@secondlayer/shared 0.7.0 → 0.7.1

package/dist/src/db/index.d.ts

@@ -52,7 +52,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -111,7 +111,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -151,6 +151,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/db/index.js

@@ -42,7 +42,9 @@ function getDb(connectionString) {
   if (!db) {
     const url = connectionString || process.env.DATABASE_URL || "postgres://postgres:postgres@localhost:5432/streams_dev";
     const isLocal = url.includes("localhost") || url.includes("127.0.0.1") || url.includes("@postgres:");
+    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? "20", 10);
     rawClient = postgres(url, {
+      max: poolMax,
       ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== "0" }
     });
     db = new Kysely({
@@ -75,5 +77,5 @@ export {
   closeDb
 };
 
-//# debugId=0350F4EABDF4D64C64756E2164756E21
+//# debugId=EDB0A373449368CA64756E2164756E21
 //# sourceMappingURL=index.js.map

package/dist/src/db/index.js.map

@@ -3,9 +3,9 @@
   "sources": ["../src/db/jsonb.ts", "../src/db/index.ts"],
   "sourcesContent": [
     "import { sql, type RawBuilder } from \"kysely\";\n\n/**\n * Safely encode a JS value as a JSONB literal for Kysely inserts/updates.\n * Kysely + postgres.js double-encodes JSON when using parameterized queries\n * with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.\n */\nexport function jsonb(value: unknown): RawBuilder<unknown> {\n  const escaped = JSON.stringify(value).replace(/'/g, \"''\");\n  return sql`${sql.raw(`'${escaped}'::jsonb`)}`;\n}\n\n/**\n * Safely parse a JSONB value from the database.\n * Handles double-encoded strings where postgres.js returns a JSON string\n * instead of a parsed object.\n */\nexport function parseJsonb<T = unknown>(value: unknown): T {\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return value as T;\n    }\n  }\n  return (value ?? {}) as T;\n}\n",
-    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    rawClient = postgres(url, {\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n"
+    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? \"20\", 10);\n    rawClient = postgres(url, {\n      max: poolMax,\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AAwCA,gBAAS;AArCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;",
-  "debugId": "0350F4EABDF4D64C64756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AA0CA,gBAAS;AAvCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,MAAM,UAAU,SAAS,QAAQ,IAAI,qBAAqB,MAAM,EAAE;AAAA,IAClE,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK;AAAA,MACL,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;",
+  "debugId": "EDB0A373449368CA64756E2164756E21",
   "names": []
 }

package/dist/src/db/queries/accounts.d.ts

@@ -38,7 +38,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -97,7 +97,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -137,6 +137,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {
@@ -246,7 +247,7 @@ declare function isEmailAllowed(db: Kysely<Database>, email: string): Promise<bo
 declare function createMagicLink(db: Kysely<Database>, email: string, token: string, expiresInMs?: number): Promise<void>;
 /**
 * Verify a magic link token. Returns the email if valid, null otherwise.
-* Marks the token as used atomically.
+* Marks the token as used atomically. Rejects after 5 failed attempts.
 */
 declare function verifyMagicLink(db: Kysely<Database>, token: string): Promise<string | null>;
 export { verifyMagicLink, upsertAccount, isEmailAllowed, getAccountById, createMagicLink };

package/dist/src/db/queries/accounts.js

@@ -39,8 +39,11 @@ async function createMagicLink(db, email, token, expiresInMs = 15 * 60 * 1000) {
   }).execute();
 }
 async function verifyMagicLink(db, token) {
-  const result = await db.updateTable("magic_links").set({ used_at: new Date }).where("token", "=", token).where("used_at", "is", null).where("expires_at", ">", new Date).returning("email").executeTakeFirst();
-  return result?.email ?? null;
+  const result = await db.updateTable("magic_links").set({ used_at: new Date }).where("token", "=", token).where("used_at", "is", null).where("expires_at", ">", new Date).where("failed_attempts", "<", 5).returning("email").executeTakeFirst();
+  if (result?.email)
+    return result.email;
+  await db.updateTable("magic_links").set({ failed_attempts: sql`failed_attempts + 1` }).where("token", "=", token).where("used_at", "is", null).where("expires_at", ">", new Date).execute();
+  return null;
 }
 export {
   verifyMagicLink,
@@ -50,5 +53,5 @@ export {
   createMagicLink
 };
 
-//# debugId=F1197D197EF2B0A364756E2164756E21
+//# debugId=20A55F621EB14D5064756E2164756E21
 //# sourceMappingURL=accounts.js.map

package/dist/src/db/queries/accounts.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/db/queries/accounts.ts"],
   "sourcesContent": [
-    "import { sql, type Kysely } from \"kysely\";\nimport type { Database, Account } from \"../types.ts\";\n\nexport async function upsertAccount(\n  db: Kysely<Database>,\n  email: string,\n): Promise<Account> {\n  return await db\n    .insertInto(\"accounts\")\n    .values({ email })\n    .onConflict((oc) =>\n      oc.column(\"email\").doUpdateSet({ email }), // no-op update to return existing\n    )\n    .returningAll()\n    .executeTakeFirstOrThrow();\n}\n\nexport async function getAccountById(\n  db: Kysely<Database>,\n  id: string,\n): Promise<Account | null> {\n  return (\n    (await db\n      .selectFrom(\"accounts\")\n      .selectAll()\n      .where(\"id\", \"=\", id)\n      .executeTakeFirst()) ?? null\n  );\n}\n\nexport async function isEmailAllowed(\n  db: Kysely<Database>,\n  email: string,\n): Promise<boolean> {\n  const result = await sql<{ found: number }>`\n    SELECT 1 AS found FROM accounts WHERE email = ${email}\n    UNION ALL\n    SELECT 1 AS found FROM waitlist WHERE email = ${email} AND status = 'approved'\n    LIMIT 1\n  `.execute(db);\n\n  return result.rows.length > 0;\n}\n\nexport async function createMagicLink(\n  db: Kysely<Database>,\n  email: string,\n  token: string,\n  expiresInMs: number = 15 * 60 * 1000,\n): Promise<void> {\n  await db\n    .insertInto(\"magic_links\")\n    .values({\n      email,\n      token,\n      expires_at: new Date(Date.now() + expiresInMs),\n    })\n    .execute();\n}\n\n/**\n * Verify a magic link token. Returns the email if valid, null otherwise.\n * Marks the token as used atomically.\n */\nexport async function verifyMagicLink(\n  db: Kysely<Database>,\n  token: string,\n): Promise<string | null> {\n  const result = await db\n    .updateTable(\"magic_links\")\n    .set({ used_at: new Date() })\n    .where(\"token\", \"=\", token)\n    .where(\"used_at\", \"is\", null)\n    .where(\"expires_at\", \">\", new Date())\n    .returning(\"email\")\n    .executeTakeFirst();\n\n  return result?.email ?? null;\n}\n"
+    "import { sql, type Kysely } from \"kysely\";\nimport type { Database, Account } from \"../types.ts\";\n\nexport async function upsertAccount(\n  db: Kysely<Database>,\n  email: string,\n): Promise<Account> {\n  return await db\n    .insertInto(\"accounts\")\n    .values({ email })\n    .onConflict((oc) =>\n      oc.column(\"email\").doUpdateSet({ email }), // no-op update to return existing\n    )\n    .returningAll()\n    .executeTakeFirstOrThrow();\n}\n\nexport async function getAccountById(\n  db: Kysely<Database>,\n  id: string,\n): Promise<Account | null> {\n  return (\n    (await db\n      .selectFrom(\"accounts\")\n      .selectAll()\n      .where(\"id\", \"=\", id)\n      .executeTakeFirst()) ?? null\n  );\n}\n\nexport async function isEmailAllowed(\n  db: Kysely<Database>,\n  email: string,\n): Promise<boolean> {\n  const result = await sql<{ found: number }>`\n    SELECT 1 AS found FROM accounts WHERE email = ${email}\n    UNION ALL\n    SELECT 1 AS found FROM waitlist WHERE email = ${email} AND status = 'approved'\n    LIMIT 1\n  `.execute(db);\n\n  return result.rows.length > 0;\n}\n\nexport async function createMagicLink(\n  db: Kysely<Database>,\n  email: string,\n  token: string,\n  expiresInMs: number = 15 * 60 * 1000,\n): Promise<void> {\n  await db\n    .insertInto(\"magic_links\")\n    .values({\n      email,\n      token,\n      expires_at: new Date(Date.now() + expiresInMs),\n    })\n    .execute();\n}\n\n/**\n * Verify a magic link token. Returns the email if valid, null otherwise.\n * Marks the token as used atomically. Rejects after 5 failed attempts.\n */\nexport async function verifyMagicLink(\n  db: Kysely<Database>,\n  token: string,\n): Promise<string | null> {\n  const result = await db\n    .updateTable(\"magic_links\")\n    .set({ used_at: new Date() })\n    .where(\"token\", \"=\", token)\n    .where(\"used_at\", \"is\", null)\n    .where(\"expires_at\", \">\", new Date())\n    .where(\"failed_attempts\", \"<\", 5)\n    .returning(\"email\")\n    .executeTakeFirst();\n\n  if (result?.email) return result.email;\n\n  // Increment failed attempts if token exists but didn't verify\n  await db\n    .updateTable(\"magic_links\")\n    .set({ failed_attempts: sql`failed_attempts + 1` })\n    .where(\"token\", \"=\", token)\n    .where(\"used_at\", \"is\", null)\n    .where(\"expires_at\", \">\", new Date())\n    .execute();\n\n  return null;\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAGA,eAAsB,aAAa,CACjC,IACA,OACkB;AAAA,EAClB,OAAO,MAAM,GACV,WAAW,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,EAChB,WAAW,CAAC,OACX,GAAG,OAAO,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAC1C,EACC,aAAa,EACb,wBAAwB;AAAA;AAG7B,eAAsB,cAAc,CAClC,IACA,IACyB;AAAA,EACzB,OACG,MAAM,GACJ,WAAW,UAAU,EACrB,UAAU,EACV,MAAM,MAAM,KAAK,EAAE,EACnB,iBAAiB,KAAM;AAAA;AAI9B,eAAsB,cAAc,CAClC,IACA,OACkB;AAAA,EAClB,MAAM,SAAS,MAAM;AAAA,oDAC6B;AAAA;AAAA,oDAEA;AAAA;AAAA,IAEhD,QAAQ,EAAE;AAAA,EAEZ,OAAO,OAAO,KAAK,SAAS;AAAA;AAG9B,eAAsB,eAAe,CACnC,IACA,OACA,OACA,cAAsB,KAAK,KAAK,MACjB;AAAA,EACf,MAAM,GACH,WAAW,aAAa,EACxB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW;AAAA,EAC/C,CAAC,EACA,QAAQ;AAAA;AAOb,eAAsB,eAAe,CACnC,IACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,GAClB,YAAY,aAAa,EACzB,IAAI,EAAE,SAAS,IAAI,KAAO,CAAC,EAC3B,MAAM,SAAS,KAAK,KAAK,EACzB,MAAM,WAAW,MAAM,IAAI,EAC3B,MAAM,cAAc,KAAK,IAAI,IAAM,EACnC,UAAU,OAAO,EACjB,iBAAiB;AAAA,EAEpB,OAAO,QAAQ,SAAS;AAAA;",
-  "debugId": "F1197D197EF2B0A364756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAGA,eAAsB,aAAa,CACjC,IACA,OACkB;AAAA,EAClB,OAAO,MAAM,GACV,WAAW,UAAU,EACrB,OAAO,EAAE,MAAM,CAAC,EAChB,WAAW,CAAC,OACX,GAAG,OAAO,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAC1C,EACC,aAAa,EACb,wBAAwB;AAAA;AAG7B,eAAsB,cAAc,CAClC,IACA,IACyB;AAAA,EACzB,OACG,MAAM,GACJ,WAAW,UAAU,EACrB,UAAU,EACV,MAAM,MAAM,KAAK,EAAE,EACnB,iBAAiB,KAAM;AAAA;AAI9B,eAAsB,cAAc,CAClC,IACA,OACkB;AAAA,EAClB,MAAM,SAAS,MAAM;AAAA,oDAC6B;AAAA;AAAA,oDAEA;AAAA;AAAA,IAEhD,QAAQ,EAAE;AAAA,EAEZ,OAAO,OAAO,KAAK,SAAS;AAAA;AAG9B,eAAsB,eAAe,CACnC,IACA,OACA,OACA,cAAsB,KAAK,KAAK,MACjB;AAAA,EACf,MAAM,GACH,WAAW,aAAa,EACxB,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW;AAAA,EAC/C,CAAC,EACA,QAAQ;AAAA;AAOb,eAAsB,eAAe,CACnC,IACA,OACwB;AAAA,EACxB,MAAM,SAAS,MAAM,GAClB,YAAY,aAAa,EACzB,IAAI,EAAE,SAAS,IAAI,KAAO,CAAC,EAC3B,MAAM,SAAS,KAAK,KAAK,EACzB,MAAM,WAAW,MAAM,IAAI,EAC3B,MAAM,cAAc,KAAK,IAAI,IAAM,EACnC,MAAM,mBAAmB,KAAK,CAAC,EAC/B,UAAU,OAAO,EACjB,iBAAiB;AAAA,EAEpB,IAAI,QAAQ;AAAA,IAAO,OAAO,OAAO;AAAA,EAGjC,MAAM,GACH,YAAY,aAAa,EACzB,IAAI,EAAE,iBAAiB,yBAAyB,CAAC,EACjD,MAAM,SAAS,KAAK,KAAK,EACzB,MAAM,WAAW,MAAM,IAAI,EAC3B,MAAM,cAAc,KAAK,IAAI,IAAM,EACnC,QAAQ;AAAA,EAEX,OAAO;AAAA;",
+  "debugId": "20A55F621EB14D5064756E2164756E21",
   "names": []
 }

package/dist/src/db/queries/integrity.d.ts

@@ -38,7 +38,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -97,7 +97,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -137,6 +137,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/db/queries/metrics.d.ts

@@ -38,7 +38,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -97,7 +97,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -137,6 +137,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/db/queries/subgraphs.d.ts

@@ -38,7 +38,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -97,7 +97,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -137,6 +137,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/db/queries/subgraphs.js

@@ -48,7 +48,7 @@ async function registerSubgraph(db, data) {
     definition: jsonb(data.definition),
     schema_hash: data.schemaHash,
     handler_path: data.handlerPath,
-    api_key_id: data.apiKeyId ?? null,
+    api_key_id: data.apiKeyId,
     schema_name: data.schemaName ?? null
   }).onConflict((oc) => oc.columns(["name", "api_key_id"]).doUpdateSet({
     version: data.version,
@@ -111,5 +111,5 @@ export {
   deleteSubgraph
 };
 
-//# debugId=A3A252C7C09E8C5564756E2164756E21
+//# debugId=CA1F8ED652ED1B5C64756E2164756E21
 //# sourceMappingURL=subgraphs.js.map

package/dist/src/db/queries/subgraphs.js.map

@@ -3,9 +3,9 @@
   "sources": ["../src/db/jsonb.ts", "../src/db/queries/subgraphs.ts"],
   "sourcesContent": [
     "import { sql, type RawBuilder } from \"kysely\";\n\n/**\n * Safely encode a JS value as a JSONB literal for Kysely inserts/updates.\n * Kysely + postgres.js double-encodes JSON when using parameterized queries\n * with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.\n */\nexport function jsonb(value: unknown): RawBuilder<unknown> {\n  const escaped = JSON.stringify(value).replace(/'/g, \"''\");\n  return sql`${sql.raw(`'${escaped}'::jsonb`)}`;\n}\n\n/**\n * Safely parse a JSONB value from the database.\n * Handles double-encoded strings where postgres.js returns a JSON string\n * instead of a parsed object.\n */\nexport function parseJsonb<T = unknown>(value: unknown): T {\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return value as T;\n    }\n  }\n  return (value ?? {}) as T;\n}\n",
-    "import { sql, type Kysely } from \"kysely\";\nimport { jsonb } from \"../jsonb.ts\";\nimport type { Database, Subgraph } from \"../types.ts\";\n\n/**\n * Convert a subgraph name to its PostgreSQL schema name.\n * With keyPrefix: \"subgraph_{prefix}_{name}\" (tenant-isolated)\n * Without keyPrefix: \"subgraph_{name}\" (backward compat)\n */\nexport function pgSchemaName(subgraphName: string, keyPrefix?: string): string {\n  const safeName = subgraphName.replace(/-/g, \"_\");\n  if (!keyPrefix) {\n    return `subgraph_${safeName}`;\n  }\n  const safePrefix = keyPrefix.replace(/^sk-sl_/, \"\").replace(/-/g, \"_\");\n  return `subgraph_${safePrefix}_${safeName}`;\n}\n\nexport async function registerSubgraph(\n  db: Kysely<Database>,\n  data: {\n    name: string;\n    version: string;\n    definition: Record<string, unknown>;\n    schemaHash: string;\n    handlerPath: string;\n    apiKeyId?: string;\n    schemaName?: string;\n  },\n): Promise<Subgraph> {\n  return await db\n    .insertInto(\"subgraphs\")\n    .values({\n      name: data.name,\n      version: data.version,\n      definition: jsonb(data.definition) as any,\n      schema_hash: data.schemaHash,\n      handler_path: data.handlerPath,\n      api_key_id: data.apiKeyId ?? null,\n      schema_name: data.schemaName ?? null,\n    })\n    .onConflict((oc) =>\n      oc.columns([\"name\", \"api_key_id\"]).doUpdateSet({\n        version: data.version,\n        definition: jsonb(data.definition) as any,\n        schema_hash: data.schemaHash,\n        handler_path: data.handlerPath,\n        schema_name: data.schemaName ?? null,\n        updated_at: new Date(),\n      }),\n    )\n    .returningAll()\n    .executeTakeFirstOrThrow();\n}\n\nexport async function getSubgraph(db: Kysely<Database>, name: string, apiKeyId?: string): Promise<Subgraph | null> {\n  let query = db\n    .selectFrom(\"subgraphs\")\n    .selectAll()\n    .where(\"name\", \"=\", name);\n\n  if (apiKeyId) {\n    query = query.where(\"api_key_id\", \"=\", apiKeyId);\n  }\n\n  return (await query.executeTakeFirst()) ?? null;\n}\n\nexport async function listSubgraphs(db: Kysely<Database>, apiKeyId?: string): Promise<Subgraph[]> {\n  let query = db.selectFrom(\"subgraphs\").selectAll();\n  if (apiKeyId) {\n    query = query.where(\"api_key_id\", \"=\", apiKeyId);\n  }\n  return query.execute();\n}\n\nexport async function updateSubgraphStatus(\n  db: Kysely<Database>,\n  name: string,\n  status: string,\n  lastProcessedBlock?: number,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({\n      status,\n      ...(lastProcessedBlock !== undefined ? { last_processed_block: lastProcessedBlock } : {}),\n      updated_at: new Date(),\n    })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function recordSubgraphProcessed(\n  db: Kysely<Database>,\n  name: string,\n  processed: number,\n  errors: number,\n  lastError?: string,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({\n      total_processed: sql`total_processed + ${processed}`,\n      total_errors: sql`total_errors + ${errors}`,\n      ...(lastError\n        ? { last_error: lastError, last_error_at: new Date() }\n        : {}),\n      updated_at: new Date(),\n    })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function updateSubgraphHandlerPath(\n  db: Kysely<Database>,\n  name: string,\n  handlerPath: string,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({ handler_path: handlerPath, updated_at: new Date() })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function deleteSubgraph(db: Kysely<Database>, name: string, apiKeyId?: string): Promise<Subgraph | null> {\n  const subgraph = await getSubgraph(db, name, apiKeyId);\n  if (!subgraph) return null;\n\n  // Use stored schema_name if available, otherwise compute\n  const schemaName = subgraph.schema_name ?? pgSchemaName(name);\n\n  // Drop the subgraph's schema (CASCADE drops all tables within)\n  await sql`DROP SCHEMA IF EXISTS ${sql.raw(`\"${schemaName}\"`)} CASCADE`.execute(db);\n\n  // Remove from registry\n  await db.deleteFrom(\"subgraphs\").where(\"id\", \"=\", subgraph.id).execute();\n\n  return subgraph;\n}\n"
+    "import { sql, type Kysely } from \"kysely\";\nimport { jsonb } from \"../jsonb.ts\";\nimport type { Database, Subgraph } from \"../types.ts\";\n\n/**\n * Convert a subgraph name to its PostgreSQL schema name.\n * With keyPrefix: \"subgraph_{prefix}_{name}\" (tenant-isolated)\n * Without keyPrefix: \"subgraph_{name}\" (backward compat)\n */\nexport function pgSchemaName(subgraphName: string, keyPrefix?: string): string {\n  const safeName = subgraphName.replace(/-/g, \"_\");\n  if (!keyPrefix) {\n    return `subgraph_${safeName}`;\n  }\n  const safePrefix = keyPrefix.replace(/^sk-sl_/, \"\").replace(/-/g, \"_\");\n  return `subgraph_${safePrefix}_${safeName}`;\n}\n\nexport async function registerSubgraph(\n  db: Kysely<Database>,\n  data: {\n    name: string;\n    version: string;\n    definition: Record<string, unknown>;\n    schemaHash: string;\n    handlerPath: string;\n    apiKeyId?: string;\n    schemaName?: string;\n  },\n): Promise<Subgraph> {\n  return await db\n    .insertInto(\"subgraphs\")\n    .values({\n      name: data.name,\n      version: data.version,\n      definition: jsonb(data.definition) as any,\n      schema_hash: data.schemaHash,\n      handler_path: data.handlerPath,\n      api_key_id: data.apiKeyId!,\n      schema_name: data.schemaName ?? null,\n    })\n    .onConflict((oc) =>\n      oc.columns([\"name\", \"api_key_id\"]).doUpdateSet({\n        version: data.version,\n        definition: jsonb(data.definition) as any,\n        schema_hash: data.schemaHash,\n        handler_path: data.handlerPath,\n        schema_name: data.schemaName ?? null,\n        updated_at: new Date(),\n      }),\n    )\n    .returningAll()\n    .executeTakeFirstOrThrow();\n}\n\nexport async function getSubgraph(db: Kysely<Database>, name: string, apiKeyId?: string): Promise<Subgraph | null> {\n  let query = db\n    .selectFrom(\"subgraphs\")\n    .selectAll()\n    .where(\"name\", \"=\", name);\n\n  if (apiKeyId) {\n    query = query.where(\"api_key_id\", \"=\", apiKeyId);\n  }\n\n  return (await query.executeTakeFirst()) ?? null;\n}\n\nexport async function listSubgraphs(db: Kysely<Database>, apiKeyId?: string): Promise<Subgraph[]> {\n  let query = db.selectFrom(\"subgraphs\").selectAll();\n  if (apiKeyId) {\n    query = query.where(\"api_key_id\", \"=\", apiKeyId);\n  }\n  return query.execute();\n}\n\nexport async function updateSubgraphStatus(\n  db: Kysely<Database>,\n  name: string,\n  status: string,\n  lastProcessedBlock?: number,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({\n      status,\n      ...(lastProcessedBlock !== undefined ? { last_processed_block: lastProcessedBlock } : {}),\n      updated_at: new Date(),\n    })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function recordSubgraphProcessed(\n  db: Kysely<Database>,\n  name: string,\n  processed: number,\n  errors: number,\n  lastError?: string,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({\n      total_processed: sql`total_processed + ${processed}`,\n      total_errors: sql`total_errors + ${errors}`,\n      ...(lastError\n        ? { last_error: lastError, last_error_at: new Date() }\n        : {}),\n      updated_at: new Date(),\n    })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function updateSubgraphHandlerPath(\n  db: Kysely<Database>,\n  name: string,\n  handlerPath: string,\n): Promise<void> {\n  await db\n    .updateTable(\"subgraphs\")\n    .set({ handler_path: handlerPath, updated_at: new Date() })\n    .where(\"name\", \"=\", name)\n    .execute();\n}\n\nexport async function deleteSubgraph(db: Kysely<Database>, name: string, apiKeyId?: string): Promise<Subgraph | null> {\n  const subgraph = await getSubgraph(db, name, apiKeyId);\n  if (!subgraph) return null;\n\n  // Use stored schema_name if available, otherwise compute\n  const schemaName = subgraph.schema_name ?? pgSchemaName(name);\n\n  // Drop the subgraph's schema (CASCADE drops all tables within)\n  await sql`DROP SCHEMA IF EXISTS ${sql.raw(`\"${schemaName}\"`)} CASCADE`.execute(db);\n\n  // Remove from registry\n  await db.deleteFrom(\"subgraphs\").where(\"id\", \"=\", subgraph.id).execute();\n\n  return subgraph;\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB,gBAAS;AASF,SAAS,YAAY,CAAC,cAAsB,WAA4B;AAAA,EAC7E,MAAM,WAAW,aAAa,QAAQ,MAAM,GAAG;AAAA,EAC/C,IAAI,CAAC,WAAW;AAAA,IACd,OAAO,YAAY;AAAA,EACrB;AAAA,EACA,MAAM,aAAa,UAAU,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,GAAG;AAAA,EACrE,OAAO,YAAY,cAAc;AAAA;AAGnC,eAAsB,gBAAgB,CACpC,IACA,MASmB;AAAA,EACnB,OAAO,MAAM,GACV,WAAW,WAAW,EACtB,OAAO;AAAA,IACN,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,IACd,YAAY,MAAM,KAAK,UAAU;AAAA,IACjC,aAAa,KAAK;AAAA,IAClB,cAAc,KAAK;AAAA,IACnB,YAAY,KAAK,YAAY;AAAA,IAC7B,aAAa,KAAK,cAAc;AAAA,EAClC,CAAC,EACA,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,QAAQ,YAAY,CAAC,EAAE,YAAY;AAAA,IAC7C,SAAS,KAAK;AAAA,IACd,YAAY,MAAM,KAAK,UAAU;AAAA,IACjC,aAAa,KAAK;AAAA,IAClB,cAAc,KAAK;AAAA,IACnB,aAAa,KAAK,cAAc;AAAA,IAChC,YAAY,IAAI;AAAA,EAClB,CAAC,CACH,EACC,aAAa,EACb,wBAAwB;AAAA;AAG7B,eAAsB,WAAW,CAAC,IAAsB,MAAc,UAA6C;AAAA,EACjH,IAAI,QAAQ,GACT,WAAW,WAAW,EACtB,UAAU,EACV,MAAM,QAAQ,KAAK,IAAI;AAAA,EAE1B,IAAI,UAAU;AAAA,IACZ,QAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ;AAAA,EACjD;AAAA,EAEA,OAAQ,MAAM,MAAM,iBAAiB,KAAM;AAAA;AAG7C,eAAsB,aAAa,CAAC,IAAsB,UAAwC;AAAA,EAChG,IAAI,QAAQ,GAAG,WAAW,WAAW,EAAE,UAAU;AAAA,EACjD,IAAI,UAAU;AAAA,IACZ,QAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ;AAAA,EACjD;AAAA,EACA,OAAO,MAAM,QAAQ;AAAA;AAGvB,eAAsB,oBAAoB,CACxC,IACA,MACA,QACA,oBACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI;AAAA,IACH;AAAA,OACI,uBAAuB,YAAY,EAAE,sBAAsB,mBAAmB,IAAI,CAAC;AAAA,IACvF,YAAY,IAAI;AAAA,EAClB,CAAC,EACA,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,uBAAuB,CAC3C,IACA,MACA,WACA,QACA,WACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI;AAAA,IACH,iBAAiB,yBAAwB;AAAA,IACzC,cAAc,sBAAqB;AAAA,OAC/B,YACA,EAAE,YAAY,WAAW,eAAe,IAAI,KAAO,IACnD,CAAC;AAAA,IACL,YAAY,IAAI;AAAA,EAClB,CAAC,EACA,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,yBAAyB,CAC7C,IACA,MACA,aACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI,EAAE,cAAc,aAAa,YAAY,IAAI,KAAO,CAAC,EACzD,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,cAAc,CAAC,IAAsB,MAAc,UAA6C;AAAA,EACpH,MAAM,WAAW,MAAM,YAAY,IAAI,MAAM,QAAQ;AAAA,EACrD,IAAI,CAAC;AAAA,IAAU,OAAO;AAAA,EAGtB,MAAM,aAAa,SAAS,eAAe,aAAa,IAAI;AAAA,EAG5D,MAAM,6BAA4B,KAAI,IAAI,IAAI,aAAa,YAAY,QAAQ,EAAE;AAAA,EAGjF,MAAM,GAAG,WAAW,WAAW,EAAE,MAAM,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ;AAAA,EAEvE,OAAO;AAAA;",
-  "debugId": "A3A252C7C09E8C5564756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB,gBAAS;AASF,SAAS,YAAY,CAAC,cAAsB,WAA4B;AAAA,EAC7E,MAAM,WAAW,aAAa,QAAQ,MAAM,GAAG;AAAA,EAC/C,IAAI,CAAC,WAAW;AAAA,IACd,OAAO,YAAY;AAAA,EACrB;AAAA,EACA,MAAM,aAAa,UAAU,QAAQ,WAAW,EAAE,EAAE,QAAQ,MAAM,GAAG;AAAA,EACrE,OAAO,YAAY,cAAc;AAAA;AAGnC,eAAsB,gBAAgB,CACpC,IACA,MASmB;AAAA,EACnB,OAAO,MAAM,GACV,WAAW,WAAW,EACtB,OAAO;AAAA,IACN,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,IACd,YAAY,MAAM,KAAK,UAAU;AAAA,IACjC,aAAa,KAAK;AAAA,IAClB,cAAc,KAAK;AAAA,IACnB,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK,cAAc;AAAA,EAClC,CAAC,EACA,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,QAAQ,YAAY,CAAC,EAAE,YAAY;AAAA,IAC7C,SAAS,KAAK;AAAA,IACd,YAAY,MAAM,KAAK,UAAU;AAAA,IACjC,aAAa,KAAK;AAAA,IAClB,cAAc,KAAK;AAAA,IACnB,aAAa,KAAK,cAAc;AAAA,IAChC,YAAY,IAAI;AAAA,EAClB,CAAC,CACH,EACC,aAAa,EACb,wBAAwB;AAAA;AAG7B,eAAsB,WAAW,CAAC,IAAsB,MAAc,UAA6C;AAAA,EACjH,IAAI,QAAQ,GACT,WAAW,WAAW,EACtB,UAAU,EACV,MAAM,QAAQ,KAAK,IAAI;AAAA,EAE1B,IAAI,UAAU;AAAA,IACZ,QAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ;AAAA,EACjD;AAAA,EAEA,OAAQ,MAAM,MAAM,iBAAiB,KAAM;AAAA;AAG7C,eAAsB,aAAa,CAAC,IAAsB,UAAwC;AAAA,EAChG,IAAI,QAAQ,GAAG,WAAW,WAAW,EAAE,UAAU;AAAA,EACjD,IAAI,UAAU;AAAA,IACZ,QAAQ,MAAM,MAAM,cAAc,KAAK,QAAQ;AAAA,EACjD;AAAA,EACA,OAAO,MAAM,QAAQ;AAAA;AAGvB,eAAsB,oBAAoB,CACxC,IACA,MACA,QACA,oBACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI;AAAA,IACH;AAAA,OACI,uBAAuB,YAAY,EAAE,sBAAsB,mBAAmB,IAAI,CAAC;AAAA,IACvF,YAAY,IAAI;AAAA,EAClB,CAAC,EACA,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,uBAAuB,CAC3C,IACA,MACA,WACA,QACA,WACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI;AAAA,IACH,iBAAiB,yBAAwB;AAAA,IACzC,cAAc,sBAAqB;AAAA,OAC/B,YACA,EAAE,YAAY,WAAW,eAAe,IAAI,KAAO,IACnD,CAAC;AAAA,IACL,YAAY,IAAI;AAAA,EAClB,CAAC,EACA,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,yBAAyB,CAC7C,IACA,MACA,aACe;AAAA,EACf,MAAM,GACH,YAAY,WAAW,EACvB,IAAI,EAAE,cAAc,aAAa,YAAY,IAAI,KAAO,CAAC,EACzD,MAAM,QAAQ,KAAK,IAAI,EACvB,QAAQ;AAAA;AAGb,eAAsB,cAAc,CAAC,IAAsB,MAAc,UAA6C;AAAA,EACpH,MAAM,WAAW,MAAM,YAAY,IAAI,MAAM,QAAQ;AAAA,EACrD,IAAI,CAAC;AAAA,IAAU,OAAO;AAAA,EAGtB,MAAM,aAAa,SAAS,eAAe,aAAa,IAAI;AAAA,EAG5D,MAAM,6BAA4B,KAAI,IAAI,IAAI,aAAa,YAAY,QAAQ,EAAE;AAAA,EAGjF,MAAM,GAAG,WAAW,WAAW,EAAE,MAAM,MAAM,KAAK,SAAS,EAAE,EAAE,QAAQ;AAAA,EAEvE,OAAO;AAAA;",
+  "debugId": "CA1F8ED652ED1B5C64756E2164756E21",
   "names": []
 }

package/dist/src/db/queries/usage.d.ts

@@ -46,7 +46,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -105,7 +105,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -145,6 +145,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {
@@ -258,6 +259,13 @@ interface UsageSummary {
 }
 /** Get current usage for an account. */
 declare function getUsage(db: Kysely<Database>, accountId: string): Promise<UsageSummary>;
+interface DailyUsage {
+	date: string;
+	apiRequests: number;
+	deliveries: number;
+}
+/** Get last 7 days of daily usage, filling missing days with 0. */
+declare function getDailyUsage(db: Kysely<Database>, accountId: string): Promise<DailyUsage[]>;
 interface LimitCheck {
 	allowed: boolean;
 	limits: ReturnType<typeof getPlanLimits>;
@@ -274,4 +282,4 @@ declare function checkLimits(db: Kysely<Database>, accountId: string, plan: stri
 * for each tenant's subgraph schemas.
 */
 declare function measureStorage(db: Kysely<Database>): Promise<void>;
-export { measureStorage, incrementDeliveries, incrementApiRequests, getUsage, checkLimits, UsageSummary, LimitCheck };
+export { measureStorage, incrementDeliveries, incrementApiRequests, getUsage, getDailyUsage, checkLimits, UsageSummary, LimitCheck, DailyUsage };

package/dist/src/db/queries/usage.js

@@ -56,6 +56,27 @@ async function getUsage(db, accountId) {
     storageBytes: Number(storageRow?.storage_bytes ?? 0)
   };
 }
+async function getDailyUsage(db, accountId) {
+  const rows = await db.selectFrom("usage_daily").select(["date", "api_requests", "deliveries"]).where("account_id", "=", accountId).where("date", ">=", sql`NOW()::date - 6`).orderBy("date", "asc").execute();
+  const byDate = new Map(rows.map((r) => {
+    const d = r.date;
+    const key = d instanceof Date ? d.toISOString().slice(0, 10) : String(d).slice(0, 10);
+    return [key, r];
+  }));
+  const result = [];
+  for (let i = 6;i >= 0; i--) {
+    const d = new Date;
+    d.setDate(d.getDate() - i);
+    const dateStr = d.toISOString().slice(0, 10);
+    const row = byDate.get(dateStr);
+    result.push({
+      date: dateStr,
+      apiRequests: row?.api_requests ?? 0,
+      deliveries: row?.deliveries ?? 0
+    });
+  }
+  return result;
+}
 async function checkLimits(db, accountId, plan) {
   const limits = getPlanLimits(plan);
   const usage = await getUsage(db, accountId);
@@ -114,8 +135,9 @@ export {
   incrementDeliveries,
   incrementApiRequests,
   getUsage,
+  getDailyUsage,
   checkLimits
 };
 
-//# debugId=31E68DFE6E6CCA6264756E2164756E21
+//# debugId=DDD1942F27B4B83564756E2164756E21
 //# sourceMappingURL=usage.js.map

package/dist/src/db/queries/usage.js.map

@@ -3,9 +3,9 @@
   "sources": ["../src/lib/plans.ts", "../src/db/queries/usage.ts"],
   "sourcesContent": [
     "export interface PlanLimits {\n  streams: number;\n  subgraphs: number;\n  apiRequestsPerDay: number;\n  deliveriesPerMonth: number;\n  storageBytes: number;\n}\n\nexport const FREE_PLAN: PlanLimits = {\n  streams: 3,\n  subgraphs: 2,\n  apiRequestsPerDay: 1_000,\n  deliveriesPerMonth: 5_000,\n  storageBytes: 100 * 1024 * 1024, // 100MB\n};\n\nexport function getPlanLimits(plan: string): PlanLimits {\n  switch (plan) {\n    case \"free\":\n    default:\n      return FREE_PLAN;\n  }\n}\n",
-    "import { sql, type Kysely } from \"kysely\";\nimport type { Database } from \"../types.ts\";\nimport { getPlanLimits } from \"../../lib/plans.ts\";\n\n/** Increment API request counter for today. Fire-and-forget safe. */\nexport async function incrementApiRequests(\n  db: Kysely<Database>,\n  accountId: string,\n): Promise<void> {\n  const today = new Date().toISOString().slice(0, 10);\n  await db\n    .insertInto(\"usage_daily\")\n    .values({ account_id: accountId, date: today, api_requests: 1, deliveries: 0 })\n    .onConflict((oc) =>\n      oc.columns([\"account_id\", \"date\"]).doUpdateSet({\n        api_requests: sql`usage_daily.api_requests + 1`,\n      }),\n    )\n    .execute();\n}\n\n/** Increment delivery counter for today. */\nexport async function incrementDeliveries(\n  db: Kysely<Database>,\n  accountId: string,\n  count = 1,\n): Promise<void> {\n  const today = new Date().toISOString().slice(0, 10);\n  await db\n    .insertInto(\"usage_daily\")\n    .values({ account_id: accountId, date: today, api_requests: 0, deliveries: count })\n    .onConflict((oc) =>\n      oc.columns([\"account_id\", \"date\"]).doUpdateSet({\n        deliveries: sql`usage_daily.deliveries + ${count}`,\n      }),\n    )\n    .execute();\n}\n\nexport interface UsageSummary {\n  apiRequestsToday: number;\n  deliveriesThisMonth: number;\n  storageBytes: number;\n}\n\n/** Get current usage for an account. */\nexport async function getUsage(\n  db: Kysely<Database>,\n  accountId: string,\n): Promise<UsageSummary> {\n  const today = new Date().toISOString().slice(0, 10);\n  const monthStart = today.slice(0, 7) + \"-01\"; // YYYY-MM-01\n\n  // Today's API requests\n  const dailyRow = await db\n    .selectFrom(\"usage_daily\")\n    .select(\"api_requests\")\n    .where(\"account_id\", \"=\", accountId)\n    .where(\"date\", \"=\", today)\n    .executeTakeFirst();\n\n  // This month's deliveries\n  const monthlyRow = await db\n    .selectFrom(\"usage_daily\")\n    .select(sql<number>`COALESCE(SUM(deliveries), 0)`.as(\"total\"))\n    .where(\"account_id\", \"=\", accountId)\n    .where(\"date\", \">=\", monthStart)\n    .executeTakeFirst();\n\n  // Latest storage snapshot\n  const storageRow = await db\n    .selectFrom(\"usage_snapshots\")\n    .select(\"storage_bytes\")\n    .where(\"account_id\", \"=\", accountId)\n    .orderBy(\"measured_at\", \"desc\")\n    .limit(1)\n    .executeTakeFirst();\n\n  return {\n    apiRequestsToday: dailyRow?.api_requests ?? 0,\n    deliveriesThisMonth: Number(monthlyRow?.total ?? 0),\n    storageBytes: Number(storageRow?.storage_bytes ?? 0),\n  };\n}\n\nexport interface LimitCheck {\n  allowed: boolean;\n  limits: ReturnType<typeof getPlanLimits>;\n  current: UsageSummary & { streams: number; subgraphs: number };\n  exceeded?: string;\n}\n\n/** Check if an account is within plan limits. */\nexport async function checkLimits(\n  db: Kysely<Database>,\n  accountId: string,\n  plan: string,\n): Promise<LimitCheck> {\n  const limits = getPlanLimits(plan);\n  const usage = await getUsage(db, accountId);\n\n  // Count streams owned by this account's keys\n  const streamCount = await db\n    .selectFrom(\"streams\")\n    .innerJoin(\"api_keys\", \"streams.api_key_id\", \"api_keys.id\")\n    .select(sql<number>`count(*)`.as(\"count\"))\n    .where(\"api_keys.account_id\", \"=\", accountId)\n    .executeTakeFirst();\n\n  const subgraphCount = await db\n    .selectFrom(\"subgraphs\")\n    .innerJoin(\"api_keys\", \"subgraphs.api_key_id\", \"api_keys.id\")\n    .select(sql<number>`count(*)`.as(\"count\"))\n    .where(\"api_keys.account_id\", \"=\", accountId)\n    .executeTakeFirst();\n\n  const current = {\n    ...usage,\n    streams: Number(streamCount?.count ?? 0),\n    subgraphs: Number(subgraphCount?.count ?? 0),\n  };\n\n  // Check each limit\n  if (current.streams >= limits.streams) {\n    return { allowed: false, limits, current, exceeded: \"streams\" };\n  }\n  if (current.subgraphs >= limits.subgraphs) {\n    return { allowed: false, limits, current, exceeded: \"subgraphs\" };\n  }\n  if (current.apiRequestsToday >= limits.apiRequestsPerDay) {\n    return { allowed: false, limits, current, exceeded: \"api_requests\" };\n  }\n  if (current.deliveriesThisMonth >= limits.deliveriesPerMonth) {\n    return { allowed: false, limits, current, exceeded: \"deliveries\" };\n  }\n  if (current.storageBytes >= limits.storageBytes) {\n    return { allowed: false, limits, current, exceeded: \"storage\" };\n  }\n\n  return { allowed: true, limits, current };\n}\n\n/**\n * Measure storage for all accounts by querying pg_total_relation_size\n * for each tenant's subgraph schemas.\n */\nexport async function measureStorage(db: Kysely<Database>): Promise<void> {\n  // Get all accounts with subgraphs\n  const accountSubgraphs = await db\n    .selectFrom(\"subgraphs\")\n    .innerJoin(\"api_keys\", \"subgraphs.api_key_id\", \"api_keys.id\")\n    .select([\"api_keys.account_id\", \"subgraphs.schema_name\"])\n    .where(\"subgraphs.schema_name\", \"is not\", null)\n    .execute();\n\n  // Group schemas by account\n  const byAccount = new Map<string, string[]>();\n  for (const row of accountSubgraphs) {\n    const schemas = byAccount.get(row.account_id) ?? [];\n    if (row.schema_name) schemas.push(row.schema_name);\n    byAccount.set(row.account_id, schemas);\n  }\n\n  for (const [accountId, schemas] of byAccount) {\n    let totalBytes = 0;\n    for (const schema of schemas) {\n      try {\n        const result = await sql<{ size: string }>`\n          SELECT COALESCE(SUM(pg_total_relation_size(quote_ident(schemaname) || '.' || quote_ident(tablename))), 0)::text as size\n          FROM pg_tables WHERE schemaname = ${schema}\n        `.execute(db);\n        totalBytes += Number((result.rows[0] as any)?.size ?? 0);\n      } catch {\n        // Schema may not exist\n      }\n    }\n\n    await db\n      .insertInto(\"usage_snapshots\")\n      .values({\n        account_id: accountId,\n        storage_bytes: totalBytes,\n      })\n      .execute();\n  }\n}\n"
+    "import { sql, type Kysely } from \"kysely\";\nimport type { Database } from \"../types.ts\";\nimport { getPlanLimits } from \"../../lib/plans.ts\";\n\n/** Increment API request counter for today. Fire-and-forget safe. */\nexport async function incrementApiRequests(\n  db: Kysely<Database>,\n  accountId: string,\n): Promise<void> {\n  const today = new Date().toISOString().slice(0, 10);\n  await db\n    .insertInto(\"usage_daily\")\n    .values({ account_id: accountId, date: today, api_requests: 1, deliveries: 0 })\n    .onConflict((oc) =>\n      oc.columns([\"account_id\", \"date\"]).doUpdateSet({\n        api_requests: sql`usage_daily.api_requests + 1`,\n      }),\n    )\n    .execute();\n}\n\n/** Increment delivery counter for today. */\nexport async function incrementDeliveries(\n  db: Kysely<Database>,\n  accountId: string,\n  count = 1,\n): Promise<void> {\n  const today = new Date().toISOString().slice(0, 10);\n  await db\n    .insertInto(\"usage_daily\")\n    .values({ account_id: accountId, date: today, api_requests: 0, deliveries: count })\n    .onConflict((oc) =>\n      oc.columns([\"account_id\", \"date\"]).doUpdateSet({\n        deliveries: sql`usage_daily.deliveries + ${count}`,\n      }),\n    )\n    .execute();\n}\n\nexport interface UsageSummary {\n  apiRequestsToday: number;\n  deliveriesThisMonth: number;\n  storageBytes: number;\n}\n\n/** Get current usage for an account. */\nexport async function getUsage(\n  db: Kysely<Database>,\n  accountId: string,\n): Promise<UsageSummary> {\n  const today = new Date().toISOString().slice(0, 10);\n  const monthStart = today.slice(0, 7) + \"-01\"; // YYYY-MM-01\n\n  // Today's API requests\n  const dailyRow = await db\n    .selectFrom(\"usage_daily\")\n    .select(\"api_requests\")\n    .where(\"account_id\", \"=\", accountId)\n    .where(\"date\", \"=\", today)\n    .executeTakeFirst();\n\n  // This month's deliveries\n  const monthlyRow = await db\n    .selectFrom(\"usage_daily\")\n    .select(sql<number>`COALESCE(SUM(deliveries), 0)`.as(\"total\"))\n    .where(\"account_id\", \"=\", accountId)\n    .where(\"date\", \">=\", monthStart)\n    .executeTakeFirst();\n\n  // Latest storage snapshot\n  const storageRow = await db\n    .selectFrom(\"usage_snapshots\")\n    .select(\"storage_bytes\")\n    .where(\"account_id\", \"=\", accountId)\n    .orderBy(\"measured_at\", \"desc\")\n    .limit(1)\n    .executeTakeFirst();\n\n  return {\n    apiRequestsToday: dailyRow?.api_requests ?? 0,\n    deliveriesThisMonth: Number(monthlyRow?.total ?? 0),\n    storageBytes: Number(storageRow?.storage_bytes ?? 0),\n  };\n}\n\nexport interface DailyUsage {\n  date: string;\n  apiRequests: number;\n  deliveries: number;\n}\n\n/** Get last 7 days of daily usage, filling missing days with 0. */\nexport async function getDailyUsage(\n  db: Kysely<Database>,\n  accountId: string,\n): Promise<DailyUsage[]> {\n  const rows = await db\n    .selectFrom(\"usage_daily\")\n    .select([\"date\", \"api_requests\", \"deliveries\"])\n    .where(\"account_id\", \"=\", accountId)\n    .where(\"date\", \">=\", sql<string>`NOW()::date - 6`)\n    .orderBy(\"date\", \"asc\")\n    .execute();\n\n  // Fill missing days with 0 (normalize date to YYYY-MM-DD string)\n  const byDate = new Map(rows.map((r) => {\n    const d = r.date as unknown;\n    const key = d instanceof Date ? d.toISOString().slice(0, 10) : String(d).slice(0, 10);\n    return [key, r];\n  }));\n  const result: DailyUsage[] = [];\n  for (let i = 6; i >= 0; i--) {\n    const d = new Date();\n    d.setDate(d.getDate() - i);\n    const dateStr = d.toISOString().slice(0, 10);\n    const row = byDate.get(dateStr);\n    result.push({\n      date: dateStr,\n      apiRequests: row?.api_requests ?? 0,\n      deliveries: row?.deliveries ?? 0,\n    });\n  }\n  return result;\n}\n\nexport interface LimitCheck {\n  allowed: boolean;\n  limits: ReturnType<typeof getPlanLimits>;\n  current: UsageSummary & { streams: number; subgraphs: number };\n  exceeded?: string;\n}\n\n/** Check if an account is within plan limits. */\nexport async function checkLimits(\n  db: Kysely<Database>,\n  accountId: string,\n  plan: string,\n): Promise<LimitCheck> {\n  const limits = getPlanLimits(plan);\n  const usage = await getUsage(db, accountId);\n\n  // Count streams owned by this account's keys\n  const streamCount = await db\n    .selectFrom(\"streams\")\n    .innerJoin(\"api_keys\", \"streams.api_key_id\", \"api_keys.id\")\n    .select(sql<number>`count(*)`.as(\"count\"))\n    .where(\"api_keys.account_id\", \"=\", accountId)\n    .executeTakeFirst();\n\n  const subgraphCount = await db\n    .selectFrom(\"subgraphs\")\n    .innerJoin(\"api_keys\", \"subgraphs.api_key_id\", \"api_keys.id\")\n    .select(sql<number>`count(*)`.as(\"count\"))\n    .where(\"api_keys.account_id\", \"=\", accountId)\n    .executeTakeFirst();\n\n  const current = {\n    ...usage,\n    streams: Number(streamCount?.count ?? 0),\n    subgraphs: Number(subgraphCount?.count ?? 0),\n  };\n\n  // Check each limit\n  if (current.streams >= limits.streams) {\n    return { allowed: false, limits, current, exceeded: \"streams\" };\n  }\n  if (current.subgraphs >= limits.subgraphs) {\n    return { allowed: false, limits, current, exceeded: \"subgraphs\" };\n  }\n  if (current.apiRequestsToday >= limits.apiRequestsPerDay) {\n    return { allowed: false, limits, current, exceeded: \"api_requests\" };\n  }\n  if (current.deliveriesThisMonth >= limits.deliveriesPerMonth) {\n    return { allowed: false, limits, current, exceeded: \"deliveries\" };\n  }\n  if (current.storageBytes >= limits.storageBytes) {\n    return { allowed: false, limits, current, exceeded: \"storage\" };\n  }\n\n  return { allowed: true, limits, current };\n}\n\n/**\n * Measure storage for all accounts by querying pg_total_relation_size\n * for each tenant's subgraph schemas.\n */\nexport async function measureStorage(db: Kysely<Database>): Promise<void> {\n  // Get all accounts with subgraphs\n  const accountSubgraphs = await db\n    .selectFrom(\"subgraphs\")\n    .innerJoin(\"api_keys\", \"subgraphs.api_key_id\", \"api_keys.id\")\n    .select([\"api_keys.account_id\", \"subgraphs.schema_name\"])\n    .where(\"subgraphs.schema_name\", \"is not\", null)\n    .execute();\n\n  // Group schemas by account\n  const byAccount = new Map<string, string[]>();\n  for (const row of accountSubgraphs) {\n    const schemas = byAccount.get(row.account_id) ?? [];\n    if (row.schema_name) schemas.push(row.schema_name);\n    byAccount.set(row.account_id, schemas);\n  }\n\n  for (const [accountId, schemas] of byAccount) {\n    let totalBytes = 0;\n    for (const schema of schemas) {\n      try {\n        const result = await sql<{ size: string }>`\n          SELECT COALESCE(SUM(pg_total_relation_size(quote_ident(schemaname) || '.' || quote_ident(tablename))), 0)::text as size\n          FROM pg_tables WHERE schemaname = ${schema}\n        `.execute(db);\n        totalBytes += Number((result.rows[0] as any)?.size ?? 0);\n      } catch {\n        // Schema may not exist\n      }\n    }\n\n    await db\n      .insertInto(\"usage_snapshots\")\n      .values({\n        account_id: accountId,\n        storage_bytes: totalBytes,\n      })\n      .execute();\n  }\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAQO,IAAM,YAAwB;AAAA,EACnC,SAAS;AAAA,EACT,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,cAAc,MAAM,OAAO;AAC7B;AAEO,SAAS,aAAa,CAAC,MAA0B;AAAA,EACtD,QAAQ;AAAA,SACD;AAAA;AAAA,MAEH,OAAO;AAAA;AAAA;;;ACpBb;AAKA,eAAsB,oBAAoB,CACxC,IACA,WACe;AAAA,EACf,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,GACH,WAAW,aAAa,EACxB,OAAO,EAAE,YAAY,WAAW,MAAM,OAAO,cAAc,GAAG,YAAY,EAAE,CAAC,EAC7E,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,cAAc,MAAM,CAAC,EAAE,YAAY;AAAA,IAC7C,cAAc;AAAA,EAChB,CAAC,CACH,EACC,QAAQ;AAAA;AAIb,eAAsB,mBAAmB,CACvC,IACA,WACA,QAAQ,GACO;AAAA,EACf,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,GACH,WAAW,aAAa,EACxB,OAAO,EAAE,YAAY,WAAW,MAAM,OAAO,cAAc,GAAG,YAAY,MAAM,CAAC,EACjF,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,cAAc,MAAM,CAAC,EAAE,YAAY;AAAA,IAC7C,YAAY,+BAA+B;AAAA,EAC7C,CAAC,CACH,EACC,QAAQ;AAAA;AAUb,eAAsB,QAAQ,CAC5B,IACA,WACuB;AAAA,EACvB,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,aAAa,MAAM,MAAM,GAAG,CAAC,IAAI;AAAA,EAGvC,MAAM,WAAW,MAAM,GACpB,WAAW,aAAa,EACxB,OAAO,cAAc,EACrB,MAAM,cAAc,KAAK,SAAS,EAClC,MAAM,QAAQ,KAAK,KAAK,EACxB,iBAAiB;AAAA,EAGpB,MAAM,aAAa,MAAM,GACtB,WAAW,aAAa,EACxB,OAAO,kCAA0C,GAAG,OAAO,CAAC,EAC5D,MAAM,cAAc,KAAK,SAAS,EAClC,MAAM,QAAQ,MAAM,UAAU,EAC9B,iBAAiB;AAAA,EAGpB,MAAM,aAAa,MAAM,GACtB,WAAW,iBAAiB,EAC5B,OAAO,eAAe,EACtB,MAAM,cAAc,KAAK,SAAS,EAClC,QAAQ,eAAe,MAAM,EAC7B,MAAM,CAAC,EACP,iBAAiB;AAAA,EAEpB,OAAO;AAAA,IACL,kBAAkB,UAAU,gBAAgB;AAAA,IAC5C,qBAAqB,OAAO,YAAY,SAAS,CAAC;AAAA,IAClD,cAAc,OAAO,YAAY,iBAAiB,CAAC;AAAA,EACrD;AAAA;AAWF,eAAsB,WAAW,CAC/B,IACA,WACA,MACqB;AAAA,EACrB,MAAM,SAAS,cAAc,IAAI;AAAA,EACjC,MAAM,QAAQ,MAAM,SAAS,IAAI,SAAS;AAAA,EAG1C,MAAM,cAAc,MAAM,GACvB,WAAW,SAAS,EACpB,UAAU,YAAY,sBAAsB,aAAa,EACzD,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,MAAM,uBAAuB,KAAK,SAAS,EAC3C,iBAAiB;AAAA,EAEpB,MAAM,gBAAgB,MAAM,GACzB,WAAW,WAAW,EACtB,UAAU,YAAY,wBAAwB,aAAa,EAC3D,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,MAAM,uBAAuB,KAAK,SAAS,EAC3C,iBAAiB;AAAA,EAEpB,MAAM,UAAU;AAAA,OACX;AAAA,IACH,SAAS,OAAO,aAAa,SAAS,CAAC;AAAA,IACvC,WAAW,OAAO,eAAe,SAAS,CAAC;AAAA,EAC7C;AAAA,EAGA,IAAI,QAAQ,WAAW,OAAO,SAAS;AAAA,IACrC,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,UAAU;AAAA,EAChE;AAAA,EACA,IAAI,QAAQ,aAAa,OAAO,WAAW;AAAA,IACzC,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,YAAY;AAAA,EAClE;AAAA,EACA,IAAI,QAAQ,oBAAoB,OAAO,mBAAmB;AAAA,IACxD,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,eAAe;AAAA,EACrE;AAAA,EACA,IAAI,QAAQ,uBAAuB,OAAO,oBAAoB;AAAA,IAC5D,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,aAAa;AAAA,EACnE;AAAA,EACA,IAAI,QAAQ,gBAAgB,OAAO,cAAc;AAAA,IAC/C,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,UAAU;AAAA,EAChE;AAAA,EAEA,OAAO,EAAE,SAAS,MAAM,QAAQ,QAAQ;AAAA;AAO1C,eAAsB,cAAc,CAAC,IAAqC;AAAA,EAExE,MAAM,mBAAmB,MAAM,GAC5B,WAAW,WAAW,EACtB,UAAU,YAAY,wBAAwB,aAAa,EAC3D,OAAO,CAAC,uBAAuB,uBAAuB,CAAC,EACvD,MAAM,yBAAyB,UAAU,IAAI,EAC7C,QAAQ;AAAA,EAGX,MAAM,YAAY,IAAI;AAAA,EACtB,WAAW,OAAO,kBAAkB;AAAA,IAClC,MAAM,UAAU,UAAU,IAAI,IAAI,UAAU,KAAK,CAAC;AAAA,IAClD,IAAI,IAAI;AAAA,MAAa,QAAQ,KAAK,IAAI,WAAW;AAAA,IACjD,UAAU,IAAI,IAAI,YAAY,OAAO;AAAA,EACvC;AAAA,EAEA,YAAY,WAAW,YAAY,WAAW;AAAA,IAC5C,IAAI,aAAa;AAAA,IACjB,WAAW,UAAU,SAAS;AAAA,MAC5B,IAAI;AAAA,QACF,MAAM,SAAS,MAAM;AAAA;AAAA,8CAEiB;AAAA,UACpC,QAAQ,EAAE;AAAA,QACZ,cAAc,OAAQ,OAAO,KAAK,IAAY,QAAQ,CAAC;AAAA,QACvD,MAAM;AAAA,IAGV;AAAA,IAEA,MAAM,GACH,WAAW,iBAAiB,EAC5B,OAAO;AAAA,MACN,YAAY;AAAA,MACZ,eAAe;AAAA,IACjB,CAAC,EACA,QAAQ;AAAA,EACb;AAAA;",
-  "debugId": "31E68DFE6E6CCA6264756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAQO,IAAM,YAAwB;AAAA,EACnC,SAAS;AAAA,EACT,WAAW;AAAA,EACX,mBAAmB;AAAA,EACnB,oBAAoB;AAAA,EACpB,cAAc,MAAM,OAAO;AAC7B;AAEO,SAAS,aAAa,CAAC,MAA0B;AAAA,EACtD,QAAQ;AAAA,SACD;AAAA;AAAA,MAEH,OAAO;AAAA;AAAA;;;ACpBb;AAKA,eAAsB,oBAAoB,CACxC,IACA,WACe;AAAA,EACf,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,GACH,WAAW,aAAa,EACxB,OAAO,EAAE,YAAY,WAAW,MAAM,OAAO,cAAc,GAAG,YAAY,EAAE,CAAC,EAC7E,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,cAAc,MAAM,CAAC,EAAE,YAAY;AAAA,IAC7C,cAAc;AAAA,EAChB,CAAC,CACH,EACC,QAAQ;AAAA;AAIb,eAAsB,mBAAmB,CACvC,IACA,WACA,QAAQ,GACO;AAAA,EACf,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,GACH,WAAW,aAAa,EACxB,OAAO,EAAE,YAAY,WAAW,MAAM,OAAO,cAAc,GAAG,YAAY,MAAM,CAAC,EACjF,WAAW,CAAC,OACX,GAAG,QAAQ,CAAC,cAAc,MAAM,CAAC,EAAE,YAAY;AAAA,IAC7C,YAAY,+BAA+B;AAAA,EAC7C,CAAC,CACH,EACC,QAAQ;AAAA;AAUb,eAAsB,QAAQ,CAC5B,IACA,WACuB;AAAA,EACvB,MAAM,QAAQ,IAAI,KAAK,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,EAClD,MAAM,aAAa,MAAM,MAAM,GAAG,CAAC,IAAI;AAAA,EAGvC,MAAM,WAAW,MAAM,GACpB,WAAW,aAAa,EACxB,OAAO,cAAc,EACrB,MAAM,cAAc,KAAK,SAAS,EAClC,MAAM,QAAQ,KAAK,KAAK,EACxB,iBAAiB;AAAA,EAGpB,MAAM,aAAa,MAAM,GACtB,WAAW,aAAa,EACxB,OAAO,kCAA0C,GAAG,OAAO,CAAC,EAC5D,MAAM,cAAc,KAAK,SAAS,EAClC,MAAM,QAAQ,MAAM,UAAU,EAC9B,iBAAiB;AAAA,EAGpB,MAAM,aAAa,MAAM,GACtB,WAAW,iBAAiB,EAC5B,OAAO,eAAe,EACtB,MAAM,cAAc,KAAK,SAAS,EAClC,QAAQ,eAAe,MAAM,EAC7B,MAAM,CAAC,EACP,iBAAiB;AAAA,EAEpB,OAAO;AAAA,IACL,kBAAkB,UAAU,gBAAgB;AAAA,IAC5C,qBAAqB,OAAO,YAAY,SAAS,CAAC;AAAA,IAClD,cAAc,OAAO,YAAY,iBAAiB,CAAC;AAAA,EACrD;AAAA;AAUF,eAAsB,aAAa,CACjC,IACA,WACuB;AAAA,EACvB,MAAM,OAAO,MAAM,GAChB,WAAW,aAAa,EACxB,OAAO,CAAC,QAAQ,gBAAgB,YAAY,CAAC,EAC7C,MAAM,cAAc,KAAK,SAAS,EAClC,MAAM,QAAQ,MAAM,oBAA4B,EAChD,QAAQ,QAAQ,KAAK,EACrB,QAAQ;AAAA,EAGX,MAAM,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM;AAAA,IACrC,MAAM,IAAI,EAAE;AAAA,IACZ,MAAM,MAAM,aAAa,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,IAAI,OAAO,CAAC,EAAE,MAAM,GAAG,EAAE;AAAA,IACpF,OAAO,CAAC,KAAK,CAAC;AAAA,GACf,CAAC;AAAA,EACF,MAAM,SAAuB,CAAC;AAAA,EAC9B,SAAS,IAAI,EAAG,KAAK,GAAG,KAAK;AAAA,IAC3B,MAAM,IAAI,IAAI;AAAA,IACd,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC;AAAA,IACzB,MAAM,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,IAC3C,MAAM,MAAM,OAAO,IAAI,OAAO;AAAA,IAC9B,OAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,aAAa,KAAK,gBAAgB;AAAA,MAClC,YAAY,KAAK,cAAc;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAWT,eAAsB,WAAW,CAC/B,IACA,WACA,MACqB;AAAA,EACrB,MAAM,SAAS,cAAc,IAAI;AAAA,EACjC,MAAM,QAAQ,MAAM,SAAS,IAAI,SAAS;AAAA,EAG1C,MAAM,cAAc,MAAM,GACvB,WAAW,SAAS,EACpB,UAAU,YAAY,sBAAsB,aAAa,EACzD,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,MAAM,uBAAuB,KAAK,SAAS,EAC3C,iBAAiB;AAAA,EAEpB,MAAM,gBAAgB,MAAM,GACzB,WAAW,WAAW,EACtB,UAAU,YAAY,wBAAwB,aAAa,EAC3D,OAAO,cAAsB,GAAG,OAAO,CAAC,EACxC,MAAM,uBAAuB,KAAK,SAAS,EAC3C,iBAAiB;AAAA,EAEpB,MAAM,UAAU;AAAA,OACX;AAAA,IACH,SAAS,OAAO,aAAa,SAAS,CAAC;AAAA,IACvC,WAAW,OAAO,eAAe,SAAS,CAAC;AAAA,EAC7C;AAAA,EAGA,IAAI,QAAQ,WAAW,OAAO,SAAS;AAAA,IACrC,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,UAAU;AAAA,EAChE;AAAA,EACA,IAAI,QAAQ,aAAa,OAAO,WAAW;AAAA,IACzC,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,YAAY;AAAA,EAClE;AAAA,EACA,IAAI,QAAQ,oBAAoB,OAAO,mBAAmB;AAAA,IACxD,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,eAAe;AAAA,EACrE;AAAA,EACA,IAAI,QAAQ,uBAAuB,OAAO,oBAAoB;AAAA,IAC5D,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,aAAa;AAAA,EACnE;AAAA,EACA,IAAI,QAAQ,gBAAgB,OAAO,cAAc;AAAA,IAC/C,OAAO,EAAE,SAAS,OAAO,QAAQ,SAAS,UAAU,UAAU;AAAA,EAChE;AAAA,EAEA,OAAO,EAAE,SAAS,MAAM,QAAQ,QAAQ;AAAA;AAO1C,eAAsB,cAAc,CAAC,IAAqC;AAAA,EAExE,MAAM,mBAAmB,MAAM,GAC5B,WAAW,WAAW,EACtB,UAAU,YAAY,wBAAwB,aAAa,EAC3D,OAAO,CAAC,uBAAuB,uBAAuB,CAAC,EACvD,MAAM,yBAAyB,UAAU,IAAI,EAC7C,QAAQ;AAAA,EAGX,MAAM,YAAY,IAAI;AAAA,EACtB,WAAW,OAAO,kBAAkB;AAAA,IAClC,MAAM,UAAU,UAAU,IAAI,IAAI,UAAU,KAAK,CAAC;AAAA,IAClD,IAAI,IAAI;AAAA,MAAa,QAAQ,KAAK,IAAI,WAAW;AAAA,IACjD,UAAU,IAAI,IAAI,YAAY,OAAO;AAAA,EACvC;AAAA,EAEA,YAAY,WAAW,YAAY,WAAW;AAAA,IAC5C,IAAI,aAAa;AAAA,IACjB,WAAW,UAAU,SAAS;AAAA,MAC5B,IAAI;AAAA,QACF,MAAM,SAAS,MAAM;AAAA;AAAA,8CAEiB;AAAA,UACpC,QAAQ,EAAE;AAAA,QACZ,cAAc,OAAQ,OAAO,KAAK,IAAY,QAAQ,CAAC;AAAA,QACvD,MAAM;AAAA,IAGV;AAAA,IAEA,MAAM,GACH,WAAW,iBAAiB,EAC5B,OAAO;AAAA,MACN,YAAY;AAAA,MACZ,eAAe;AAAA,IACjB,CAAC,EACA,QAAQ;AAAA,EACb;AAAA;",
+  "debugId": "DDD1942F27B4B83564756E2164756E21",
   "names": []
 }

package/dist/src/db/schema.d.ts

@@ -37,7 +37,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -96,7 +96,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -136,6 +136,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/errors.d.ts

@@ -1,10 +1,22 @@
+declare const ErrorCodes: {
+	readonly STREAM_NOT_FOUND: "STREAM_NOT_FOUND"
+	readonly VALIDATION_ERROR: "VALIDATION_ERROR"
+	readonly DATABASE_ERROR: "DATABASE_ERROR"
+	readonly DELIVERY_ERROR: "DELIVERY_ERROR"
+	readonly FILTER_EVALUATION_ERROR: "FILTER_EVALUATION_ERROR"
+	readonly AUTHENTICATION_ERROR: "AUTHENTICATION_ERROR"
+	readonly AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR"
+	readonly RATE_LIMIT_ERROR: "RATE_LIMIT_ERROR"
+	readonly FORBIDDEN: "FORBIDDEN"
+};
+type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
 /**
 * Base error class for all Stacks Streams errors
 */
 declare class StreamsError extends Error {
-	code: string;
+	code: ErrorCode;
 	cause?: unknown;
-	constructor(code: string, message: string, cause?: unknown);
+	constructor(code: ErrorCode, message: string, cause?: unknown);
 	toJSON(): {
 		name: string
 		code: string
@@ -66,9 +78,10 @@ declare class ForbiddenError extends StreamsError {
 }
 /** Error code → HTTP status. Used by API middleware for code-based matching
 *  (avoids cross-bundle instanceof failures from bunup class duplication). */
-declare const CODE_TO_STATUS: Record<string, 400 | 401 | 403 | 404 | 429>;
+type MappedCode = Extract<ErrorCode, "AUTHENTICATION_ERROR" | "AUTHORIZATION_ERROR" | "RATE_LIMIT_ERROR" | "FORBIDDEN" | "STREAM_NOT_FOUND" | "VALIDATION_ERROR">;
+declare const CODE_TO_STATUS: Record<MappedCode, 400 | 401 | 403 | 404 | 429>;
 /**
 * Safely extract error message from unknown error value
 */
 declare function getErrorMessage(err: unknown): string;
-export { getErrorMessage, ValidationError, StreamsError, StreamNotFoundError, RateLimitError, ForbiddenError, FilterEvaluationError, DeliveryError, DatabaseError, CODE_TO_STATUS, AuthorizationError, AuthenticationError };
+export { getErrorMessage, ValidationError, StreamsError, StreamNotFoundError, RateLimitError, ForbiddenError, FilterEvaluationError, ErrorCodes, ErrorCode, DeliveryError, DatabaseError, CODE_TO_STATUS, AuthorizationError, AuthenticationError };

package/dist/src/errors.js

@@ -15,6 +15,18 @@ var __export = (target, all) => {
 };
 
 // src/errors.ts
+var ErrorCodes = {
+  STREAM_NOT_FOUND: "STREAM_NOT_FOUND",
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  DATABASE_ERROR: "DATABASE_ERROR",
+  DELIVERY_ERROR: "DELIVERY_ERROR",
+  FILTER_EVALUATION_ERROR: "FILTER_EVALUATION_ERROR",
+  AUTHENTICATION_ERROR: "AUTHENTICATION_ERROR",
+  AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR",
+  RATE_LIMIT_ERROR: "RATE_LIMIT_ERROR",
+  FORBIDDEN: "FORBIDDEN"
+};
+
 class StreamsError extends Error {
   code;
   cause;
@@ -108,7 +120,6 @@ var CODE_TO_STATUS = {
   RATE_LIMIT_ERROR: 429,
   FORBIDDEN: 403,
   STREAM_NOT_FOUND: 404,
-  VIEW_NOT_FOUND: 404,
   VALIDATION_ERROR: 400
 };
 function getErrorMessage(err) {
@@ -122,6 +133,7 @@ export {
   RateLimitError,
   ForbiddenError,
   FilterEvaluationError,
+  ErrorCodes,
   DeliveryError,
   DatabaseError,
   CODE_TO_STATUS,
@@ -129,5 +141,5 @@ export {
   AuthenticationError
 };
 
-//# debugId=47BA7DDA27F2DCB464756E2164756E21
+//# debugId=04C32356C753666D64756E2164756E21
 //# sourceMappingURL=errors.js.map

package/dist/src/errors.js.map

@@ -2,9 +2,9 @@
   "version": 3,
   "sources": ["../src/errors.ts"],
   "sourcesContent": [
-    "/**\n * Base error class for all Stacks Streams errors\n */\nexport class StreamsError extends Error {\n  public code: string;\n  public override cause?: unknown;\n\n  constructor(\n    code: string,\n    message: string,\n    cause?: unknown\n  ) {\n    super(message);\n    this.code = code;\n    this.cause = cause;\n    this.name = this.constructor.name;\n    Error.captureStackTrace?.(this, this.constructor);\n  }\n\n  toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown } {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      stack: this.stack,\n      cause: this.cause,\n    };\n  }\n}\n\n/**\n * Stream not found error\n */\nexport class StreamNotFoundError extends StreamsError {\n  constructor(streamId: string) {\n    super(\"STREAM_NOT_FOUND\", `Stream not found: ${streamId}`);\n  }\n}\n\n/**\n * Validation error for invalid input\n */\nexport class ValidationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"VALIDATION_ERROR\", message, cause);\n  }\n}\n\n/**\n * Database operation error\n */\nexport class DatabaseError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"DATABASE_ERROR\", message, cause);\n  }\n}\n\n/**\n * Delivery error\n */\nexport class DeliveryError extends StreamsError {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    cause?: unknown\n  ) {\n    super(\"DELIVERY_ERROR\", message, cause);\n  }\n\n  override toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown; statusCode: number | undefined } {\n    const base = super.toJSON();\n    return {\n      name: base.name,\n      code: base.code,\n      message: base.message,\n      stack: base.stack,\n      cause: base.cause,\n      statusCode: this.statusCode,\n    };\n  }\n}\n\n/**\n * Filter evaluation error\n */\nexport class FilterEvaluationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"FILTER_EVALUATION_ERROR\", message, cause);\n  }\n}\n\nexport class AuthenticationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHENTICATION_ERROR\", message);\n  }\n}\n\nexport class AuthorizationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHORIZATION_ERROR\", message);\n  }\n}\n\nexport class RateLimitError extends StreamsError {\n  constructor(message: string) {\n    super(\"RATE_LIMIT_ERROR\", message);\n  }\n}\n\nexport class ForbiddenError extends StreamsError {\n  constructor(message = \"Forbidden\") {\n    super(\"FORBIDDEN\", message);\n  }\n}\n\n/** Error code → HTTP status. Used by API middleware for code-based matching\n *  (avoids cross-bundle instanceof failures from bunup class duplication). */\nexport const CODE_TO_STATUS: Record<string, 400 | 401 | 403 | 404 | 429> = {\n  AUTHENTICATION_ERROR: 401,\n  AUTHORIZATION_ERROR: 403,\n  RATE_LIMIT_ERROR: 429,\n  FORBIDDEN: 403,\n  STREAM_NOT_FOUND: 404,\n  VIEW_NOT_FOUND: 404,\n  VALIDATION_ERROR: 400,\n} as const;\n\n/**\n * Safely extract error message from unknown error value\n */\nexport function getErrorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n"
+    "export const ErrorCodes = {\n  STREAM_NOT_FOUND: \"STREAM_NOT_FOUND\",\n  VALIDATION_ERROR: \"VALIDATION_ERROR\",\n  DATABASE_ERROR: \"DATABASE_ERROR\",\n  DELIVERY_ERROR: \"DELIVERY_ERROR\",\n  FILTER_EVALUATION_ERROR: \"FILTER_EVALUATION_ERROR\",\n  AUTHENTICATION_ERROR: \"AUTHENTICATION_ERROR\",\n  AUTHORIZATION_ERROR: \"AUTHORIZATION_ERROR\",\n  RATE_LIMIT_ERROR: \"RATE_LIMIT_ERROR\",\n  FORBIDDEN: \"FORBIDDEN\",\n} as const;\n\nexport type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];\n\n/**\n * Base error class for all Stacks Streams errors\n */\nexport class StreamsError extends Error {\n  public code: ErrorCode;\n  public override cause?: unknown;\n\n  constructor(\n    code: ErrorCode,\n    message: string,\n    cause?: unknown\n  ) {\n    super(message);\n    this.code = code;\n    this.cause = cause;\n    this.name = this.constructor.name;\n    Error.captureStackTrace?.(this, this.constructor);\n  }\n\n  toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown } {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      stack: this.stack,\n      cause: this.cause,\n    };\n  }\n}\n\n/**\n * Stream not found error\n */\nexport class StreamNotFoundError extends StreamsError {\n  constructor(streamId: string) {\n    super(\"STREAM_NOT_FOUND\", `Stream not found: ${streamId}`);\n  }\n}\n\n/**\n * Validation error for invalid input\n */\nexport class ValidationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"VALIDATION_ERROR\", message, cause);\n  }\n}\n\n/**\n * Database operation error\n */\nexport class DatabaseError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"DATABASE_ERROR\", message, cause);\n  }\n}\n\n/**\n * Delivery error\n */\nexport class DeliveryError extends StreamsError {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    cause?: unknown\n  ) {\n    super(\"DELIVERY_ERROR\", message, cause);\n  }\n\n  override toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown; statusCode: number | undefined } {\n    const base = super.toJSON();\n    return {\n      name: base.name,\n      code: base.code,\n      message: base.message,\n      stack: base.stack,\n      cause: base.cause,\n      statusCode: this.statusCode,\n    };\n  }\n}\n\n/**\n * Filter evaluation error\n */\nexport class FilterEvaluationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"FILTER_EVALUATION_ERROR\", message, cause);\n  }\n}\n\nexport class AuthenticationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHENTICATION_ERROR\", message);\n  }\n}\n\nexport class AuthorizationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHORIZATION_ERROR\", message);\n  }\n}\n\nexport class RateLimitError extends StreamsError {\n  constructor(message: string) {\n    super(\"RATE_LIMIT_ERROR\", message);\n  }\n}\n\nexport class ForbiddenError extends StreamsError {\n  constructor(message = \"Forbidden\") {\n    super(\"FORBIDDEN\", message);\n  }\n}\n\n/** Error code → HTTP status. Used by API middleware for code-based matching\n *  (avoids cross-bundle instanceof failures from bunup class duplication). */\ntype MappedCode = Extract<\n  ErrorCode,\n  | \"AUTHENTICATION_ERROR\"\n  | \"AUTHORIZATION_ERROR\"\n  | \"RATE_LIMIT_ERROR\"\n  | \"FORBIDDEN\"\n  | \"STREAM_NOT_FOUND\"\n  | \"VALIDATION_ERROR\"\n>;\nexport const CODE_TO_STATUS: Record<MappedCode, 400 | 401 | 403 | 404 | 429> = {\n  AUTHENTICATION_ERROR: 401,\n  AUTHORIZATION_ERROR: 403,\n  RATE_LIMIT_ERROR: 429,\n  FORBIDDEN: 403,\n  STREAM_NOT_FOUND: 404,\n  VALIDATION_ERROR: 400,\n} as const;\n\n/**\n * Safely extract error message from unknown error value\n */\nexport function getErrorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAGO,MAAM,qBAAqB,MAAM;AAAA,EAC/B;AAAA,EACS;AAAA,EAEhB,WAAW,CACT,MACA,SACA,OACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,KAAK,OAAO,KAAK,YAAY;AAAA,IAC7B,MAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA;AAAA,EAGlD,MAAM,GAA+F;AAAA,IACnG,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,IACd;AAAA;AAEJ;AAAA;AAKO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,UAAkB;AAAA,IAC5B,MAAM,oBAAoB,qBAAqB,UAAU;AAAA;AAE7D;AAAA;AAKO,MAAM,wBAAwB,aAAa;AAAA,EAChD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,oBAAoB,SAAS,KAAK;AAAA;AAE5C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAC9C,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,kBAAkB,SAAS,KAAK;AAAA;AAE1C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAGrC;AAAA,EAFT,WAAW,CACT,SACO,YACP,OACA;AAAA,IACA,MAAM,kBAAkB,SAAS,KAAK;AAAA,IAH/B;AAAA;AAAA,EAMA,MAAM,GAA+H;AAAA,IAC5I,MAAM,OAAO,MAAM,OAAO;AAAA,IAC1B,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK;AAAA,IACnB;AAAA;AAEJ;AAAA;AAKO,MAAM,8BAA8B,aAAa;AAAA,EACtD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,2BAA2B,SAAS,KAAK;AAAA;AAEnD;AAAA;AAEO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,wBAAwB,OAAO;AAAA;AAEzC;AAAA;AAEO,MAAM,2BAA2B,aAAa;AAAA,EACnD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,uBAAuB,OAAO;AAAA;AAExC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,oBAAoB,OAAO;AAAA;AAErC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,UAAU,aAAa;AAAA,IACjC,MAAM,aAAa,OAAO;AAAA;AAE9B;AAIO,IAAM,iBAA8D;AAAA,EACzE,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,kBAAkB;AACpB;AAKO,SAAS,eAAe,CAAC,KAAsB;AAAA,EACpD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA;",
-  "debugId": "47BA7DDA27F2DCB464756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAO,IAAM,aAAa;AAAA,EACxB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,yBAAyB;AAAA,EACzB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AACb;AAAA;AAOO,MAAM,qBAAqB,MAAM;AAAA,EAC/B;AAAA,EACS;AAAA,EAEhB,WAAW,CACT,MACA,SACA,OACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,KAAK,OAAO,KAAK,YAAY;AAAA,IAC7B,MAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA;AAAA,EAGlD,MAAM,GAA+F;AAAA,IACnG,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,IACd;AAAA;AAEJ;AAAA;AAKO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,UAAkB;AAAA,IAC5B,MAAM,oBAAoB,qBAAqB,UAAU;AAAA;AAE7D;AAAA;AAKO,MAAM,wBAAwB,aAAa;AAAA,EAChD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,oBAAoB,SAAS,KAAK;AAAA;AAE5C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAC9C,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,kBAAkB,SAAS,KAAK;AAAA;AAE1C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAGrC;AAAA,EAFT,WAAW,CACT,SACO,YACP,OACA;AAAA,IACA,MAAM,kBAAkB,SAAS,KAAK;AAAA,IAH/B;AAAA;AAAA,EAMA,MAAM,GAA+H;AAAA,IAC5I,MAAM,OAAO,MAAM,OAAO;AAAA,IAC1B,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK;AAAA,IACnB;AAAA;AAEJ;AAAA;AAKO,MAAM,8BAA8B,aAAa;AAAA,EACtD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,2BAA2B,SAAS,KAAK;AAAA;AAEnD;AAAA;AAEO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,wBAAwB,OAAO;AAAA;AAEzC;AAAA;AAEO,MAAM,2BAA2B,aAAa;AAAA,EACnD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,uBAAuB,OAAO;AAAA;AAExC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,oBAAoB,OAAO;AAAA;AAErC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,UAAU,aAAa;AAAA,IACjC,MAAM,aAAa,OAAO;AAAA;AAE9B;AAaO,IAAM,iBAAkE;AAAA,EAC7E,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,kBAAkB;AACpB;AAKO,SAAS,eAAe,CAAC,KAAsB;AAAA,EACpD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA;",
+  "debugId": "04C32356C753666D64756E2164756E21",
   "names": []
 }

package/dist/src/index.d.ts

@@ -37,7 +37,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -96,7 +96,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -136,6 +136,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {
@@ -321,13 +322,25 @@ declare function getDb(connectionString?: string): Kysely<Database>;
 declare function getRawClient(): ReturnType<typeof postgres>;
 /** Close the DB connection pool. Call in CLI commands to allow process exit. */
 declare function closeDb(): Promise<void>;
+declare const ErrorCodes: {
+	readonly STREAM_NOT_FOUND: "STREAM_NOT_FOUND"
+	readonly VALIDATION_ERROR: "VALIDATION_ERROR"
+	readonly DATABASE_ERROR: "DATABASE_ERROR"
+	readonly DELIVERY_ERROR: "DELIVERY_ERROR"
+	readonly FILTER_EVALUATION_ERROR: "FILTER_EVALUATION_ERROR"
+	readonly AUTHENTICATION_ERROR: "AUTHENTICATION_ERROR"
+	readonly AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR"
+	readonly RATE_LIMIT_ERROR: "RATE_LIMIT_ERROR"
+	readonly FORBIDDEN: "FORBIDDEN"
+};
+type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
 /**
 * Base error class for all Stacks Streams errors
 */
 declare class StreamsError extends Error {
-	code: string;
+	code: ErrorCode;
 	cause?: unknown;
-	constructor(code: string, message: string, cause?: unknown);
+	constructor(code: ErrorCode, message: string, cause?: unknown);
 	toJSON(): {
 		name: string
 		code: string
@@ -389,7 +402,8 @@ declare class ForbiddenError extends StreamsError {
 }
 /** Error code → HTTP status. Used by API middleware for code-based matching
 *  (avoids cross-bundle instanceof failures from bunup class duplication). */
-declare const CODE_TO_STATUS: Record<string, 400 | 401 | 403 | 404 | 429>;
+type MappedCode = Extract<ErrorCode, "AUTHENTICATION_ERROR" | "AUTHORIZATION_ERROR" | "RATE_LIMIT_ERROR" | "FORBIDDEN" | "STREAM_NOT_FOUND" | "VALIDATION_ERROR">;
+declare const CODE_TO_STATUS: Record<MappedCode, 400 | 401 | 403 | 404 | 429>;
 /**
 * Safely extract error message from unknown error value
 */
@@ -725,4 +739,4 @@ declare function createSignatureHeader(payload: string, secret: string, timestam
 * Returns true if valid, false otherwise
 */
 declare function verifySignatureHeader(payload: string, header: string, secret: string, toleranceSeconds?: number): boolean;
-export { sql, exports_queue as queue, parseJsonb, logger, jsonb, getRawClient, getErrorMessage, getEnv, getDb, exports_hmac as crypto, closeDb, WaitlistTable, ValidationError, UsageSnapshotsTable, UsageSnapshot, UsageDailyTable, UsageDaily, UpdateTransaction, UpdateSubgraph, UpdateStreamSchema, UpdateStreamRow, UpdateStreamMetrics, UpdateStream, UpdateJob, UpdateIndexProgress, UpdateEvent, UpdateDelivery, UpdateBlock, UpdateApiKey, TransactionsTable, Transaction, SubgraphsTable, SubgraphTableSnapshotsTable, SubgraphSummary, SubgraphQueryParams, SubgraphProcessingStatsTable, SubgraphHealthSnapshotsTable, SubgraphHealthSnapshot, SubgraphDetail, Subgraph, StxTransferFilterSchema, StxTransferFilter, StxMintFilterSchema, StxMintFilter, StxLockFilterSchema, StxLockFilter, StxBurnFilterSchema, StxBurnFilter, StreamsTable, StreamsError, StreamResponseSchema, StreamResponse, StreamOptionsSchema, StreamOptions, StreamNotFoundError, StreamMetricsTable, StreamMetricsSchema, StreamMetricsResponse, StreamMetrics, StreamFilterSchema, StreamFilter, Stream, SessionsTable, Session, ReindexResponse, RateLimitError, QueueStats, PrintEventFilterSchema, PrintEventFilter, NftTransferFilterSchema, NftTransferFilter, NftMintFilterSchema, NftMintFilter, NftBurnFilterSchema, NftBurnFilter, MagicLinksTable, MagicLink, ListStreamsResponse, JobsTable, Job, InsertTransaction, InsertSubgraphHealthSnapshot, InsertSubgraph, InsertStreamMetrics, InsertStream, InsertSession, InsertMagicLink, InsertJob, InsertIndexProgress, InsertEvent, InsertDelivery, InsertBlock, InsertApiKey, InsertAccountInsight, InsertAccountAgentRun, InsertAccount, IndexProgressTable, IndexProgress, FtTransferFilterSchema, FtTransferFilter, FtMintFilterSchema, FtMintFilter, FtBurnFilterSchema, FtBurnFilter, ForbiddenError, FilterEvaluationError, EventsTable, Event, Env, DeploySubgraphResponse, DeploySubgraphRequestSchema, DeploySubgraphRequest, DeliveryPayloadSchema, DeliveryPayload, DeliveryError, Delivery, DeliveriesTable, DatabaseError, Database, CreateStreamSchema, CreateStreamResponse, CreateStream, ContractDeployFilterSchema, ContractDeployFilter, ContractCallFilterSchema, ContractCallFilter, CODE_TO_STATUS, BulkResumeResponse, BulkPauseResponse, BlocksTable, Block, AuthorizationError, AuthenticationError, ApiKeysTable, ApiKey, AccountsTable, AccountInsightsTable, AccountInsight, AccountAgentRunsTable, AccountAgentRun, Account };
+export { sql, exports_queue as queue, parseJsonb, logger, jsonb, getRawClient, getErrorMessage, getEnv, getDb, exports_hmac as crypto, closeDb, WaitlistTable, ValidationError, UsageSnapshotsTable, UsageSnapshot, UsageDailyTable, UsageDaily, UpdateTransaction, UpdateSubgraph, UpdateStreamSchema, UpdateStreamRow, UpdateStreamMetrics, UpdateStream, UpdateJob, UpdateIndexProgress, UpdateEvent, UpdateDelivery, UpdateBlock, UpdateApiKey, TransactionsTable, Transaction, SubgraphsTable, SubgraphTableSnapshotsTable, SubgraphSummary, SubgraphQueryParams, SubgraphProcessingStatsTable, SubgraphHealthSnapshotsTable, SubgraphHealthSnapshot, SubgraphDetail, Subgraph, StxTransferFilterSchema, StxTransferFilter, StxMintFilterSchema, StxMintFilter, StxLockFilterSchema, StxLockFilter, StxBurnFilterSchema, StxBurnFilter, StreamsTable, StreamsError, StreamResponseSchema, StreamResponse, StreamOptionsSchema, StreamOptions, StreamNotFoundError, StreamMetricsTable, StreamMetricsSchema, StreamMetricsResponse, StreamMetrics, StreamFilterSchema, StreamFilter, Stream, SessionsTable, Session, ReindexResponse, RateLimitError, QueueStats, PrintEventFilterSchema, PrintEventFilter, NftTransferFilterSchema, NftTransferFilter, NftMintFilterSchema, NftMintFilter, NftBurnFilterSchema, NftBurnFilter, MagicLinksTable, MagicLink, ListStreamsResponse, JobsTable, Job, InsertTransaction, InsertSubgraphHealthSnapshot, InsertSubgraph, InsertStreamMetrics, InsertStream, InsertSession, InsertMagicLink, InsertJob, InsertIndexProgress, InsertEvent, InsertDelivery, InsertBlock, InsertApiKey, InsertAccountInsight, InsertAccountAgentRun, InsertAccount, IndexProgressTable, IndexProgress, FtTransferFilterSchema, FtTransferFilter, FtMintFilterSchema, FtMintFilter, FtBurnFilterSchema, FtBurnFilter, ForbiddenError, FilterEvaluationError, EventsTable, Event, ErrorCodes, ErrorCode, Env, DeploySubgraphResponse, DeploySubgraphRequestSchema, DeploySubgraphRequest, DeliveryPayloadSchema, DeliveryPayload, DeliveryError, Delivery, DeliveriesTable, DatabaseError, Database, CreateStreamSchema, CreateStreamResponse, CreateStream, ContractDeployFilterSchema, ContractDeployFilter, ContractCallFilterSchema, ContractCallFilter, CODE_TO_STATUS, BulkResumeResponse, BulkPauseResponse, BlocksTable, Block, AuthorizationError, AuthenticationError, ApiKeysTable, ApiKey, AccountsTable, AccountInsightsTable, AccountInsight, AccountAgentRunsTable, AccountAgentRun, Account };

package/dist/src/index.js

@@ -41,7 +41,9 @@ function getDb(connectionString) {
   if (!db) {
     const url = connectionString || process.env.DATABASE_URL || "postgres://postgres:postgres@localhost:5432/streams_dev";
     const isLocal = url.includes("localhost") || url.includes("127.0.0.1") || url.includes("@postgres:");
+    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? "20", 10);
     rawClient = postgres(url, {
+      max: poolMax,
       ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== "0" }
     });
     db = new Kysely({
@@ -66,6 +68,18 @@ async function closeDb() {
   }
 }
 // src/errors.ts
+var ErrorCodes = {
+  STREAM_NOT_FOUND: "STREAM_NOT_FOUND",
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  DATABASE_ERROR: "DATABASE_ERROR",
+  DELIVERY_ERROR: "DELIVERY_ERROR",
+  FILTER_EVALUATION_ERROR: "FILTER_EVALUATION_ERROR",
+  AUTHENTICATION_ERROR: "AUTHENTICATION_ERROR",
+  AUTHORIZATION_ERROR: "AUTHORIZATION_ERROR",
+  RATE_LIMIT_ERROR: "RATE_LIMIT_ERROR",
+  FORBIDDEN: "FORBIDDEN"
+};
+
 class StreamsError extends Error {
   code;
   cause;
@@ -159,7 +173,6 @@ var CODE_TO_STATUS = {
   RATE_LIMIT_ERROR: 429,
   FORBIDDEN: 403,
   STREAM_NOT_FOUND: 404,
-  VIEW_NOT_FOUND: 404,
   VALIDATION_ERROR: 400
 };
 function getErrorMessage(err) {
@@ -658,6 +671,7 @@ export {
   FtBurnFilterSchema,
   ForbiddenError,
   FilterEvaluationError,
+  ErrorCodes,
   DeploySubgraphRequestSchema,
   DeliveryPayloadSchema,
   DeliveryError,
@@ -670,5 +684,5 @@ export {
   AuthenticationError
 };
 
-//# debugId=4EF79202801DC1C664756E2164756E21
+//# debugId=C1B5835384CBB78564756E2164756E21
 //# sourceMappingURL=index.js.map

package/dist/src/index.js.map

@@ -3,8 +3,8 @@
   "sources": ["../src/db/jsonb.ts", "../src/db/index.ts", "../src/errors.ts", "../src/env.ts", "../src/logger.ts", "../src/queue/index.ts", "../src/schemas/filters.ts", "../src/schemas/subgraphs.ts", "../src/schemas/stream.ts", "../src/crypto/hmac.ts"],
   "sourcesContent": [
     "import { sql, type RawBuilder } from \"kysely\";\n\n/**\n * Safely encode a JS value as a JSONB literal for Kysely inserts/updates.\n * Kysely + postgres.js double-encodes JSON when using parameterized queries\n * with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.\n */\nexport function jsonb(value: unknown): RawBuilder<unknown> {\n  const escaped = JSON.stringify(value).replace(/'/g, \"''\");\n  return sql`${sql.raw(`'${escaped}'::jsonb`)}`;\n}\n\n/**\n * Safely parse a JSONB value from the database.\n * Handles double-encoded strings where postgres.js returns a JSON string\n * instead of a parsed object.\n */\nexport function parseJsonb<T = unknown>(value: unknown): T {\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return value as T;\n    }\n  }\n  return (value ?? {}) as T;\n}\n",
-    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    rawClient = postgres(url, {\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
-    "/**\n * Base error class for all Stacks Streams errors\n */\nexport class StreamsError extends Error {\n  public code: string;\n  public override cause?: unknown;\n\n  constructor(\n    code: string,\n    message: string,\n    cause?: unknown\n  ) {\n    super(message);\n    this.code = code;\n    this.cause = cause;\n    this.name = this.constructor.name;\n    Error.captureStackTrace?.(this, this.constructor);\n  }\n\n  toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown } {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      stack: this.stack,\n      cause: this.cause,\n    };\n  }\n}\n\n/**\n * Stream not found error\n */\nexport class StreamNotFoundError extends StreamsError {\n  constructor(streamId: string) {\n    super(\"STREAM_NOT_FOUND\", `Stream not found: ${streamId}`);\n  }\n}\n\n/**\n * Validation error for invalid input\n */\nexport class ValidationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"VALIDATION_ERROR\", message, cause);\n  }\n}\n\n/**\n * Database operation error\n */\nexport class DatabaseError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"DATABASE_ERROR\", message, cause);\n  }\n}\n\n/**\n * Delivery error\n */\nexport class DeliveryError extends StreamsError {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    cause?: unknown\n  ) {\n    super(\"DELIVERY_ERROR\", message, cause);\n  }\n\n  override toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown; statusCode: number | undefined } {\n    const base = super.toJSON();\n    return {\n      name: base.name,\n      code: base.code,\n      message: base.message,\n      stack: base.stack,\n      cause: base.cause,\n      statusCode: this.statusCode,\n    };\n  }\n}\n\n/**\n * Filter evaluation error\n */\nexport class FilterEvaluationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"FILTER_EVALUATION_ERROR\", message, cause);\n  }\n}\n\nexport class AuthenticationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHENTICATION_ERROR\", message);\n  }\n}\n\nexport class AuthorizationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHORIZATION_ERROR\", message);\n  }\n}\n\nexport class RateLimitError extends StreamsError {\n  constructor(message: string) {\n    super(\"RATE_LIMIT_ERROR\", message);\n  }\n}\n\nexport class ForbiddenError extends StreamsError {\n  constructor(message = \"Forbidden\") {\n    super(\"FORBIDDEN\", message);\n  }\n}\n\n/** Error code → HTTP status. Used by API middleware for code-based matching\n *  (avoids cross-bundle instanceof failures from bunup class duplication). */\nexport const CODE_TO_STATUS: Record<string, 400 | 401 | 403 | 404 | 429> = {\n  AUTHENTICATION_ERROR: 401,\n  AUTHORIZATION_ERROR: 403,\n  RATE_LIMIT_ERROR: 429,\n  FORBIDDEN: 403,\n  STREAM_NOT_FOUND: 404,\n  VIEW_NOT_FOUND: 404,\n  VALIDATION_ERROR: 400,\n} as const;\n\n/**\n * Safely extract error message from unknown error value\n */\nexport function getErrorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n",
+    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? \"20\", 10);\n    rawClient = postgres(url, {\n      max: poolMax,\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
+    "export const ErrorCodes = {\n  STREAM_NOT_FOUND: \"STREAM_NOT_FOUND\",\n  VALIDATION_ERROR: \"VALIDATION_ERROR\",\n  DATABASE_ERROR: \"DATABASE_ERROR\",\n  DELIVERY_ERROR: \"DELIVERY_ERROR\",\n  FILTER_EVALUATION_ERROR: \"FILTER_EVALUATION_ERROR\",\n  AUTHENTICATION_ERROR: \"AUTHENTICATION_ERROR\",\n  AUTHORIZATION_ERROR: \"AUTHORIZATION_ERROR\",\n  RATE_LIMIT_ERROR: \"RATE_LIMIT_ERROR\",\n  FORBIDDEN: \"FORBIDDEN\",\n} as const;\n\nexport type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];\n\n/**\n * Base error class for all Stacks Streams errors\n */\nexport class StreamsError extends Error {\n  public code: ErrorCode;\n  public override cause?: unknown;\n\n  constructor(\n    code: ErrorCode,\n    message: string,\n    cause?: unknown\n  ) {\n    super(message);\n    this.code = code;\n    this.cause = cause;\n    this.name = this.constructor.name;\n    Error.captureStackTrace?.(this, this.constructor);\n  }\n\n  toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown } {\n    return {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n      stack: this.stack,\n      cause: this.cause,\n    };\n  }\n}\n\n/**\n * Stream not found error\n */\nexport class StreamNotFoundError extends StreamsError {\n  constructor(streamId: string) {\n    super(\"STREAM_NOT_FOUND\", `Stream not found: ${streamId}`);\n  }\n}\n\n/**\n * Validation error for invalid input\n */\nexport class ValidationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"VALIDATION_ERROR\", message, cause);\n  }\n}\n\n/**\n * Database operation error\n */\nexport class DatabaseError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"DATABASE_ERROR\", message, cause);\n  }\n}\n\n/**\n * Delivery error\n */\nexport class DeliveryError extends StreamsError {\n  constructor(\n    message: string,\n    public statusCode?: number,\n    cause?: unknown\n  ) {\n    super(\"DELIVERY_ERROR\", message, cause);\n  }\n\n  override toJSON(): { name: string; code: string; message: string; stack: string | undefined; cause: unknown; statusCode: number | undefined } {\n    const base = super.toJSON();\n    return {\n      name: base.name,\n      code: base.code,\n      message: base.message,\n      stack: base.stack,\n      cause: base.cause,\n      statusCode: this.statusCode,\n    };\n  }\n}\n\n/**\n * Filter evaluation error\n */\nexport class FilterEvaluationError extends StreamsError {\n  constructor(message: string, cause?: unknown) {\n    super(\"FILTER_EVALUATION_ERROR\", message, cause);\n  }\n}\n\nexport class AuthenticationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHENTICATION_ERROR\", message);\n  }\n}\n\nexport class AuthorizationError extends StreamsError {\n  constructor(message: string) {\n    super(\"AUTHORIZATION_ERROR\", message);\n  }\n}\n\nexport class RateLimitError extends StreamsError {\n  constructor(message: string) {\n    super(\"RATE_LIMIT_ERROR\", message);\n  }\n}\n\nexport class ForbiddenError extends StreamsError {\n  constructor(message = \"Forbidden\") {\n    super(\"FORBIDDEN\", message);\n  }\n}\n\n/** Error code → HTTP status. Used by API middleware for code-based matching\n *  (avoids cross-bundle instanceof failures from bunup class duplication). */\ntype MappedCode = Extract<\n  ErrorCode,\n  | \"AUTHENTICATION_ERROR\"\n  | \"AUTHORIZATION_ERROR\"\n  | \"RATE_LIMIT_ERROR\"\n  | \"FORBIDDEN\"\n  | \"STREAM_NOT_FOUND\"\n  | \"VALIDATION_ERROR\"\n>;\nexport const CODE_TO_STATUS: Record<MappedCode, 400 | 401 | 403 | 404 | 429> = {\n  AUTHENTICATION_ERROR: 401,\n  AUTHORIZATION_ERROR: 403,\n  RATE_LIMIT_ERROR: 429,\n  FORBIDDEN: 403,\n  STREAM_NOT_FOUND: 404,\n  VALIDATION_ERROR: 400,\n} as const;\n\n/**\n * Safely extract error message from unknown error value\n */\nexport function getErrorMessage(err: unknown): string {\n  return err instanceof Error ? err.message : String(err);\n}\n",
     "import { z } from \"zod/v4\";\n\n// Parse comma-separated networks\nconst networksSchema = z.string().transform((val) => {\n  const networks = val.split(\",\").map((n) => n.trim()).filter(Boolean);\n  const valid = [\"mainnet\", \"testnet\"];\n  for (const n of networks) {\n    if (!valid.includes(n)) {\n      throw new Error(`Invalid network: ${n}. Must be one of: ${valid.join(\", \")}`);\n    }\n  }\n  return networks as (\"mainnet\" | \"testnet\")[];\n});\n\ninterface EnvSchemaOutput {\n  DATABASE_URL?: string;\n  NETWORK?: \"mainnet\" | \"testnet\";\n  NETWORKS?: (\"mainnet\" | \"testnet\")[];\n  LOG_LEVEL: \"debug\" | \"info\" | \"warn\" | \"error\";\n  NODE_ENV: \"development\" | \"production\" | \"test\";\n}\n\n// Cast needed: z.preprocess / z.default create different _input vs _output types\n// that z.ZodType<T> can't represent without explicit input type param\nconst envSchema: z.ZodType<EnvSchemaOutput> = z.object({\n  DATABASE_URL: z.preprocess(\n    (val) => (typeof val === \"string\" && val.length === 0) ? undefined : val,\n    z.string().url().optional(),\n  ),\n  NETWORK: z.enum([\"mainnet\", \"testnet\"]).optional(),\n  NETWORKS: networksSchema.optional(),\n  LOG_LEVEL: z.enum([\"debug\", \"info\", \"warn\", \"error\"]).default(\"info\"),\n  NODE_ENV: z.enum([\"development\", \"production\", \"test\"]).default(\"development\"),\n}) as unknown as z.ZodType<EnvSchemaOutput>;\n\nexport type Env = EnvSchemaOutput & {\n  enabledNetworks: (\"mainnet\" | \"testnet\")[];\n};\n\nlet cachedEnv: Env | null = null;\n\nexport function getEnv(): Env {\n  if (cachedEnv) {\n    return cachedEnv;\n  }\n\n  const result = envSchema.safeParse(process.env);\n\n  if (!result.success) {\n    console.error(\"❌ Invalid environment configuration:\");\n    console.error(z.treeifyError(result.error));\n    throw new Error(\"Invalid environment configuration\");\n  }\n\n  // Compute enabled networks from NETWORKS or NETWORK\n  let enabledNetworks: (\"mainnet\" | \"testnet\")[];\n  if (result.data.NETWORKS && result.data.NETWORKS.length > 0) {\n    enabledNetworks = result.data.NETWORKS;\n  } else if (result.data.NETWORK) {\n    enabledNetworks = [result.data.NETWORK];\n  } else {\n    enabledNetworks = [\"mainnet\"]; // Default\n  }\n\n  cachedEnv = { ...result.data, enabledNetworks };\n  return cachedEnv;\n}\n\n// Export for testing\nexport { envSchema };\n",
     "import { getEnv } from \"./env.ts\";\n\ntype LogLevel = \"debug\" | \"info\" | \"warn\" | \"error\";\n\nconst LOG_LEVELS: Record<LogLevel, number> = {\n  debug: 0,\n  info: 1,\n  warn: 2,\n  error: 3,\n};\n\nclass Logger {\n  private _level?: LogLevel;\n  private _isProduction?: boolean;\n  private _initialized = false;\n\n  private init() {\n    if (this._initialized) return;\n    this._initialized = true;\n    try {\n      const env = getEnv();\n      this._level = env.LOG_LEVEL;\n      this._isProduction = env.NODE_ENV === \"production\";\n    } catch {\n      // Fallback when env is unavailable (e.g. tests without DATABASE_URL)\n      this._level = \"info\";\n      this._isProduction = false;\n    }\n  }\n\n  private get level(): LogLevel {\n    this.init();\n    return this._level!;\n  }\n\n  private get isProduction(): boolean {\n    this.init();\n    return this._isProduction!;\n  }\n\n  private shouldLog(level: LogLevel): boolean {\n    return LOG_LEVELS[level] >= LOG_LEVELS[this.level];\n  }\n\n  private formatMessage(level: LogLevel, message: string, meta?: Record<string, any>) {\n    const timestamp = new Date().toISOString();\n\n    if (this.isProduction) {\n      // JSON output for production\n      return JSON.stringify({\n        timestamp,\n        level,\n        message,\n        ...meta,\n      });\n    }\n\n    // Human-readable output for development\n    const metaStr = meta ? ` ${JSON.stringify(meta)}` : \"\";\n    return `[${timestamp}] ${level.toUpperCase()}: ${message}${metaStr}`;\n  }\n\n  debug(message: string, meta?: Record<string, any>): void {\n    if (this.shouldLog(\"debug\")) {\n      console.debug(this.formatMessage(\"debug\", message, meta));\n    }\n  }\n\n  info(message: string, meta?: Record<string, any>): void {\n    if (this.shouldLog(\"info\")) {\n      console.info(this.formatMessage(\"info\", message, meta));\n    }\n  }\n\n  warn(message: string, meta?: Record<string, any>): void {\n    if (this.shouldLog(\"warn\")) {\n      console.warn(this.formatMessage(\"warn\", message, meta));\n    }\n  }\n\n  error(message: string, meta?: Record<string, any>): void {\n    if (this.shouldLog(\"error\")) {\n      console.error(this.formatMessage(\"error\", message, meta));\n    }\n  }\n}\n\n// Export singleton instance\nexport const logger: Logger = new Logger();\n",
     "import { sql } from \"kysely\";\nimport { getDb } from \"../db/index.ts\";\nimport type { Job } from \"../db/types.ts\";\nimport { randomUUID } from \"crypto\";\n\nexport interface QueueStats {\n  pending: number;\n  processing: number;\n  completed: number;\n  failed: number;\n  total: number;\n}\n\n// Worker identifier for this process\nconst WORKER_ID: string = `worker-${randomUUID().slice(0, 8)}`;\n\n/**\n * Enqueue a new job for stream evaluation\n */\nexport async function enqueue(\n  streamId: string,\n  blockHeight: number,\n  backfill = false\n): Promise<string> {\n  const db = getDb();\n\n  const row = await db\n    .insertInto(\"jobs\")\n    .values({\n      stream_id: streamId,\n      block_height: blockHeight,\n      backfill,\n      status: \"pending\",\n      attempts: 0,\n    })\n    .returning([\"id\"])\n    .executeTakeFirstOrThrow();\n\n  return row.id;\n}\n\n/**\n * Claim a pending job using SKIP LOCKED to prevent concurrent access\n * Returns null if no jobs available\n */\nexport async function claim(): Promise<Job | null> {\n  const db = getDb();\n\n  const { rows } = await sql<Job>`\n    UPDATE jobs\n    SET\n      status = 'processing',\n      locked_at = NOW(),\n      locked_by = ${WORKER_ID},\n      attempts = attempts + 1\n    WHERE id = (\n      SELECT id FROM jobs\n      WHERE status = 'pending'\n      ORDER BY\n        backfill ASC,\n        block_height ASC,\n        created_at ASC\n      FOR UPDATE SKIP LOCKED\n      LIMIT 1\n    )\n    RETURNING *\n  `.execute(db);\n\n  return rows[0] ?? null;\n}\n\n/**\n * Mark a job as completed\n */\nexport async function complete(jobId: string): Promise<void> {\n  const db = getDb();\n\n  await db\n    .updateTable(\"jobs\")\n    .set({\n      status: \"completed\",\n      completed_at: new Date(),\n      locked_at: null,\n      locked_by: null,\n    })\n    .where(\"id\", \"=\", jobId)\n    .execute();\n}\n\n/**\n * Mark a job as failed\n * Re-queues if under max attempts, otherwise marks as permanently failed\n */\nexport async function fail(\n  jobId: string,\n  error: string,\n  maxAttempts = 3\n): Promise<void> {\n  const db = getDb();\n\n  const job = await db\n    .selectFrom(\"jobs\")\n    .select(\"attempts\")\n    .where(\"id\", \"=\", jobId)\n    .executeTakeFirst();\n\n  if (!job) return;\n\n  if (job.attempts < maxAttempts) {\n    await db\n      .updateTable(\"jobs\")\n      .set({\n        status: \"pending\",\n        error,\n        locked_at: null,\n        locked_by: null,\n      })\n      .where(\"id\", \"=\", jobId)\n      .execute();\n  } else {\n    await db\n      .updateTable(\"jobs\")\n      .set({\n        status: \"failed\",\n        error,\n        completed_at: new Date(),\n        locked_at: null,\n        locked_by: null,\n      })\n      .where(\"id\", \"=\", jobId)\n      .execute();\n  }\n}\n\n/**\n * Get queue statistics\n */\nexport async function stats(): Promise<QueueStats> {\n  const { rows } = await sql<{ status: string; count: string }>`\n    SELECT status, COUNT(*) as count\n    FROM jobs\n    GROUP BY status\n  `.execute(getDb());\n\n  const counts: Record<string, number> = {};\n  for (const row of rows) {\n    counts[row.status] = parseInt(row.count, 10);\n  }\n\n  return {\n    pending: counts[\"pending\"] || 0,\n    processing: counts[\"processing\"] || 0,\n    completed: counts[\"completed\"] || 0,\n    failed: counts[\"failed\"] || 0,\n    total: Object.values(counts).reduce((a, b) => a + b, 0),\n  };\n}\n\n/**\n * Get worker ID for this process\n */\nexport function getWorkerId(): string {\n  return WORKER_ID;\n}\n\nexport { WORKER_ID };\n",
@@ -13,7 +13,7 @@
     "import { z } from \"zod/v4\";\nimport { StreamFilterSchema, type StreamFilter } from \"./filters.ts\";\n\n// ── Type interfaces ──────────────────────────────────────────────────\n\nexport interface StreamOptions {\n  decodeClarityValues: boolean;\n  includeRawTx: boolean;\n  includeBlockMetadata: boolean;\n  rateLimit: number;\n  timeoutMs: number;\n  maxRetries: number;\n}\n\nexport interface CreateStream {\n  name: string;\n  endpointUrl: string;\n  filters: StreamFilter[];\n  options?: StreamOptions;\n  startBlock?: number;\n  endBlock?: number;\n}\n\nexport interface UpdateStream {\n  name?: string;\n  endpointUrl?: string;\n  filters?: StreamFilter[];\n  options?: Partial<StreamOptions>;\n}\n\nexport interface DeliveryPayload {\n  streamId: string;\n  streamName: string;\n  block: {\n    height: number;\n    hash: string;\n    parentHash: string;\n    burnBlockHeight: number;\n    timestamp: number;\n  };\n  matches: {\n    transactions: Array<{\n      txId: string;\n      type: string;\n      sender: string;\n      status: string;\n      contractId: string | null;\n      functionName: string | null;\n      rawTx?: string;\n    }>;\n    events: Array<{\n      txId: string;\n      eventIndex: number;\n      type: string;\n      data?: any;\n    }>;\n  };\n  isBackfill: boolean;\n  deliveredAt: string;\n}\n\nexport interface StreamMetricsResponse {\n  totalDeliveries: number;\n  failedDeliveries: number;\n  lastTriggeredAt: string | null;\n  lastTriggeredBlock: number | null;\n  errorMessage: string | null;\n}\n\nexport interface StreamResponse {\n  id: string;\n  name: string;\n  status: \"inactive\" | \"active\" | \"paused\" | \"failed\";\n  endpointUrl: string;\n  filters: StreamFilter[];\n  options: StreamOptions;\n  totalDeliveries: number;\n  failedDeliveries: number;\n  lastTriggeredAt?: string | null;\n  lastTriggeredBlock?: number | null;\n  errorMessage?: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n// ── Zod schemas ──────────────────────────────────────────────────────\n\n// Stream options schema (internal, keeps ZodObject methods like .partial())\nconst streamOptionsShape = z.object({\n  decodeClarityValues: z.boolean().default(true),\n  includeRawTx: z.boolean().default(false),\n  includeBlockMetadata: z.boolean().default(true),\n  rateLimit: z.number().int().positive().max(100).default(10),\n  timeoutMs: z.number().int().positive().max(30000).default(10000),\n  maxRetries: z.number().int().min(0).max(10).default(3),\n});\n\n// Cast: .default() makes _input fields optional, but output type matches StreamOptions\nexport const StreamOptionsSchema: z.ZodType<StreamOptions> =\n  streamOptionsShape as unknown as z.ZodType<StreamOptions>;\n\nexport const CreateStreamSchema: z.ZodType<CreateStream> = z.object({\n  name: z.string().min(1).max(255),\n  endpointUrl: z.string().url(),\n  filters: z.array(StreamFilterSchema).min(1),\n  options: streamOptionsShape.optional(),\n  startBlock: z.number().int().positive().optional(),\n  endBlock: z.number().int().positive().optional(),\n}) as unknown as z.ZodType<CreateStream>;\n\nexport const UpdateStreamSchema: z.ZodType<UpdateStream> = z.object({\n  name: z.string().min(1).max(255).optional(),\n  endpointUrl: z.string().url().optional(),\n  filters: z.array(StreamFilterSchema).min(1).optional(),\n  options: streamOptionsShape.partial().optional(),\n}).refine(\n  (data) => Object.keys(data).length > 0,\n  { message: \"At least one field must be provided for update\" }\n) as unknown as z.ZodType<UpdateStream>;\n\nexport const DeliveryPayloadSchema: z.ZodType<DeliveryPayload> = z.object({\n  streamId: z.string().uuid(),\n  streamName: z.string(),\n  block: z.object({\n    height: z.number(),\n    hash: z.string(),\n    parentHash: z.string(),\n    burnBlockHeight: z.number(),\n    timestamp: z.number(),\n  }),\n  matches: z.object({\n    transactions: z.array(z.object({\n      txId: z.string(),\n      type: z.string(),\n      sender: z.string(),\n      status: z.string(),\n      contractId: z.string().nullable(),\n      functionName: z.string().nullable(),\n      rawTx: z.string().optional(),\n    })),\n    events: z.array(z.object({\n      txId: z.string(),\n      eventIndex: z.number(),\n      type: z.string(),\n      data: z.any(),\n    })),\n  }),\n  isBackfill: z.boolean(),\n  deliveredAt: z.string().datetime(),\n}) as unknown as z.ZodType<DeliveryPayload>;\n\nexport const StreamMetricsSchema: z.ZodType<StreamMetricsResponse> = z.object({\n  totalDeliveries: z.number(),\n  failedDeliveries: z.number(),\n  lastTriggeredAt: z.string().datetime().nullable(),\n  lastTriggeredBlock: z.number().nullable(),\n  errorMessage: z.string().nullable(),\n});\n\nexport const StreamResponseSchema: z.ZodType<StreamResponse> = z.object({\n  id: z.string().uuid(),\n  name: z.string(),\n  status: z.enum([\"inactive\", \"active\", \"paused\", \"failed\"]),\n  endpointUrl: z.string().url(),\n  filters: z.array(StreamFilterSchema),\n  options: streamOptionsShape,\n  totalDeliveries: z.number().int().default(0),\n  failedDeliveries: z.number().int().default(0),\n  lastTriggeredAt: z.string().datetime().nullable().optional(),\n  lastTriggeredBlock: z.number().int().nullable().optional(),\n  errorMessage: z.string().nullable().optional(),\n  createdAt: z.string().datetime(),\n  updatedAt: z.string().datetime(),\n}) as unknown as z.ZodType<StreamResponse>;\n\n// API response types\nexport interface CreateStreamResponse {\n  stream: StreamResponse;\n  signingSecret: string;\n}\n\nexport interface ListStreamsResponse {\n  streams: StreamResponse[];\n  total: number;\n}\n\nexport interface BulkPauseResponse {\n  paused: number;\n  streams: StreamResponse[];\n}\n\nexport interface BulkResumeResponse {\n  resumed: number;\n  streams: StreamResponse[];\n}\n",
     "import { createHmac, randomBytes } from \"crypto\";\n\n/**\n * Generate a random secret for delivery signing\n * Returns 32 bytes as a 64-character hex string\n */\nexport function generateSecret(): string {\n  return randomBytes(32).toString(\"hex\");\n}\n\n/**\n * Sign a payload with HMAC-SHA256\n * Returns the signature as a hex string\n */\nexport function signPayload(payload: string, secret: string): string {\n  const hmac = createHmac(\"sha256\", secret);\n  hmac.update(payload);\n  return hmac.digest(\"hex\");\n}\n\n/**\n * Verify an HMAC signature\n * Uses constant-time comparison to prevent timing attacks\n */\nexport function verifySignature(\n  payload: string,\n  signature: string,\n  secret: string\n): boolean {\n  const expectedSignature = signPayload(payload, secret);\n\n  // Constant-time comparison\n  if (signature.length !== expectedSignature.length) {\n    return false;\n  }\n\n  let result = 0;\n  for (let i = 0; i < signature.length; i++) {\n    result |= signature.charCodeAt(i) ^ expectedSignature.charCodeAt(i);\n  }\n\n  return result === 0;\n}\n\n/**\n * Create a Stripe-style signature header\n * Format: t=timestamp,v1=signature\n */\nexport function createSignatureHeader(\n  payload: string,\n  secret: string,\n  timestamp?: number\n): string {\n  const ts = timestamp ?? Math.floor(Date.now() / 1000);\n  const signedPayload = `${ts}.${payload}`;\n  const signature = signPayload(signedPayload, secret);\n\n  return `t=${ts},v1=${signature}`;\n}\n\n/**\n * Parse and verify a Stripe-style signature header\n * Returns true if valid, false otherwise\n */\nexport function verifySignatureHeader(\n  payload: string,\n  header: string,\n  secret: string,\n  toleranceSeconds = 300 // 5 minutes\n): boolean {\n  // Parse header\n  const parts = header.split(\",\");\n  const timestamp = parts\n    .find((p) => p.startsWith(\"t=\"))\n    ?.slice(2);\n  const signature = parts\n    .find((p) => p.startsWith(\"v1=\"))\n    ?.slice(3);\n\n  if (!timestamp || !signature) {\n    return false;\n  }\n\n  const ts = parseInt(timestamp, 10);\n  if (isNaN(ts)) {\n    return false;\n  }\n\n  // Check timestamp is within tolerance\n  const now = Math.floor(Date.now() / 1000);\n  if (Math.abs(now - ts) > toleranceSeconds) {\n    return false;\n  }\n\n  // Verify signature\n  const signedPayload = `${ts}.${payload}`;\n  return verifySignature(signedPayload, signature, secret);\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AAwCA,gBAAS;AArCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;ACpCK,MAAM,qBAAqB,MAAM;AAAA,EAC/B;AAAA,EACS;AAAA,EAEhB,WAAW,CACT,MACA,SACA,OACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,KAAK,OAAO,KAAK,YAAY;AAAA,IAC7B,MAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA;AAAA,EAGlD,MAAM,GAA+F;AAAA,IACnG,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,IACd;AAAA;AAEJ;AAAA;AAKO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,UAAkB;AAAA,IAC5B,MAAM,oBAAoB,qBAAqB,UAAU;AAAA;AAE7D;AAAA;AAKO,MAAM,wBAAwB,aAAa;AAAA,EAChD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,oBAAoB,SAAS,KAAK;AAAA;AAE5C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAC9C,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,kBAAkB,SAAS,KAAK;AAAA;AAE1C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAGrC;AAAA,EAFT,WAAW,CACT,SACO,YACP,OACA;AAAA,IACA,MAAM,kBAAkB,SAAS,KAAK;AAAA,IAH/B;AAAA;AAAA,EAMA,MAAM,GAA+H;AAAA,IAC5I,MAAM,OAAO,MAAM,OAAO;AAAA,IAC1B,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK;AAAA,IACnB;AAAA;AAEJ;AAAA;AAKO,MAAM,8BAA8B,aAAa;AAAA,EACtD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,2BAA2B,SAAS,KAAK;AAAA;AAEnD;AAAA;AAEO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,wBAAwB,OAAO;AAAA;AAEzC;AAAA;AAEO,MAAM,2BAA2B,aAAa;AAAA,EACnD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,uBAAuB,OAAO;AAAA;AAExC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,oBAAoB,OAAO;AAAA;AAErC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,UAAU,aAAa;AAAA,IACjC,MAAM,aAAa,OAAO;AAAA;AAE9B;AAIO,IAAM,iBAA8D;AAAA,EACzE,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,kBAAkB;AACpB;AAKO,SAAS,eAAe,CAAC,KAAsB;AAAA,EACpD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA;;;ACnIxD;AAGA,IAAM,iBAAiB,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ;AAAA,EACnD,MAAM,WAAW,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAAA,EACnE,MAAM,QAAQ,CAAC,WAAW,SAAS;AAAA,EACnC,WAAW,KAAK,UAAU;AAAA,IACxB,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG;AAAA,MACtB,MAAM,IAAI,MAAM,oBAAoB,sBAAsB,MAAM,KAAK,IAAI,GAAG;AAAA,IAC9E;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAYD,IAAM,YAAwC,EAAE,OAAO;AAAA,EACrD,cAAc,EAAE,WACd,CAAC,QAAS,OAAO,QAAQ,YAAY,IAAI,WAAW,IAAK,YAAY,KACrE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAC5B;AAAA,EACA,SAAS,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,SAAS;AAAA,EACjD,UAAU,eAAe,SAAS;AAAA,EAClC,WAAW,EAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,OAAO,CAAC,EAAE,QAAQ,MAAM;AAAA,EACpE,UAAU,EAAE,KAAK,CAAC,eAAe,cAAc,MAAM,CAAC,EAAE,QAAQ,aAAa;AAC/E,CAAC;AAMD,IAAI,YAAwB;AAErB,SAAS,MAAM,GAAQ;AAAA,EAC5B,IAAI,WAAW;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,UAAU,UAAU,QAAQ,GAAG;AAAA,EAE9C,IAAI,CAAC,OAAO,SAAS;AAAA,IACnB,QAAQ,MAAM,sCAAqC;AAAA,IACnD,QAAQ,MAAM,EAAE,aAAa,OAAO,KAAK,CAAC;AAAA,IAC1C,MAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI,OAAO,KAAK,YAAY,OAAO,KAAK,SAAS,SAAS,GAAG;AAAA,IAC3D,kBAAkB,OAAO,KAAK;AAAA,EAChC,EAAO,SAAI,OAAO,KAAK,SAAS;AAAA,IAC9B,kBAAkB,CAAC,OAAO,KAAK,OAAO;AAAA,EACxC,EAAO;AAAA,IACL,kBAAkB,CAAC,SAAS;AAAA;AAAA,EAG9B,YAAY,KAAK,OAAO,MAAM,gBAAgB;AAAA,EAC9C,OAAO;AAAA;;AC7DT,IAAM,aAAuC;AAAA,EAC3C,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAAA;AAEA,MAAM,OAAO;AAAA,EACH;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EAEf,IAAI,GAAG;AAAA,IACb,IAAI,KAAK;AAAA,MAAc;AAAA,IACvB,KAAK,eAAe;AAAA,IACpB,IAAI;AAAA,MACF,MAAM,MAAM,OAAO;AAAA,MACnB,KAAK,SAAS,IAAI;AAAA,MAClB,KAAK,gBAAgB,IAAI,aAAa;AAAA,MACtC,MAAM;AAAA,MAEN,KAAK,SAAS;AAAA,MACd,KAAK,gBAAgB;AAAA;AAAA;AAAA,MAIb,KAAK,GAAa;AAAA,IAC5B,KAAK,KAAK;AAAA,IACV,OAAO,KAAK;AAAA;AAAA,MAGF,YAAY,GAAY;AAAA,IAClC,KAAK,KAAK;AAAA,IACV,OAAO,KAAK;AAAA;AAAA,EAGN,SAAS,CAAC,OAA0B;AAAA,IAC1C,OAAO,WAAW,UAAU,WAAW,KAAK;AAAA;AAAA,EAGtC,aAAa,CAAC,OAAiB,SAAiB,MAA4B;AAAA,IAClF,MAAM,YAAY,IAAI,KAAK,EAAE,YAAY;AAAA,IAEzC,IAAI,KAAK,cAAc;AAAA,MAErB,OAAO,KAAK,UAAU;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,WACG;AAAA,MACL,CAAC;AAAA,IACH;AAAA,IAGA,MAAM,UAAU,OAAO,IAAI,KAAK,UAAU,IAAI,MAAM;AAAA,IACpD,OAAO,IAAI,cAAc,MAAM,YAAY,MAAM,UAAU;AAAA;AAAA,EAG7D,KAAK,CAAC,SAAiB,MAAkC;AAAA,IACvD,IAAI,KAAK,UAAU,OAAO,GAAG;AAAA,MAC3B,QAAQ,MAAM,KAAK,cAAc,SAAS,SAAS,IAAI,CAAC;AAAA,IAC1D;AAAA;AAAA,EAGF,IAAI,CAAC,SAAiB,MAAkC;AAAA,IACtD,IAAI,KAAK,UAAU,MAAM,GAAG;AAAA,MAC1B,QAAQ,KAAK,KAAK,cAAc,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD;AAAA;AAAA,EAGF,IAAI,CAAC,SAAiB,MAAkC;AAAA,IACtD,IAAI,KAAK,UAAU,MAAM,GAAG;AAAA,MAC1B,QAAQ,KAAK,KAAK,cAAc,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD;AAAA;AAAA,EAGF,KAAK,CAAC,SAAiB,MAAkC;AAAA,IACvD,IAAI,KAAK,UAAU,OAAO,GAAG;AAAA,MAC3B,QAAQ,MAAM,KAAK,cAAc,SAAS,SAAS,IAAI,CAAC;AAAA,IAC1D;AAAA;AAEJ;AAGO,IAAM,SAAiB,IAAI;;;;;;;;;;;;;ACxFlC,gBAAS;AAGT;AAWA,IAAM,YAAoB,UAAU,WAAW,EAAE,MAAM,GAAG,CAAC;AAK3D,eAAsB,OAAO,CAC3B,UACA,aACA,WAAW,OACM;AAAA,EACjB,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO;AAAA,IACN,WAAW;AAAA,IACX,cAAc;AAAA,IACd;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC,EACA,UAAU,CAAC,IAAI,CAAC,EAChB,wBAAwB;AAAA,EAE3B,OAAO,IAAI;AAAA;AAOb,eAAsB,KAAK,GAAwB;AAAA,EACjD,MAAM,MAAK,MAAM;AAAA,EAEjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,QAAQ,GAAE;AAAA,EAEZ,OAAO,KAAK,MAAM;AAAA;AAMpB,eAAsB,QAAQ,CAAC,OAA8B;AAAA,EAC3D,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,IACH,QAAQ;AAAA,IACR,cAAc,IAAI;AAAA,IAClB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAOb,eAAsB,IAAI,CACxB,OACA,OACA,cAAc,GACC;AAAA,EACf,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,KAAK,EACtB,iBAAiB;AAAA,EAEpB,IAAI,CAAC;AAAA,IAAK;AAAA,EAEV,IAAI,IAAI,WAAW,aAAa;AAAA,IAC9B,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA,EACb,EAAO;AAAA,IACL,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAAA;AAOf,eAAsB,KAAK,GAAwB;AAAA,EACjD,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAIrB,QAAQ,MAAM,CAAC;AAAA,EAEjB,MAAM,SAAiC,CAAC;AAAA,EACxC,WAAW,OAAO,MAAM;AAAA,IACtB,OAAO,IAAI,UAAU,SAAS,IAAI,OAAO,EAAE;AAAA,EAC7C;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO,cAAc;AAAA,IAC9B,YAAY,OAAO,iBAAiB;AAAA,IACpC,WAAW,OAAO,gBAAgB;AAAA,IAClC,QAAQ,OAAO,aAAa;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAAA,EACxD;AAAA;AAMK,SAAS,WAAW,GAAW;AAAA,EACpC,OAAO;AAAA;;AClKT,cAAS;AACT,2BAAS;AAET,IAAM,iBAAiB;AAGvB,IAAM,kBAAkB,GAAE,OAAO,EAAE,OAAO,CAAC,QAAQ;AAAA,EACjD,MAAM,QAAQ,IAAI,MAAM,GAAG;AAAA,EAC3B,IAAI,MAAM,SAAS;AAAA,IAAG,OAAO;AAAA,EAC7B,OAAO,eAAe,MAAM,EAAG;AAAA,GAC9B,kCAAkC;AAGrC,IAAM,aAAa;AAAA,EAEjB,QAAQ,gBAAgB,SAAS;AAAA,EAEjC,WAAW,gBAAgB,SAAS;AACtC;AA6GO,IAAM,0BAAwD,GAAE,OAAO;AAAA,EAC5E,MAAM,GAAE,QAAQ,cAAc;AAAA,KAC3B;AAAA,EAEH,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAEvD,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,WAAW,gBAAgB,SAAS;AAAA,EACpC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,QAAQ,gBAAgB,SAAS;AAAA,EACjC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,eAAe,gBAAgB,SAAS;AAAA,EACxC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,yBAAsD,GAAE,OAAO;AAAA,EAC1E,MAAM,GAAE,QAAQ,aAAa;AAAA,KAC1B;AAAA,EAEH,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,QAAQ,SAAS;AAAA,EACzB,WAAW,gBAAgB,SAAS;AAAA,EACpC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,QAAQ,SAAS;AAAA,EACzB,QAAQ,gBAAgB,SAAS;AAAA,EACjC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,0BAAwD,GAAE,OAAO;AAAA,EAC5E,MAAM,GAAE,QAAQ,cAAc;AAAA,KAC3B;AAAA,EACH,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EAErC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,WAAW,gBAAgB,SAAS;AAAA,EACpC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,QAAQ,gBAAgB,SAAS;AAAA,EACjC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,2BAA0D,GAAE,OAAO;AAAA,EAC9E,MAAM,GAAE,QAAQ,eAAe;AAAA,EAE/B,YAAY,gBAAgB,SAAS;AAAA,EAErC,cAAc,GAAE,OAAO,EAAE,SAAS;AAAA,EAElC,QAAQ,gBAAgB,SAAS;AACnC,CAAC;AAGM,IAAM,6BAA8D,GAAE,OAAO;AAAA,EAClF,MAAM,GAAE,QAAQ,iBAAiB;AAAA,EAEjC,UAAU,gBAAgB,SAAS;AAAA,EAEnC,cAAc,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAGM,IAAM,yBAAsD,GAAE,OAAO;AAAA,EAC1E,MAAM,GAAE,QAAQ,aAAa;AAAA,EAE7B,YAAY,gBAAgB,SAAS;AAAA,EAErC,OAAO,GAAE,OAAO,EAAE,SAAS;AAAA,EAE3B,UAAU,GAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAGM,IAAM,qBAA8C,GAAE,mBAAmB,QAAQ;AAAA,EACtF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AC7PD,cAAS;AAcF,IAAM,8BAAgE,GAAE,OAAO;AAAA,EACpF,MAAM,GAAE,OAAO,EAAE,MAAM,gBAAgB,uCAAuC,EAAE,IAAI,EAAE;AAAA,EACtF,SAAS,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,GAAE,MAAM,GAAE,OAAO,CAAC,EAAE,IAAI,CAAC;AAAA,EAClC,QAAQ,GAAE,OAAO,GAAE,OAAO,GAAG,GAAE,QAAQ,CAAC;AAAA,EACxC,aAAa,GAAE,OAAO,EAAE,IAAI,SAAW,gCAAgC;AAAA,EACvE,SAAS,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;;ACtBD,cAAS;AAwFT,IAAM,qBAAqB,GAAE,OAAO;AAAA,EAClC,qBAAqB,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC7C,cAAc,GAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACvC,sBAAsB,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC9C,WAAW,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC1D,WAAW,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAK,EAAE,QAAQ,GAAK;AAAA,EAC/D,YAAY,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AACvD,CAAC;AAGM,IAAM,sBACX;AAEK,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,GAAE,OAAO,EAAE,IAAI;AAAA,EAC5B,SAAS,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EAC1C,SAAS,mBAAmB,SAAS;AAAA,EACrC,YAAY,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,UAAU,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAEM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,aAAa,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACvC,SAAS,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrD,SAAS,mBAAmB,QAAQ,EAAE,SAAS;AACjD,CAAC,EAAE,OACD,CAAC,SAAS,OAAO,KAAK,IAAI,EAAE,SAAS,GACrC,EAAE,SAAS,iDAAiD,CAC9D;AAEO,IAAM,wBAAoD,GAAE,OAAO;AAAA,EACxE,UAAU,GAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,GAAE,OAAO;AAAA,EACrB,OAAO,GAAE,OAAO;AAAA,IACd,QAAQ,GAAE,OAAO;AAAA,IACjB,MAAM,GAAE,OAAO;AAAA,IACf,YAAY,GAAE,OAAO;AAAA,IACrB,iBAAiB,GAAE,OAAO;AAAA,IAC1B,WAAW,GAAE,OAAO;AAAA,EACtB,CAAC;AAAA,EACD,SAAS,GAAE,OAAO;AAAA,IAChB,cAAc,GAAE,MAAM,GAAE,OAAO;AAAA,MAC7B,MAAM,GAAE,OAAO;AAAA,MACf,MAAM,GAAE,OAAO;AAAA,MACf,QAAQ,GAAE,OAAO;AAAA,MACjB,QAAQ,GAAE,OAAO;AAAA,MACjB,YAAY,GAAE,OAAO,EAAE,SAAS;AAAA,MAChC,cAAc,GAAE,OAAO,EAAE,SAAS;AAAA,MAClC,OAAO,GAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,CAAC,CAAC;AAAA,IACF,QAAQ,GAAE,MAAM,GAAE,OAAO;AAAA,MACvB,MAAM,GAAE,OAAO;AAAA,MACf,YAAY,GAAE,OAAO;AAAA,MACrB,MAAM,GAAE,OAAO;AAAA,MACf,MAAM,GAAE,IAAI;AAAA,IACd,CAAC,CAAC;AAAA,EACJ,CAAC;AAAA,EACD,YAAY,GAAE,QAAQ;AAAA,EACtB,aAAa,GAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,IAAM,sBAAwD,GAAE,OAAO;AAAA,EAC5E,iBAAiB,GAAE,OAAO;AAAA,EAC1B,kBAAkB,GAAE,OAAO;AAAA,EAC3B,iBAAiB,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,oBAAoB,GAAE,OAAO,EAAE,SAAS;AAAA,EACxC,cAAc,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAEM,IAAM,uBAAkD,GAAE,OAAO;AAAA,EACtE,IAAI,GAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,GAAE,OAAO;AAAA,EACf,QAAQ,GAAE,KAAK,CAAC,YAAY,UAAU,UAAU,QAAQ,CAAC;AAAA,EACzD,aAAa,GAAE,OAAO,EAAE,IAAI;AAAA,EAC5B,SAAS,GAAE,MAAM,kBAAkB;AAAA,EACnC,SAAS;AAAA,EACT,iBAAiB,GAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;AAAA,EAC3C,kBAAkB,GAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;AAAA,EAC5C,iBAAiB,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3D,oBAAoB,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,cAAc,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,WAAW,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,GAAE,OAAO,EAAE,SAAS;AACjC,CAAC;;;;;;;;;;AC7KD;AAMO,SAAS,cAAc,GAAW;AAAA,EACvC,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA;AAOhC,SAAS,WAAW,CAAC,SAAiB,QAAwB;AAAA,EACnE,MAAM,OAAO,WAAW,UAAU,MAAM;AAAA,EACxC,KAAK,OAAO,OAAO;AAAA,EACnB,OAAO,KAAK,OAAO,KAAK;AAAA;AAOnB,SAAS,eAAe,CAC7B,SACA,WACA,QACS;AAAA,EACT,MAAM,oBAAoB,YAAY,SAAS,MAAM;AAAA,EAGrD,IAAI,UAAU,WAAW,kBAAkB,QAAQ;AAAA,IACjD,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAAS;AAAA,EACb,SAAS,IAAI,EAAG,IAAI,UAAU,QAAQ,KAAK;AAAA,IACzC,UAAU,UAAU,WAAW,CAAC,IAAI,kBAAkB,WAAW,CAAC;AAAA,EACpE;AAAA,EAEA,OAAO,WAAW;AAAA;AAOb,SAAS,qBAAqB,CACnC,SACA,QACA,WACQ;AAAA,EACR,MAAM,KAAK,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,EACpD,MAAM,gBAAgB,GAAG,MAAM;AAAA,EAC/B,MAAM,YAAY,YAAY,eAAe,MAAM;AAAA,EAEnD,OAAO,KAAK,SAAS;AAAA;AAOhB,SAAS,qBAAqB,CACnC,SACA,QACA,QACA,mBAAmB,KACV;AAAA,EAET,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,MAAM,YAAY,MACf,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAC7B,MAAM,CAAC;AAAA,EACX,MAAM,YAAY,MACf,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAC9B,MAAM,CAAC;AAAA,EAEX,IAAI,CAAC,aAAa,CAAC,WAAW;AAAA,IAC5B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,SAAS,WAAW,EAAE;AAAA,EACjC,IAAI,MAAM,EAAE,GAAG;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EAGA,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,EACxC,IAAI,KAAK,IAAI,MAAM,EAAE,IAAI,kBAAkB;AAAA,IACzC,OAAO;AAAA,EACT;AAAA,EAGA,MAAM,gBAAgB,GAAG,MAAM;AAAA,EAC/B,OAAO,gBAAgB,eAAe,WAAW,MAAM;AAAA;",
-  "debugId": "4EF79202801DC1C664756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AA0CA,gBAAS;AAvCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,MAAM,UAAU,SAAS,QAAQ,IAAI,qBAAqB,MAAM,EAAE;AAAA,IAClE,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK;AAAA,MACL,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;ACzCK,IAAM,aAAa;AAAA,EACxB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,yBAAyB;AAAA,EACzB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AACb;AAAA;AAOO,MAAM,qBAAqB,MAAM;AAAA,EAC/B;AAAA,EACS;AAAA,EAEhB,WAAW,CACT,MACA,SACA,OACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,KAAK,OAAO;AAAA,IACZ,KAAK,QAAQ;AAAA,IACb,KAAK,OAAO,KAAK,YAAY;AAAA,IAC7B,MAAM,oBAAoB,MAAM,KAAK,WAAW;AAAA;AAAA,EAGlD,MAAM,GAA+F;AAAA,IACnG,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,IACd;AAAA;AAEJ;AAAA;AAKO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,UAAkB;AAAA,IAC5B,MAAM,oBAAoB,qBAAqB,UAAU;AAAA;AAE7D;AAAA;AAKO,MAAM,wBAAwB,aAAa;AAAA,EAChD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,oBAAoB,SAAS,KAAK;AAAA;AAE5C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAC9C,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,kBAAkB,SAAS,KAAK;AAAA;AAE1C;AAAA;AAKO,MAAM,sBAAsB,aAAa;AAAA,EAGrC;AAAA,EAFT,WAAW,CACT,SACO,YACP,OACA;AAAA,IACA,MAAM,kBAAkB,SAAS,KAAK;AAAA,IAH/B;AAAA;AAAA,EAMA,MAAM,GAA+H;AAAA,IAC5I,MAAM,OAAO,MAAM,OAAO;AAAA,IAC1B,OAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,YAAY,KAAK;AAAA,IACnB;AAAA;AAEJ;AAAA;AAKO,MAAM,8BAA8B,aAAa;AAAA,EACtD,WAAW,CAAC,SAAiB,OAAiB;AAAA,IAC5C,MAAM,2BAA2B,SAAS,KAAK;AAAA;AAEnD;AAAA;AAEO,MAAM,4BAA4B,aAAa;AAAA,EACpD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,wBAAwB,OAAO;AAAA;AAEzC;AAAA;AAEO,MAAM,2BAA2B,aAAa;AAAA,EACnD,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,uBAAuB,OAAO;AAAA;AAExC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,SAAiB;AAAA,IAC3B,MAAM,oBAAoB,OAAO;AAAA;AAErC;AAAA;AAEO,MAAM,uBAAuB,aAAa;AAAA,EAC/C,WAAW,CAAC,UAAU,aAAa;AAAA,IACjC,MAAM,aAAa,OAAO;AAAA;AAE9B;AAaO,IAAM,iBAAkE;AAAA,EAC7E,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,kBAAkB;AACpB;AAKO,SAAS,eAAe,CAAC,KAAsB;AAAA,EACpD,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA;;;ACzJxD;AAGA,IAAM,iBAAiB,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ;AAAA,EACnD,MAAM,WAAW,IAAI,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AAAA,EACnE,MAAM,QAAQ,CAAC,WAAW,SAAS;AAAA,EACnC,WAAW,KAAK,UAAU;AAAA,IACxB,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG;AAAA,MACtB,MAAM,IAAI,MAAM,oBAAoB,sBAAsB,MAAM,KAAK,IAAI,GAAG;AAAA,IAC9E;AAAA,EACF;AAAA,EACA,OAAO;AAAA,CACR;AAYD,IAAM,YAAwC,EAAE,OAAO;AAAA,EACrD,cAAc,EAAE,WACd,CAAC,QAAS,OAAO,QAAQ,YAAY,IAAI,WAAW,IAAK,YAAY,KACrE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAC5B;AAAA,EACA,SAAS,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC,EAAE,SAAS;AAAA,EACjD,UAAU,eAAe,SAAS;AAAA,EAClC,WAAW,EAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,OAAO,CAAC,EAAE,QAAQ,MAAM;AAAA,EACpE,UAAU,EAAE,KAAK,CAAC,eAAe,cAAc,MAAM,CAAC,EAAE,QAAQ,aAAa;AAC/E,CAAC;AAMD,IAAI,YAAwB;AAErB,SAAS,MAAM,GAAQ;AAAA,EAC5B,IAAI,WAAW;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,UAAU,UAAU,QAAQ,GAAG;AAAA,EAE9C,IAAI,CAAC,OAAO,SAAS;AAAA,IACnB,QAAQ,MAAM,sCAAqC;AAAA,IACnD,QAAQ,MAAM,EAAE,aAAa,OAAO,KAAK,CAAC;AAAA,IAC1C,MAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAAA,EAGA,IAAI;AAAA,EACJ,IAAI,OAAO,KAAK,YAAY,OAAO,KAAK,SAAS,SAAS,GAAG;AAAA,IAC3D,kBAAkB,OAAO,KAAK;AAAA,EAChC,EAAO,SAAI,OAAO,KAAK,SAAS;AAAA,IAC9B,kBAAkB,CAAC,OAAO,KAAK,OAAO;AAAA,EACxC,EAAO;AAAA,IACL,kBAAkB,CAAC,SAAS;AAAA;AAAA,EAG9B,YAAY,KAAK,OAAO,MAAM,gBAAgB;AAAA,EAC9C,OAAO;AAAA;;AC7DT,IAAM,aAAuC;AAAA,EAC3C,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAAA;AAEA,MAAM,OAAO;AAAA,EACH;AAAA,EACA;AAAA,EACA,eAAe;AAAA,EAEf,IAAI,GAAG;AAAA,IACb,IAAI,KAAK;AAAA,MAAc;AAAA,IACvB,KAAK,eAAe;AAAA,IACpB,IAAI;AAAA,MACF,MAAM,MAAM,OAAO;AAAA,MACnB,KAAK,SAAS,IAAI;AAAA,MAClB,KAAK,gBAAgB,IAAI,aAAa;AAAA,MACtC,MAAM;AAAA,MAEN,KAAK,SAAS;AAAA,MACd,KAAK,gBAAgB;AAAA;AAAA;AAAA,MAIb,KAAK,GAAa;AAAA,IAC5B,KAAK,KAAK;AAAA,IACV,OAAO,KAAK;AAAA;AAAA,MAGF,YAAY,GAAY;AAAA,IAClC,KAAK,KAAK;AAAA,IACV,OAAO,KAAK;AAAA;AAAA,EAGN,SAAS,CAAC,OAA0B;AAAA,IAC1C,OAAO,WAAW,UAAU,WAAW,KAAK;AAAA;AAAA,EAGtC,aAAa,CAAC,OAAiB,SAAiB,MAA4B;AAAA,IAClF,MAAM,YAAY,IAAI,KAAK,EAAE,YAAY;AAAA,IAEzC,IAAI,KAAK,cAAc;AAAA,MAErB,OAAO,KAAK,UAAU;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,WACG;AAAA,MACL,CAAC;AAAA,IACH;AAAA,IAGA,MAAM,UAAU,OAAO,IAAI,KAAK,UAAU,IAAI,MAAM;AAAA,IACpD,OAAO,IAAI,cAAc,MAAM,YAAY,MAAM,UAAU;AAAA;AAAA,EAG7D,KAAK,CAAC,SAAiB,MAAkC;AAAA,IACvD,IAAI,KAAK,UAAU,OAAO,GAAG;AAAA,MAC3B,QAAQ,MAAM,KAAK,cAAc,SAAS,SAAS,IAAI,CAAC;AAAA,IAC1D;AAAA;AAAA,EAGF,IAAI,CAAC,SAAiB,MAAkC;AAAA,IACtD,IAAI,KAAK,UAAU,MAAM,GAAG;AAAA,MAC1B,QAAQ,KAAK,KAAK,cAAc,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD;AAAA;AAAA,EAGF,IAAI,CAAC,SAAiB,MAAkC;AAAA,IACtD,IAAI,KAAK,UAAU,MAAM,GAAG;AAAA,MAC1B,QAAQ,KAAK,KAAK,cAAc,QAAQ,SAAS,IAAI,CAAC;AAAA,IACxD;AAAA;AAAA,EAGF,KAAK,CAAC,SAAiB,MAAkC;AAAA,IACvD,IAAI,KAAK,UAAU,OAAO,GAAG;AAAA,MAC3B,QAAQ,MAAM,KAAK,cAAc,SAAS,SAAS,IAAI,CAAC;AAAA,IAC1D;AAAA;AAEJ;AAGO,IAAM,SAAiB,IAAI;;;;;;;;;;;;;ACxFlC,gBAAS;AAGT;AAWA,IAAM,YAAoB,UAAU,WAAW,EAAE,MAAM,GAAG,CAAC;AAK3D,eAAsB,OAAO,CAC3B,UACA,aACA,WAAW,OACM;AAAA,EACjB,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO;AAAA,IACN,WAAW;AAAA,IACX,cAAc;AAAA,IACd;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC,EACA,UAAU,CAAC,IAAI,CAAC,EAChB,wBAAwB;AAAA,EAE3B,OAAO,IAAI;AAAA;AAOb,eAAsB,KAAK,GAAwB;AAAA,EACjD,MAAM,MAAK,MAAM;AAAA,EAEjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,QAAQ,GAAE;AAAA,EAEZ,OAAO,KAAK,MAAM;AAAA;AAMpB,eAAsB,QAAQ,CAAC,OAA8B;AAAA,EAC3D,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,IACH,QAAQ;AAAA,IACR,cAAc,IAAI;AAAA,IAClB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAOb,eAAsB,IAAI,CACxB,OACA,OACA,cAAc,GACC;AAAA,EACf,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,KAAK,EACtB,iBAAiB;AAAA,EAEpB,IAAI,CAAC;AAAA,IAAK;AAAA,EAEV,IAAI,IAAI,WAAW,aAAa;AAAA,IAC9B,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA,EACb,EAAO;AAAA,IACL,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAAA;AAOf,eAAsB,KAAK,GAAwB;AAAA,EACjD,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAIrB,QAAQ,MAAM,CAAC;AAAA,EAEjB,MAAM,SAAiC,CAAC;AAAA,EACxC,WAAW,OAAO,MAAM;AAAA,IACtB,OAAO,IAAI,UAAU,SAAS,IAAI,OAAO,EAAE;AAAA,EAC7C;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO,cAAc;AAAA,IAC9B,YAAY,OAAO,iBAAiB;AAAA,IACpC,WAAW,OAAO,gBAAgB;AAAA,IAClC,QAAQ,OAAO,aAAa;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAAA,EACxD;AAAA;AAMK,SAAS,WAAW,GAAW;AAAA,EACpC,OAAO;AAAA;;AClKT,cAAS;AACT,2BAAS;AAET,IAAM,iBAAiB;AAGvB,IAAM,kBAAkB,GAAE,OAAO,EAAE,OAAO,CAAC,QAAQ;AAAA,EACjD,MAAM,QAAQ,IAAI,MAAM,GAAG;AAAA,EAC3B,IAAI,MAAM,SAAS;AAAA,IAAG,OAAO;AAAA,EAC7B,OAAO,eAAe,MAAM,EAAG;AAAA,GAC9B,kCAAkC;AAGrC,IAAM,aAAa;AAAA,EAEjB,QAAQ,gBAAgB,SAAS;AAAA,EAEjC,WAAW,gBAAgB,SAAS;AACtC;AA6GO,IAAM,0BAAwD,GAAE,OAAO;AAAA,EAC5E,MAAM,GAAE,QAAQ,cAAc;AAAA,KAC3B;AAAA,EAEH,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EAEvD,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,WAAW,gBAAgB,SAAS;AAAA,EACpC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,QAAQ,gBAAgB,SAAS;AAAA,EACjC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,eAAe,gBAAgB,SAAS;AAAA,EACxC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,yBAAsD,GAAE,OAAO;AAAA,EAC1E,MAAM,GAAE,QAAQ,aAAa;AAAA,KAC1B;AAAA,EAEH,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,QAAQ,SAAS;AAAA,EACzB,WAAW,gBAAgB,SAAS;AAAA,EACpC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,QAAQ,SAAS;AAAA,EACzB,QAAQ,gBAAgB,SAAS;AAAA,EACjC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,WAAW,GAAE,OAAO,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACzD,CAAC;AAGM,IAAM,0BAAwD,GAAE,OAAO;AAAA,EAC5E,MAAM,GAAE,QAAQ,cAAc;AAAA,KAC3B;AAAA,EACH,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EAErC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,WAAW,gBAAgB,SAAS;AAAA,EACpC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,sBAAgD,GAAE,OAAO;AAAA,EACpE,MAAM,GAAE,QAAQ,UAAU;AAAA,EAC1B,QAAQ,gBAAgB,SAAS;AAAA,EACjC,iBAAiB,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,SAAS,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAGM,IAAM,2BAA0D,GAAE,OAAO;AAAA,EAC9E,MAAM,GAAE,QAAQ,eAAe;AAAA,EAE/B,YAAY,gBAAgB,SAAS;AAAA,EAErC,cAAc,GAAE,OAAO,EAAE,SAAS;AAAA,EAElC,QAAQ,gBAAgB,SAAS;AACnC,CAAC;AAGM,IAAM,6BAA8D,GAAE,OAAO;AAAA,EAClF,MAAM,GAAE,QAAQ,iBAAiB;AAAA,EAEjC,UAAU,gBAAgB,SAAS;AAAA,EAEnC,cAAc,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAGM,IAAM,yBAAsD,GAAE,OAAO;AAAA,EAC1E,MAAM,GAAE,QAAQ,aAAa;AAAA,EAE7B,YAAY,gBAAgB,SAAS;AAAA,EAErC,OAAO,GAAE,OAAO,EAAE,SAAS;AAAA,EAE3B,UAAU,GAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAGM,IAAM,qBAA8C,GAAE,mBAAmB,QAAQ;AAAA,EACtF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AC7PD,cAAS;AAcF,IAAM,8BAAgE,GAAE,OAAO;AAAA,EACpF,MAAM,GAAE,OAAO,EAAE,MAAM,gBAAgB,uCAAuC,EAAE,IAAI,EAAE;AAAA,EACtF,SAAS,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,aAAa,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,SAAS,GAAE,MAAM,GAAE,OAAO,CAAC,EAAE,IAAI,CAAC;AAAA,EAClC,QAAQ,GAAE,OAAO,GAAE,OAAO,GAAG,GAAE,QAAQ,CAAC;AAAA,EACxC,aAAa,GAAE,OAAO,EAAE,IAAI,SAAW,gCAAgC;AAAA,EACvE,SAAS,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;;ACtBD,cAAS;AAwFT,IAAM,qBAAqB,GAAE,OAAO;AAAA,EAClC,qBAAqB,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC7C,cAAc,GAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACvC,sBAAsB,GAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,EAC9C,WAAW,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,QAAQ,EAAE;AAAA,EAC1D,WAAW,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAK,EAAE,QAAQ,GAAK;AAAA,EAC/D,YAAY,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC;AACvD,CAAC;AAGM,IAAM,sBACX;AAEK,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,aAAa,GAAE,OAAO,EAAE,IAAI;AAAA,EAC5B,SAAS,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EAC1C,SAAS,mBAAmB,SAAS;AAAA,EACrC,YAAY,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,UAAU,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AACjD,CAAC;AAEM,IAAM,qBAA8C,GAAE,OAAO;AAAA,EAClE,MAAM,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1C,aAAa,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACvC,SAAS,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrD,SAAS,mBAAmB,QAAQ,EAAE,SAAS;AACjD,CAAC,EAAE,OACD,CAAC,SAAS,OAAO,KAAK,IAAI,EAAE,SAAS,GACrC,EAAE,SAAS,iDAAiD,CAC9D;AAEO,IAAM,wBAAoD,GAAE,OAAO;AAAA,EACxE,UAAU,GAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,YAAY,GAAE,OAAO;AAAA,EACrB,OAAO,GAAE,OAAO;AAAA,IACd,QAAQ,GAAE,OAAO;AAAA,IACjB,MAAM,GAAE,OAAO;AAAA,IACf,YAAY,GAAE,OAAO;AAAA,IACrB,iBAAiB,GAAE,OAAO;AAAA,IAC1B,WAAW,GAAE,OAAO;AAAA,EACtB,CAAC;AAAA,EACD,SAAS,GAAE,OAAO;AAAA,IAChB,cAAc,GAAE,MAAM,GAAE,OAAO;AAAA,MAC7B,MAAM,GAAE,OAAO;AAAA,MACf,MAAM,GAAE,OAAO;AAAA,MACf,QAAQ,GAAE,OAAO;AAAA,MACjB,QAAQ,GAAE,OAAO;AAAA,MACjB,YAAY,GAAE,OAAO,EAAE,SAAS;AAAA,MAChC,cAAc,GAAE,OAAO,EAAE,SAAS;AAAA,MAClC,OAAO,GAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,CAAC,CAAC;AAAA,IACF,QAAQ,GAAE,MAAM,GAAE,OAAO;AAAA,MACvB,MAAM,GAAE,OAAO;AAAA,MACf,YAAY,GAAE,OAAO;AAAA,MACrB,MAAM,GAAE,OAAO;AAAA,MACf,MAAM,GAAE,IAAI;AAAA,IACd,CAAC,CAAC;AAAA,EACJ,CAAC;AAAA,EACD,YAAY,GAAE,QAAQ;AAAA,EACtB,aAAa,GAAE,OAAO,EAAE,SAAS;AACnC,CAAC;AAEM,IAAM,sBAAwD,GAAE,OAAO;AAAA,EAC5E,iBAAiB,GAAE,OAAO;AAAA,EAC1B,kBAAkB,GAAE,OAAO;AAAA,EAC3B,iBAAiB,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAChD,oBAAoB,GAAE,OAAO,EAAE,SAAS;AAAA,EACxC,cAAc,GAAE,OAAO,EAAE,SAAS;AACpC,CAAC;AAEM,IAAM,uBAAkD,GAAE,OAAO;AAAA,EACtE,IAAI,GAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,GAAE,OAAO;AAAA,EACf,QAAQ,GAAE,KAAK,CAAC,YAAY,UAAU,UAAU,QAAQ,CAAC;AAAA,EACzD,aAAa,GAAE,OAAO,EAAE,IAAI;AAAA,EAC5B,SAAS,GAAE,MAAM,kBAAkB;AAAA,EACnC,SAAS;AAAA,EACT,iBAAiB,GAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;AAAA,EAC3C,kBAAkB,GAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;AAAA,EAC5C,iBAAiB,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;AAAA,EAC3D,oBAAoB,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAAA,EACzD,cAAc,GAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,WAAW,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,GAAE,OAAO,EAAE,SAAS;AACjC,CAAC;;;;;;;;;;AC7KD;AAMO,SAAS,cAAc,GAAW;AAAA,EACvC,OAAO,YAAY,EAAE,EAAE,SAAS,KAAK;AAAA;AAOhC,SAAS,WAAW,CAAC,SAAiB,QAAwB;AAAA,EACnE,MAAM,OAAO,WAAW,UAAU,MAAM;AAAA,EACxC,KAAK,OAAO,OAAO;AAAA,EACnB,OAAO,KAAK,OAAO,KAAK;AAAA;AAOnB,SAAS,eAAe,CAC7B,SACA,WACA,QACS;AAAA,EACT,MAAM,oBAAoB,YAAY,SAAS,MAAM;AAAA,EAGrD,IAAI,UAAU,WAAW,kBAAkB,QAAQ;AAAA,IACjD,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAAS;AAAA,EACb,SAAS,IAAI,EAAG,IAAI,UAAU,QAAQ,KAAK;AAAA,IACzC,UAAU,UAAU,WAAW,CAAC,IAAI,kBAAkB,WAAW,CAAC;AAAA,EACpE;AAAA,EAEA,OAAO,WAAW;AAAA;AAOb,SAAS,qBAAqB,CACnC,SACA,QACA,WACQ;AAAA,EACR,MAAM,KAAK,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,EACpD,MAAM,gBAAgB,GAAG,MAAM;AAAA,EAC/B,MAAM,YAAY,YAAY,eAAe,MAAM;AAAA,EAEnD,OAAO,KAAK,SAAS;AAAA;AAOhB,SAAS,qBAAqB,CACnC,SACA,QACA,QACA,mBAAmB,KACV;AAAA,EAET,MAAM,QAAQ,OAAO,MAAM,GAAG;AAAA,EAC9B,MAAM,YAAY,MACf,KAAK,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,GAC7B,MAAM,CAAC;AAAA,EACX,MAAM,YAAY,MACf,KAAK,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,GAC9B,MAAM,CAAC;AAAA,EAEX,IAAI,CAAC,aAAa,CAAC,WAAW;AAAA,IAC5B,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAK,SAAS,WAAW,EAAE;AAAA,EACjC,IAAI,MAAM,EAAE,GAAG;AAAA,IACb,OAAO;AAAA,EACT;AAAA,EAGA,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,EACxC,IAAI,KAAK,IAAI,MAAM,EAAE,IAAI,kBAAkB;AAAA,IACzC,OAAO;AAAA,EACT;AAAA,EAGA,MAAM,gBAAgB,GAAG,MAAM;AAAA,EAC/B,OAAO,gBAAgB,eAAe,WAAW,MAAM;AAAA;",
+  "debugId": "C1B5835384CBB78564756E2164756E21",
   "names": []
 }

package/dist/src/node/local-client.d.ts

@@ -38,7 +38,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -97,7 +97,7 @@ interface SubgraphsTable {
 	last_error_at: Date | null;
 	total_processed: Generated<number>;
 	total_errors: Generated<number>;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }
@@ -137,6 +137,7 @@ interface MagicLinksTable {
 	token: string;
 	expires_at: Date;
 	used_at: Date | null;
+	failed_attempts: Generated<number>;
 	created_at: Generated<Date>;
 }
 interface UsageDailyTable {

package/dist/src/queue/index.js

@@ -42,7 +42,9 @@ function getDb(connectionString) {
   if (!db) {
     const url = connectionString || process.env.DATABASE_URL || "postgres://postgres:postgres@localhost:5432/streams_dev";
     const isLocal = url.includes("localhost") || url.includes("127.0.0.1") || url.includes("@postgres:");
+    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? "20", 10);
     rawClient = postgres(url, {
+      max: poolMax,
       ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== "0" }
     });
     db = new Kysely({
@@ -176,5 +178,5 @@ export {
   WORKER_ID
 };
 
-//# debugId=D4607290C65E8FF064756E2164756E21
+//# debugId=4D1E73D7224206BB64756E2164756E21
 //# sourceMappingURL=index.js.map

package/dist/src/queue/index.js.map

@@ -3,10 +3,10 @@
   "sources": ["../src/db/jsonb.ts", "../src/db/index.ts", "../src/queue/index.ts"],
   "sourcesContent": [
     "import { sql, type RawBuilder } from \"kysely\";\n\n/**\n * Safely encode a JS value as a JSONB literal for Kysely inserts/updates.\n * Kysely + postgres.js double-encodes JSON when using parameterized queries\n * with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.\n */\nexport function jsonb(value: unknown): RawBuilder<unknown> {\n  const escaped = JSON.stringify(value).replace(/'/g, \"''\");\n  return sql`${sql.raw(`'${escaped}'::jsonb`)}`;\n}\n\n/**\n * Safely parse a JSONB value from the database.\n * Handles double-encoded strings where postgres.js returns a JSON string\n * instead of a parsed object.\n */\nexport function parseJsonb<T = unknown>(value: unknown): T {\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return value as T;\n    }\n  }\n  return (value ?? {}) as T;\n}\n",
-    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    rawClient = postgres(url, {\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
+    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? \"20\", 10);\n    rawClient = postgres(url, {\n      max: poolMax,\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
     "import { sql } from \"kysely\";\nimport { getDb } from \"../db/index.ts\";\nimport type { Job } from \"../db/types.ts\";\nimport { randomUUID } from \"crypto\";\n\nexport interface QueueStats {\n  pending: number;\n  processing: number;\n  completed: number;\n  failed: number;\n  total: number;\n}\n\n// Worker identifier for this process\nconst WORKER_ID: string = `worker-${randomUUID().slice(0, 8)}`;\n\n/**\n * Enqueue a new job for stream evaluation\n */\nexport async function enqueue(\n  streamId: string,\n  blockHeight: number,\n  backfill = false\n): Promise<string> {\n  const db = getDb();\n\n  const row = await db\n    .insertInto(\"jobs\")\n    .values({\n      stream_id: streamId,\n      block_height: blockHeight,\n      backfill,\n      status: \"pending\",\n      attempts: 0,\n    })\n    .returning([\"id\"])\n    .executeTakeFirstOrThrow();\n\n  return row.id;\n}\n\n/**\n * Claim a pending job using SKIP LOCKED to prevent concurrent access\n * Returns null if no jobs available\n */\nexport async function claim(): Promise<Job | null> {\n  const db = getDb();\n\n  const { rows } = await sql<Job>`\n    UPDATE jobs\n    SET\n      status = 'processing',\n      locked_at = NOW(),\n      locked_by = ${WORKER_ID},\n      attempts = attempts + 1\n    WHERE id = (\n      SELECT id FROM jobs\n      WHERE status = 'pending'\n      ORDER BY\n        backfill ASC,\n        block_height ASC,\n        created_at ASC\n      FOR UPDATE SKIP LOCKED\n      LIMIT 1\n    )\n    RETURNING *\n  `.execute(db);\n\n  return rows[0] ?? null;\n}\n\n/**\n * Mark a job as completed\n */\nexport async function complete(jobId: string): Promise<void> {\n  const db = getDb();\n\n  await db\n    .updateTable(\"jobs\")\n    .set({\n      status: \"completed\",\n      completed_at: new Date(),\n      locked_at: null,\n      locked_by: null,\n    })\n    .where(\"id\", \"=\", jobId)\n    .execute();\n}\n\n/**\n * Mark a job as failed\n * Re-queues if under max attempts, otherwise marks as permanently failed\n */\nexport async function fail(\n  jobId: string,\n  error: string,\n  maxAttempts = 3\n): Promise<void> {\n  const db = getDb();\n\n  const job = await db\n    .selectFrom(\"jobs\")\n    .select(\"attempts\")\n    .where(\"id\", \"=\", jobId)\n    .executeTakeFirst();\n\n  if (!job) return;\n\n  if (job.attempts < maxAttempts) {\n    await db\n      .updateTable(\"jobs\")\n      .set({\n        status: \"pending\",\n        error,\n        locked_at: null,\n        locked_by: null,\n      })\n      .where(\"id\", \"=\", jobId)\n      .execute();\n  } else {\n    await db\n      .updateTable(\"jobs\")\n      .set({\n        status: \"failed\",\n        error,\n        completed_at: new Date(),\n        locked_at: null,\n        locked_by: null,\n      })\n      .where(\"id\", \"=\", jobId)\n      .execute();\n  }\n}\n\n/**\n * Get queue statistics\n */\nexport async function stats(): Promise<QueueStats> {\n  const { rows } = await sql<{ status: string; count: string }>`\n    SELECT status, COUNT(*) as count\n    FROM jobs\n    GROUP BY status\n  `.execute(getDb());\n\n  const counts: Record<string, number> = {};\n  for (const row of rows) {\n    counts[row.status] = parseInt(row.count, 10);\n  }\n\n  return {\n    pending: counts[\"pending\"] || 0,\n    processing: counts[\"processing\"] || 0,\n    completed: counts[\"completed\"] || 0,\n    failed: counts[\"failed\"] || 0,\n    total: Object.values(counts).reduce((a, b) => a + b, 0),\n  };\n}\n\n/**\n * Get worker ID for this process\n */\nexport function getWorkerId(): string {\n  return WORKER_ID;\n}\n\nexport { WORKER_ID };\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AAwCA,gBAAS;AArCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;;;;;;;;;;;ACvCF,gBAAS;AAGT;AAWA,IAAM,YAAoB,UAAU,WAAW,EAAE,MAAM,GAAG,CAAC;AAK3D,eAAsB,OAAO,CAC3B,UACA,aACA,WAAW,OACM;AAAA,EACjB,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO;AAAA,IACN,WAAW;AAAA,IACX,cAAc;AAAA,IACd;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC,EACA,UAAU,CAAC,IAAI,CAAC,EAChB,wBAAwB;AAAA,EAE3B,OAAO,IAAI;AAAA;AAOb,eAAsB,KAAK,GAAwB;AAAA,EACjD,MAAM,MAAK,MAAM;AAAA,EAEjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,QAAQ,GAAE;AAAA,EAEZ,OAAO,KAAK,MAAM;AAAA;AAMpB,eAAsB,QAAQ,CAAC,OAA8B;AAAA,EAC3D,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,IACH,QAAQ;AAAA,IACR,cAAc,IAAI;AAAA,IAClB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAOb,eAAsB,IAAI,CACxB,OACA,OACA,cAAc,GACC;AAAA,EACf,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,KAAK,EACtB,iBAAiB;AAAA,EAEpB,IAAI,CAAC;AAAA,IAAK;AAAA,EAEV,IAAI,IAAI,WAAW,aAAa;AAAA,IAC9B,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA,EACb,EAAO;AAAA,IACL,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAAA;AAOf,eAAsB,KAAK,GAAwB;AAAA,EACjD,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAIrB,QAAQ,MAAM,CAAC;AAAA,EAEjB,MAAM,SAAiC,CAAC;AAAA,EACxC,WAAW,OAAO,MAAM;AAAA,IACtB,OAAO,IAAI,UAAU,SAAS,IAAI,OAAO,EAAE;AAAA,EAC7C;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO,cAAc;AAAA,IAC9B,YAAY,OAAO,iBAAiB;AAAA,IACpC,WAAW,OAAO,gBAAgB;AAAA,IAClC,QAAQ,OAAO,aAAa;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAAA,EACxD;AAAA;AAMK,SAAS,WAAW,GAAW;AAAA,EACpC,OAAO;AAAA;",
-  "debugId": "D4607290C65E8FF064756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AA0CA,gBAAS;AAvCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,MAAM,UAAU,SAAS,QAAQ,IAAI,qBAAqB,MAAM,EAAE;AAAA,IAClE,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK;AAAA,MACL,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;;;;;;;;;;;ACzCF,gBAAS;AAGT;AAWA,IAAM,YAAoB,UAAU,WAAW,EAAE,MAAM,GAAG,CAAC;AAK3D,eAAsB,OAAO,CAC3B,UACA,aACA,WAAW,OACM;AAAA,EACjB,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO;AAAA,IACN,WAAW;AAAA,IACX,cAAc;AAAA,IACd;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AAAA,EACZ,CAAC,EACA,UAAU,CAAC,IAAI,CAAC,EAChB,wBAAwB;AAAA,EAE3B,OAAO,IAAI;AAAA;AAOb,eAAsB,KAAK,GAAwB;AAAA,EACjD,MAAM,MAAK,MAAM;AAAA,EAEjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,oBAKL;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAahB,QAAQ,GAAE;AAAA,EAEZ,OAAO,KAAK,MAAM;AAAA;AAMpB,eAAsB,QAAQ,CAAC,OAA8B;AAAA,EAC3D,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,IACH,QAAQ;AAAA,IACR,cAAc,IAAI;AAAA,IAClB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAOb,eAAsB,IAAI,CACxB,OACA,OACA,cAAc,GACC;AAAA,EACf,MAAM,MAAK,MAAM;AAAA,EAEjB,MAAM,MAAM,MAAM,IACf,WAAW,MAAM,EACjB,OAAO,UAAU,EACjB,MAAM,MAAM,KAAK,KAAK,EACtB,iBAAiB;AAAA,EAEpB,IAAI,CAAC;AAAA,IAAK;AAAA,EAEV,IAAI,IAAI,WAAW,aAAa;AAAA,IAC9B,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA,EACb,EAAO;AAAA,IACL,MAAM,IACH,YAAY,MAAM,EAClB,IAAI;AAAA,MACH,QAAQ;AAAA,MACR;AAAA,MACA,cAAc,IAAI;AAAA,MAClB,WAAW;AAAA,MACX,WAAW;AAAA,IACb,CAAC,EACA,MAAM,MAAM,KAAK,KAAK,EACtB,QAAQ;AAAA;AAAA;AAOf,eAAsB,KAAK,GAAwB;AAAA,EACjD,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAIrB,QAAQ,MAAM,CAAC;AAAA,EAEjB,MAAM,SAAiC,CAAC;AAAA,EACxC,WAAW,OAAO,MAAM;AAAA,IACtB,OAAO,IAAI,UAAU,SAAS,IAAI,OAAO,EAAE;AAAA,EAC7C;AAAA,EAEA,OAAO;AAAA,IACL,SAAS,OAAO,cAAc;AAAA,IAC9B,YAAY,OAAO,iBAAiB;AAAA,IACpC,WAAW,OAAO,gBAAgB;AAAA,IAClC,QAAQ,OAAO,aAAa;AAAA,IAC5B,OAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC;AAAA,EACxD;AAAA;AAMK,SAAS,WAAW,GAAW;AAAA,EACpC,OAAO;AAAA;",
+  "debugId": "4D1E73D7224206BB64756E2164756E21",
   "names": []
 }

package/dist/src/queue/recovery.js

@@ -42,7 +42,9 @@ function getDb(connectionString) {
   if (!db) {
     const url = connectionString || process.env.DATABASE_URL || "postgres://postgres:postgres@localhost:5432/streams_dev";
     const isLocal = url.includes("localhost") || url.includes("127.0.0.1") || url.includes("@postgres:");
+    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? "20", 10);
     rawClient = postgres(url, {
+      max: poolMax,
       ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== "0" }
     });
     db = new Kysely({
@@ -100,5 +102,5 @@ export {
   recoverStaleJobs
 };
 
-//# debugId=2CAB8C86093BD9F464756E2164756E21
+//# debugId=4F3E278F7270040964756E2164756E21
 //# sourceMappingURL=recovery.js.map

package/dist/src/queue/recovery.js.map

@@ -3,10 +3,10 @@
   "sources": ["../src/db/jsonb.ts", "../src/db/index.ts", "../src/queue/recovery.ts"],
   "sourcesContent": [
     "import { sql, type RawBuilder } from \"kysely\";\n\n/**\n * Safely encode a JS value as a JSONB literal for Kysely inserts/updates.\n * Kysely + postgres.js double-encodes JSON when using parameterized queries\n * with ::jsonb casts. This uses sql.raw to inline a properly escaped literal.\n */\nexport function jsonb(value: unknown): RawBuilder<unknown> {\n  const escaped = JSON.stringify(value).replace(/'/g, \"''\");\n  return sql`${sql.raw(`'${escaped}'::jsonb`)}`;\n}\n\n/**\n * Safely parse a JSONB value from the database.\n * Handles double-encoded strings where postgres.js returns a JSON string\n * instead of a parsed object.\n */\nexport function parseJsonb<T = unknown>(value: unknown): T {\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value) as T;\n    } catch {\n      return value as T;\n    }\n  }\n  return (value ?? {}) as T;\n}\n",
-    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    rawClient = postgres(url, {\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
+    "import { Kysely } from \"kysely\";\nimport { PostgresJSDialect } from \"kysely-postgres-js\";\nimport postgres from \"postgres\";\nimport type { Database } from \"./types.ts\";\n\nlet db: Kysely<Database> | null = null;\nlet rawClient: ReturnType<typeof postgres> | null = null;\n\nexport function getDb(connectionString?: string): Kysely<Database> {\n  if (!db) {\n    const url = connectionString || process.env.DATABASE_URL || \"postgres://postgres:postgres@localhost:5432/streams_dev\";\n\n    // Always use SSL for remote databases, just disable cert verification if needed\n    const isLocal = url.includes(\"localhost\") || url.includes(\"127.0.0.1\") || url.includes(\"@postgres:\");\n    const poolMax = parseInt(process.env.DATABASE_POOL_MAX ?? \"20\", 10);\n    rawClient = postgres(url, {\n      max: poolMax,\n      ssl: isLocal ? undefined : { rejectUnauthorized: process.env.NODE_TLS_REJECT_UNAUTHORIZED !== \"0\" },\n    });\n    db = new Kysely<Database>({\n      dialect: new PostgresJSDialect({ postgres: rawClient }),\n    });\n  }\n  return db;\n}\n\n/** Raw postgres.js client for dynamic schema DDL (CREATE SCHEMA, DROP, etc.) */\nexport function getRawClient(): ReturnType<typeof postgres> {\n  if (!rawClient) getDb();\n  return rawClient!;\n}\n\n/** Close the DB connection pool. Call in CLI commands to allow process exit. */\nexport async function closeDb(): Promise<void> {\n  if (db) {\n    await db.destroy();\n    db = null;\n  }\n  if (rawClient) {\n    await rawClient.end();\n    rawClient = null;\n  }\n}\n\nimport { sql } from \"kysely\";\nexport { sql };\nexport * from \"./types.ts\";\nexport { jsonb, parseJsonb } from \"./jsonb.ts\";\n",
     "import { sql } from \"kysely\";\nimport { getDb } from \"../db/index.ts\";\n\n/**\n * Recover jobs that have been locked for longer than the threshold\n * These are likely from crashed workers\n *\n * @param staleThresholdMinutes - Minutes after which a locked job is considered stale\n * @returns Number of recovered jobs\n */\nexport async function recoverStaleJobs(\n  staleThresholdMinutes = 5\n): Promise<number> {\n  const { rows } = await sql`\n    UPDATE jobs\n    SET\n      status = 'pending',\n      locked_at = NULL,\n      locked_by = NULL\n    WHERE\n      status = 'processing'\n      AND locked_at < NOW() - INTERVAL '${sql.raw(staleThresholdMinutes.toString())} minutes'\n    RETURNING id\n  `.execute(getDb());\n\n  return rows.length;\n}\n\n/**\n * Run periodic stale job recovery\n * Returns a cleanup function to stop the interval\n */\nexport function startRecoveryLoop(\n  intervalMs = 60000, // 1 minute\n  staleThresholdMinutes = 5\n): () => void {\n  const intervalId = setInterval(async () => {\n    try {\n      const recovered = await recoverStaleJobs(staleThresholdMinutes);\n      if (recovered > 0) {\n        console.log(`Recovered ${recovered} stale jobs`);\n      }\n    } catch (error) {\n      console.error(\"Error recovering stale jobs:\", error);\n    }\n  }, intervalMs);\n\n  return () => clearInterval(intervalId);\n}\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AAwCA,gBAAS;AArCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;ACvCF,gBAAS;AAUT,eAAsB,gBAAgB,CACpC,wBAAwB,GACP;AAAA,EACjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0CAQiB,KAAI,IAAI,sBAAsB,SAAS,CAAC;AAAA;AAAA,IAE9E,QAAQ,MAAM,CAAC;AAAA,EAEjB,OAAO,KAAK;AAAA;AAOP,SAAS,iBAAiB,CAC/B,aAAa,OACb,wBAAwB,GACZ;AAAA,EACZ,MAAM,aAAa,YAAY,YAAY;AAAA,IACzC,IAAI;AAAA,MACF,MAAM,YAAY,MAAM,iBAAiB,qBAAqB;AAAA,MAC9D,IAAI,YAAY,GAAG;AAAA,QACjB,QAAQ,IAAI,aAAa,sBAAsB;AAAA,MACjD;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,MAAM,gCAAgC,KAAK;AAAA;AAAA,KAEpD,UAAU;AAAA,EAEb,OAAO,MAAM,cAAc,UAAU;AAAA;",
-  "debugId": "2CAB8C86093BD9F464756E2164756E21",
+  "mappings": ";;;;;;;;;;;;;;;;;AAAA;AAOO,SAAS,KAAK,CAAC,OAAqC;AAAA,EACzD,MAAM,UAAU,KAAK,UAAU,KAAK,EAAE,QAAQ,MAAM,IAAI;AAAA,EACxD,OAAO,MAAM,IAAI,IAAI,IAAI,iBAAiB;AAAA;AAQrC,SAAS,UAAuB,CAAC,OAAmB;AAAA,EACzD,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,IAAI;AAAA,MACF,OAAO,KAAK,MAAM,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,OAAO;AAAA;AAAA,EAEX;AAAA,EACA,OAAQ,SAAS,CAAC;AAAA;;;ACzBpB;AACA;AACA;AA0CA,gBAAS;AAvCT,IAAI,KAA8B;AAClC,IAAI,YAAgD;AAE7C,SAAS,KAAK,CAAC,kBAA6C;AAAA,EACjE,IAAI,CAAC,IAAI;AAAA,IACP,MAAM,MAAM,oBAAoB,QAAQ,IAAI,gBAAgB;AAAA,IAG5D,MAAM,UAAU,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,YAAY;AAAA,IACnG,MAAM,UAAU,SAAS,QAAQ,IAAI,qBAAqB,MAAM,EAAE;AAAA,IAClE,YAAY,SAAS,KAAK;AAAA,MACxB,KAAK;AAAA,MACL,KAAK,UAAU,YAAY,EAAE,oBAAoB,QAAQ,IAAI,iCAAiC,IAAI;AAAA,IACpG,CAAC;AAAA,IACD,KAAK,IAAI,OAAiB;AAAA,MACxB,SAAS,IAAI,kBAAkB,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,YAAY,GAAgC;AAAA,EAC1D,IAAI,CAAC;AAAA,IAAW,MAAM;AAAA,EACtB,OAAO;AAAA;AAIT,eAAsB,OAAO,GAAkB;AAAA,EAC7C,IAAI,IAAI;AAAA,IACN,MAAM,GAAG,QAAQ;AAAA,IACjB,KAAK;AAAA,EACP;AAAA,EACA,IAAI,WAAW;AAAA,IACb,MAAM,UAAU,IAAI;AAAA,IACpB,YAAY;AAAA,EACd;AAAA;;ACzCF,gBAAS;AAUT,eAAsB,gBAAgB,CACpC,wBAAwB,GACP;AAAA,EACjB,QAAQ,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,0CAQiB,KAAI,IAAI,sBAAsB,SAAS,CAAC;AAAA;AAAA,IAE9E,QAAQ,MAAM,CAAC;AAAA,EAEjB,OAAO,KAAK;AAAA;AAOP,SAAS,iBAAiB,CAC/B,aAAa,OACb,wBAAwB,GACZ;AAAA,EACZ,MAAM,aAAa,YAAY,YAAY;AAAA,IACzC,IAAI;AAAA,MACF,MAAM,YAAY,MAAM,iBAAiB,qBAAqB;AAAA,MAC9D,IAAI,YAAY,GAAG;AAAA,QACjB,QAAQ,IAAI,aAAa,sBAAsB;AAAA,MACjD;AAAA,MACA,OAAO,OAAO;AAAA,MACd,QAAQ,MAAM,gCAAgC,KAAK;AAAA;AAAA,KAEpD,UAAU;AAAA,EAEb,OAAO,MAAM,cAAc,UAAU;AAAA;",
+  "debugId": "4F3E278F7270040964756E2164756E21",
   "names": []
 }

package/dist/src/types.d.ts

@@ -37,7 +37,7 @@ interface StreamsTable {
 	options: Generated<unknown>;
 	endpoint_url: string;
 	signing_secret: string | null;
-	api_key_id: string | null;
+	api_key_id: string;
 	created_at: Generated<Date>;
 	updated_at: Generated<Date>;
 }

package/migrations/0017_security_hardening.ts

@@ -0,0 +1,20 @@
+import { type Kysely, sql } from "kysely";
+
+export async function up(db: Kysely<any>): Promise<void> {
+  // Magic link: add failed attempt tracking
+  await sql`ALTER TABLE "magic_links" ADD COLUMN "failed_attempts" integer NOT NULL DEFAULT 0`.execute(db);
+
+  // Ownership: clean up any NULL api_key_id rows
+  await sql`DELETE FROM "streams" WHERE "api_key_id" IS NULL`.execute(db);
+  await sql`DELETE FROM "subgraphs" WHERE "api_key_id" IS NULL`.execute(db);
+
+  // Ownership: enforce NOT NULL going forward
+  await sql`ALTER TABLE "streams" ALTER COLUMN "api_key_id" SET NOT NULL`.execute(db);
+  await sql`ALTER TABLE "subgraphs" ALTER COLUMN "api_key_id" SET NOT NULL`.execute(db);
+}
+
+export async function down(db: Kysely<any>): Promise<void> {
+  await sql`ALTER TABLE "magic_links" DROP COLUMN "failed_attempts"`.execute(db);
+  await sql`ALTER TABLE "streams" ALTER COLUMN "api_key_id" DROP NOT NULL`.execute(db);
+  await sql`ALTER TABLE "subgraphs" ALTER COLUMN "api_key_id" DROP NOT NULL`.execute(db);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@secondlayer/shared",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "type": "module",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",