@seifer-webapp-factory/kits 0.1.0

package/dist/backend/cache/adapters/redis-store.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Redis-adapters (productie). Werken tegen structurele client-interfaces (compatibel met ioredis),
+ * zodat de kit niet hard aan één redis-lib hangt. De cache-store gebruikt `SET ... PX/NX` en een
+ * Lua-script voor veilige (atomaire) lock-release. Pub/sub gebruikt een dedicated subscriber-client.
+ */
+import type { CacheStore, PubSubStore } from '../core/ports.js';
+/** Minimale Redis-client voor de cache-store (compatibel met ioredis). */
+export interface RedisCacheClient {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, ...args: (string | number)[]): Promise<unknown>;
+    del(...keys: string[]): Promise<number>;
+    exists(...keys: string[]): Promise<number>;
+    eval(script: string, numKeys: number, ...args: (string | number)[]): Promise<unknown>;
+}
+export declare function redisCacheStore(client: RedisCacheClient): CacheStore;
+export interface RedisPublisherClient {
+    publish(channel: string, message: string): Promise<number>;
+}
+export interface RedisSubscriberClient {
+    subscribe(...channels: string[]): Promise<unknown>;
+    unsubscribe(...channels: string[]): Promise<unknown>;
+    on(event: 'message', listener: (channel: string, message: string) => void): unknown;
+}
+/**
+ * Redis pub/sub. Vereist een dedicated subscriber-client (Redis-subscribe-mode) naast de publisher.
+ * ioredis herstelt abonnementen automatisch bij reconnect (US-0704 AC3).
+ */
+export declare function redisPubSub(clients: {
+    publisher: RedisPublisherClient;
+    subscriber: RedisSubscriberClient;
+}): PubSubStore;
+//# sourceMappingURL=redis-store.d.ts.map

package/dist/backend/cache/adapters/redis-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-store.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/adapters/redis-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEhE,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChF,GAAG,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAUD,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAcpE;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,WAAW,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC;CACrF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE;IACnC,SAAS,EAAE,oBAAoB,CAAC;IAChC,UAAU,EAAE,qBAAqB,CAAC;CACnC,GAAG,WAAW,CA+Bd"}

package/dist/backend/cache/adapters/redis-store.js

@@ -0,0 +1,59 @@
+// Veilige release: verwijder alleen als de opgeslagen token overeenkomt.
+const DELETE_IF_MATCH = `
+if redis.call('get', KEYS[1]) == ARGV[1] then
+  return redis.call('del', KEYS[1])
+else
+  return 0
+end`;
+export function redisCacheStore(client) {
+    return {
+        get: (key) => client.get(key),
+        set: async (key, value, ttlMs) => {
+            if (ttlMs !== undefined)
+                await client.set(key, value, 'PX', ttlMs);
+            else
+                await client.set(key, value);
+        },
+        del: async (key) => {
+            await client.del(key);
+        },
+        has: async (key) => (await client.exists(key)) > 0,
+        setIfAbsent: async (key, value, ttlMs) => (await client.set(key, value, 'PX', ttlMs, 'NX')) === 'OK',
+        deleteIfMatch: async (key, value) => Number(await client.eval(DELETE_IF_MATCH, 1, key, value)) === 1,
+    };
+}
+/**
+ * Redis pub/sub. Vereist een dedicated subscriber-client (Redis-subscribe-mode) naast de publisher.
+ * ioredis herstelt abonnementen automatisch bij reconnect (US-0704 AC3).
+ */
+export function redisPubSub(clients) {
+    const { publisher, subscriber } = clients;
+    const handlers = new Map();
+    subscriber.on('message', (channel, message) => {
+        handlers.get(channel)?.forEach((handler) => handler(message));
+    });
+    return {
+        async publish(channel, message) {
+            await publisher.publish(channel, message);
+        },
+        async subscribe(channel, handler) {
+            let set = handlers.get(channel);
+            if (!set) {
+                set = new Set();
+                handlers.set(channel, set);
+                await subscriber.subscribe(channel);
+            }
+            set.add(handler);
+            return {
+                async unsubscribe() {
+                    set.delete(handler);
+                    if (set.size === 0) {
+                        handlers.delete(channel);
+                        await subscriber.unsubscribe(channel);
+                    }
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=redis-store.js.map

package/dist/backend/cache/adapters/redis-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis-store.js","sourceRoot":"","sources":["../../../../backend/src/cache/adapters/redis-store.ts"],"names":[],"mappings":"AAgBA,yEAAyE;AACzE,MAAM,eAAe,GAAG;;;;;IAKpB,CAAC;AAEL,MAAM,UAAU,eAAe,CAAC,MAAwB;IACtD,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QAC7B,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;;gBAC9D,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjB,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;QAClD,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI;QACpG,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC;KACrG,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAG3B;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0C,CAAC;IAEnE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;QAC5C,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO;YAC5B,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO;YAC9B,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;gBAChB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC3B,MAAM,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACtC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjB,OAAO;gBACL,KAAK,CAAC,WAAW;oBACf,GAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACrB,IAAI,GAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;wBACpB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;wBACzB,MAAM,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACxC,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/cache/core/cache.d.ts

@@ -0,0 +1,31 @@
+/**
+ * US-0701 — Getypte cache-API (get/set/del/has) met TTL en namespacing over een pluggable
+ * {@link CacheStore}. En US-0702 — `memoize` (cache-aside) met single-flight stampede-bescherming.
+ *
+ * Namespacing voegt een prefix toe zodat keys van verschillende consumers niet botsen. Bij een
+ * store-fout degradeert de cache veilig (miss) of gooit een getypte fout volgens `failMode`; er
+ * belandt nooit een ruwe payload of secret in de foutafhandeling.
+ */
+import { CacheStoreError } from './errors.js';
+import type { CacheStore, Serializer } from './ports.js';
+export interface CacheOptions {
+    /** Prefix per logische ruimte, bv. `users` → fysieke key `users:42`. */
+    namespace?: string;
+    /** Default-TTL (ms) als een `set`/`memoize` er geen meegeeft. */
+    defaultTtlMs?: number;
+    serializer?: Serializer;
+    /** Gedrag van reads bij een store-fout: `miss` (default) of `throw`. */
+    failMode?: 'miss' | 'throw';
+    /** Hook voor store-fouten; ontvangt een geredigeerde {@link CacheStoreError} (geen payload). */
+    onError?: (error: CacheStoreError) => void;
+}
+export interface Cache {
+    get<T>(key: string): Promise<T | null>;
+    set<T>(key: string, value: T, ttlMs?: number): Promise<void>;
+    del(key: string): Promise<void>;
+    has(key: string): Promise<boolean>;
+    /** Cache-aside met single-flight: de loader draait bij een miss hooguit één keer per key. */
+    memoize<T>(key: string, ttlMs: number, loader: () => Promise<T>): Promise<T>;
+}
+export declare function createCache(store: CacheStore, options?: CacheOptions): Cache;
+//# sourceMappingURL=cache.d.ts.map

package/dist/backend/cache/core/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGzD,MAAM,WAAW,YAAY;IAC3B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,gGAAgG;IAChG,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,KAAK;IACpB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,6FAA6F;IAC7F,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC9E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE,YAAiB,GAAG,KAAK,CA2EhF"}

package/dist/backend/cache/core/cache.js

@@ -0,0 +1,89 @@
+/**
+ * US-0701 — Getypte cache-API (get/set/del/has) met TTL en namespacing over een pluggable
+ * {@link CacheStore}. En US-0702 — `memoize` (cache-aside) met single-flight stampede-bescherming.
+ *
+ * Namespacing voegt een prefix toe zodat keys van verschillende consumers niet botsen. Bij een
+ * store-fout degradeert de cache veilig (miss) of gooit een getypte fout volgens `failMode`; er
+ * belandt nooit een ruwe payload of secret in de foutafhandeling.
+ */
+import { CacheStoreError } from './errors.js';
+import { jsonSerializer } from './serializer.js';
+export function createCache(store, options = {}) {
+    const namespace = options.namespace;
+    const serializer = options.serializer ?? jsonSerializer;
+    const failMode = options.failMode ?? 'miss';
+    const inflight = new Map();
+    const physical = (key) => (namespace ? `${namespace}:${key}` : key);
+    const handleError = () => options.onError?.(new CacheStoreError());
+    const cache = {
+        async get(key) {
+            try {
+                const raw = await store.get(physical(key));
+                return raw === null ? null : serializer.deserialize(raw);
+            }
+            catch {
+                handleError();
+                if (failMode === 'throw')
+                    throw new CacheStoreError();
+                return null;
+            }
+        },
+        async set(key, value, ttlMs) {
+            const serialized = serializer.serialize(value);
+            if (typeof serialized !== 'string')
+                return; // niet-cachebare waarde (bv. undefined)
+            try {
+                await store.set(physical(key), serialized, ttlMs ?? options.defaultTtlMs);
+            }
+            catch {
+                handleError();
+                if (failMode === 'throw')
+                    throw new CacheStoreError();
+            }
+        },
+        async del(key) {
+            try {
+                await store.del(physical(key));
+            }
+            catch {
+                handleError();
+                if (failMode === 'throw')
+                    throw new CacheStoreError();
+            }
+        },
+        async has(key) {
+            try {
+                return await store.has(physical(key));
+            }
+            catch {
+                handleError();
+                if (failMode === 'throw')
+                    throw new CacheStoreError();
+                return false;
+            }
+        },
+        async memoize(key, ttlMs, loader) {
+            const cached = await cache.get(key);
+            if (cached !== null)
+                return cached;
+            const pk = physical(key);
+            let pending = inflight.get(pk);
+            if (!pending) {
+                pending = (async () => {
+                    try {
+                        const value = await loader();
+                        await cache.set(key, value, ttlMs);
+                        return value;
+                    }
+                    finally {
+                        inflight.delete(pk); // fout wordt niet gecacht (US-0702 AC3)
+                    }
+                })();
+                inflight.set(pk, pending);
+            }
+            return pending;
+        },
+    };
+    return cache;
+}
+//# sourceMappingURL=cache.js.map

package/dist/backend/cache/core/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAuBjD,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,UAAwB,EAAE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAErD,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAEpF,MAAM,WAAW,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAU;QACnB,KAAK,CAAC,GAAG,CAAI,GAAW;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAI,GAAG,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,EAAE,CAAC;gBACd,IAAI,QAAQ,KAAK,OAAO;oBAAE,MAAM,IAAI,eAAe,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,KAAQ,EAAE,KAAc;YAChD,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAAE,OAAO,CAAC,wCAAwC;YACpF,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,EAAE,CAAC;gBACd,IAAI,QAAQ,KAAK,OAAO;oBAAE,MAAM,IAAI,eAAe,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,EAAE,CAAC;gBACd,IAAI,QAAQ,KAAK,OAAO;oBAAE,MAAM,IAAI,eAAe,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,GAAW;YACnB,IAAI,CAAC;gBACH,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,EAAE,CAAC;gBACd,IAAI,QAAQ,KAAK,OAAO;oBAAE,MAAM,IAAI,eAAe,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAI,GAAW,EAAE,KAAa,EAAE,MAAwB;YACnE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAI,GAAG,CAAC,CAAC;YACvC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC;YAEnC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAA2B,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;oBACpB,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;wBAC7B,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;wBACnC,OAAO,KAAK,CAAC;oBACf,CAAC;4BAAS,CAAC;wBACT,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC;oBAC/D,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/backend/cache/core/errors.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Foutentaxonomie voor cache-kit. Fouten lekken nooit ruwe waarde-payloads of secrets.
+ */
+export declare class CacheError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+/** Store onbereikbaar; bevat geen payload/secret (US-0701 AC3). */
+export declare class CacheStoreError extends CacheError {
+    constructor();
+}
+/** De lock kon niet worden verkregen (US-0703). */
+export declare class LockNotAcquiredError extends CacheError {
+    readonly key: string;
+    constructor(key: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/backend/cache/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAM1C;AAED,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,UAAU;;CAI9C;AAED,mDAAmD;AACnD,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,GAAG,EAAE,MAAM;CAIxB"}

package/dist/backend/cache/core/errors.js

@@ -0,0 +1,27 @@
+/**
+ * Foutentaxonomie voor cache-kit. Fouten lekken nooit ruwe waarde-payloads of secrets.
+ */
+export class CacheError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.name = new.target.name;
+        this.code = code;
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/** Store onbereikbaar; bevat geen payload/secret (US-0701 AC3). */
+export class CacheStoreError extends CacheError {
+    constructor() {
+        super('Cache-store is niet bereikbaar', 'CACHE_STORE_UNAVAILABLE');
+    }
+}
+/** De lock kon niet worden verkregen (US-0703). */
+export class LockNotAcquiredError extends CacheError {
+    key;
+    constructor(key) {
+        super(`Lock voor "${key}" kon niet worden verkregen`, 'LOCK_NOT_ACQUIRED');
+        this.key = key;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/backend/cache/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAS;IACtB,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,mEAAmE;AACnE,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAC7C;QACE,KAAK,CAAC,gCAAgC,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,OAAO,oBAAqB,SAAQ,UAAU;IACzC,GAAG,CAAS;IACrB,YAAY,GAAW;QACrB,KAAK,CAAC,cAAc,GAAG,6BAA6B,EAAE,mBAAmB,CAAC,CAAC;QAC3E,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF"}

package/dist/backend/cache/core/lock.d.ts

@@ -0,0 +1,21 @@
+import type { CacheStore } from './ports.js';
+export interface Lock {
+    key: string;
+    token: string;
+}
+export interface AcquireOptions {
+    /** Aantal extra pogingen als de lock bezet is. Default 0. */
+    retries?: number;
+    /** Wachttijd (ms) tussen pogingen. Default 50. */
+    retryDelayMs?: number;
+}
+export interface LockManager {
+    acquire(key: string, ttlMs: number, options?: AcquireOptions): Promise<Lock | null>;
+    /** Geeft de lock vrij; `true` als vrijgegeven, `false` bij token-mismatch (niet-eigenaar). */
+    release(lock: Lock): Promise<boolean>;
+    withLock<T>(key: string, ttlMs: number, fn: () => Promise<T>, options?: AcquireOptions): Promise<T>;
+}
+export declare function createLock(store: CacheStore, options?: {
+    namespace?: string;
+}): LockManager;
+//# sourceMappingURL=lock.d.ts.map

package/dist/backend/cache/core/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/lock.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,IAAI;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpF,8FAA8F;IAC9F,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACrG;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,WAAW,CAkC/F"}

package/dist/backend/cache/core/lock.js

@@ -0,0 +1,47 @@
+/**
+ * US-0703 — Distributed lock met TTL en veilige release over de {@link CacheStore}-poort.
+ *
+ * `acquire` zet atomair een unieke token met TTL (SET NX PX), zodat een gecrashte houder de lock niet
+ * eeuwig vasthoudt. `release` verwijdert de lock alleen als de token overeenkomt (voorkomt dat een
+ * ander proces jouw lock vrijgeeft). `withLock` combineert acquire + release rond een sectie.
+ */
+import { randomBytes } from 'node:crypto';
+import { LockNotAcquiredError } from './errors.js';
+export function createLock(store, options = {}) {
+    const namespace = options.namespace ?? 'lock';
+    const physical = (key) => `${namespace}:${key}`;
+    const manager = {
+        async acquire(key, ttlMs, acquireOptions = {}) {
+            const retries = acquireOptions.retries ?? 0;
+            const retryDelayMs = acquireOptions.retryDelayMs ?? 50;
+            for (let attempt = 0; attempt <= retries; attempt++) {
+                const token = randomBytes(16).toString('hex');
+                if (await store.setIfAbsent(physical(key), token, ttlMs)) {
+                    return { key, token };
+                }
+                if (attempt < retries)
+                    await delay(retryDelayMs);
+            }
+            return null;
+        },
+        async release(lock) {
+            return store.deleteIfMatch(physical(lock.key), lock.token);
+        },
+        async withLock(key, ttlMs, fn, acquireOptions) {
+            const lock = await manager.acquire(key, ttlMs, acquireOptions);
+            if (!lock)
+                throw new LockNotAcquiredError(key);
+            try {
+                return await fn();
+            }
+            finally {
+                await manager.release(lock);
+            }
+        },
+    };
+    return manager;
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=lock.js.map

package/dist/backend/cache/core/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/lock.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAsBnD,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,UAAkC,EAAE;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;IAEhE,MAAM,OAAO,GAAgB;QAC3B,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,GAAG,EAAE;YAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,CAAC,CAAC;YAC5C,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,IAAI,EAAE,CAAC;YACvD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBACzD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;gBACxB,CAAC;gBACD,IAAI,OAAO,GAAG,OAAO;oBAAE,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,OAAO,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc;YAC3C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,EAAE,CAAC;YACpB,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/backend/cache/core/ports.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Poorten & types voor de cache-kit. De store (KV + coördinatie) en de pub/sub-store zijn pluggable;
+ * cache-keys, TTL's en kanalen worden door het consumerende project geïnjecteerd. Geen domeinkennis.
+ */
+export type Clock = () => number;
+/**
+ * Store-abstractie voor de cache (US-0701) en de distributed lock (US-0703). Werkt met reeds
+ * geserialiseerde string-waarden. Adapters: in-memory (dev/tests) en Redis (productie).
+ */
+export interface CacheStore {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, ttlMs?: number): Promise<void>;
+    del(key: string): Promise<void>;
+    has(key: string): Promise<boolean>;
+    /** Zet alleen als de key nog niet bestaat (SET NX PX). True als gezet. Basis voor de lock. */
+    setIfAbsent(key: string, value: string, ttlMs: number): Promise<boolean>;
+    /** Verwijder alleen als de waarde matcht (atomair). Basis voor veilige lock-release. */
+    deleteIfMatch(key: string, value: string): Promise<boolean>;
+}
+export interface Subscription {
+    unsubscribe(): Promise<void>;
+}
+/** Pub/sub-store (US-0704): berichten zijn reeds-geserialiseerde strings. */
+export interface PubSubStore {
+    publish(channel: string, message: string): Promise<void>;
+    subscribe(channel: string, handler: (message: string) => void): Promise<Subscription>;
+}
+/** (De)serialisatie van cache-waarden en pub/sub-berichten. Default JSON. */
+export interface Serializer {
+    serialize(value: unknown): string;
+    deserialize<T>(raw: string): T;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/backend/cache/core/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/ports.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,8FAA8F;IAC9F,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,wFAAwF;IACxF,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACvF;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC;CAChC"}

package/dist/backend/cache/core/ports.js

@@ -0,0 +1,6 @@
+/**
+ * Poorten & types voor de cache-kit. De store (KV + coördinatie) en de pub/sub-store zijn pluggable;
+ * cache-keys, TTL's en kanalen worden door het consumerende project geïnjecteerd. Geen domeinkennis.
+ */
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/backend/cache/core/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/ports.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/backend/cache/core/pubsub.d.ts

@@ -0,0 +1,14 @@
+/**
+ * US-0704 — Pub/sub over de {@link PubSubStore}-poort (Redis pub/sub in productie, in-memory
+ * event-emitter voor dev/tests). Berichten worden getypt (de)geserialiseerd; een consument kan zich
+ * netjes afmelden. Typisch gebruik: cache-invalidatie-broadcast tussen instances. Domein-loos.
+ */
+import type { PubSubStore, Serializer, Subscription } from './ports.js';
+export interface PubSub {
+    publish<T>(channel: string, message: T): Promise<void>;
+    subscribe<T>(channel: string, handler: (message: T) => void): Promise<Subscription>;
+}
+export declare function createPubSub(store: PubSubStore, options?: {
+    serializer?: Serializer;
+}): PubSub;
+//# sourceMappingURL=pubsub.d.ts.map

package/dist/backend/cache/core/pubsub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pubsub.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/pubsub.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGxE,MAAM,WAAW,MAAM;IACrB,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACrF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,UAAU,CAAA;CAAO,GAAG,MAAM,CAWlG"}

package/dist/backend/cache/core/pubsub.js

@@ -0,0 +1,13 @@
+import { jsonSerializer } from './serializer.js';
+export function createPubSub(store, options = {}) {
+    const serializer = options.serializer ?? jsonSerializer;
+    return {
+        publish(channel, message) {
+            return store.publish(channel, serializer.serialize(message));
+        },
+        subscribe(channel, handler) {
+            return store.subscribe(channel, (raw) => handler(serializer.deserialize(raw)));
+        },
+    };
+}
+//# sourceMappingURL=pubsub.js.map

package/dist/backend/cache/core/pubsub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pubsub.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/pubsub.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOjD,MAAM,UAAU,YAAY,CAAC,KAAkB,EAAE,UAAuC,EAAE;IACxF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC;IAExD,OAAO;QACL,OAAO,CAAI,OAAe,EAAE,OAAU;YACpC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,SAAS,CAAI,OAAe,EAAE,OAA6B;YACzD,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/cache/core/serializer.d.ts

@@ -0,0 +1,4 @@
+import type { Serializer } from './ports.js';
+/** Standaard JSON-serializer. */
+export declare const jsonSerializer: Serializer;
+//# sourceMappingURL=serializer.d.ts.map

package/dist/backend/cache/core/serializer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../../../../backend/src/cache/core/serializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,iCAAiC;AACjC,eAAO,MAAM,cAAc,EAAE,UAG5B,CAAC"}

package/dist/backend/cache/core/serializer.js

@@ -0,0 +1,6 @@
+/** Standaard JSON-serializer. */
+export const jsonSerializer = {
+    serialize: (value) => JSON.stringify(value),
+    deserialize: (raw) => JSON.parse(raw),
+};
+//# sourceMappingURL=serializer.js.map

package/dist/backend/cache/core/serializer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializer.js","sourceRoot":"","sources":["../../../../backend/src/cache/core/serializer.ts"],"names":[],"mappings":"AAEA,iCAAiC;AACjC,MAAM,CAAC,MAAM,cAAc,GAAe;IACxC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;IAC3C,WAAW,EAAE,CAAI,GAAW,EAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM;CACzD,CAAC"}

package/dist/backend/cache/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `cache` kit — domein-loze caching: getypte get/set/del + TTL + namespacing, memoize (cache-aside)
+ * met stampede-bescherming, distributed lock en pub/sub. Pluggable store (in-memory + Redis) via een
+ * port; keys/TTL's/kanalen worden geïnjecteerd.
+ */
+export { createCache, type Cache, type CacheOptions } from './core/cache.js';
+export { createLock, type LockManager, type Lock, type AcquireOptions, } from './core/lock.js';
+export { createPubSub, type PubSub } from './core/pubsub.js';
+export { jsonSerializer } from './core/serializer.js';
+export type { CacheStore, PubSubStore, Subscription, Serializer, Clock } from './core/ports.js';
+export { CacheError, CacheStoreError, LockNotAcquiredError } from './core/errors.js';
+export { inMemoryCacheStore, inMemoryPubSub } from './adapters/in-memory-store.js';
+export { redisCacheStore, redisPubSub, type RedisCacheClient, type RedisPublisherClient, type RedisSubscriberClient, } from './adapters/redis-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../backend/src/cache/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,WAAW,EAAE,KAAK,KAAK,EAAE,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG7E,OAAO,EACL,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGhG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGrF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EACL,eAAe,EACf,WAAW,EACX,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,2BAA2B,CAAC"}

package/dist/backend/cache/index.js

@@ -0,0 +1,19 @@
+/**
+ * `cache` kit — domein-loze caching: getypte get/set/del + TTL + namespacing, memoize (cache-aside)
+ * met stampede-bescherming, distributed lock en pub/sub. Pluggable store (in-memory + Redis) via een
+ * port; keys/TTL's/kanalen worden geïnjecteerd.
+ */
+// Cache + memoize (US-0701/US-0702)
+export { createCache } from './core/cache.js';
+// Distributed lock (US-0703)
+export { createLock, } from './core/lock.js';
+// Pub/sub (US-0704)
+export { createPubSub } from './core/pubsub.js';
+// Serializer
+export { jsonSerializer } from './core/serializer.js';
+// Fouten
+export { CacheError, CacheStoreError, LockNotAcquiredError } from './core/errors.js';
+// Adapters (dep-vrij; Redis-adapters gebruiken structurele client-interfaces)
+export { inMemoryCacheStore, inMemoryPubSub } from './adapters/in-memory-store.js';
+export { redisCacheStore, redisPubSub, } from './adapters/redis-store.js';
+//# sourceMappingURL=index.js.map

package/dist/backend/cache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../backend/src/cache/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oCAAoC;AACpC,OAAO,EAAE,WAAW,EAAiC,MAAM,iBAAiB,CAAC;AAE7E,6BAA6B;AAC7B,OAAO,EACL,UAAU,GAIX,MAAM,gBAAgB,CAAC;AAExB,oBAAoB;AACpB,OAAO,EAAE,YAAY,EAAe,MAAM,kBAAkB,CAAC;AAE7D,aAAa;AACb,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAKtD,SAAS;AACT,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAErF,8EAA8E;AAC9E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EACL,eAAe,EACf,WAAW,GAIZ,MAAM,2BAA2B,CAAC"}

package/dist/backend/config/adapters/reporters.d.ts

@@ -0,0 +1,17 @@
+/**
+ * US-0104 — {@link Reporter}-adapters. Het geredigeerde foutrapport wordt via een injecteerbare
+ * poort uitgeschreven, zodat P-OPS de vorm (stdout, structured log) bepaalt.
+ */
+import type { ConfigReport, Reporter } from '../core/ports.js';
+/** Formatteert een rapport tot een mensvriendelijke, geredigeerde tekst. */
+export declare function formatReport(report: ConfigReport): string;
+/**
+ * Schrijft het geformatteerde rapport naar een sink (default `console.error`). Bevat nooit
+ * secretwaarden — de issues zijn reeds geredigeerd.
+ */
+export declare function consoleReporter(sink?: (message: string) => void): Reporter;
+/** Reporter die rapporten verzamelt in geheugen. Handig voor tests en assertions. */
+export declare function collectingReporter(): Reporter & {
+    reports: ConfigReport[];
+};
+//# sourceMappingURL=reporters.d.ts.map

package/dist/backend/config/adapters/reporters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporters.d.ts","sourceRoot":"","sources":["../../../../backend/src/config/adapters/reporters.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE/D,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAazD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAoB,GAAG,QAAQ,CAIzF;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,IAAI,QAAQ,GAAG;IAAE,OAAO,EAAE,YAAY,EAAE,CAAA;CAAE,CAQ3E"}

package/dist/backend/config/adapters/reporters.js

@@ -0,0 +1,35 @@
+/** Formatteert een rapport tot een mensvriendelijke, geredigeerde tekst. */
+export function formatReport(report) {
+    const header = report.environment
+        ? `${report.title} (omgeving: ${report.environment})`
+        : report.title;
+    const lines = [
+        header,
+        '',
+        `${report.issues.length} probleem${report.issues.length === 1 ? '' : 'en'} gevonden:`,
+        ...report.issues.map((issue) => `  - ${issue.path}: ${issue.message}`),
+        '',
+        'Corrigeer de bovenstaande waarden en start opnieuw.',
+    ];
+    return lines.join('\n');
+}
+/**
+ * Schrijft het geformatteerde rapport naar een sink (default `console.error`). Bevat nooit
+ * secretwaarden — de issues zijn reeds geredigeerd.
+ */
+export function consoleReporter(sink = console.error) {
+    return {
+        report: (report) => sink(formatReport(report)),
+    };
+}
+/** Reporter die rapporten verzamelt in geheugen. Handig voor tests en assertions. */
+export function collectingReporter() {
+    const reports = [];
+    return {
+        reports,
+        report: (report) => {
+            reports.push(report);
+        },
+    };
+}
+//# sourceMappingURL=reporters.js.map

package/dist/backend/config/adapters/reporters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporters.js","sourceRoot":"","sources":["../../../../backend/src/config/adapters/reporters.ts"],"names":[],"mappings":"AAMA,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW;QAC/B,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,eAAe,MAAM,CAAC,WAAW,GAAG;QACrD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACjB,MAAM,KAAK,GAAG;QACZ,MAAM;QACN,EAAE;QACF,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,YAAY;QACrF,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACtE,EAAE;QACF,qDAAqD;KACtD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAkC,OAAO,CAAC,KAAK;IAC7E,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,OAAO;QACL,OAAO;QACP,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YACjB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/backend/config/adapters/secret-resolvers.d.ts

@@ -0,0 +1,21 @@
+import type { SecretRef, SecretResolver } from '../core/ports.js';
+/**
+ * Lost `file://`-referenties op vanaf het bestandssysteem, bv.
+ * `file:///run/secrets/db_password` -> inhoud van `/run/secrets/db_password` (getrimd).
+ */
+export declare function fileSecretResolver(options?: {
+    trim?: boolean;
+}): SecretResolver;
+/**
+ * In-memory resolver voor een gegeven schema (bv. `vault`), gevoed uit een map. Handig als stub voor
+ * een vault-backend, voor tests, of als eenvoudige custom backend.
+ */
+export declare function mapSecretResolver(scheme: string, entries: Record<string, string>): SecretResolver;
+/**
+ * Adapter rondom een custom async backend-functie. Het schema bepaalt welke referenties deze
+ * resolver aankan.
+ */
+export declare function functionSecretResolver(scheme: string, fn: (ref: SecretRef) => Promise<string> | string): SecretResolver;
+/** Combineert meerdere resolvers; de eerste die de referentie aankan wint. */
+export declare function compositeSecretResolver(...resolvers: SecretResolver[]): SecretResolver;
+//# sourceMappingURL=secret-resolvers.d.ts.map

package/dist/backend/config/adapters/secret-resolvers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-resolvers.d.ts","sourceRoot":"","sources":["../../../../backend/src/config/adapters/secret-resolvers.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,cAAc,CAUnF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,cAAc,CAWjG;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAC/C,cAAc,CAKhB;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,GAAG,SAAS,EAAE,cAAc,EAAE,GAAG,cAAc,CAWtF"}