@reprova/sdk 0.4.0 → 0.6.0

package/dist/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB,EAAE,OAAO,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;CAClC;AAKD,eAAO,MAAM,4BAA4B,EAAE,mBAO1C,CAAC;AAMF,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AACpD,qBAAa,qBAAsB,SAAQ,KAAK;CAAG;AAcnD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEtD;AAQD,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,KAAK;IAJf,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA0D;gBAGpE,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM;IAMvB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAO/C,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO;IAa1E,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAKD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAM7G;AAUD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAOnG"}

package/dist/idempotency.js

@@ -0,0 +1,124 @@
+// Idempotency/consistency checks: two independent, domain-agnostic
+// detectors for "silent 200" bugs, unlike business-invariant rules — neither
+// needs a dashboard-authored condition tree, since neither depends on
+// knowing anything about the app's data model.
+//
+// 1. Idempotency-key mismatch: the app itself asserts two requests are "the
+//    same operation" by sending an identical value in a known header (e.g.
+//    Stripe-style Idempotency-Key). If the response differs between them,
+//    that's unambiguously a bug — no heuristic tuning needed, the app told
+//    us these should match.
+// 2. Duplicate-read mismatch: the SAME GET (route + query + caller
+//    identity) repeated within a short window returning a different
+//    result. Real false-positive risk exists here (data can legitimately
+//    change between two reads), so it's scoped tight: a short window turns
+//    it into "did two near-simultaneous reads of what should be the same
+//    snapshot disagree" (a race-condition/double-fetch signal), not general
+//    staleness detection — and it's skipped entirely when no caller
+//    identity is available, since an identity-less GET trivially disagrees
+//    across different callers.
+import { createHash } from 'node:crypto';
+// Mirrors the control plane's idempotency_settings table defaults — used
+// before the first successful poll, and if polling never succeeds at all
+// (e.g. an older control plane without this endpoint yet).
+export const DEFAULT_IDEMPOTENCY_SETTINGS = {
+    key_check_enabled: true,
+    header_names: ['Idempotency-Key', 'X-Idempotency-Key'],
+    ttl_ms: 86_400_000,
+    max_keys: 100_000,
+    duplicate_read_enabled: false,
+    duplicate_read_window_ms: 500,
+};
+// One reusable Error class per detector, mirroring BusinessInvariantViolation
+// — per-endpoint identity comes from capture()'s errorType override, not a
+// per-instance subclass, so many distinct endpoints share one class without
+// collapsing into a single issue.
+export class IdempotencyKeyMismatch extends Error {
+}
+export class DuplicateReadMismatch extends Error {
+}
+// Deterministic regardless of key insertion order, so { a:1, b:2 } and
+// { b:2, a:1 } hash identically — otherwise two genuinely-equivalent
+// responses serialized in a different key order would look like a mismatch
+// that isn't one.
+function stableStringify(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(stableStringify).join(',')}]`;
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${stableStringify(obj[k])}`).join(',')}}`;
+}
+export function hashResponseBody(body) {
+    return createHash('sha256').update(stableStringify(body)).digest('hex');
+}
+// Bounded signature -> last-seen-hash cache with TTL + LRU eviction, shared
+// by both detectors — the underlying mechanism ("has this signature's hash
+// changed within its window") is identical for both; only what goes into
+// the signature and how long it's remembered differs. Map iteration order
+// is insertion order, and delete-then-reinsert on every access keeps it in
+// least-recently-used order, so eviction always drops the LRU entry.
+export class HashMismatchCache {
+    maxKeys;
+    ttlMs;
+    map = new Map();
+    constructor(maxKeys, ttlMs) {
+        this.maxKeys = maxKeys;
+        this.ttlMs = ttlMs;
+    }
+    // Settings can change on every poll — reconfigure in place rather than
+    // recreating the cache, so a TTL/cap edit doesn't silently drop everything
+    // currently tracked.
+    configure(maxKeys, ttlMs) {
+        this.maxKeys = maxKeys;
+        this.ttlMs = ttlMs;
+    }
+    // Records `hash` for `signature`, returning true if a live (non-expired)
+    // prior hash for the same signature exists and differs from this one.
+    checkAndRecord(signature, hash, now = Date.now()) {
+        const existing = this.map.get(signature);
+        this.map.delete(signature); // re-inserted below either way, refreshing LRU order
+        const mismatch = !!existing && existing.expiresAt > now && existing.hash !== hash;
+        this.map.set(signature, { hash, expiresAt: now + this.ttlMs });
+        while (this.map.size > this.maxKeys) {
+            const oldest = this.map.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.map.delete(oldest);
+        }
+        return mismatch;
+    }
+    get size() {
+        return this.map.size;
+    }
+}
+// Checks each configured header name case-insensitively — Node normalizes
+// incoming header names to lowercase, and captureHeaders (stack.ts) passes
+// that through unchanged, so ctx.request.headers keys are already lowercase.
+export function findIdempotencyKey(headers, headerNames) {
+    for (const name of headerNames) {
+        const value = headers[name.toLowerCase()];
+        if (value)
+            return value;
+    }
+    return undefined;
+}
+// A small, conventional set of claim keys checked in order — not exhaustive,
+// just enough to cover common shapes (Auth0/JWT `sub`, a plain `id`,
+// Passport-style `userId`/`user_id`). Returns undefined, never a guess, when
+// none match: duplicate-read detection is skipped entirely without an
+// identity, rather than risk comparing two different callers' data and
+// calling the difference a bug.
+const IDENTITY_CLAIM_KEYS = ['sub', 'id', 'userId', 'user_id'];
+export function extractIdentity(authClaims) {
+    if (!authClaims)
+        return undefined;
+    for (const key of IDENTITY_CLAIM_KEYS) {
+        const value = authClaims[key];
+        if (typeof value === 'string' || typeof value === 'number')
+            return String(value);
+    }
+    return undefined;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../src/idempotency.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,6EAA6E;AAC7E,sEAAsE;AACtE,+CAA+C;AAC/C,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,4BAA4B;AAC5B,mEAAmE;AACnE,oEAAoE;AACpE,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,oEAAoE;AACpE,2EAA2E;AAC3E,+BAA+B;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAWzC,yEAAyE;AACzE,yEAAyE;AACzE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAwB;IAC/D,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACtD,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,OAAO;IACjB,sBAAsB,EAAE,KAAK;IAC7B,wBAAwB,EAAE,GAAG;CAC9B,CAAC;AAEF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,kCAAkC;AAClC,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AACpD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;CAAG;AAEnD,uEAAuE;AACvE,qEAAqE;AACrE,2EAA2E;AAC3E,kBAAkB;AAClB,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,qEAAqE;AACrE,MAAM,OAAO,iBAAiB;IAIlB;IACA;IAJO,GAAG,GAAG,IAAI,GAAG,EAA+C,CAAC;IAE9E,YACU,OAAe,EACf,KAAa;QADb,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;IACpB,CAAC;IAEJ,uEAAuE;IACvE,2EAA2E;IAC3E,qBAAqB;IACrB,SAAS,CAAC,OAAe,EAAE,KAAa;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,sEAAsE;IACtE,cAAc,CAAC,SAAiB,EAAE,IAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,qDAAqD;QACjF,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;CACF;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAA+B,EAAE,WAAqB;IACvF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAC7E,qEAAqE;AACrE,6EAA6E;AAC7E,sEAAsE;AACtE,uEAAuE;AACvE,gCAAgC;AAChC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAE/D,MAAM,UAAU,eAAe,CAAC,UAA+C;IAC7E,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/idempotencySettingsPoller.d.ts

@@ -0,0 +1,23 @@
+import type { IdempotencySettings } from './idempotency.js';
+interface IdempotencySettingsPollerOptions {
+    endpoint: string;
+    apiKey: string;
+    intervalMs?: number;
+}
+export declare class IdempotencySettingsPoller {
+    private settings;
+    private timer;
+    private lastWarnAt;
+    private readonly endpoint;
+    private readonly apiKey;
+    private readonly intervalMs;
+    constructor(opts: IdempotencySettingsPollerOptions);
+    start(): void;
+    stop(): void;
+    getSettings(): IdempotencySettings;
+    refresh(): Promise<void>;
+    seed(settings: IdempotencySettings): void;
+    private warnOnce;
+}
+export {};
+//# sourceMappingURL=idempotencySettingsPoller.d.ts.map

package/dist/idempotencySettingsPoller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencySettingsPoller.d.ts","sourceRoot":"","sources":["../src/idempotencySettingsPoller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG5D,UAAU,gCAAgC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAqD;IACrE,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,IAAI,EAAE,gCAAgC;IAMlD,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI;IAOZ,WAAW,IAAI,mBAAmB;IAI5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB9B,IAAI,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAIzC,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/idempotencySettingsPoller.js

@@ -0,0 +1,68 @@
+import { DEFAULT_IDEMPOTENCY_SETTINGS } from './idempotency.js';
+import { httpFetch } from './httpFetch.js';
+const WARN_INTERVAL_MS = 60_000;
+// Same start()/stop()/setInterval+unref shape as RulesPoller — periodically
+// fetches the tenant's dashboard-configured idempotency-check settings so a
+// toggle flipped in the dashboard reaches a running process without a
+// redeploy. Falls back to DEFAULT_IDEMPOTENCY_SETTINGS before the first
+// successful poll and keeps the last-known-good settings on any failure,
+// never throwing and never leaving the detectors unconfigured.
+export class IdempotencySettingsPoller {
+    settings = DEFAULT_IDEMPOTENCY_SETTINGS;
+    timer = null;
+    lastWarnAt = 0;
+    endpoint;
+    apiKey;
+    intervalMs;
+    constructor(opts) {
+        this.endpoint = opts.endpoint;
+        this.apiKey = opts.apiKey;
+        this.intervalMs = opts.intervalMs ?? 60_000;
+    }
+    start() {
+        void this.refresh(); // don't wait a full interval before settings are usable
+        this.timer = setInterval(() => void this.refresh(), this.intervalMs);
+        if (this.timer.unref)
+            this.timer.unref(); // don't block process exit
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    getSettings() {
+        return this.settings;
+    }
+    async refresh() {
+        try {
+            const res = await httpFetch(this.endpoint, {
+                headers: { 'X-Reprova-Key': this.apiKey },
+            });
+            if (!res.ok) {
+                this.warnOnce(`reprova: idempotency settings fetch returned ${res.status}`);
+                return;
+            }
+            this.seed((await res.json()));
+        }
+        catch (err) {
+            this.warnOnce(`reprova: idempotency settings fetch error: ${err.message}`);
+        }
+    }
+    // Applies an already-fetched settings object directly, with no network
+    // call — used by replay mode to seed a one-time snapshot the CLI fetched
+    // ahead of time (there's no live control plane to poll from inside a
+    // replayed app), so checkIdempotencyIfAny (sdk.ts) sees exactly the same
+    // shape it would from a real refresh().
+    seed(settings) {
+        this.settings = settings;
+    }
+    warnOnce(msg) {
+        const now = Date.now();
+        if (now - this.lastWarnAt > WARN_INTERVAL_MS) {
+            this.lastWarnAt = now;
+            console.warn(msg);
+        }
+    }
+}
+//# sourceMappingURL=idempotencySettingsPoller.js.map

package/dist/idempotencySettingsPoller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotencySettingsPoller.js","sourceRoot":"","sources":["../src/idempotencySettingsPoller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAQ3C,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,+DAA+D;AAC/D,MAAM,OAAO,yBAAyB;IAC5B,QAAQ,GAAwB,4BAA4B,CAAC;IAC7D,KAAK,GAA0C,IAAI,CAAC;IACpD,UAAU,GAAG,CAAC,CAAC;IACN,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,UAAU,CAAS;IAEpC,YAAY,IAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAC9C,CAAC;IAED,KAAK;QACH,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,wDAAwD;QAC7E,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,2BAA2B;IACvE,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACzC,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,gDAAgD,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,8CAA+C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,qEAAqE;IACrE,yEAAyE;IACzE,wCAAwC;IACxC,IAAI,CAAC,QAA6B;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -1,17 +1,44 @@
 export { Reprova, wrapResponse, forwardAsyncErrors, replayErrorHandler } from './sdk.js';
-export { contextStorage, currentContext } from './context.js';
-export { createPrismaExtension } from './prisma.js';
+export type { FrameworkAdapter } from './frameworkAdapter.js';
+export { contextStorage, currentContext, setAuthClaims } from './context.js';
+export { createPrismaExtension, recordPrismaOperation } from './prisma.js';
+export type { DMMF, DMMFModel, DMMFField, PrismaRecordHooks } from './prisma.js';
+export { instrumentLegacyPrismaClient } from './legacyPrisma.js';
+export type { LegacyPrismaOptions } from './legacyPrisma.js';
 export { createKyselyPlugin } from './kysely.js';
 export type { KyselyPluginOptions, KyselyFootprintPlugin } from './kysely.js';
 export { installSequelizeHooks } from './sequelize.js';
 export type { SequelizeAdapterOptions } from './sequelize.js';
-export { installTypeOrmSubscriber } from './typeorm.js';
+export { installTypeOrmSubscriber, installTypeOrmQueryLogger } from './typeorm.js';
+export { installMikroOrmSubscriber } from './mikroorm.js';
+export { reprovaMongoosePlugin, discoverMongooseSchema } from './mongoose.js';
+export type { DiscoveredMongoModel, DiscoveredMongoEdge, MongooseInstanceLike } from './mongoose.js';
+export { MongoSchemaReporter } from './mongoSchemaReporter.js';
 export { installKnexHooks } from './knex.js';
 export type { KnexAdapterOptions } from './knex.js';
-export { createDrizzleLogger } from './drizzle.js';
-export type { DrizzleLoggerOptions, DrizzleLogger } from './drizzle.js';
+export { createNestExceptionFilter, createNestContextInterceptor } from './nest.js';
+export type { ReprovaNestFilter, NestExceptionFilterOptions, ArgumentsHostLike, NestAppLike, CallHandlerLike, ReprovaNestInterceptor, NestContextInterceptorOptions, } from './nest.js';
+export { createNextAdapter } from './nextjs.js';
+export type { NextAdapterOptions, ReprovaNextAdapter, ReprovaTrpcMiddleware, TrpcMiddlewareResultLike, TrpcMiddlewareParamsLike } from './nextjs.js';
+export { createDrizzleLogger, createDrizzleCache, createDrizzleFootprint } from './drizzle.js';
+export type { DrizzleLoggerOptions, DrizzleLogger, DrizzleCache, DrizzleCacheOptions, DrizzleFootprintOptions, } from './drizzle.js';
 export type { ReprovaOptions } from './sdk.js';
-export type { ReprovaContext, FootprintQuery, OutboundCall, RequestSnapshot } from './context.js';
+export type { ReprovaContext, FootprintQuery, OutboundCall, RequestSnapshot, BusinessInvariantHit, WriteCountDriftHit } from './context.js';
+export { detectNPlusOne, describeNPlusOne, PotentialNPlusOneQuery } from './nPlusOne.js';
+export type { NPlusOneFinding } from './nPlusOne.js';
+export { detectRetryStorm, describeRetryStorm, PotentialRetryStorm } from './retryStorm.js';
+export type { RetryStormFinding } from './retryStorm.js';
+export { compileInvariant, evaluateInvariant, operationMatchesHook, BusinessInvariantViolation } from './invariantRules.js';
+export type { InvariantRule, CompiledInvariant } from './invariantRules.js';
+export { RulesPoller } from './rulesPoller.js';
+export { DEFAULT_IDEMPOTENCY_SETTINGS, HashMismatchCache, IdempotencyKeyMismatch, DuplicateReadMismatch, findIdempotencyKey, extractIdentity, hashResponseBody, } from './idempotency.js';
+export type { IdempotencySettings } from './idempotency.js';
+export { IdempotencySettingsPoller } from './idempotencySettingsPoller.js';
+export { InferenceReporter } from './invariantInference.js';
+export type { InferredInvariantObservation } from './invariantInference.js';
+export { ValueDistributionDrift, WriteCountDrift, newWelfordState, updateWelfordState, isDrift, extractTopLevelNumericFields, DistributionDriftReporter, } from './distributionDrift.js';
+export type { WelfordState, DistributionBaseline } from './distributionDrift.js';
+export { DistributionBaselinePoller } from './distributionBaselinePoller.js';
 export * from './proto.gen.js';
 export declare const SDK_VERSION = "0.1.0";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACxE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClG,cAAc,gBAAgB,CAAC;AAE/B,eAAO,MAAM,WAAW,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACzF,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC3E,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC9E,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACpF,YAAY,EACV,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrJ,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC/F,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC5I,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACzF,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC5H,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,OAAO,EACP,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,cAAc,gBAAgB,CAAC;AAE/B,eAAO,MAAM,WAAW,UAAU,CAAC"}

package/dist/index.js

@@ -1,11 +1,26 @@
 export { Reprova, wrapResponse, forwardAsyncErrors, replayErrorHandler } from './sdk.js';
-export { contextStorage, currentContext } from './context.js';
-export { createPrismaExtension } from './prisma.js';
+export { contextStorage, currentContext, setAuthClaims } from './context.js';
+export { createPrismaExtension, recordPrismaOperation } from './prisma.js';
+export { instrumentLegacyPrismaClient } from './legacyPrisma.js';
 export { createKyselyPlugin } from './kysely.js';
 export { installSequelizeHooks } from './sequelize.js';
-export { installTypeOrmSubscriber } from './typeorm.js';
+export { installTypeOrmSubscriber, installTypeOrmQueryLogger } from './typeorm.js';
+export { installMikroOrmSubscriber } from './mikroorm.js';
+export { reprovaMongoosePlugin, discoverMongooseSchema } from './mongoose.js';
+export { MongoSchemaReporter } from './mongoSchemaReporter.js';
 export { installKnexHooks } from './knex.js';
-export { createDrizzleLogger } from './drizzle.js';
+export { createNestExceptionFilter, createNestContextInterceptor } from './nest.js';
+export { createNextAdapter } from './nextjs.js';
+export { createDrizzleLogger, createDrizzleCache, createDrizzleFootprint } from './drizzle.js';
+export { detectNPlusOne, describeNPlusOne, PotentialNPlusOneQuery } from './nPlusOne.js';
+export { detectRetryStorm, describeRetryStorm, PotentialRetryStorm } from './retryStorm.js';
+export { compileInvariant, evaluateInvariant, operationMatchesHook, BusinessInvariantViolation } from './invariantRules.js';
+export { RulesPoller } from './rulesPoller.js';
+export { DEFAULT_IDEMPOTENCY_SETTINGS, HashMismatchCache, IdempotencyKeyMismatch, DuplicateReadMismatch, findIdempotencyKey, extractIdentity, hashResponseBody, } from './idempotency.js';
+export { IdempotencySettingsPoller } from './idempotencySettingsPoller.js';
+export { InferenceReporter } from './invariantInference.js';
+export { ValueDistributionDrift, WriteCountDrift, newWelfordState, updateWelfordState, isDrift, extractTopLevelNumericFields, DistributionDriftReporter, } from './distributionDrift.js';
+export { DistributionBaselinePoller } from './distributionBaselinePoller.js';
 export * from './proto.gen.js';
 export const SDK_VERSION = '0.1.0';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAInD,cAAc,gBAAgB,CAAC;AAE/B,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAUpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAU/F,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEzF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE5F,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAE5H,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,OAAO,EACP,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,cAAc,gBAAgB,CAAC;AAE/B,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC"}

package/dist/invariantInference.d.ts

@@ -0,0 +1,28 @@
+export interface InferredInvariantObservation {
+    model: string;
+    field: string;
+    relation: string;
+    checked: number;
+    held: number;
+}
+interface ReporterOptions {
+    endpoint: string;
+    apiKey: string;
+    flushIntervalMs?: number;
+}
+export declare class InferenceReporter {
+    private counts;
+    private timer;
+    private lastWarnAt;
+    private readonly endpoint;
+    private readonly apiKey;
+    private readonly flushIntervalMs;
+    constructor(opts: ReporterOptions);
+    start(): void;
+    stop(): void;
+    record(model: string, field: string, relation: string, held: boolean): void;
+    flush(): Promise<void>;
+    private warnOnce;
+}
+export {};
+//# sourceMappingURL=invariantInference.d.ts.map

package/dist/invariantInference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariantInference.d.ts","sourceRoot":"","sources":["../src/invariantInference.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAOD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAwG;IACtH,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,IAAI,EAAE,eAAe;IAMjC,KAAK,IAAI,IAAI;IAKb,IAAI,IAAI,IAAI;IAOZ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI;IAWrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/invariantInference.js

@@ -0,0 +1,87 @@
+// Invariant inference, v1 slice: instead of hand-authoring a
+// business-invariant-rule condition tree, passively observe whether a
+// same-named numeric field on a parent row equals the sum of that same
+// field across an already-included to-many relation (Invoice.total vs
+// sum(lineItems.total)) — and report pass/fail counts to the control plane.
+// Once a candidate has been observed enough times at a high enough pass
+// rate, the dashboard offers it as a one-click "confirm" that creates a
+// normal business_invariant_rule — no new evaluation mechanism needed once
+// confirmed, it becomes an ordinary dashboard-authored rule.
+//
+// Deliberately scoped down from the general idea: only the same-field-name
+// shape (not every numeric-field-pair combination, which would be
+// combinatorial and noisy), only `sum` (no `count`), and no dashboard-
+// configurable thresholds yet — see PROGRESS.md for the fuller design this
+// is a first slice of.
+import { httpFetch } from './httpFetch.js';
+const WARN_INTERVAL_MS = 60_000;
+// Reports observation deltas, not cumulative totals — the control plane
+// owns the running (checked_count, held_count) per candidate; the SDK only
+// ever adds to it. That makes a dropped/failed flush harmless to correctness
+// (the next flush's delta is unaffected by a prior one failing) at the cost
+// of only ever undercounting on a genuine send failure, never overcounting.
+export class InferenceReporter {
+    counts = new Map();
+    timer = null;
+    lastWarnAt = 0;
+    endpoint;
+    apiKey;
+    flushIntervalMs;
+    constructor(opts) {
+        this.endpoint = opts.endpoint;
+        this.apiKey = opts.apiKey;
+        this.flushIntervalMs = opts.flushIntervalMs ?? 30_000;
+    }
+    start() {
+        this.timer = setInterval(() => void this.flush(), this.flushIntervalMs);
+        if (this.timer.unref)
+            this.timer.unref(); // don't block process exit
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    record(model, field, relation, held) {
+        const key = `${model}\x00${field}\x00${relation}`;
+        let c = this.counts.get(key);
+        if (!c) {
+            c = { model, field, relation, checked: 0, held: 0 };
+            this.counts.set(key, c);
+        }
+        c.checked++;
+        if (held)
+            c.held++;
+    }
+    async flush() {
+        if (this.counts.size === 0)
+            return;
+        const observations = [...this.counts.values()];
+        this.counts.clear();
+        try {
+            const res = await httpFetch(this.endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-Reprova-Key': this.apiKey,
+                },
+                body: JSON.stringify({ observations }),
+            });
+            if (!res.ok) {
+                this.warnOnce(`reprova: inferred-invariant observation report returned ${res.status}`);
+            }
+        }
+        catch (err) {
+            this.warnOnce(`reprova: inferred-invariant observation report error: ${err.message}`);
+        }
+    }
+    warnOnce(msg) {
+        const now = Date.now();
+        if (now - this.lastWarnAt > WARN_INTERVAL_MS) {
+            this.lastWarnAt = now;
+            console.warn(msg);
+        }
+    }
+}
+//# sourceMappingURL=invariantInference.js.map

package/dist/invariantInference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariantInference.js","sourceRoot":"","sources":["../src/invariantInference.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,kEAAkE;AAClE,uEAAuE;AACvE,2EAA2E;AAC3E,uBAAuB;AAEvB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAgBhC,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAG,IAAI,GAAG,EAA6F,CAAC;IAC9G,KAAK,GAA0C,IAAI,CAAC;IACpD,UAAU,GAAG,CAAC,CAAC;IACN,QAAQ,CAAS;IACjB,MAAM,CAAS;IACf,eAAe,CAAS;IAEzC,YAAY,IAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC;IACxD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,2BAA2B;IACvE,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAAa,EAAE,QAAgB,EAAE,IAAa;QAClE,MAAM,GAAG,GAAG,GAAG,KAAK,OAAO,KAAK,OAAO,QAAQ,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,CAAC,CAAC,OAAO,EAAE,CAAC;QACZ,IAAI,IAAI;YAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACnC,MAAM,YAAY,GAAmC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;gBACzC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,IAAI,CAAC,MAAM;iBAC7B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,CAAC,QAAQ,CAAC,2DAA2D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,yDAA0D,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/invariantRules.d.ts

@@ -0,0 +1,16 @@
+export interface InvariantRule {
+    id: string;
+    model: string;
+    when_hook: 'after_read' | 'after_write';
+    expr: string;
+    message: string;
+    enabled: boolean;
+}
+export declare function operationMatchesHook(op: string, whenHook: InvariantRule['when_hook']): boolean;
+export type CompiledInvariant = (row: Record<string, unknown>) => unknown;
+export declare function compileInvariant(rule: Pick<InvariantRule, 'id' | 'expr'>): Promise<CompiledInvariant | null>;
+export declare function evaluateInvariant(compiled: CompiledInvariant, row: Record<string, unknown>): boolean | undefined;
+export declare class BusinessInvariantViolation extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=invariantRules.d.ts.map

package/dist/invariantRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariantRules.d.ts","sourceRoot":"","sources":["../src/invariantRules.ts"],"names":[],"mappings":"AA4DA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,YAAY,GAAG,aAAa,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AASD,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAE9F;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;AAc1E,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAalH;AAOD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,SAAS,CAQhH;AAOD,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAG5B"}

package/dist/invariantRules.js

@@ -0,0 +1,104 @@
+// Dashboard-authored business-invariant rules: CEL (Common Expression
+// Language) expressions evaluated in-process against real Prisma query
+// results (not just the footprint's PKs/counts — actual field values), so
+// bugs that never throw and never return a 5xx (an invoice total that
+// silently drifted from its line items, negative inventory, an order marked
+// shipped with no shipment row) can still produce a reproduction.
+//
+// Replaces an earlier JSON condition-tree evaluator (see git history) — CEL
+// gives the same same-row-comparison-and-relation-aggregate expressiveness
+// with a much friendlier authoring surface (`total ==
+// lineItems.map(x, x.total).sum()` instead of a nested op/field/right tree),
+// using the actively-maintained, zero-dependency @marcbachmann/cel-js.
+//
+// `expr` is the INVARIANT itself — what should always be true — not the
+// violation condition: a rule fires when `expr` evaluates to exactly
+// `false`. This is the opposite polarity from the old JSON tree (which
+// encoded the violation, e.g. `not: eq(...)`), but reads naturally in CEL
+// and matches how an admin would actually describe the rule out loud.
+//
+// A field or relation the app's own query didn't `include` simply isn't a
+// key on the row object, which CEL reports as a runtime "no such attribute"
+// error rather than `false` — evaluateInvariant treats any evaluation error,
+// and any non-boolean result (an author mistake, e.g. forgetting a
+// comparison operator), as "can't evaluate" and skips, never firing a false
+// violation on data the query simply didn't load. Same principle
+// `invariantInference.ts`/`distributionDrift.ts` use: never guess.
+let envPromise = null;
+function loadEnv() {
+    if (!envPromise) {
+        envPromise = import('@marcbachmann/cel-js')
+            .then(({ Environment }) => new Environment({ unlistedVariablesAreDyn: true }).registerFunction({
+            name: 'sum',
+            receiverType: 'list',
+            returnType: 'double',
+            handler: (list) => list.reduce((a, b) => a + b, 0),
+            params: [],
+        }))
+            .catch(() => null); // can't load the CEL engine at all — every rule silently never fires, never crashes the host app
+    }
+    return envPromise;
+}
+const READ_OPS = new Set(['findUnique', 'findUniqueOrThrow', 'findFirst', 'findFirstOrThrow', 'findMany']);
+const WRITE_OPS = new Set(['create', 'createMany', 'update', 'updateMany', 'upsert', 'delete', 'deleteMany']);
+// Whether a Prisma operation name belongs to the read/write class a rule's
+// when_hook asks to run on. Anything neither (e.g. $queryRaw, aggregate,
+// count, groupBy) never matches — a rule needs real field values on a real
+// row, which those don't uniformly provide.
+export function operationMatchesHook(op, whenHook) {
+    return whenHook === 'after_read' ? READ_OPS.has(op) : WRITE_OPS.has(op);
+}
+// Compiled programs are cached by (rule id, expr) so an edited rule
+// recompiles (new expr under the same id misses the cache) while an
+// unchanged one is parsed exactly once for the life of the process — CEL
+// parsing is not free, and this runs on every matching query result.
+// Invalid CEL syntax caches a `null` miss rather than re-attempting the
+// same broken parse on every request. A CEL-engine load failure (see
+// loadEnv's own doc comment) is deliberately NOT cached here — that's a
+// process-wide condition already memoized by envPromise itself, not a
+// per-rule outcome, so a later rule with valid syntax isn't punished by an
+// earlier one's transient load timing.
+const compileCache = new Map();
+export async function compileInvariant(rule) {
+    const key = `${rule.id}\x00${rule.expr}`;
+    if (compileCache.has(key))
+        return compileCache.get(key);
+    const env = await loadEnv();
+    if (!env)
+        return null;
+    let compiled;
+    try {
+        compiled = env.parse(rule.expr);
+    }
+    catch {
+        compiled = null; // invalid CEL — never crash the host app on a bad admin-authored rule
+    }
+    compileCache.set(key, compiled);
+    return compiled;
+}
+// Runs a compiled invariant against one row. Returns `false` only for a
+// genuine, cleanly-evaluated violation; `undefined` for anything else
+// (evaluation error from a missing field/relation, or a non-boolean result
+// from a malformed expression) so the caller never mistakes "couldn't tell"
+// for "violated".
+export function evaluateInvariant(compiled, row) {
+    let result;
+    try {
+        result = compiled(row);
+    }
+    catch {
+        return undefined;
+    }
+    return typeof result === 'boolean' ? result : undefined;
+}
+// One reusable Error class for every rule violation. Per-rule identity comes
+// from capture()'s extra.errorType override (see sdk.ts), not from a
+// per-rule subclass — many rules can share this class without collapsing
+// into one issue, since fingerprinting keys off errorType, not the class
+// name, once errorType is supplied explicitly.
+export class BusinessInvariantViolation extends Error {
+    constructor(message) {
+        super(message);
+    }
+}
+//# sourceMappingURL=invariantRules.js.map

package/dist/invariantRules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariantRules.js","sourceRoot":"","sources":["../src/invariantRules.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,sEAAsE;AACtE,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,sDAAsD;AACtD,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,0EAA0E;AAC1E,sEAAsE;AACtE,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,4EAA4E;AAC5E,iEAAiE;AACjE,mEAAmE;AAgBnE,IAAI,UAAU,GAA0C,IAAI,CAAC;AAE7D,SAAS,OAAO;IACd,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,MAAM,CAAC,sBAAsB,CAAC;aACxC,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CACxB,IAAI,WAAW,CAAC,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,gBAAgB,CAAC;YAClE,IAAI,EAAE,KAAK;YACX,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,CAAC,IAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,EAAE;SACX,CAA8B,CAChC;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,iGAAiG;IACzH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAWD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3G,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAE9G,2EAA2E;AAC3E,yEAAyE;AACzE,2EAA2E;AAC3E,4CAA4C;AAC5C,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,QAAoC;IACnF,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAID,oEAAoE;AACpE,oEAAoE;AACpE,yEAAyE;AACzE,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,2EAA2E;AAC3E,uCAAuC;AACvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoC,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAwC;IAC7E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,QAAkC,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAsB,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC,CAAC,sEAAsE;IACzF,CAAC;IACD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,sEAAsE;AACtE,2EAA2E;AAC3E,4EAA4E;AAC5E,kBAAkB;AAClB,MAAM,UAAU,iBAAiB,CAAC,QAA2B,EAAE,GAA4B;IACzF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,6EAA6E;AAC7E,qEAAqE;AACrE,yEAAyE;AACzE,yEAAyE;AACzE,+CAA+C;AAC/C,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF"}

package/dist/knex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"knex.d.ts","sourceRoot":"","sources":["../src/knex.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,kBAAkB;IAEjC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAC1C;AAsCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,kBAAuB,GAAG,IAAI,CAqCnF"}
+{"version":3,"file":"knex.d.ts","sourceRoot":"","sources":["../src/knex.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,kBAAkB;IAEjC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CAC1C;AAsCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,kBAAuB,GAAG,IAAI,CAsCnF"}

package/dist/knex.js

@@ -72,6 +72,7 @@ export function installKnexHooks(knex, opts = {}) {
                     pks,
                     count,
                     note: count === 0 ? 'returned 0 rows' : undefined,
+                    resolved: true,
                 };
                 ctx.footprint.push(entry);
             }