@run402/functions 3.8.0 → 3.9.0

package/README.md

@@ -1,6 +1,6 @@
 # @run402/functions
 
-In-function helper library for [Run402](https://run402.com) serverless functions. Imported _inside_ a deployed function — gives you typed access to the caller's database (RLS-respecting) and the project's admin database, the caller's auth, the project's mailbox, AI helpers, and runtime asset uploads.
+In-function helper library for [Run402](https://run402.com) serverless functions. Imported _inside_ a deployed function — gives you typed access to the caller's database (RLS-respecting) and the project's admin database, the caller's auth, the project's mailbox, AI helpers, runtime asset uploads, and the project's cursored event feed.
 
 ```ts
 import { db, adminDb, getUser, email, ai, assets } from "@run402/functions";
@@ -303,6 +303,44 @@ export default async function handler(req: Request): Promise<Response> {
 }
 ```
 
+## `events.emit(type, payload?, opts?)` — emit into the project's event feed
+
+Write a fact into this project's cursored event feed (the `internal.project_events` outbox) from inside a deployed function. Every existing and future feed consumer — `run402 events`, the MCP `list_project_events` tool, the operator console's Activity view — reads it back for free the moment your code calls `events.emit`.
+
+```ts
+import { events } from "@run402/functions";
+
+await events.emit("signature_completed", { request_id, signer }, {
+  idempotencyKey: `sig:${requestId}`,
+});
+```
+
+Read it back with `GET /projects/v1/:project_id/events?source=app` (or `run402 events --source app`) — app events share the exact cursor/pagination/retention machinery as platform events (deploys, suspensions, transfers), just filtered to `source=app`.
+
+**Vocabulary.** `type` must be flat snake_case matching `/^[a-z][a-z0-9_]{2,63}$/` — no dots, no `app_` prefix. Platform-registered type names (`deploy_activated`, `mailbox_suspended`, ...) are **reserved**: an app cannot impersonate a platform fact. This is enforced **server-side only** — `events.emit` does not pre-validate the grammar or check the reservation list locally; it sends `type` exactly as given. A bad grammar or a reserved name comes back as a thrown `Run402EventsPlatformError` with `code: "INVALID_EVENT_TYPE"` or `code: "RESERVED_EVENT_TYPE"` (both HTTP 400) — never a silently rewritten or dropped call.
+
+**Idempotency.** Pass `idempotencyKey` on any code path that might run more than once for the same real-world fact — webhook retries, function-run retries, anything at-least-once. The gateway dedupes on `(project_id, idempotency_key)` **forever**: this is a durable identity for the fact, not a short-lived retry-window token like an HTTP `Idempotency-Key` header. Reusing a key days or years later still replays the *original* stored event (`deduplicated: true` on the response) instead of creating a new one.
+
+**Response shape** — both a fresh emit (`201`) and an idempotent replay (`200`) return this:
+
+```ts
+{
+  cursor: "evc_...",          // opaque feed position — pass to ?cursor= on a feed read
+  event_type: "signature_completed",
+  class: "app",               // always "app" for events emitted through this namespace
+  source: "app",
+  payload: { request_id: "req_123", signer: "0x..." },
+  payload_truncated: true,    // present only if payload exceeded the 8 KiB bound
+  occurred_at: "2026-07-15T12:00:00.000Z",
+  deduplicated: false,        // true on an idempotency-key replay
+  next_actions: [ /* platform-synthesized drill-downs, incl. a feed poll entry */ ],
+}
+```
+
+`payload` is a compact JSON fact — ids and verdict fields, never bodies or secrets — bounded to 8 KiB server-side (oversize payloads are truncated with `payload_truncated: true` rather than rejected). `next_actions` is always platform-synthesized; there is no way to supply your own drill-downs from the emit call (an app-supplied action would be prompt-injection-by-schema for agents that treat `next_actions` as trusted).
+
+**Errors.** Non-2xx responses throw `Run402EventsPlatformError` — see [Errors](#errors) below. In practice the two you're most likely to see are `code: "QUOTA_EXCEEDED"` (403, the organization's pooled daily quota is exhausted; `details: {resource: "events_per_day", scope, used, limit}`) and cross-project denials (`code: "FORBIDDEN"`, 403), alongside the two vocabulary errors above.
+
 ## Static-site generation (build-time use)
 
 The same library works at build time for static-site generation if you set `RUN402_SERVICE_KEY` and `RUN402_PROJECT_ID` in your `.env`:
@@ -434,7 +472,29 @@ try {
 
 (`PostgREST error (…)` is the prefix for the `QueryBuilder` path; `SQL error (…)` for `adminDb().sql()`.) Don't parse `message` — read `err.code` / `err.status` / `err.trace_id` / `err.remote_code`.
 
-Other helpers still throw `Error` whose message includes the HTTP status and the response body so you can branch on `code` / `category` / `retryable` (the v1.34+ agent-operable error envelope).
+### `Run402EventsPlatformError` — `events.emit()` failures
+
+`events.emit()` throws a structured `Run402EventsPlatformError` (also exported from the package) on any non-2xx gateway response. The gateway owns event-type grammar, platform-vocabulary reservation, and the per-organization daily quota — this error is a faithful passthrough of whatever canonical envelope the gateway returned, never a client-fabricated message.
+
+```ts
+import { events, Run402EventsPlatformError } from "@run402/functions";
+
+try {
+  await events.emit("signature_completed", { request_id });
+} catch (err) {
+  if (err instanceof Run402EventsPlatformError) {
+    err.code;    // "QUOTA_EXCEEDED" | "INVALID_EVENT_TYPE" | "RESERVED_EVENT_TYPE" | "FORBIDDEN" | ...
+    err.status;  // HTTP status, e.g. 403
+    err.details; // e.g. {resource: "events_per_day", scope: "organization", used: 1000, limit: 1000}
+    err.next_actions; // platform-synthesized drill-downs (e.g. renew_tier, check_usage)
+    err.body;    // full response body (parsed object, or raw string when unparseable)
+    if (err.code === "QUOTA_EXCEEDED") { /* … */ }
+  }
+  throw err;
+}
+```
+
+Other helpers still throw plain `Error` whose message includes the HTTP status and the response body so you can branch on `code` / `category` / `retryable` (the v1.34+ agent-operable error envelope).
 
 ## Engines
 

package/dist/events.d.ts

@@ -0,0 +1,132 @@
+/**
+ * `events` namespace — emit into the project's cursored event feed
+ * (capability `project-events-client-surface`, gateway change
+ * `app-events-emit-lane`).
+ *
+ * A `project_events` row is the platform's tier-1 fact log: deploys,
+ * suspensions, transfers — and, through this namespace, an app's OWN
+ * business facts too ("signature completed", "booking created"). Every
+ * existing and future feed consumer (CLI `run402 events`, MCP, the operator
+ * console) reads app events for free the moment code calls `events.emit`.
+ *
+ * ```ts
+ * import { events } from "@run402/functions";
+ *
+ * await events.emit("signature_completed", { request_id, signer }, {
+ *   idempotencyKey: `sig:${requestId}`,
+ * });
+ * ```
+ *
+ * **Vocabulary.** `type` MUST be flat snake_case matching
+ * `/^[a-z][a-z0-9_]{2,63}$/` — no dots, no `app_` prefix. Platform-registered
+ * type names (`deploy_activated`, `mailbox_suspended`, ...) are RESERVED: an
+ * app cannot impersonate a platform fact. The gateway owns this policy —
+ * grammar and the reservation list are validated SERVER-SIDE only. This SDK
+ * sends `type` verbatim; a bad grammar or a reserved name comes back as a
+ * `Run402EventsPlatformError` (400 `INVALID_EVENT_TYPE` /
+ * `RESERVED_EVENT_TYPE`) rather than being caught, rewritten, or dropped
+ * locally.
+ *
+ * **Idempotency.** Pass `idempotencyKey` on any code path that might run
+ * more than once for the same real-world fact (webhook retries,
+ * function-run retries, anything at-least-once). The gateway dedupes on
+ * `(project_id, idempotency_key)` FOREVER — this is a durable identity for
+ * the fact, not a short-lived retry-window token like an HTTP
+ * `Idempotency-Key` header. Reusing a key days or years later still replays
+ * the ORIGINAL stored event (`deduplicated: true`) instead of creating a
+ * new one.
+ *
+ * @see openspec/changes/app-events-emit-lane/design.md (Canonical Agent Contract)
+ */
+export interface EventEmitOptions {
+    /**
+     * Durable identity for this fact. The gateway dedupes on
+     * `(project_id, idempotency_key)` forever — reusing a key later still
+     * replays the original event rather than creating a new one. Recommended
+     * on every at-least-once code path (webhook handlers, function-run
+     * retries, anything that might re-execute for the same occurrence).
+     */
+    idempotencyKey?: string;
+}
+/** A `next_actions[]` entry — platform-synthesized drill-down. Shape is
+ *  intentionally loose; entries commonly carry `type` plus some subset of
+ *  `method` / `path` / `command` / `why`. Never app-supplied — see the
+ *  namespace doc comment. */
+export type EventNextAction = Record<string, unknown>;
+/**
+ * The stored event, returned by both a fresh emit (HTTP `201`) and an
+ * idempotent replay (HTTP `200`). Matches the shape the feed read routes
+ * (`GET /projects/v1/:project_id/events`) render, so `cursor` from this
+ * response can be handed straight to a feed consumer's `?cursor=` param.
+ */
+export interface EventEmitResult {
+    /** Opaque feed position (`evc_...`). Pass to a feed read's `?cursor=` to
+     *  resume just after this event. Never parse it. */
+    cursor: string;
+    event_type: string;
+    /** Always `"app"` for events emitted through this namespace. */
+    class: string;
+    /** Always `"app"` for events emitted through this namespace. */
+    source: string;
+    payload: Record<string, unknown>;
+    /** Present (and `true`) only when the payload exceeded the 8 KiB bound
+     *  and was truncated at write time; omitted otherwise. */
+    payload_truncated?: true;
+    occurred_at: string;
+    /** `true` when this call replayed a previously-stored event (same
+     *  `idempotency_key`) instead of writing a new row. */
+    deduplicated: boolean;
+    next_actions: EventNextAction[];
+    [key: string]: unknown;
+}
+/**
+ * Structured error thrown by `events.emit()` on a non-2xx gateway response.
+ * The gateway owns event-type grammar, platform-vocabulary reservation, and
+ * the per-organization daily quota — this SDK never re-implements or masks
+ * that policy locally; it surfaces exactly what the gateway decided.
+ *
+ * Common `code` values:
+ *   - `INVALID_EVENT_TYPE` (400) — `type` fails `/^[a-z][a-z0-9_]{2,63}$/`.
+ *   - `RESERVED_EVENT_TYPE` (400) — `type` names a platform-registered type.
+ *   - `QUOTA_EXCEEDED` (403) — the organization's daily app-event quota is
+ *     exhausted; `details` carries
+ *     `{ resource: "events_per_day", scope, used, limit }`.
+ *   - `FORBIDDEN` (403) — the service key does not belong to this project.
+ *
+ * Branch on `err.code` / `err.status` / `err.details`, not on `message`.
+ */
+export declare class Run402EventsPlatformError extends Error {
+    readonly code: string;
+    readonly status: number;
+    /** `details` from the canonical error envelope, when present (e.g. the
+     *  `{resource, scope, used, limit}` shape on a `QUOTA_EXCEEDED` denial). */
+    readonly details: Record<string, unknown> | undefined;
+    /** `next_actions` from the canonical error envelope, when present. */
+    readonly next_actions: unknown[] | undefined;
+    /** Full response body — parsed object, or the raw string when unparseable. */
+    readonly body: unknown;
+    constructor(status: number, body: unknown, message: string);
+}
+export declare const events: {
+    /**
+     * Emit a fact into this project's event feed.
+     *
+     * The gateway owns vocabulary validation (grammar + platform-name
+     * reservation), class stamping (`"app"`), namespacing, quota, and
+     * `next_actions` synthesis — this call is a dumb pipe. `type` and
+     * `payload` are sent exactly as given; a rejection surfaces as a thrown
+     * {@link Run402EventsPlatformError}, never a locally-fabricated error or a
+     * silently rewritten value.
+     *
+     * @param type - flat snake_case event type (`/^[a-z][a-z0-9_]{2,63}$/`),
+     *   validated and reservation-checked server-side only.
+     * @param payload - compact JSON fact (ids + verdict fields, never bodies
+     *   or secrets). Bounded to 8 KiB server-side; oversize payloads are
+     *   truncated (`payload_truncated: true` on the response) rather than
+     *   rejected.
+     * @param opts.idempotencyKey - durable dedup identity; see the namespace
+     *   doc comment. Strongly recommended on at-least-once code paths.
+     */
+    emit(type: string, payload?: Record<string, unknown>, opts?: EventEmitOptions): Promise<EventEmitResult>;
+};
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;6BAG6B;AAC7B,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;wDACoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;8DAC0D;IAC1D,iBAAiB,CAAC,EAAE,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB;2DACuD;IACvD,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;gFAC4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACtD,sEAAsE;IACtE,QAAQ,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IAC7C,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;CAS3D;AAgDD,eAAO,MAAM,MAAM;IACjB;;;;;;;;;;;;;;;;;;OAkBG;eAEK,MAAM,YACF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAC1B,gBAAgB,GACtB,OAAO,CAAC,eAAe,CAAC;CA0B5B,CAAC"}

package/dist/events.js

@@ -0,0 +1,165 @@
+/**
+ * `events` namespace — emit into the project's cursored event feed
+ * (capability `project-events-client-surface`, gateway change
+ * `app-events-emit-lane`).
+ *
+ * A `project_events` row is the platform's tier-1 fact log: deploys,
+ * suspensions, transfers — and, through this namespace, an app's OWN
+ * business facts too ("signature completed", "booking created"). Every
+ * existing and future feed consumer (CLI `run402 events`, MCP, the operator
+ * console) reads app events for free the moment code calls `events.emit`.
+ *
+ * ```ts
+ * import { events } from "@run402/functions";
+ *
+ * await events.emit("signature_completed", { request_id, signer }, {
+ *   idempotencyKey: `sig:${requestId}`,
+ * });
+ * ```
+ *
+ * **Vocabulary.** `type` MUST be flat snake_case matching
+ * `/^[a-z][a-z0-9_]{2,63}$/` — no dots, no `app_` prefix. Platform-registered
+ * type names (`deploy_activated`, `mailbox_suspended`, ...) are RESERVED: an
+ * app cannot impersonate a platform fact. The gateway owns this policy —
+ * grammar and the reservation list are validated SERVER-SIDE only. This SDK
+ * sends `type` verbatim; a bad grammar or a reserved name comes back as a
+ * `Run402EventsPlatformError` (400 `INVALID_EVENT_TYPE` /
+ * `RESERVED_EVENT_TYPE`) rather than being caught, rewritten, or dropped
+ * locally.
+ *
+ * **Idempotency.** Pass `idempotencyKey` on any code path that might run
+ * more than once for the same real-world fact (webhook retries,
+ * function-run retries, anything at-least-once). The gateway dedupes on
+ * `(project_id, idempotency_key)` FOREVER — this is a durable identity for
+ * the fact, not a short-lived retry-window token like an HTTP
+ * `Idempotency-Key` header. Reusing a key days or years later still replays
+ * the ORIGINAL stored event (`deduplicated: true`) instead of creating a
+ * new one.
+ *
+ * @see openspec/changes/app-events-emit-lane/design.md (Canonical Agent Contract)
+ */
+import { config } from "./config.js";
+/**
+ * Structured error thrown by `events.emit()` on a non-2xx gateway response.
+ * The gateway owns event-type grammar, platform-vocabulary reservation, and
+ * the per-organization daily quota — this SDK never re-implements or masks
+ * that policy locally; it surfaces exactly what the gateway decided.
+ *
+ * Common `code` values:
+ *   - `INVALID_EVENT_TYPE` (400) — `type` fails `/^[a-z][a-z0-9_]{2,63}$/`.
+ *   - `RESERVED_EVENT_TYPE` (400) — `type` names a platform-registered type.
+ *   - `QUOTA_EXCEEDED` (403) — the organization's daily app-event quota is
+ *     exhausted; `details` carries
+ *     `{ resource: "events_per_day", scope, used, limit }`.
+ *   - `FORBIDDEN` (403) — the service key does not belong to this project.
+ *
+ * Branch on `err.code` / `err.status` / `err.details`, not on `message`.
+ */
+export class Run402EventsPlatformError extends Error {
+    code;
+    status;
+    /** `details` from the canonical error envelope, when present (e.g. the
+     *  `{resource, scope, used, limit}` shape on a `QUOTA_EXCEEDED` denial). */
+    details;
+    /** `next_actions` from the canonical error envelope, when present. */
+    next_actions;
+    /** Full response body — parsed object, or the raw string when unparseable. */
+    body;
+    constructor(status, body, message) {
+        super(message);
+        this.name = "Run402EventsPlatformError";
+        this.status = status;
+        this.body = body;
+        this.code = platformCode(body);
+        this.details = platformDetails(body);
+        this.next_actions = platformNextActions(body);
+    }
+}
+function platformCode(body) {
+    if (body && typeof body === "object") {
+        const record = body;
+        const code = record.code ?? record.error;
+        if (typeof code === "string" && code.trim() !== "")
+            return code;
+    }
+    return "events_platform_error";
+}
+function platformMessage(body) {
+    if (body && typeof body === "object") {
+        const record = body;
+        const message = record.message ?? record.error;
+        if (typeof message === "string" && message.trim() !== "")
+            return message;
+    }
+    return "Run402 rejected the event.";
+}
+function platformDetails(body) {
+    if (body && typeof body === "object") {
+        const details = body.details;
+        if (details && typeof details === "object" && !Array.isArray(details)) {
+            return details;
+        }
+    }
+    return undefined;
+}
+function platformNextActions(body) {
+    if (body && typeof body === "object") {
+        const actions = body.next_actions;
+        if (Array.isArray(actions))
+            return actions;
+    }
+    return undefined;
+}
+async function readErrorBody(res) {
+    const text = await res.text();
+    if (!text)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return { message: text };
+    }
+}
+export const events = {
+    /**
+     * Emit a fact into this project's event feed.
+     *
+     * The gateway owns vocabulary validation (grammar + platform-name
+     * reservation), class stamping (`"app"`), namespacing, quota, and
+     * `next_actions` synthesis — this call is a dumb pipe. `type` and
+     * `payload` are sent exactly as given; a rejection surfaces as a thrown
+     * {@link Run402EventsPlatformError}, never a locally-fabricated error or a
+     * silently rewritten value.
+     *
+     * @param type - flat snake_case event type (`/^[a-z][a-z0-9_]{2,63}$/`),
+     *   validated and reservation-checked server-side only.
+     * @param payload - compact JSON fact (ids + verdict fields, never bodies
+     *   or secrets). Bounded to 8 KiB server-side; oversize payloads are
+     *   truncated (`payload_truncated: true` on the response) rather than
+     *   rejected.
+     * @param opts.idempotencyKey - durable dedup identity; see the namespace
+     *   doc comment. Strongly recommended on at-least-once code paths.
+     */
+    async emit(type, payload, opts) {
+        const body = { event_type: type };
+        if (payload !== undefined)
+            body.payload = payload;
+        if (opts?.idempotencyKey !== undefined)
+            body.idempotency_key = opts.idempotencyKey;
+        const res = await fetch(`${config.API_BASE}/projects/v1/${config.PROJECT_ID}/events`, {
+            method: "POST",
+            headers: {
+                Authorization: "Bearer " + config.SERVICE_KEY,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const errBody = await readErrorBody(res);
+            throw new Run402EventsPlatformError(res.status, errBody, `Event emit failed (${res.status}): ${platformMessage(errBody)}`);
+        }
+        return res.json();
+    },
+};
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA8CrC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,CAAS;IACb,MAAM,CAAS;IACxB;gFAC4E;IACnE,OAAO,CAAsC;IACtD,sEAAsE;IAC7D,YAAY,CAAwB;IAC7C,8EAA8E;IACrE,IAAI,CAAU;IAEvB,YAAY,MAAc,EAAE,IAAa,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC;QACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IAClE,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC;IAC3E,CAAC;IACD,OAAO,4BAA4B,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAI,IAAgC,CAAC,OAAO,CAAC;QAC1D,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO,OAAkC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAI,IAAgC,CAAC,YAAY,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAa;IACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,OAAiC,EACjC,IAAuB;QAEvB,MAAM,IAAI,GAA4B,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAClD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC;QAEnF,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,MAAM,CAAC,QAAQ,gBAAgB,MAAM,CAAC,UAAU,SAAS,EAC5D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,GAAG,MAAM,CAAC,WAAW;gBAC7C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CACF,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,IAAI,yBAAyB,CACjC,GAAG,CAAC,MAAM,EACV,OAAO,EACP,sBAAsB,GAAG,CAAC,MAAM,MAAM,eAAe,CAAC,OAAO,CAAC,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAA8B,CAAC;IAChD,CAAC;CACF,CAAC"}

package/dist/index.d.ts

@@ -26,4 +26,6 @@ export { CacheInvalidationHostRequiredError, CacheInvalidationHostForbiddenError
 export { als, getCurrentContext, runWithContext, requireActiveContext, taintCacheBypass, withPaymentTaint, PAYMENT_PRIMITIVES, Run402OutsideRequestContextError, } from "./runtime-context.js";
 export type { RunRequestContext } from "./runtime-context.js";
 export { ensureActorContextKeysLoaded } from "./lib/actor-context-verify.js";
+export { events, Run402EventsPlatformError } from "./events.js";
+export type { EventEmitOptions, EventEmitResult, EventNextAction } from "./events.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACjE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACxD,YAAY,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,YAAY,EACV,KAAK,EACL,UAAU,EACV,aAAa,EACb,UAAU,EACV,wCAAwC,EACxC,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3G,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAIrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMlG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,YAAY,EACV,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,eAAe,EACf,YAAY,EAEZ,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrG,YAAY,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EACV,KAAK,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAK9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACjE,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACxD,YAAY,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,YAAY,EACV,KAAK,EACL,UAAU,EACV,aAAa,EACb,UAAU,EACV,wCAAwC,EACxC,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAMzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC3G,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAIrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMlG,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjE,YAAY,EACV,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,eAAe,EACf,YAAY,EAEZ,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrG,YAAY,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EACV,KAAK,EACL,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAKpB,OAAO,EACL,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAK9D,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAK7E,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -44,4 +44,9 @@ export { als, getCurrentContext, runWithContext, requireActiveContext, taintCach
 // actor-context verify key once at cold start (the key is never in the
 // tenant Lambda env). No-op in local dev / in-process gateway (key in env).
 export { ensureActorContextKeysLoaded } from "./lib/actor-context-verify.js";
+// `events.emit(type, payload?, opts?)` — emit a fact into this project's
+// cursored event feed (gateway change `app-events-emit-lane`). Service-key
+// context inside deployed functions; the gateway owns vocabulary/quota
+// policy, this namespace is a dumb pipe plus idempotency-key ergonomics.
+export { events, Run402EventsPlatformError } from "./events.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGxD,qEAAqE;AACrE,4EAA4E;AAC5E,iEAAiE;AACjE,+DAA+D;AAC/D,yEAAyE;AACzE,wEAAwE;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAWvC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAS7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,qEAAqE;AACrE,yEAAyE;AACzE,8BAA8B;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,2EAA2E;AAC3E,2DAA2D;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAiBxD,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AASrG,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAkB5B,0CAA0C;AAC1C,mEAAmE;AACnE,2DAA2D;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAOnC,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,YAAY,CAAC;AACpB,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,iDAAiD;AACjD,OAAO,EACL,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,6EAA6E;AAC7E,uEAAuE;AACvE,uEAAuE;AACvE,4EAA4E;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEjE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGxD,qEAAqE;AACrE,4EAA4E;AAC5E,iEAAiE;AACjE,+DAA+D;AAC/D,yEAAyE;AACzE,wEAAwE;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAWvC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAS7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,qEAAqE;AACrE,yEAAyE;AACzE,8BAA8B;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,2EAA2E;AAC3E,2DAA2D;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAiBxD,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AASrG,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAkB5B,0CAA0C;AAC1C,mEAAmE;AACnE,2DAA2D;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAOnC,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,YAAY,CAAC;AACpB,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,iDAAiD;AACjD,OAAO,EACL,GAAG,EACH,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,6EAA6E;AAC7E,uEAAuE;AACvE,uEAAuE;AACvE,4EAA4E;AAC5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,OAAO,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@run402/functions",
-  "version": "3.8.0",
+  "version": "3.9.0",
   "description": "In-function helper library for Run402 serverless functions - db, adminDb, getUser, email, ai, assets, verifyWebhook. Auto-bundled into deployed functions; also installable for local TypeScript autocomplete.",
   "type": "module",
   "main": "dist/index.js",