @@ export type ReiServer = {
      */
     handlers: ReiHandlers;
 };
+export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
+export { NonRetryableError, isNonRetryableError } from "./lib/errors.js";
+export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
+export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";

package/dist/index.d.ts

@@ -45,8 +45,6 @@ export function createReiServer(config: ReiServerConfig): Promise<ReiServer>;
 export { createAdapter } from "./adapters/factory.js";
 export { createD1Adapter } from "./adapters/d1.js";
 export { createSingleUserServer } from "./single-user.js";
-export { runScheduledTick } from "./lib/run-tick.js";
-export { createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export type VapidConfig = {
     /**
      * - VAPID contact email (e.g. mailto:…).
@@ -137,6 +135,10 @@ export type ReiServer = {
      */
     handlers: ReiHandlers;
 };
+export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
+export { NonRetryableError, isNonRetryableError } from "./lib/errors.js";
+export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
+export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";

package/dist/index.mjs

@@ -1,5 +1,15 @@
 import {
+  CORS_ALLOW_HEADERS,
+  CORS_ALLOW_METHODS,
+  DEFAULT_CLAIM_LEASE_MS,
+  DEFAULT_HEARTBEAT_LEASE_TTL_MS,
+  DEFAULT_LEASE_HEARTBEAT_MS,
+  DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE,
+  DEFAULT_MAX_TOOL_ITERATIONS,
+  DEFAULT_TOTAL_TIMEOUT_MS,
   MAX_PUSH_PAYLOAD_BYTES,
+  MIN_SCHEDULE_LEAD_MS,
+  NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
   WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES,
   WEB_PUSH_MAX_BODY_BYTES,
@@ -22,6 +32,7 @@ import {
   deriveUserEncryptionKey,
   encryptForStorage,
   getHeader,
+  isNonRetryableError,
   isValidISO8601,
   isValidTimeZoneId,
   isValidUUID,
@@ -32,6 +43,8 @@ import {
   parseJsonBody,
   planNextOccurrence,
   runScheduledTick,
+  runTask,
+  sanitizeErrorSummary,
   timingSafeEqualBytes,
   utf8,
   utf8Decode,
@@ -39,7 +52,8 @@ import {
   validateLlmMessagesArray,
   validateScheduleMessagePayload,
   validateSplitPattern
-} from "./chunk-TV7N3RTH.mjs";
+} from "./chunk-D3DQF647.mjs";
+import "./chunk-34I2YSWE.mjs";
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -55,11 +69,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await import("./neon-CUIGAB2T.mjs");
+      const { NeonAdapter } = await import("./neon-XLWK27RL.mjs");
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await import("./pg-KMJPL6QV.mjs");
+      const { PgAdapter } = await import("./pg-X63HFEV7.mjs");
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -228,14 +242,6 @@ function createSendNotificationsHandler(ctx) {
 // src/server/tenant/blob-store.js
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from "crypto";
 var inMemoryNamespaces = /* @__PURE__ */ new Map();
-function base64UrlEncode(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(input) {
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLength = (4 - normalized.length % 4) % 4;
-  return Buffer.from(normalized + "=".repeat(padLength), "base64");
-}
 function getKekBuffer(kek) {
   const value = String(kek || "").trim();
   if (!value) {
@@ -249,16 +255,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${base64UrlEncode(iv)}.${base64UrlEncode(authTag)}.${base64UrlEncode(ciphertext)}`;
+  return `v1.${bytesToBase64Url(iv)}.${bytesToBase64Url(authTag)}.${bytesToBase64Url(ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = base64UrlDecode(parts[1]);
-  const authTag = base64UrlDecode(parts[2]);
-  const ciphertext = base64UrlDecode(parts[3]);
+  const iv = base64UrlToBytes(parts[1]);
+  const authTag = base64UrlToBytes(parts[2]);
+  const ciphertext = base64UrlToBytes(parts[3]);
   const decipher = createDecipheriv("aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -446,8 +452,17 @@ function createTenantContextManager(options) {
   async function getOrCreateAdapter(dbConfig) {
     const cacheKey = `${dbConfig.driver}:${dbConfig.connectionString}`;
     if (!adapterCache.has(cacheKey)) {
-      const adapter = await adapterFactory(dbConfig);
-      adapterCache.set(cacheKey, adapter);
+      const created = (async () => {
+        const adapter = await adapterFactory(dbConfig);
+        if (typeof adapter.initSchema === "function") {
+          await adapter.initSchema();
+        }
+        return adapter;
+      })().catch((error) => {
+        adapterCache.delete(cacheKey);
+        throw error;
+      });
+      adapterCache.set(cacheKey, created);
     }
     return adapterCache.get(cacheKey);
   }
@@ -595,7 +610,17 @@ async function createReiServer(config) {
   };
 }
 export {
+  CORS_ALLOW_HEADERS,
+  CORS_ALLOW_METHODS,
+  DEFAULT_CLAIM_LEASE_MS,
+  DEFAULT_HEARTBEAT_LEASE_TTL_MS,
+  DEFAULT_LEASE_HEARTBEAT_MS,
+  DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE,
+  DEFAULT_MAX_TOOL_ITERATIONS,
+  DEFAULT_TOTAL_TIMEOUT_MS,
   MAX_PUSH_PAYLOAD_BYTES,
+  MIN_SCHEDULE_LEAD_MS,
+  NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
   WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES,
   WEB_PUSH_MAX_BODY_BYTES,
@@ -611,6 +636,7 @@ export {
   decryptPayload,
   deriveUserEncryptionKey,
   encryptForStorage,
+  isNonRetryableError,
   isValidISO8601,
   isValidTimeZoneId,
   isValidUUID,
@@ -620,6 +646,8 @@ export {
   nextFutureOccurrence,
   planNextOccurrence,
   runScheduledTick,
+  runTask,
+  sanitizeErrorSummary,
   validateAvatarUrl,
   validateLlmMessagesArray,
   validateScheduleMessagePayload,