@rei-standard/amsg-server 2.6.0-next.13 → 2.6.0-next.16

package/dist/{chunk-V2SDWGUB.cjs → chunk-OUPM4HAV.cjs}

@@ -12,6 +12,7 @@ var TABLE_SQL = `
     serialize_group VARCHAR(64),
     status VARCHAR(50) NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'sent', 'failed')),
     retry_count INTEGER DEFAULT 0,
+    last_error TEXT,
     created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),
     updated_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
   )
@@ -31,6 +32,14 @@ var MIGRATIONS = [
     name: "add_serialize_group",
     sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS serialize_group VARCHAR(64)",
     description: "Serialization group for runScheduledTick serializeBy (2.6.0)"
+  },
+  {
+    name: "add_last_error",
+    // 上一次投递失败的脱敏摘要（JSON：{ at, occurrence, reason }）。payload 里
+    // 的 lastError 是密文里的完整记录，这一列是它的明文出口——payload 本身
+    // 解密失败时也写得进去，GET /message 对已失败的行也读得出来。
+    sql: "ALTER TABLE scheduled_messages ADD COLUMN IF NOT EXISTS last_error TEXT",
+    description: "Sanitized last delivery-failure summary (2.6.0)"
   }
 ];
 var INDEXES = [
@@ -108,6 +117,7 @@ var UPDATABLE_COLUMNS = /* @__PURE__ */ new Set([
   "serialize_group",
   "status",
   "retry_count",
+  "last_error",
   "created_at",
   "updated_at"
 ]);

package/dist/chunk-TFFBMYA2.cjs

@@ -0,0 +1,95 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/server/adapters/pg-shared.js
+async function claimTask(query, taskId, expectedNextSendAt, leaseUntil, serializeGroup = null) {
+  const grouped = typeof serializeGroup === "string" && serializeGroup.length > 0;
+  const params = [leaseUntil, taskId, expectedNextSendAt];
+  let setClause = "lease_until = $1, updated_at = NOW()";
+  let groupGuard = "";
+  if (grouped) {
+    params.push(serializeGroup);
+    setClause = "lease_until = $1, serialize_group = $4, updated_at = NOW()";
+    groupGuard = `
+        AND NOT EXISTS (
+          SELECT 1 FROM scheduled_messages busy
+           WHERE busy.serialize_group = $4 AND busy.id <> $2
+             AND busy.status = 'pending' AND busy.lease_until > NOW()
+        )`;
+  }
+  const rows = await query(
+    `UPDATE scheduled_messages
+        SET ${setClause}
+      WHERE id = $2 AND status = 'pending'
+        AND date_trunc('milliseconds', next_send_at)
+          = date_trunc('milliseconds', $3::timestamptz)
+        AND (lease_until IS NULL OR lease_until <= NOW())${groupGuard}
+     RETURNING id`,
+    params
+  );
+  if (rows.length === 0) return false;
+  if (!grouped) return true;
+  const conflict = await query(
+    `SELECT 1 FROM scheduled_messages busy
+      WHERE busy.serialize_group = $1 AND busy.id <> $2
+        AND busy.status = 'pending' AND busy.lease_until > NOW()
+      LIMIT 1`,
+    [serializeGroup, taskId]
+  );
+  if (conflict.length === 0) return true;
+  await query(
+    "UPDATE scheduled_messages SET lease_until = NULL, updated_at = NOW() WHERE id = $1",
+    [taskId]
+  );
+  return false;
+}
+async function renewTaskLease(query, taskId, leaseUntil) {
+  const rows = await query(
+    `UPDATE scheduled_messages SET lease_until = $1
+      WHERE id = $2 AND status = 'pending' AND lease_until IS NOT NULL
+     RETURNING id`,
+    [leaseUntil, taskId]
+  );
+  return rows.length > 0;
+}
+async function getTaskStatusInfo(query, uuid, userId) {
+  const rows = await query(
+    "SELECT status, last_error FROM scheduled_messages WHERE uuid = $1 AND user_id = $2 LIMIT 1",
+    [uuid, userId]
+  );
+  if (rows.length === 0) return null;
+  return { status: rows[0].status, last_error: _nullishCoalesce(rows[0].last_error, () => ( null)) };
+}
+async function getPushSubscription(query, userId) {
+  const rows = await query(
+    "SELECT subscription, updated_at FROM push_subscriptions WHERE user_id = $1 LIMIT 1",
+    [userId]
+  );
+  if (rows.length === 0) return null;
+  return { subscription: rows[0].subscription, updated_at: Number(rows[0].updated_at) };
+}
+async function upsertPushSubscription(query, userId, encryptedSubscription, updatedAt) {
+  const rows = await query(
+    `INSERT INTO push_subscriptions (user_id, subscription, updated_at)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (user_id) DO UPDATE SET
+       subscription = EXCLUDED.subscription,
+       updated_at = EXCLUDED.updated_at
+     RETURNING user_id`,
+    [userId, encryptedSubscription, updatedAt]
+  );
+  return rows.length > 0;
+}
+async function deletePushSubscription(query, userId) {
+  const rows = await query(
+    "DELETE FROM push_subscriptions WHERE user_id = $1 RETURNING user_id",
+    [userId]
+  );
+  return rows.length > 0;
+}
+
+
+
+
+
+
+
+
+exports.claimTask = claimTask; exports.renewTaskLease = renewTaskLease; exports.getTaskStatusInfo = getTaskStatusInfo; exports.getPushSubscription = getPushSubscription; exports.upsertPushSubscription = upsertPushSubscription; exports.deletePushSubscription = deletePushSubscription;

package/dist/chunk-UYROU4L3.mjs

@@ -0,0 +1,95 @@
+// src/server/adapters/pg-shared.js
+async function claimTask(query, taskId, expectedNextSendAt, leaseUntil, serializeGroup = null) {
+  const grouped = typeof serializeGroup === "string" && serializeGroup.length > 0;
+  const params = [leaseUntil, taskId, expectedNextSendAt];
+  let setClause = "lease_until = $1, updated_at = NOW()";
+  let groupGuard = "";
+  if (grouped) {
+    params.push(serializeGroup);
+    setClause = "lease_until = $1, serialize_group = $4, updated_at = NOW()";
+    groupGuard = `
+        AND NOT EXISTS (
+          SELECT 1 FROM scheduled_messages busy
+           WHERE busy.serialize_group = $4 AND busy.id <> $2
+             AND busy.status = 'pending' AND busy.lease_until > NOW()
+        )`;
+  }
+  const rows = await query(
+    `UPDATE scheduled_messages
+        SET ${setClause}
+      WHERE id = $2 AND status = 'pending'
+        AND date_trunc('milliseconds', next_send_at)
+          = date_trunc('milliseconds', $3::timestamptz)
+        AND (lease_until IS NULL OR lease_until <= NOW())${groupGuard}
+     RETURNING id`,
+    params
+  );
+  if (rows.length === 0) return false;
+  if (!grouped) return true;
+  const conflict = await query(
+    `SELECT 1 FROM scheduled_messages busy
+      WHERE busy.serialize_group = $1 AND busy.id <> $2
+        AND busy.status = 'pending' AND busy.lease_until > NOW()
+      LIMIT 1`,
+    [serializeGroup, taskId]
+  );
+  if (conflict.length === 0) return true;
+  await query(
+    "UPDATE scheduled_messages SET lease_until = NULL, updated_at = NOW() WHERE id = $1",
+    [taskId]
+  );
+  return false;
+}
+async function renewTaskLease(query, taskId, leaseUntil) {
+  const rows = await query(
+    `UPDATE scheduled_messages SET lease_until = $1
+      WHERE id = $2 AND status = 'pending' AND lease_until IS NOT NULL
+     RETURNING id`,
+    [leaseUntil, taskId]
+  );
+  return rows.length > 0;
+}
+async function getTaskStatusInfo(query, uuid, userId) {
+  const rows = await query(
+    "SELECT status, last_error FROM scheduled_messages WHERE uuid = $1 AND user_id = $2 LIMIT 1",
+    [uuid, userId]
+  );
+  if (rows.length === 0) return null;
+  return { status: rows[0].status, last_error: rows[0].last_error ?? null };
+}
+async function getPushSubscription(query, userId) {
+  const rows = await query(
+    "SELECT subscription, updated_at FROM push_subscriptions WHERE user_id = $1 LIMIT 1",
+    [userId]
+  );
+  if (rows.length === 0) return null;
+  return { subscription: rows[0].subscription, updated_at: Number(rows[0].updated_at) };
+}
+async function upsertPushSubscription(query, userId, encryptedSubscription, updatedAt) {
+  const rows = await query(
+    `INSERT INTO push_subscriptions (user_id, subscription, updated_at)
+     VALUES ($1, $2, $3)
+     ON CONFLICT (user_id) DO UPDATE SET
+       subscription = EXCLUDED.subscription,
+       updated_at = EXCLUDED.updated_at
+     RETURNING user_id`,
+    [userId, encryptedSubscription, updatedAt]
+  );
+  return rows.length > 0;
+}
+async function deletePushSubscription(query, userId) {
+  const rows = await query(
+    "DELETE FROM push_subscriptions WHERE user_id = $1 RETURNING user_id",
+    [userId]
+  );
+  return rows.length > 0;
+}
+
+export {
+  claimTask,
+  renewTaskLease,
+  getTaskStatusInfo,
+  getPushSubscription,
+  upsertPushSubscription,
+  deletePushSubscription
+};

package/dist/cloudflare/single-user-worker.d.ts

@@ -1,4 +1,37 @@
-export function createSingleUserCloudflareWorker(buildConfig: any): {
+/**
+ * @param {(env: Object) => Object|Promise<Object>} buildConfig
+ * @param {{ onError?: (info: { stage: 'config'|'request'|'tick', error: unknown, cause: import('../lib/errors.js').ErrorCause, path: string|null }) => void|Promise<void> }} [options]
+ *   `onError` 在 fetch 或 cron 出错时调一次（best-effort，自身抛错只记日志）。
+ *   cron 那条路上没有调用方能看到错误响应，这个 hook 是宿主唯一的出口。
+ */
+export function createSingleUserCloudflareWorker(buildConfig: (env: any) => any | Promise<any>, options?: {
+    onError?: (info: {
+        stage: "config" | "request" | "tick";
+        error: unknown;
+        cause: import("../lib/errors.js").ErrorCause;
+        path: string | null;
+    }) => void | Promise<void>;
+}): {
     fetch: (request: any, env: any) => Promise<Response>;
-    scheduled: (event: any, env: any) => Promise<void>;
+    scheduled: (event: any, env: any) => Promise<{
+        ok: true;
+        summary: any;
+    } | {
+        ok: false;
+        cause: import("../lib/errors.js").ErrorCause;
+    }>;
+    runTask: (uuid: string, env: any) => Promise<{
+        ran: false;
+        reason: "not_configured" | "not_found" | "already_settled" | "not_due" | "retry_pending";
+        status?: string;
+        nextSendAt?: string;
+        retryAfter?: string;
+    } | {
+        ran: true;
+        summary: any;
+    }>;
+    getSchemaVersion: (env: any) => Promise<import("../lib/schema-version.js").SchemaVersionResult>;
+    ensureSchema: (env: any) => Promise<import("../lib/schema-version.js").EnsureSchemaResult>;
 };
+export const CORS_ALLOW_HEADERS: "Content-Type, X-User-Id, X-Payload-Encrypted, X-Encryption-Version, X-Response-Encrypted, X-Client-Token";
+export const CORS_ALLOW_METHODS: "GET, POST, PUT, DELETE, OPTIONS";

package/dist/cloudflare.cjs

@@ -17,7 +17,6 @@
 
 
 
-var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
 
 
 
@@ -25,6 +24,8 @@ var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
 
 
 
+var _chunkH4V7OXHEcjs = require('./chunk-H4V7OXHE.cjs');
+require('./chunk-OUPM4HAV.cjs');
 
 
 
@@ -37,4 +38,18 @@ var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunk5IOYCCFDcjs.MAX_PUSH_PAYLOAD_BYTES; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunk5IOYCCFDcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunk5IOYCCFDcjs.advanceOccurrence; exports.createD1Adapter = _chunk5IOYCCFDcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunk5IOYCCFDcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunk5IOYCCFDcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunk5IOYCCFDcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunk5IOYCCFDcjs.decryptFromStorage; exports.decryptPayload = _chunk5IOYCCFDcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunk5IOYCCFDcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunk5IOYCCFDcjs.encryptForStorage; exports.isValidTimeZoneId = _chunk5IOYCCFDcjs.isValidTimeZoneId; exports.measurePushPayload = _chunk5IOYCCFDcjs.measurePushPayload; exports.nextFutureOccurrence = _chunk5IOYCCFDcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunk5IOYCCFDcjs.planNextOccurrence; exports.runScheduledTick = _chunk5IOYCCFDcjs.runScheduledTick;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.MAX_PUSH_PAYLOAD_BYTES = _chunkH4V7OXHEcjs.MAX_PUSH_PAYLOAD_BYTES; exports.NonRetryableError = _chunkH4V7OXHEcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkH4V7OXHEcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkH4V7OXHEcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkH4V7OXHEcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkH4V7OXHEcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkH4V7OXHEcjs.advanceOccurrence; exports.createD1Adapter = _chunkH4V7OXHEcjs.createD1Adapter; exports.createSingleUserCloudflareWorker = _chunkH4V7OXHEcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkH4V7OXHEcjs.createSingleUserServer; exports.createWebCryptoWebPush = _chunkH4V7OXHEcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkH4V7OXHEcjs.decryptFromStorage; exports.decryptPayload = _chunkH4V7OXHEcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkH4V7OXHEcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkH4V7OXHEcjs.encryptForStorage; exports.ensureSchema = _chunkH4V7OXHEcjs.ensureSchema; exports.getSchemaVersion = _chunkH4V7OXHEcjs.getSchemaVersion; exports.isNonRetryableError = _chunkH4V7OXHEcjs.isNonRetryableError; exports.isValidTimeZoneId = _chunkH4V7OXHEcjs.isValidTimeZoneId; exports.measurePushPayload = _chunkH4V7OXHEcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkH4V7OXHEcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkH4V7OXHEcjs.planNextOccurrence; exports.runScheduledTick = _chunkH4V7OXHEcjs.runScheduledTick; exports.runTask = _chunkH4V7OXHEcjs.runTask; exports.summarizeErrorCause = _chunkH4V7OXHEcjs.summarizeErrorCause;

package/dist/cloudflare.d.ts

@@ -1,7 +1,9 @@
 export { createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createSingleUserServer } from "./single-user.js";
 export { createD1Adapter } from "./adapters/d1.js";
-export { runScheduledTick } from "./lib/run-tick.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
+export { runScheduledTick, runTask } from "./lib/run-tick.js";
+export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
+export { summarizeErrorCause, NonRetryableError, isNonRetryableError } from "./lib/errors.js";
 export { isValidTimeZoneId, advanceOccurrence, nextFutureOccurrence, planNextOccurrence } from "./lib/recurrence.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";

package/dist/cloudflare.mjs

@@ -1,6 +1,8 @@
 import {
   MAX_PUSH_PAYLOAD_BYTES,
+  NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
+  SCHEMA_VERSION,
   WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES,
   WEB_PUSH_MAX_BODY_BYTES,
   advanceOccurrence,
@@ -12,15 +14,23 @@ import {
   decryptPayload,
   deriveUserEncryptionKey,
   encryptForStorage,
+  ensureSchema,
+  getSchemaVersion,
+  isNonRetryableError,
   isValidTimeZoneId,
   measurePushPayload,
   nextFutureOccurrence,
   planNextOccurrence,
-  runScheduledTick
-} from "./chunk-TV7N3RTH.mjs";
+  runScheduledTick,
+  runTask,
+  summarizeErrorCause
+} from "./chunk-KVHR3RCU.mjs";
+import "./chunk-34I2YSWE.mjs";
 export {
   MAX_PUSH_PAYLOAD_BYTES,
+  NonRetryableError,
   PUSH_ENVELOPE_RESERVED_BYTES,
+  SCHEMA_VERSION,
   WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES,
   WEB_PUSH_MAX_BODY_BYTES,
   advanceOccurrence,
@@ -32,9 +42,14 @@ export {
   decryptPayload,
   deriveUserEncryptionKey,
   encryptForStorage,
+  ensureSchema,
+  getSchemaVersion,
+  isNonRetryableError,
   isValidTimeZoneId,
   measurePushPayload,
   nextFutureOccurrence,
   planNextOccurrence,
-  runScheduledTick
+  runScheduledTick,
+  runTask,
+  summarizeErrorCause
 };

package/dist/handlers/outbox.d.ts

@@ -0,0 +1,7 @@
+export function createOutboxHandler(ctx: any): {
+    GET: (url: any, headers: any) => Promise<any>;
+    POST: (headers: any, body: any) => Promise<any>;
+};
+export const MAX_OUTBOX_PAGE_SIZE: 100;
+export const DEFAULT_OUTBOX_PAGE_SIZE: 50;
+export const MAX_OUTBOX_ACK_IDS: 200;

package/dist/index.cjs

@@ -39,7 +39,25 @@
 
 
 
-var _chunk5IOYCCFDcjs = require('./chunk-5IOYCCFD.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+var _chunkH4V7OXHEcjs = require('./chunk-H4V7OXHE.cjs');
+require('./chunk-OUPM4HAV.cjs');
 
 // src/server/adapters/factory.js
 async function createAdapter(config) {
@@ -55,11 +73,11 @@ async function createAdapter(config) {
   }
   switch (config.driver) {
     case "neon": {
-      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-3ASBLLCM.cjs")));
+      const { NeonAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./neon-G3G4TDAY.cjs")));
       return new NeonAdapter(config.connectionString);
     }
     case "pg": {
-      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-IEZTAR43.cjs")));
+      const { PgAdapter } = await Promise.resolve().then(() => _interopRequireWildcard(require("./pg-C3JZKBUM.cjs")));
       return new PgAdapter(config.connectionString);
     }
     default:
@@ -72,7 +90,7 @@ async function createAdapter(config) {
 // src/server/handlers/init-tenant.js
 function createInitTenantHandler(ctx) {
   async function POST(headers, body) {
-    const initSecret = _chunk5IOYCCFDcjs.getHeader.call(void 0, headers, "x-init-secret");
+    const initSecret = _chunkH4V7OXHEcjs.getHeader.call(void 0, headers, "x-init-secret");
     if (ctx.tenant.initSecret && initSecret !== ctx.tenant.initSecret) {
       return {
         status: 401,
@@ -85,7 +103,7 @@ function createInitTenantHandler(ctx) {
         }
       };
     }
-    const parsed = _chunk5IOYCCFDcjs.parseJsonBody.call(void 0, body);
+    const parsed = _chunkH4V7OXHEcjs.parseJsonBody.call(void 0, body);
     if (!parsed.ok) {
       return {
         status: 400,
@@ -99,7 +117,7 @@ function createInitTenantHandler(ctx) {
     const tenantId = payload.tenantId || void 0;
     const driver = payload.driver;
     const databaseUrl = payload.databaseUrl || payload.connectionString;
-    if (tenantId && !_chunk5IOYCCFDcjs.isValidUUIDv4.call(void 0, tenantId)) {
+    if (tenantId && !_chunkH4V7OXHEcjs.isValidUUIDv4.call(void 0, tenantId)) {
       return {
         status: 400,
         body: {
@@ -219,7 +237,7 @@ function createSendNotificationsHandler(ctx) {
         }
       };
     }
-    const data = await _chunk5IOYCCFDcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
+    const data = await _chunkH4V7OXHEcjs.runScheduledTick.call(void 0, { ...ctx, db, masterKey });
     return { status: 200, body: { success: true, data } };
   }
   return { POST };
@@ -228,14 +246,6 @@ function createSendNotificationsHandler(ctx) {
 // src/server/tenant/blob-store.js
 var _crypto = require('crypto');
 var inMemoryNamespaces = /* @__PURE__ */ new Map();
-function base64UrlEncode(input) {
-  return Buffer.from(input).toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function base64UrlDecode(input) {
-  const normalized = input.replace(/-/g, "+").replace(/_/g, "/");
-  const padLength = (4 - normalized.length % 4) % 4;
-  return Buffer.from(normalized + "=".repeat(padLength), "base64");
-}
 function getKekBuffer(kek) {
   const value = String(kek || "").trim();
   if (!value) {
@@ -249,16 +259,16 @@ function encryptConfig(config, kekBuffer) {
   const plaintext = Buffer.from(JSON.stringify(config), "utf8");
   const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
   const authTag = cipher.getAuthTag();
-  return `v1.${base64UrlEncode(iv)}.${base64UrlEncode(authTag)}.${base64UrlEncode(ciphertext)}`;
+  return `v1.${_chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, iv)}.${_chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, authTag)}.${_chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, ciphertext)}`;
 }
 function decryptConfig(encrypted, kekBuffer) {
   const parts = String(encrypted || "").split(".");
   if (parts.length !== 4 || parts[0] !== "v1") {
     throw new Error("INVALID_TENANT_CONFIG");
   }
-  const iv = base64UrlDecode(parts[1]);
-  const authTag = base64UrlDecode(parts[2]);
-  const ciphertext = base64UrlDecode(parts[3]);
+  const iv = _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, parts[1]);
+  const authTag = _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, parts[2]);
+  const ciphertext = _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, parts[3]);
   const decipher = _crypto.createDecipheriv.call(void 0, "aes-256-gcm", kekBuffer, iv);
   decipher.setAuthTag(authTag);
   const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf8");
@@ -326,7 +336,7 @@ function createTenantBlobStore(options) {
 // src/server/tenant/token.js
 
 function sign(input, secret) {
-  return _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
+  return _chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, _crypto.createHmac.call(void 0, "sha256", secret).update(input).digest());
 }
 function nowEpochSeconds() {
   return Math.floor(Date.now() / 1e3);
@@ -342,8 +352,8 @@ function createTenantToken(params, secret) {
     v: 1
   };
   const header = { alg: "HS256", typ: "JWT" };
-  const encodedHeader = _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _chunk5IOYCCFDcjs.utf8.call(void 0, JSON.stringify(header)));
-  const encodedPayload = _chunk5IOYCCFDcjs.bytesToBase64Url.call(void 0, _chunk5IOYCCFDcjs.utf8.call(void 0, JSON.stringify(payload)));
+  const encodedHeader = _chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, _chunkH4V7OXHEcjs.utf8.call(void 0, JSON.stringify(header)));
+  const encodedPayload = _chunkH4V7OXHEcjs.bytesToBase64Url.call(void 0, _chunkH4V7OXHEcjs.utf8.call(void 0, JSON.stringify(payload)));
   const signingInput = `${encodedHeader}.${encodedPayload}`;
   const signature = sign(signingInput, secret);
   return `${signingInput}.${signature}`;
@@ -362,17 +372,17 @@ function verifyTenantToken(token, secret, options = {}) {
   let receivedBytes;
   let expectedBytes;
   try {
-    receivedBytes = _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, receivedSignature);
-    expectedBytes = _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, expectedSignature);
+    receivedBytes = _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, receivedSignature);
+    expectedBytes = _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, expectedSignature);
   } catch (e) {
     throw new Error("INVALID_TENANT_AUTH");
   }
-  if (!_chunk5IOYCCFDcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
+  if (!_chunkH4V7OXHEcjs.timingSafeEqualBytes.call(void 0, receivedBytes, expectedBytes)) {
     throw new Error("INVALID_TENANT_AUTH");
   }
   let payload;
   try {
-    payload = JSON.parse(_chunk5IOYCCFDcjs.utf8Decode.call(void 0, _chunk5IOYCCFDcjs.base64UrlToBytes.call(void 0, encodedPayload)));
+    payload = JSON.parse(_chunkH4V7OXHEcjs.utf8Decode.call(void 0, _chunkH4V7OXHEcjs.base64UrlToBytes.call(void 0, encodedPayload)));
   } catch (e2) {
     throw new Error("INVALID_TENANT_AUTH");
   }
@@ -446,8 +456,17 @@ function createTenantContextManager(options) {
   async function getOrCreateAdapter(dbConfig) {
     const cacheKey = `${dbConfig.driver}:${dbConfig.connectionString}`;
     if (!adapterCache.has(cacheKey)) {
-      const adapter = await adapterFactory(dbConfig);
-      adapterCache.set(cacheKey, adapter);
+      const created = (async () => {
+        const adapter = await adapterFactory(dbConfig);
+        if (typeof adapter.initSchema === "function") {
+          await adapter.initSchema();
+        }
+        return adapter;
+      })().catch((error) => {
+        adapterCache.delete(cacheKey);
+        throw error;
+      });
+      adapterCache.set(cacheKey, created);
     }
     return adapterCache.get(cacheKey);
   }
@@ -583,14 +602,14 @@ async function createReiServer(config) {
   return {
     handlers: {
       initTenant: createInitTenantHandler(ctx),
-      getUserKey: _chunk5IOYCCFDcjs.createGetUserKeyHandler.call(void 0, ctx),
-      scheduleMessage: _chunk5IOYCCFDcjs.createScheduleMessageHandler.call(void 0, ctx),
+      getUserKey: _chunkH4V7OXHEcjs.createGetUserKeyHandler.call(void 0, ctx),
+      scheduleMessage: _chunkH4V7OXHEcjs.createScheduleMessageHandler.call(void 0, ctx),
       sendNotifications: createSendNotificationsHandler(ctx),
-      updateMessage: _chunk5IOYCCFDcjs.createUpdateMessageHandler.call(void 0, ctx),
-      cancelMessage: _chunk5IOYCCFDcjs.createCancelMessageHandler.call(void 0, ctx),
-      messages: _chunk5IOYCCFDcjs.createMessagesHandler.call(void 0, ctx),
-      getMessage: _chunk5IOYCCFDcjs.createGetMessageHandler.call(void 0, ctx),
-      pushSubscription: _chunk5IOYCCFDcjs.createPushSubscriptionHandler.call(void 0, ctx)
+      updateMessage: _chunkH4V7OXHEcjs.createUpdateMessageHandler.call(void 0, ctx),
+      cancelMessage: _chunkH4V7OXHEcjs.createCancelMessageHandler.call(void 0, ctx),
+      messages: _chunkH4V7OXHEcjs.createMessagesHandler.call(void 0, ctx),
+      getMessage: _chunkH4V7OXHEcjs.createGetMessageHandler.call(void 0, ctx),
+      pushSubscription: _chunkH4V7OXHEcjs.createPushSubscriptionHandler.call(void 0, ctx)
     }
   };
 }
@@ -625,4 +644,21 @@ async function createReiServer(config) {
 
 
 
-exports.MAX_PUSH_PAYLOAD_BYTES = _chunk5IOYCCFDcjs.MAX_PUSH_PAYLOAD_BYTES; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunk5IOYCCFDcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunk5IOYCCFDcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunk5IOYCCFDcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunk5IOYCCFDcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunk5IOYCCFDcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunk5IOYCCFDcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunk5IOYCCFDcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunk5IOYCCFDcjs.decryptFromStorage; exports.decryptPayload = _chunk5IOYCCFDcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunk5IOYCCFDcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunk5IOYCCFDcjs.encryptForStorage; exports.isValidISO8601 = _chunk5IOYCCFDcjs.isValidISO8601; exports.isValidTimeZoneId = _chunk5IOYCCFDcjs.isValidTimeZoneId; exports.isValidUUID = _chunk5IOYCCFDcjs.isValidUUID; exports.isValidUUIDv4 = _chunk5IOYCCFDcjs.isValidUUIDv4; exports.isValidUrl = _chunk5IOYCCFDcjs.isValidUrl; exports.measurePushPayload = _chunk5IOYCCFDcjs.measurePushPayload; exports.nextFutureOccurrence = _chunk5IOYCCFDcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunk5IOYCCFDcjs.planNextOccurrence; exports.runScheduledTick = _chunk5IOYCCFDcjs.runScheduledTick; exports.validateAvatarUrl = _chunk5IOYCCFDcjs.validateAvatarUrl; exports.validateLlmMessagesArray = _chunk5IOYCCFDcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunk5IOYCCFDcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunk5IOYCCFDcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.CORS_ALLOW_HEADERS = _chunkH4V7OXHEcjs.CORS_ALLOW_HEADERS; exports.CORS_ALLOW_METHODS = _chunkH4V7OXHEcjs.CORS_ALLOW_METHODS; exports.DEFAULT_CLAIM_LEASE_MS = _chunkH4V7OXHEcjs.DEFAULT_CLAIM_LEASE_MS; exports.DEFAULT_HEARTBEAT_LEASE_TTL_MS = _chunkH4V7OXHEcjs.DEFAULT_HEARTBEAT_LEASE_TTL_MS; exports.DEFAULT_LEASE_HEARTBEAT_MS = _chunkH4V7OXHEcjs.DEFAULT_LEASE_HEARTBEAT_MS; exports.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE = _chunkH4V7OXHEcjs.DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE; exports.DEFAULT_MAX_TOOL_ITERATIONS = _chunkH4V7OXHEcjs.DEFAULT_MAX_TOOL_ITERATIONS; exports.DEFAULT_TOTAL_TIMEOUT_MS = _chunkH4V7OXHEcjs.DEFAULT_TOTAL_TIMEOUT_MS; exports.MAX_PUSH_PAYLOAD_BYTES = _chunkH4V7OXHEcjs.MAX_PUSH_PAYLOAD_BYTES; exports.MIN_SCHEDULE_LEAD_MS = _chunkH4V7OXHEcjs.MIN_SCHEDULE_LEAD_MS; exports.NonRetryableError = _chunkH4V7OXHEcjs.NonRetryableError; exports.PUSH_ENVELOPE_RESERVED_BYTES = _chunkH4V7OXHEcjs.PUSH_ENVELOPE_RESERVED_BYTES; exports.SCHEMA_VERSION = _chunkH4V7OXHEcjs.SCHEMA_VERSION; exports.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES = _chunkH4V7OXHEcjs.WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES; exports.WEB_PUSH_MAX_BODY_BYTES = _chunkH4V7OXHEcjs.WEB_PUSH_MAX_BODY_BYTES; exports.advanceOccurrence = _chunkH4V7OXHEcjs.advanceOccurrence; exports.createAdapter = createAdapter; exports.createD1Adapter = _chunkH4V7OXHEcjs.createD1Adapter; exports.createReiServer = createReiServer; exports.createSingleUserCloudflareWorker = _chunkH4V7OXHEcjs.createSingleUserCloudflareWorker; exports.createSingleUserServer = _chunkH4V7OXHEcjs.createSingleUserServer; exports.createTenantToken = createTenantToken; exports.createWebCryptoWebPush = _chunkH4V7OXHEcjs.createWebCryptoWebPush; exports.decryptFromStorage = _chunkH4V7OXHEcjs.decryptFromStorage; exports.decryptPayload = _chunkH4V7OXHEcjs.decryptPayload; exports.deriveUserEncryptionKey = _chunkH4V7OXHEcjs.deriveUserEncryptionKey; exports.encryptForStorage = _chunkH4V7OXHEcjs.encryptForStorage; exports.ensureSchema = _chunkH4V7OXHEcjs.ensureSchema; exports.getSchemaVersion = _chunkH4V7OXHEcjs.getSchemaVersion; exports.isNonRetryableError = _chunkH4V7OXHEcjs.isNonRetryableError; exports.isValidISO8601 = _chunkH4V7OXHEcjs.isValidISO8601; exports.isValidTimeZoneId = _chunkH4V7OXHEcjs.isValidTimeZoneId; exports.isValidUUID = _chunkH4V7OXHEcjs.isValidUUID; exports.isValidUUIDv4 = _chunkH4V7OXHEcjs.isValidUUIDv4; exports.isValidUrl = _chunkH4V7OXHEcjs.isValidUrl; exports.measurePushPayload = _chunkH4V7OXHEcjs.measurePushPayload; exports.nextFutureOccurrence = _chunkH4V7OXHEcjs.nextFutureOccurrence; exports.planNextOccurrence = _chunkH4V7OXHEcjs.planNextOccurrence; exports.runScheduledTick = _chunkH4V7OXHEcjs.runScheduledTick; exports.runTask = _chunkH4V7OXHEcjs.runTask; exports.sanitizeErrorSummary = _chunkH4V7OXHEcjs.sanitizeErrorSummary; exports.summarizeErrorCause = _chunkH4V7OXHEcjs.summarizeErrorCause; exports.validateAvatarUrl = _chunkH4V7OXHEcjs.validateAvatarUrl; exports.validateLlmMessagesArray = _chunkH4V7OXHEcjs.validateLlmMessagesArray; exports.validateScheduleMessagePayload = _chunkH4V7OXHEcjs.validateScheduleMessagePayload; exports.validateSplitPattern = _chunkH4V7OXHEcjs.validateSplitPattern; exports.verifyTenantToken = verifyTenantToken;

package/dist/index.d.cts

@@ -45,8 +45,6 @@ export function createReiServer(config: ReiServerConfig): Promise<ReiServer>;
 export { createAdapter } from "./adapters/factory.js";
 export { createD1Adapter } from "./adapters/d1.js";
 export { createSingleUserServer } from "./single-user.js";
-export { runScheduledTick } from "./lib/run-tick.js";
-export { createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export type VapidConfig = {
     /**
      * - VAPID contact email (e.g. mailto:…).
@@ -137,6 +135,11 @@ export type ReiServer = {
      */
     handlers: ReiHandlers;
 };
+export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
+export { NonRetryableError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
+export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
+export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
+export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";

package/dist/index.d.ts

@@ -45,8 +45,6 @@ export function createReiServer(config: ReiServerConfig): Promise<ReiServer>;
 export { createAdapter } from "./adapters/factory.js";
 export { createD1Adapter } from "./adapters/d1.js";
 export { createSingleUserServer } from "./single-user.js";
-export { runScheduledTick } from "./lib/run-tick.js";
-export { createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export type VapidConfig = {
     /**
      * - VAPID contact email (e.g. mailto:…).
@@ -137,6 +135,11 @@ export type ReiServer = {
      */
     handlers: ReiHandlers;
 };
+export { runScheduledTick, runTask, DEFAULT_CLAIM_LEASE_MS, DEFAULT_LEASE_HEARTBEAT_MS, DEFAULT_HEARTBEAT_LEASE_TTL_MS, sanitizeErrorSummary } from "./lib/run-tick.js";
+export { NonRetryableError, isNonRetryableError, summarizeErrorCause } from "./lib/errors.js";
+export { getSchemaVersion, ensureSchema, SCHEMA_VERSION } from "./lib/schema-version.js";
+export { DEFAULT_MAX_TOOL_ITERATIONS, DEFAULT_TOTAL_TIMEOUT_MS, DEFAULT_MAX_SCHEDULED_TASKS_PER_FIRE, MIN_SCHEDULE_LEAD_MS } from "./lib/agentic-fire.js";
+export { CORS_ALLOW_HEADERS, CORS_ALLOW_METHODS, createSingleUserCloudflareWorker } from "./cloudflare/single-user-worker.js";
 export { createWebCryptoWebPush, measurePushPayload, MAX_PUSH_PAYLOAD_BYTES, PUSH_ENVELOPE_RESERVED_BYTES, WEB_PUSH_MAX_BODY_BYTES, WEB_PUSH_ENCRYPTION_OVERHEAD_BYTES } from "./lib/webpush-webcrypto.js";
 export { deriveUserEncryptionKey, decryptPayload, encryptForStorage, decryptFromStorage } from "./lib/encryption.js";
 export { validateScheduleMessagePayload, validateLlmMessagesArray, validateSplitPattern, validateAvatarUrl, isValidISO8601, isValidUrl, isValidUUID, isValidUUIDv4, isValidTimeZoneId } from "./lib/validation.js";