@shware/workflow 3.0.0 → 3.2.0

package/dist/store/tables.cjs

@@ -93,7 +93,8 @@ const TABLES = {
 			hash: text,
 			event: text,
 			where: nullable(jsonb),
-			filter: nullable(jsonb)
+			filter: nullable(jsonb),
+			version: nullable(text, "The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.")
 		},
 		primaryKey: ["workflow"],
 		indexes: [["event"]]
@@ -104,7 +105,8 @@ const TABLES = {
 		columns: {
 			workflow: text,
 			hash: text,
-			segment: text
+			segment: text,
+			version: nullable(text, "The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.")
 		},
 		primaryKey: ["workflow"],
 		indexes: [["segment"]]
@@ -187,7 +189,8 @@ const TABLES = {
 			callbackId: nullable(text, "The callback the current wait parks on; a wake completes it."),
 			generation: integer,
 			deadlineAt: nullable(ts),
-			checkedAt: nullable(ts, "When maintenance last compared the runtime's status with the ledger.")
+			checkedAt: nullable(ts, "When maintenance last compared the runtime's status with the ledger."),
+			stoppedAt: nullable(ts, "When it was stopped (an erasure): an invocation already running goes on to its next checkpoint, so the data waits until it has drained.")
 		},
 		primaryKey: ["instanceId"],
 		indexes: [

package/dist/store/tables.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"tables.cjs","names":[],"sources":["../../src/store/tables.ts"],"sourcesContent":["/**\n * The engine's Postgres tables, declared once. Everything that needs their shape derives it from\n * here: the drizzle schema file a host generates and migrates with its own tooling\n * (`renderDrizzleSchema`), the plain DDL (`renderPostgresDdl`), the store's table names, and the\n * check a deploy runs against the live database (`checkPostgresSchema`).\n *\n * The house rules hold for every table: no database defaults (the store writes every value,\n * timestamps included), timestamptz for time, and a UUID v7 row id — generated by the store and\n * guarded by a CHECK — wherever a table has a surrogate key. All tables live in one Postgres\n * schema of their own (`workflow` unless the config names another), so their short names never\n * meet the app's.\n */\n\nexport type ColumnType = 'uuid' | 'text' | 'jsonb' | 'timestamptz' | 'integer' | 'boolean';\n\nexport interface ColumnSpec {\n  type: ColumnType;\n  /** Columns are NOT NULL unless marked. */\n  nullable?: boolean;\n  /** One line for the generated file. */\n  doc?: string;\n}\n\nexport interface TableSpec<K extends string = string> {\n  /** Physical table name inside the schema. */\n  name: string;\n  doc: string;\n  /** Keyed by the drizzle property name; the column name is its snake_case. */\n  columns: Record<K, ColumnSpec>;\n  primaryKey: readonly K[];\n  /** A uuid column whose values must be version 7. */\n  uuidV7?: K;\n  uniqueIndexes?: readonly (readonly K[])[];\n  indexes?: readonly (readonly K[])[];\n  /** Foreign keys, to another table's logical key. */\n  references?: readonly {\n    columns: readonly K[];\n    table: string;\n    foreignColumns: readonly string[];\n  }[];\n}\n\nfunction table<K extends string>(spec: TableSpec<K>): TableSpec<K> {\n  return spec;\n}\n\nconst uuid = { type: 'uuid' } as const;\nconst text = { type: 'text' } as const;\nconst jsonb = { type: 'jsonb' } as const;\nconst ts = { type: 'timestamptz' } as const;\nconst integer = { type: 'integer' } as const;\nconst boolean = { type: 'boolean' } as const;\nconst nullable = <C extends ColumnSpec>(column: C, doc?: string): ColumnSpec => ({\n  ...column,\n  nullable: true,\n  ...(doc === undefined ? {} : { doc }),\n});\n\nexport const TABLES = {\n  event: table({\n    name: 'event',\n    doc: \"Every ingested event, the fact base for `performed(...)` conditions. `event_id` is the occurrence's identity as the sender chose it (a retrying producer sends the same one again); its unique index makes a second delivery a no-op.\",\n    columns: { id: uuid, eventId: text, userId: text, name: text, ts, payload: jsonb },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['eventId']],\n    indexes: [['userId', 'name', 'ts']],\n  }),\n  profile: table({\n    name: 'profile',\n    doc: 'Identified properties per user (`/identify` merges into `props`; a null value means unset).',\n    columns: { userId: text, props: jsonb },\n    primaryKey: ['userId'],\n  }),\n  device: table({\n    name: 'device',\n    doc: 'Push devices, registered through the Worker (`JourneyClient.registerDevice`). Signing out unbinds a device (`user_id` null) rather than removing it; a token APNs / FCM reports as gone is removed.',\n    columns: { token: text, userId: nullable(text), platform: text, ts },\n    primaryKey: ['token'],\n    indexes: [['userId']],\n  }),\n  erasure: table({\n    name: 'erasure',\n    doc: \"Erasures in progress (`forgetUser`): the user's data stays until every running instance is stopped, and the scheduled sweep retries what is left.\",\n    columns: { userId: text, requestedAt: ts },\n    primaryKey: ['userId'],\n  }),\n  suppression: table({\n    name: 'suppression',\n    doc: 'Channels a user opted out of (an email unsubscribe): the engine sends nothing there, and `reachable(channel)` is false.',\n    columns: { userId: text, channel: text, ts },\n    primaryKey: ['userId', 'channel'],\n  }),\n  segment: table({\n    name: 'segment',\n    doc: 'Deployed segment definitions, resolved by name at evaluation time.',\n    columns: { id: text, condition: jsonb, hash: text },\n    primaryKey: ['id'],\n  }),\n  trigger: table({\n    name: 'trigger',\n    doc: 'Event-trigger routes: `where` gates on the event payload, `filter` on the profile.',\n    columns: {\n      workflow: text,\n      hash: text,\n      event: text,\n      where: nullable(jsonb),\n      filter: nullable(jsonb),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['event']],\n  }),\n  segmentTrigger: table({\n    name: 'segment_trigger',\n    doc: 'Segment-entry trigger routes.',\n    columns: { workflow: text, hash: text, segment: text },\n    primaryKey: ['workflow'],\n    indexes: [['segment']],\n  }),\n  segmentMember: table({\n    name: 'segment_member',\n    doc: 'Who is in each deployed segment and since when: kept by the scheduled sweep, and for trigger-routed segments on every event too.',\n    columns: { segment: text, userId: text, ts },\n    primaryKey: ['segment', 'userId'],\n  }),\n  segmentStart: table({\n    name: 'segment_start',\n    doc: 'Workflows a segment entry still has to start for a member: written with the membership, removed as each one starts, so a failed start is retried by the next evaluation instead of being hidden behind the membership.',\n    columns: { segment: text, workflow: text, userId: text, ts },\n    primaryKey: ['segment', 'workflow', 'userId'],\n  }),\n  segmentSnapshot: table({\n    name: 'segment_snapshot',\n    doc: \"Each segment's size at every sweep, the Studio's sparklines.\",\n    columns: { segment: text, takenAt: ts, size: integer },\n    primaryKey: ['segment', 'takenAt'],\n  }),\n  entry: table({\n    name: 'entry',\n    doc: 'Entry ledger: the (workflow, user) primary key is the once policy.',\n    columns: { workflow: text, userId: text, instanceId: text, hash: text, status: text, ts },\n    primaryKey: ['workflow', 'userId'],\n    indexes: [['instanceId']],\n  }),\n  subscription: table({\n    name: 'subscription',\n    doc: 'wait_until wake routing; the primary key makes repeated subscribes idempotent.',\n    columns: { userId: text, event: text, wakeHandle: text, ts },\n    primaryKey: ['wakeHandle', 'event'],\n    indexes: [['userId', 'event']],\n  }),\n  execution: table({\n    name: 'execution',\n    doc: 'Durable executions whose start is an asynchronous submit (AWS Lambda durable functions): written with the entry, so a lost submit response is retried with the same name, target and payload instead of starting a second execution; and the wake callback the instance is parked on now. Unused on Cloudflare.',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      name: text,\n      target: text,\n      input: text,\n      createdAt: ts,\n      submittedAt: nullable(\n        ts,\n        'The runtime accepted the start; null while it may still have to be retried.'\n      ),\n      arn: nullable(text),\n      unresolvedAt: nullable(\n        ts,\n        'Retries ran out before the runtime confirmed the start: whether it runs is unknown, and nothing retries it.'\n      ),\n      callbackId: nullable(text, 'The callback the current wait parks on; a wake completes it.'),\n      generation: integer,\n      deadlineAt: nullable(ts),\n      checkedAt: nullable(\n        ts,\n        \"When maintenance last compared the runtime's status with the ledger.\"\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [['workflow', 'userId'], ['submittedAt'], ['userId']],\n  }),\n  deployment: table({\n    name: 'deployment',\n    doc: \"The Worker version whose compiled bundle the routes came from, one row (`scope` = 'routes'): journeyWorker applies its own bundle only over an older version, so one still serving during a rollout cannot put its routes back. A forced `POST /bundle/deploy` leaves it as it is.\",\n    columns: { scope: text, versionId: text, versionCreatedAt: ts, appliedAt: ts },\n    primaryKey: ['scope'],\n  }),\n  ir: table({\n    name: 'ir',\n    doc: 'Workflow bodies (WorkflowIR), content-addressed.',\n    columns: { contentHash: text, ir: jsonb },\n    primaryKey: ['contentHash'],\n  }),\n  instance: table({\n    name: 'instance',\n    doc: 'One row per journey instance, written when it enters: the node it sits on or last passed (none when a guard ended it before the first), and how it ended (`running` until then; `goal` is a conversion, at `finished_at`).',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      enteredAt: ts,\n      nodeId: nullable(text),\n      nodeAt: nullable(ts),\n      status: text,\n      finishedAt: nullable(ts),\n      convertedAt: nullable(\n        ts,\n        'When the goal was met, whatever the status: with `exitOnMatch: false` a converted instance ends `completed`.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [\n      ['workflow', 'status'],\n      ['workflow', 'finishedAt'],\n    ],\n  }),\n  message: table({\n    name: 'message',\n    doc: \"One row per message copy (a push fans out per device). The idempotency key is the engine's copy identity, so a retried step finds the row it wrote; `channel` is where the copy landed (`email`, `push_ios`, `push_android`).\",\n    columns: {\n      id: uuid,\n      idempotencyKey: text,\n      workflow: text,\n      instanceId: text,\n      nodeId: text,\n      template: text,\n      channel: text,\n      userId: text,\n      sentAt: ts,\n      deliveredAt: nullable(ts, 'The transport accepted it.'),\n      deviceDeliveredAt: nullable(\n        ts,\n        \"A push: the device reported it received (iOS's notification service extension, a browser's service worker).\"\n      ),\n      undeliveredReason: nullable(\n        text,\n        'The transport settled it without delivering (a dead push token).'\n      ),\n      openedAt: nullable(ts, 'First open of any kind, by a person or a machine.'),\n      humanOpenedAt: nullable(ts, 'First open a person made.'),\n      clickedAt: nullable(ts),\n      humanClickedAt: nullable(ts),\n      unsubscribedAt: nullable(ts),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['idempotencyKey']],\n    indexes: [['workflow', 'sentAt'], ['instanceId']],\n  }),\n  messageLink: table({\n    name: 'message_link',\n    doc: \"A sent email's links in document order: the tracked URL names a message and a position, and the redirect goes only to the URL recorded here.\",\n    columns: { messageId: uuid, position: integer, url: text },\n    primaryKey: ['messageId', 'position'],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageOpen: table({\n    name: 'message_open',\n    doc: \"Every open-pixel load or push tap, classified when recorded: `machine` when no person caused it, with the deciding rule in `reason`; the request's network (never its address) kept for revisiting the rules.\",\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      openedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageClick: table({\n    name: 'message_click',\n    doc: 'Every click on a tracked link, classified like opens.',\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      position: integer,\n      url: text,\n      clickedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n} satisfies Record<string, TableSpec>;\n\nexport type TableKey = keyof typeof TABLES;\n\n/** The engine's schema when the config names none. */\nexport const DEFAULT_SCHEMA = 'workflow';\n\n/** `eventId` → `event_id`. */\nexport function columnName(key: string): string {\n  return key.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n}\n\nconst quote = (name: string) => `\"${name.replace(/\"/g, '\"\"')}\"`;\n\nconst SQL_TYPES: Record<ColumnType, string> = {\n  uuid: 'uuid',\n  text: 'text',\n  jsonb: 'jsonb',\n  timestamptz: 'timestamptz',\n  integer: 'integer',\n  boolean: 'boolean',\n};\n\n/**\n * Plain Postgres DDL for every table — for a host without a migration tool, and the tests. A\n * host that migrates with drizzle generates `renderDrizzleSchema` instead and lets drizzle-kit\n * write the migration.\n */\nexport function renderPostgresDdl(schema = DEFAULT_SCHEMA): string {\n  const s = quote(schema);\n  const out = [`CREATE SCHEMA IF NOT EXISTS ${s};`];\n  for (const spec of Object.values(TABLES)) {\n    const lines = Object.entries(spec.columns).map(\n      ([key, column]) =>\n        `  ${quote(columnName(key))} ${SQL_TYPES[column.type]}${column.nullable ? '' : ' NOT NULL'}`\n    );\n    lines.push(`  PRIMARY KEY (${spec.primaryKey.map((k) => quote(columnName(k))).join(', ')})`);\n    if (spec.uuidV7 !== undefined) {\n      lines.push(\n        `  CONSTRAINT ${quote(`${spec.name}_uuid_v7`)} CHECK (substring(${quote(columnName(spec.uuidV7))}::text, 15, 1) = '7')`\n      );\n    }\n    for (const ref of spec.references ?? []) {\n      const target = TABLES[ref.table as TableKey];\n      lines.push(\n        `  FOREIGN KEY (${ref.columns.map((k) => quote(columnName(k))).join(', ')}) REFERENCES ${s}.${quote(target.name)} (${ref.foreignColumns.map((k) => quote(columnName(k))).join(', ')})`\n      );\n    }\n    out.push(`CREATE TABLE IF NOT EXISTS ${s}.${quote(spec.name)} (\\n${lines.join(',\\n')}\\n);`);\n    const index = (unique: boolean) => (keys: readonly string[]) => {\n      const cols = keys.map(columnName);\n      out.push(\n        `CREATE ${unique ? 'UNIQUE ' : ''}INDEX IF NOT EXISTS ${quote(`${spec.name}_${cols.join('_')}_index`)} ON ${s}.${quote(spec.name)} (${cols.map(quote).join(', ')});`\n      );\n    };\n    (spec.uniqueIndexes ?? []).forEach(index(true));\n    (spec.indexes ?? []).forEach(index(false));\n  }\n  return `${out.join('\\n')}\\n`;\n}\n\nconst DRIZZLE_TYPES: Record<ColumnType, (column: string) => string> = {\n  uuid: (c) => `uuid('${c}')`,\n  text: (c) => `text('${c}')`,\n  jsonb: (c) => `jsonb('${c}')`,\n  timestamptz: (c) => `timestamp('${c}', { mode: 'string', withTimezone: true })`,\n  integer: (c) => `integer('${c}')`,\n  boolean: (c) => `boolean('${c}')`,\n};\n\nconst exportName = (key: string) => `workflow${key.charAt(0).toUpperCase()}${key.slice(1)}`;\n\n/**\n * The tables as one drizzle file: `export const workflowSchema = pgSchema(<schema>)` and every\n * table as `workflowSchema.table(...)`. The host re-exports it from its drizzle schema and\n * generates the migration with drizzle-kit, so the migration history stays the host's. The\n * output is deterministic — regenerate and diff it in CI to catch an SDK upgrade that changed the\n * tables.\n */\nexport function renderDrizzleSchema(schema = DEFAULT_SCHEMA): string {\n  const specs = Object.entries(TABLES) as [TableKey, TableSpec][];\n  const used = new Set<string>(['pgSchema']);\n  const body: string[] = [];\n  let needsSql = false;\n  for (const [key, spec] of specs) {\n    const columns = Object.entries(spec.columns).map(([prop, column]) => {\n      used.add(column.type === 'timestamptz' ? 'timestamp' : column.type);\n      const doc = column.doc === undefined ? '' : `    /** ${column.doc} */\\n`;\n      const key =\n        spec.primaryKey.length === 1 && spec.primaryKey[0] === prop ? '.primaryKey()' : '';\n      return `${doc}    ${prop}: ${DRIZZLE_TYPES[column.type](columnName(prop))}${key}${column.nullable ? '' : '.notNull()'},`;\n    });\n    const extras: string[] = [];\n    if (spec.primaryKey.length > 1) {\n      used.add('primaryKey');\n      extras.push(\n        `primaryKey({ columns: [${spec.primaryKey.map((k) => `table.${k}`).join(', ')}] })`\n      );\n    }\n    for (const keys of spec.uniqueIndexes ?? []) {\n      used.add('uniqueIndex');\n      extras.push(`uniqueIndex().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const keys of spec.indexes ?? []) {\n      used.add('index');\n      extras.push(`index().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const ref of spec.references ?? []) {\n      used.add('foreignKey');\n      extras.push(\n        `foreignKey({ columns: [${ref.columns.map((k) => `table.${k}`).join(', ')}], foreignColumns: [${ref.foreignColumns.map((k) => `${exportName(ref.table)}.${k}`).join(', ')}] })`\n      );\n    }\n    if (spec.uuidV7 !== undefined) {\n      used.add('check');\n      needsSql = true;\n      extras.push(\n        `check('${spec.name}_uuid_v7', sql\\`substring(\\${table.${spec.uuidV7}}::text, 15, 1) = '7'\\`)`\n      );\n    }\n    const third =\n      extras.length === 0\n        ? ''\n        : `,\\n  (table) => [\\n${extras.map((e) => `    ${e},`).join('\\n')}\\n  ]`;\n    body.push(\n      `/** ${spec.doc} */\\nexport const ${exportName(key)} = workflowSchema.table(\\n  '${spec.name}',\\n  {\\n${columns.join('\\n')}\\n  }${third}\\n);`\n    );\n  }\n  const imports = [...used].sort();\n  return [\n    '// Generated by `workflow-ui generate` from @shware/workflow — do not edit; regenerate after',\n    '// upgrading the SDK and let drizzle-kit write the migration.',\n    ...(needsSql ? [\"import { sql } from 'drizzle-orm';\"] : []),\n    `import {\\n${imports.map((name) => `  ${name},`).join('\\n')}\\n} from 'drizzle-orm/pg-core';`,\n    '',\n    `export const workflowSchema = pgSchema('${schema}');`,\n    '',\n    body.join('\\n\\n'),\n    '',\n  ].join('\\n');\n}\n"],"mappings":";;AA0CA,SAAS,MAAwB,MAAkC;CACjE,OAAO;AACT;AAEA,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAC9B,MAAM,KAAK,EAAE,MAAM,cAAc;AACjC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,YAAkC,QAAW,SAA8B;CAC/E,GAAG;CACH,UAAU;CACV,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC;AAEA,MAAa,SAAS;CACpB,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,SAAS;GAAM,QAAQ;GAAM,MAAM;GAAM;GAAI,SAAS;EAAM;EACjF,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,SAAS,CAAC;EAC3B,SAAS,CAAC;GAAC;GAAU;GAAQ;EAAI,CAAC;CACpC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;EAAM;EACtC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,QAAQ,MAAM;EACZ,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,QAAQ,SAAS,IAAI;GAAG,UAAU;GAAM;EAAG;EACnE,YAAY,CAAC,OAAO;EACpB,SAAS,CAAC,CAAC,QAAQ,CAAC;CACtB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,aAAa;EAAG;EACzC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,SAAS;GAAM;EAAG;EAC3C,YAAY,CAAC,UAAU,SAAS;CAClC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,WAAW;GAAO,MAAM;EAAK;EAClD,YAAY,CAAC,IAAI;CACnB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,OAAO;GACP,OAAO,SAAS,KAAK;GACrB,QAAQ,SAAS,KAAK;EACxB;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,OAAO,CAAC;CACrB,CAAC;CACD,gBAAgB,MAAM;EACpB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,MAAM;GAAM,SAAS;EAAK;EACrD,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,SAAS,CAAC;CACvB,CAAC;CACD,eAAe,MAAM;EACnB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,QAAQ;GAAM;EAAG;EAC3C,YAAY,CAAC,WAAW,QAAQ;CAClC,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,UAAU;GAAM,QAAQ;GAAM;EAAG;EAC3D,YAAY;GAAC;GAAW;GAAY;EAAQ;CAC9C,CAAC;CACD,iBAAiB,MAAM;EACrB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,SAAS;GAAI,MAAM;EAAQ;EACrD,YAAY,CAAC,WAAW,SAAS;CACnC,CAAC;CACD,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,QAAQ;GAAM,YAAY;GAAM,MAAM;GAAM,QAAQ;GAAM;EAAG;EACxF,YAAY,CAAC,YAAY,QAAQ;EACjC,SAAS,CAAC,CAAC,YAAY,CAAC;CAC1B,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;GAAM,YAAY;GAAM;EAAG;EAC3D,YAAY,CAAC,cAAc,OAAO;EAClC,SAAS,CAAC,CAAC,UAAU,OAAO,CAAC;CAC/B,CAAC;CACD,WAAW,MAAM;EACf,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,OAAO;GACP,WAAW;GACX,aAAa,SACX,IACA,6EACF;GACA,KAAK,SAAS,IAAI;GAClB,cAAc,SACZ,IACA,6GACF;GACA,YAAY,SAAS,MAAM,8DAA8D;GACzF,YAAY;GACZ,YAAY,SAAS,EAAE;GACvB,WAAW,SACT,IACA,sEACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS;GAAC,CAAC,YAAY,QAAQ;GAAG,CAAC,aAAa;GAAG,CAAC,QAAQ;EAAC;CAC/D,CAAC;CACD,YAAY,MAAM;EAChB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,kBAAkB;GAAI,WAAW;EAAG;EAC7E,YAAY,CAAC,OAAO;CACtB,CAAC;CACD,IAAI,MAAM;EACR,MAAM;EACN,KAAK;EACL,SAAS;GAAE,aAAa;GAAM,IAAI;EAAM;EACxC,YAAY,CAAC,aAAa;CAC5B,CAAC;CACD,UAAU,MAAM;EACd,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,WAAW;GACX,QAAQ,SAAS,IAAI;GACrB,QAAQ,SAAS,EAAE;GACnB,QAAQ;GACR,YAAY,SAAS,EAAE;GACvB,aAAa,SACX,IACA,8GACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS,CACP,CAAC,YAAY,QAAQ,GACrB,CAAC,YAAY,YAAY,CAC3B;CACF,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,QAAQ;GACR,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,aAAa,SAAS,IAAI,4BAA4B;GACtD,mBAAmB,SACjB,IACA,6GACF;GACA,mBAAmB,SACjB,MACA,kEACF;GACA,UAAU,SAAS,IAAI,mDAAmD;GAC1E,eAAe,SAAS,IAAI,2BAA2B;GACvD,WAAW,SAAS,EAAE;GACtB,gBAAgB,SAAS,EAAE;GAC3B,gBAAgB,SAAS,EAAE;EAC7B;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,gBAAgB,CAAC;EAClC,SAAS,CAAC,CAAC,YAAY,QAAQ,GAAG,CAAC,YAAY,CAAC;CAClD,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,WAAW;GAAM,UAAU;GAAS,KAAK;EAAK;EACzD,YAAY,CAAC,aAAa,UAAU;EACpC,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,KAAK;GACL,WAAW;GACX,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;AACH;;AAKA,MAAa,iBAAiB;;AAG9B,SAAgB,WAAW,KAAqB;CAC9C,OAAO,IAAI,QAAQ,WAAW,MAAM,IAAI,EAAE,YAAY,GAAG;AAC3D;AAEA,MAAM,SAAS,SAAiB,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AAE7D,MAAM,YAAwC;CAC5C,MAAM;CACN,MAAM;CACN,OAAO;CACP,aAAa;CACb,SAAS;CACT,SAAS;AACX;;;;;;AAOA,SAAgB,kBAAkB,SAAS,gBAAwB;CACjE,MAAM,IAAI,MAAM,MAAM;CACtB,MAAM,MAAM,CAAC,+BAA+B,EAAE,EAAE;CAChD,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,GAAG;EACxC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KACxC,CAAC,KAAK,YACL,KAAK,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,UAAU,OAAO,QAAQ,OAAO,WAAW,KAAK,aACnF;EACA,MAAM,KAAK,kBAAkB,KAAK,WAAW,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC3F,IAAI,KAAK,WAAW,KAAA,GAClB,MAAM,KACJ,gBAAgB,MAAM,GAAG,KAAK,KAAK,SAAS,EAAE,oBAAoB,MAAM,WAAW,KAAK,MAAM,CAAC,EAAE,sBACnG;EAEF,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,MAAM,SAAS,OAAO,IAAI;GAC1B,MAAM,KACJ,kBAAkB,IAAI,QAAQ,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,IAAI,EAAE,IAAI,IAAI,eAAe,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACtL;EACF;EACA,IAAI,KAAK,8BAA8B,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;EAC1F,MAAM,SAAS,YAAqB,SAA4B;GAC9D,MAAM,OAAO,KAAK,IAAI,UAAU;GAChC,IAAI,KACF,UAAU,SAAS,YAAY,GAAG,sBAAsB,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,GACnK;EACF;EACA,CAAC,KAAK,iBAAiB,CAAC,EAAA,CAAG,QAAQ,MAAM,IAAI,CAAC;EAC9C,CAAC,KAAK,WAAW,CAAC,EAAA,CAAG,QAAQ,MAAM,KAAK,CAAC;CAC3C;CACA,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE;AAC3B;AAEA,MAAM,gBAAgE;CACpE,OAAO,MAAM,SAAS,EAAE;CACxB,OAAO,MAAM,SAAS,EAAE;CACxB,QAAQ,MAAM,UAAU,EAAE;CAC1B,cAAc,MAAM,cAAc,EAAE;CACpC,UAAU,MAAM,YAAY,EAAE;CAC9B,UAAU,MAAM,YAAY,EAAE;AAChC;AAEA,MAAM,cAAc,QAAgB,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;;;;;;;;AASxF,SAAgB,oBAAoB,SAAS,gBAAwB;CACnE,MAAM,QAAQ,OAAO,QAAQ,MAAM;CACnC,MAAM,uBAAO,IAAI,IAAY,CAAC,UAAU,CAAC;CACzC,MAAM,OAAiB,CAAC;CACxB,IAAI,WAAW;CACf,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;GACnE,KAAK,IAAI,OAAO,SAAS,gBAAgB,cAAc,OAAO,IAAI;GAClE,MAAM,MAAM,OAAO,QAAQ,KAAA,IAAY,KAAK,WAAW,OAAO,IAAI;GAClE,MAAM,MACJ,KAAK,WAAW,WAAW,KAAK,KAAK,WAAW,OAAO,OAAO,kBAAkB;GAClF,OAAO,GAAG,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,OAAO,WAAW,KAAK,aAAa;EACxH,CAAC;EACD,MAAM,SAAmB,CAAC;EAC1B,IAAI,KAAK,WAAW,SAAS,GAAG;GAC9B,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,KAAK,WAAW,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAChF;EACF;EACA,KAAK,MAAM,QAAQ,KAAK,iBAAiB,CAAC,GAAG;GAC3C,KAAK,IAAI,aAAa;GACtB,OAAO,KAAK,oBAAoB,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC7E;EACA,KAAK,MAAM,QAAQ,KAAK,WAAW,CAAC,GAAG;GACrC,KAAK,IAAI,OAAO;GAChB,OAAO,KAAK,cAAc,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EACvE;EACA,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,IAAI,QAAQ,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,sBAAsB,IAAI,eAAe,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAC5K;EACF;EACA,IAAI,KAAK,WAAW,KAAA,GAAW;GAC7B,KAAK,IAAI,OAAO;GAChB,WAAW;GACX,OAAO,KACL,UAAU,KAAK,KAAK,qCAAqC,KAAK,OAAO,yBACvE;EACF;EACA,MAAM,QACJ,OAAO,WAAW,IACd,KACA,sBAAsB,OAAO,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EACtE,KAAK,KACH,OAAO,KAAK,IAAI,oBAAoB,WAAW,GAAG,EAAE,+BAA+B,KAAK,KAAK,WAAW,QAAQ,KAAK,IAAI,EAAE,OAAO,MAAM,KAC1I;CACF;CACA,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK;CAC/B,OAAO;EACL;EACA;EACA,GAAI,WAAW,CAAC,oCAAoC,IAAI,CAAC;EACzD,aAAa,QAAQ,KAAK,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EAC5D;EACA,2CAA2C,OAAO;EAClD;EACA,KAAK,KAAK,MAAM;EAChB;CACF,CAAC,CAAC,KAAK,IAAI;AACb"}
+{"version":3,"file":"tables.cjs","names":[],"sources":["../../src/store/tables.ts"],"sourcesContent":["/**\n * The engine's Postgres tables, declared once. Everything that needs their shape derives it from\n * here: the drizzle schema file a host generates and migrates with its own tooling\n * (`renderDrizzleSchema`), the plain DDL (`renderPostgresDdl`), the store's table names, and the\n * check a deploy runs against the live database (`checkPostgresSchema`).\n *\n * The house rules hold for every table: no database defaults (the store writes every value,\n * timestamps included), timestamptz for time, and a UUID v7 row id — generated by the store and\n * guarded by a CHECK — wherever a table has a surrogate key. All tables live in one Postgres\n * schema of their own (`workflow` unless the config names another), so their short names never\n * meet the app's.\n */\n\nexport type ColumnType = 'uuid' | 'text' | 'jsonb' | 'timestamptz' | 'integer' | 'boolean';\n\nexport interface ColumnSpec {\n  type: ColumnType;\n  /** Columns are NOT NULL unless marked. */\n  nullable?: boolean;\n  /** One line for the generated file. */\n  doc?: string;\n}\n\nexport interface TableSpec<K extends string = string> {\n  /** Physical table name inside the schema. */\n  name: string;\n  doc: string;\n  /** Keyed by the drizzle property name; the column name is its snake_case. */\n  columns: Record<K, ColumnSpec>;\n  primaryKey: readonly K[];\n  /** A uuid column whose values must be version 7. */\n  uuidV7?: K;\n  uniqueIndexes?: readonly (readonly K[])[];\n  indexes?: readonly (readonly K[])[];\n  /** Foreign keys, to another table's logical key. */\n  references?: readonly {\n    columns: readonly K[];\n    table: string;\n    foreignColumns: readonly string[];\n  }[];\n}\n\nfunction table<K extends string>(spec: TableSpec<K>): TableSpec<K> {\n  return spec;\n}\n\nconst uuid = { type: 'uuid' } as const;\nconst text = { type: 'text' } as const;\nconst jsonb = { type: 'jsonb' } as const;\nconst ts = { type: 'timestamptz' } as const;\nconst integer = { type: 'integer' } as const;\nconst boolean = { type: 'boolean' } as const;\nconst nullable = <C extends ColumnSpec>(column: C, doc?: string): ColumnSpec => ({\n  ...column,\n  nullable: true,\n  ...(doc === undefined ? {} : { doc }),\n});\n\nexport const TABLES = {\n  event: table({\n    name: 'event',\n    doc: \"Every ingested event, the fact base for `performed(...)` conditions. `event_id` is the occurrence's identity as the sender chose it (a retrying producer sends the same one again); its unique index makes a second delivery a no-op.\",\n    columns: { id: uuid, eventId: text, userId: text, name: text, ts, payload: jsonb },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['eventId']],\n    indexes: [['userId', 'name', 'ts']],\n  }),\n  profile: table({\n    name: 'profile',\n    doc: 'Identified properties per user (`/identify` merges into `props`; a null value means unset).',\n    columns: { userId: text, props: jsonb },\n    primaryKey: ['userId'],\n  }),\n  device: table({\n    name: 'device',\n    doc: 'Push devices, registered through the Worker (`JourneyClient.registerDevice`). Signing out unbinds a device (`user_id` null) rather than removing it; a token APNs / FCM reports as gone is removed.',\n    columns: { token: text, userId: nullable(text), platform: text, ts },\n    primaryKey: ['token'],\n    indexes: [['userId']],\n  }),\n  erasure: table({\n    name: 'erasure',\n    doc: \"Erasures in progress (`forgetUser`): the user's data stays until every running instance is stopped, and the scheduled sweep retries what is left.\",\n    columns: { userId: text, requestedAt: ts },\n    primaryKey: ['userId'],\n  }),\n  suppression: table({\n    name: 'suppression',\n    doc: 'Channels a user opted out of (an email unsubscribe): the engine sends nothing there, and `reachable(channel)` is false.',\n    columns: { userId: text, channel: text, ts },\n    primaryKey: ['userId', 'channel'],\n  }),\n  segment: table({\n    name: 'segment',\n    doc: 'Deployed segment definitions, resolved by name at evaluation time.',\n    columns: { id: text, condition: jsonb, hash: text },\n    primaryKey: ['id'],\n  }),\n  trigger: table({\n    name: 'trigger',\n    doc: 'Event-trigger routes: `where` gates on the event payload, `filter` on the profile.',\n    columns: {\n      workflow: text,\n      hash: text,\n      event: text,\n      where: nullable(jsonb),\n      filter: nullable(jsonb),\n      version: nullable(\n        text,\n        'The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.'\n      ),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['event']],\n  }),\n  segmentTrigger: table({\n    name: 'segment_trigger',\n    doc: 'Segment-entry trigger routes.',\n    columns: {\n      workflow: text,\n      hash: text,\n      segment: text,\n      version: nullable(\n        text,\n        'The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.'\n      ),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['segment']],\n  }),\n  segmentMember: table({\n    name: 'segment_member',\n    doc: 'Who is in each deployed segment and since when: kept by the scheduled sweep, and for trigger-routed segments on every event too.',\n    columns: { segment: text, userId: text, ts },\n    primaryKey: ['segment', 'userId'],\n  }),\n  segmentStart: table({\n    name: 'segment_start',\n    doc: 'Workflows a segment entry still has to start for a member: written with the membership, removed as each one starts, so a failed start is retried by the next evaluation instead of being hidden behind the membership.',\n    columns: { segment: text, workflow: text, userId: text, ts },\n    primaryKey: ['segment', 'workflow', 'userId'],\n  }),\n  segmentSnapshot: table({\n    name: 'segment_snapshot',\n    doc: \"Each segment's size at every sweep, the Studio's sparklines.\",\n    columns: { segment: text, takenAt: ts, size: integer },\n    primaryKey: ['segment', 'takenAt'],\n  }),\n  entry: table({\n    name: 'entry',\n    doc: 'Entry ledger: the (workflow, user) primary key is the once policy.',\n    columns: { workflow: text, userId: text, instanceId: text, hash: text, status: text, ts },\n    primaryKey: ['workflow', 'userId'],\n    indexes: [['instanceId']],\n  }),\n  subscription: table({\n    name: 'subscription',\n    doc: 'wait_until wake routing; the primary key makes repeated subscribes idempotent.',\n    columns: { userId: text, event: text, wakeHandle: text, ts },\n    primaryKey: ['wakeHandle', 'event'],\n    indexes: [['userId', 'event']],\n  }),\n  execution: table({\n    name: 'execution',\n    doc: 'Durable executions whose start is an asynchronous submit (AWS Lambda durable functions): written with the entry, so a lost submit response is retried with the same name, target and payload instead of starting a second execution; and the wake callback the instance is parked on now. Unused on Cloudflare.',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      name: text,\n      target: text,\n      input: text,\n      createdAt: ts,\n      submittedAt: nullable(\n        ts,\n        'The runtime accepted the start; null while it may still have to be retried.'\n      ),\n      arn: nullable(text),\n      unresolvedAt: nullable(\n        ts,\n        'Retries ran out before the runtime confirmed the start: whether it runs is unknown, and nothing retries it.'\n      ),\n      callbackId: nullable(text, 'The callback the current wait parks on; a wake completes it.'),\n      generation: integer,\n      deadlineAt: nullable(ts),\n      checkedAt: nullable(\n        ts,\n        \"When maintenance last compared the runtime's status with the ledger.\"\n      ),\n      stoppedAt: nullable(\n        ts,\n        'When it was stopped (an erasure): an invocation already running goes on to its next checkpoint, so the data waits until it has drained.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [['workflow', 'userId'], ['submittedAt'], ['userId']],\n  }),\n  deployment: table({\n    name: 'deployment',\n    doc: \"The Worker version whose compiled bundle the routes came from, one row (`scope` = 'routes'): journeyWorker applies its own bundle only over an older version, so one still serving during a rollout cannot put its routes back. A forced `POST /bundle/deploy` leaves it as it is.\",\n    columns: { scope: text, versionId: text, versionCreatedAt: ts, appliedAt: ts },\n    primaryKey: ['scope'],\n  }),\n  ir: table({\n    name: 'ir',\n    doc: 'Workflow bodies (WorkflowIR), content-addressed.',\n    columns: { contentHash: text, ir: jsonb },\n    primaryKey: ['contentHash'],\n  }),\n  instance: table({\n    name: 'instance',\n    doc: 'One row per journey instance, written when it enters: the node it sits on or last passed (none when a guard ended it before the first), and how it ended (`running` until then; `goal` is a conversion, at `finished_at`).',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      enteredAt: ts,\n      nodeId: nullable(text),\n      nodeAt: nullable(ts),\n      status: text,\n      finishedAt: nullable(ts),\n      convertedAt: nullable(\n        ts,\n        'When the goal was met, whatever the status: with `exitOnMatch: false` a converted instance ends `completed`.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [\n      ['workflow', 'status'],\n      ['workflow', 'finishedAt'],\n    ],\n  }),\n  message: table({\n    name: 'message',\n    doc: \"One row per message copy (a push fans out per device). The idempotency key is the engine's copy identity, so a retried step finds the row it wrote; `channel` is where the copy landed (`email`, `push_ios`, `push_android`).\",\n    columns: {\n      id: uuid,\n      idempotencyKey: text,\n      workflow: text,\n      instanceId: text,\n      nodeId: text,\n      template: text,\n      channel: text,\n      userId: text,\n      sentAt: ts,\n      deliveredAt: nullable(ts, 'The transport accepted it.'),\n      deviceDeliveredAt: nullable(\n        ts,\n        \"A push: the device reported it received (iOS's notification service extension, a browser's service worker).\"\n      ),\n      undeliveredReason: nullable(\n        text,\n        'The transport settled it without delivering (a dead push token).'\n      ),\n      openedAt: nullable(ts, 'First open of any kind, by a person or a machine.'),\n      humanOpenedAt: nullable(ts, 'First open a person made.'),\n      clickedAt: nullable(ts),\n      humanClickedAt: nullable(ts),\n      unsubscribedAt: nullable(ts),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['idempotencyKey']],\n    indexes: [['workflow', 'sentAt'], ['instanceId']],\n  }),\n  messageLink: table({\n    name: 'message_link',\n    doc: \"A sent email's links in document order: the tracked URL names a message and a position, and the redirect goes only to the URL recorded here.\",\n    columns: { messageId: uuid, position: integer, url: text },\n    primaryKey: ['messageId', 'position'],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageOpen: table({\n    name: 'message_open',\n    doc: \"Every open-pixel load or push tap, classified when recorded: `machine` when no person caused it, with the deciding rule in `reason`; the request's network (never its address) kept for revisiting the rules.\",\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      openedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageClick: table({\n    name: 'message_click',\n    doc: 'Every click on a tracked link, classified like opens.',\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      position: integer,\n      url: text,\n      clickedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n} satisfies Record<string, TableSpec>;\n\nexport type TableKey = keyof typeof TABLES;\n\n/** The engine's schema when the config names none. */\nexport const DEFAULT_SCHEMA = 'workflow';\n\n/** `eventId` → `event_id`. */\nexport function columnName(key: string): string {\n  return key.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n}\n\nconst quote = (name: string) => `\"${name.replace(/\"/g, '\"\"')}\"`;\n\nconst SQL_TYPES: Record<ColumnType, string> = {\n  uuid: 'uuid',\n  text: 'text',\n  jsonb: 'jsonb',\n  timestamptz: 'timestamptz',\n  integer: 'integer',\n  boolean: 'boolean',\n};\n\n/**\n * Plain Postgres DDL for every table — for a host without a migration tool, and the tests. A\n * host that migrates with drizzle generates `renderDrizzleSchema` instead and lets drizzle-kit\n * write the migration.\n */\nexport function renderPostgresDdl(schema = DEFAULT_SCHEMA): string {\n  const s = quote(schema);\n  const out = [`CREATE SCHEMA IF NOT EXISTS ${s};`];\n  for (const spec of Object.values(TABLES)) {\n    const lines = Object.entries(spec.columns).map(\n      ([key, column]) =>\n        `  ${quote(columnName(key))} ${SQL_TYPES[column.type]}${column.nullable ? '' : ' NOT NULL'}`\n    );\n    lines.push(`  PRIMARY KEY (${spec.primaryKey.map((k) => quote(columnName(k))).join(', ')})`);\n    if (spec.uuidV7 !== undefined) {\n      lines.push(\n        `  CONSTRAINT ${quote(`${spec.name}_uuid_v7`)} CHECK (substring(${quote(columnName(spec.uuidV7))}::text, 15, 1) = '7')`\n      );\n    }\n    for (const ref of spec.references ?? []) {\n      const target = TABLES[ref.table as TableKey];\n      lines.push(\n        `  FOREIGN KEY (${ref.columns.map((k) => quote(columnName(k))).join(', ')}) REFERENCES ${s}.${quote(target.name)} (${ref.foreignColumns.map((k) => quote(columnName(k))).join(', ')})`\n      );\n    }\n    out.push(`CREATE TABLE IF NOT EXISTS ${s}.${quote(spec.name)} (\\n${lines.join(',\\n')}\\n);`);\n    const index = (unique: boolean) => (keys: readonly string[]) => {\n      const cols = keys.map(columnName);\n      out.push(\n        `CREATE ${unique ? 'UNIQUE ' : ''}INDEX IF NOT EXISTS ${quote(`${spec.name}_${cols.join('_')}_index`)} ON ${s}.${quote(spec.name)} (${cols.map(quote).join(', ')});`\n      );\n    };\n    (spec.uniqueIndexes ?? []).forEach(index(true));\n    (spec.indexes ?? []).forEach(index(false));\n  }\n  return `${out.join('\\n')}\\n`;\n}\n\nconst DRIZZLE_TYPES: Record<ColumnType, (column: string) => string> = {\n  uuid: (c) => `uuid('${c}')`,\n  text: (c) => `text('${c}')`,\n  jsonb: (c) => `jsonb('${c}')`,\n  timestamptz: (c) => `timestamp('${c}', { mode: 'string', withTimezone: true })`,\n  integer: (c) => `integer('${c}')`,\n  boolean: (c) => `boolean('${c}')`,\n};\n\nconst exportName = (key: string) => `workflow${key.charAt(0).toUpperCase()}${key.slice(1)}`;\n\n/**\n * The tables as one drizzle file: `export const workflowSchema = pgSchema(<schema>)` and every\n * table as `workflowSchema.table(...)`. The host re-exports it from its drizzle schema and\n * generates the migration with drizzle-kit, so the migration history stays the host's. The\n * output is deterministic — regenerate and diff it in CI to catch an SDK upgrade that changed the\n * tables.\n */\nexport function renderDrizzleSchema(schema = DEFAULT_SCHEMA): string {\n  const specs = Object.entries(TABLES) as [TableKey, TableSpec][];\n  const used = new Set<string>(['pgSchema']);\n  const body: string[] = [];\n  let needsSql = false;\n  for (const [key, spec] of specs) {\n    const columns = Object.entries(spec.columns).map(([prop, column]) => {\n      used.add(column.type === 'timestamptz' ? 'timestamp' : column.type);\n      const doc = column.doc === undefined ? '' : `    /** ${column.doc} */\\n`;\n      const key =\n        spec.primaryKey.length === 1 && spec.primaryKey[0] === prop ? '.primaryKey()' : '';\n      return `${doc}    ${prop}: ${DRIZZLE_TYPES[column.type](columnName(prop))}${key}${column.nullable ? '' : '.notNull()'},`;\n    });\n    const extras: string[] = [];\n    if (spec.primaryKey.length > 1) {\n      used.add('primaryKey');\n      extras.push(\n        `primaryKey({ columns: [${spec.primaryKey.map((k) => `table.${k}`).join(', ')}] })`\n      );\n    }\n    for (const keys of spec.uniqueIndexes ?? []) {\n      used.add('uniqueIndex');\n      extras.push(`uniqueIndex().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const keys of spec.indexes ?? []) {\n      used.add('index');\n      extras.push(`index().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const ref of spec.references ?? []) {\n      used.add('foreignKey');\n      extras.push(\n        `foreignKey({ columns: [${ref.columns.map((k) => `table.${k}`).join(', ')}], foreignColumns: [${ref.foreignColumns.map((k) => `${exportName(ref.table)}.${k}`).join(', ')}] })`\n      );\n    }\n    if (spec.uuidV7 !== undefined) {\n      used.add('check');\n      needsSql = true;\n      extras.push(\n        `check('${spec.name}_uuid_v7', sql\\`substring(\\${table.${spec.uuidV7}}::text, 15, 1) = '7'\\`)`\n      );\n    }\n    const third =\n      extras.length === 0\n        ? ''\n        : `,\\n  (table) => [\\n${extras.map((e) => `    ${e},`).join('\\n')}\\n  ]`;\n    body.push(\n      `/** ${spec.doc} */\\nexport const ${exportName(key)} = workflowSchema.table(\\n  '${spec.name}',\\n  {\\n${columns.join('\\n')}\\n  }${third}\\n);`\n    );\n  }\n  const imports = [...used].sort();\n  return [\n    '// Generated by `workflow-ui generate` from @shware/workflow — do not edit; regenerate after',\n    '// upgrading the SDK and let drizzle-kit write the migration.',\n    ...(needsSql ? [\"import { sql } from 'drizzle-orm';\"] : []),\n    `import {\\n${imports.map((name) => `  ${name},`).join('\\n')}\\n} from 'drizzle-orm/pg-core';`,\n    '',\n    `export const workflowSchema = pgSchema('${schema}');`,\n    '',\n    body.join('\\n\\n'),\n    '',\n  ].join('\\n');\n}\n"],"mappings":";;AA0CA,SAAS,MAAwB,MAAkC;CACjE,OAAO;AACT;AAEA,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAC9B,MAAM,KAAK,EAAE,MAAM,cAAc;AACjC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,YAAkC,QAAW,SAA8B;CAC/E,GAAG;CACH,UAAU;CACV,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC;AAEA,MAAa,SAAS;CACpB,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,SAAS;GAAM,QAAQ;GAAM,MAAM;GAAM;GAAI,SAAS;EAAM;EACjF,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,SAAS,CAAC;EAC3B,SAAS,CAAC;GAAC;GAAU;GAAQ;EAAI,CAAC;CACpC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;EAAM;EACtC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,QAAQ,MAAM;EACZ,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,QAAQ,SAAS,IAAI;GAAG,UAAU;GAAM;EAAG;EACnE,YAAY,CAAC,OAAO;EACpB,SAAS,CAAC,CAAC,QAAQ,CAAC;CACtB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,aAAa;EAAG;EACzC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,SAAS;GAAM;EAAG;EAC3C,YAAY,CAAC,UAAU,SAAS;CAClC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,WAAW;GAAO,MAAM;EAAK;EAClD,YAAY,CAAC,IAAI;CACnB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,OAAO;GACP,OAAO,SAAS,KAAK;GACrB,QAAQ,SAAS,KAAK;GACtB,SAAS,SACP,MACA,2KACF;EACF;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,OAAO,CAAC;CACrB,CAAC;CACD,gBAAgB,MAAM;EACpB,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,SAAS;GACT,SAAS,SACP,MACA,2KACF;EACF;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,SAAS,CAAC;CACvB,CAAC;CACD,eAAe,MAAM;EACnB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,QAAQ;GAAM;EAAG;EAC3C,YAAY,CAAC,WAAW,QAAQ;CAClC,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,UAAU;GAAM,QAAQ;GAAM;EAAG;EAC3D,YAAY;GAAC;GAAW;GAAY;EAAQ;CAC9C,CAAC;CACD,iBAAiB,MAAM;EACrB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,SAAS;GAAI,MAAM;EAAQ;EACrD,YAAY,CAAC,WAAW,SAAS;CACnC,CAAC;CACD,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,QAAQ;GAAM,YAAY;GAAM,MAAM;GAAM,QAAQ;GAAM;EAAG;EACxF,YAAY,CAAC,YAAY,QAAQ;EACjC,SAAS,CAAC,CAAC,YAAY,CAAC;CAC1B,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;GAAM,YAAY;GAAM;EAAG;EAC3D,YAAY,CAAC,cAAc,OAAO;EAClC,SAAS,CAAC,CAAC,UAAU,OAAO,CAAC;CAC/B,CAAC;CACD,WAAW,MAAM;EACf,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,OAAO;GACP,WAAW;GACX,aAAa,SACX,IACA,6EACF;GACA,KAAK,SAAS,IAAI;GAClB,cAAc,SACZ,IACA,6GACF;GACA,YAAY,SAAS,MAAM,8DAA8D;GACzF,YAAY;GACZ,YAAY,SAAS,EAAE;GACvB,WAAW,SACT,IACA,sEACF;GACA,WAAW,SACT,IACA,yIACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS;GAAC,CAAC,YAAY,QAAQ;GAAG,CAAC,aAAa;GAAG,CAAC,QAAQ;EAAC;CAC/D,CAAC;CACD,YAAY,MAAM;EAChB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,kBAAkB;GAAI,WAAW;EAAG;EAC7E,YAAY,CAAC,OAAO;CACtB,CAAC;CACD,IAAI,MAAM;EACR,MAAM;EACN,KAAK;EACL,SAAS;GAAE,aAAa;GAAM,IAAI;EAAM;EACxC,YAAY,CAAC,aAAa;CAC5B,CAAC;CACD,UAAU,MAAM;EACd,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,WAAW;GACX,QAAQ,SAAS,IAAI;GACrB,QAAQ,SAAS,EAAE;GACnB,QAAQ;GACR,YAAY,SAAS,EAAE;GACvB,aAAa,SACX,IACA,8GACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS,CACP,CAAC,YAAY,QAAQ,GACrB,CAAC,YAAY,YAAY,CAC3B;CACF,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,QAAQ;GACR,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,aAAa,SAAS,IAAI,4BAA4B;GACtD,mBAAmB,SACjB,IACA,6GACF;GACA,mBAAmB,SACjB,MACA,kEACF;GACA,UAAU,SAAS,IAAI,mDAAmD;GAC1E,eAAe,SAAS,IAAI,2BAA2B;GACvD,WAAW,SAAS,EAAE;GACtB,gBAAgB,SAAS,EAAE;GAC3B,gBAAgB,SAAS,EAAE;EAC7B;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,gBAAgB,CAAC;EAClC,SAAS,CAAC,CAAC,YAAY,QAAQ,GAAG,CAAC,YAAY,CAAC;CAClD,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,WAAW;GAAM,UAAU;GAAS,KAAK;EAAK;EACzD,YAAY,CAAC,aAAa,UAAU;EACpC,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,KAAK;GACL,WAAW;GACX,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;AACH;;AAKA,MAAa,iBAAiB;;AAG9B,SAAgB,WAAW,KAAqB;CAC9C,OAAO,IAAI,QAAQ,WAAW,MAAM,IAAI,EAAE,YAAY,GAAG;AAC3D;AAEA,MAAM,SAAS,SAAiB,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AAE7D,MAAM,YAAwC;CAC5C,MAAM;CACN,MAAM;CACN,OAAO;CACP,aAAa;CACb,SAAS;CACT,SAAS;AACX;;;;;;AAOA,SAAgB,kBAAkB,SAAS,gBAAwB;CACjE,MAAM,IAAI,MAAM,MAAM;CACtB,MAAM,MAAM,CAAC,+BAA+B,EAAE,EAAE;CAChD,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,GAAG;EACxC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KACxC,CAAC,KAAK,YACL,KAAK,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,UAAU,OAAO,QAAQ,OAAO,WAAW,KAAK,aACnF;EACA,MAAM,KAAK,kBAAkB,KAAK,WAAW,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC3F,IAAI,KAAK,WAAW,KAAA,GAClB,MAAM,KACJ,gBAAgB,MAAM,GAAG,KAAK,KAAK,SAAS,EAAE,oBAAoB,MAAM,WAAW,KAAK,MAAM,CAAC,EAAE,sBACnG;EAEF,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,MAAM,SAAS,OAAO,IAAI;GAC1B,MAAM,KACJ,kBAAkB,IAAI,QAAQ,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,IAAI,EAAE,IAAI,IAAI,eAAe,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACtL;EACF;EACA,IAAI,KAAK,8BAA8B,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;EAC1F,MAAM,SAAS,YAAqB,SAA4B;GAC9D,MAAM,OAAO,KAAK,IAAI,UAAU;GAChC,IAAI,KACF,UAAU,SAAS,YAAY,GAAG,sBAAsB,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,GACnK;EACF;EACA,CAAC,KAAK,iBAAiB,CAAC,EAAA,CAAG,QAAQ,MAAM,IAAI,CAAC;EAC9C,CAAC,KAAK,WAAW,CAAC,EAAA,CAAG,QAAQ,MAAM,KAAK,CAAC;CAC3C;CACA,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE;AAC3B;AAEA,MAAM,gBAAgE;CACpE,OAAO,MAAM,SAAS,EAAE;CACxB,OAAO,MAAM,SAAS,EAAE;CACxB,QAAQ,MAAM,UAAU,EAAE;CAC1B,cAAc,MAAM,cAAc,EAAE;CACpC,UAAU,MAAM,YAAY,EAAE;CAC9B,UAAU,MAAM,YAAY,EAAE;AAChC;AAEA,MAAM,cAAc,QAAgB,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;;;;;;;;AASxF,SAAgB,oBAAoB,SAAS,gBAAwB;CACnE,MAAM,QAAQ,OAAO,QAAQ,MAAM;CACnC,MAAM,uBAAO,IAAI,IAAY,CAAC,UAAU,CAAC;CACzC,MAAM,OAAiB,CAAC;CACxB,IAAI,WAAW;CACf,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;GACnE,KAAK,IAAI,OAAO,SAAS,gBAAgB,cAAc,OAAO,IAAI;GAClE,MAAM,MAAM,OAAO,QAAQ,KAAA,IAAY,KAAK,WAAW,OAAO,IAAI;GAClE,MAAM,MACJ,KAAK,WAAW,WAAW,KAAK,KAAK,WAAW,OAAO,OAAO,kBAAkB;GAClF,OAAO,GAAG,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,OAAO,WAAW,KAAK,aAAa;EACxH,CAAC;EACD,MAAM,SAAmB,CAAC;EAC1B,IAAI,KAAK,WAAW,SAAS,GAAG;GAC9B,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,KAAK,WAAW,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAChF;EACF;EACA,KAAK,MAAM,QAAQ,KAAK,iBAAiB,CAAC,GAAG;GAC3C,KAAK,IAAI,aAAa;GACtB,OAAO,KAAK,oBAAoB,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC7E;EACA,KAAK,MAAM,QAAQ,KAAK,WAAW,CAAC,GAAG;GACrC,KAAK,IAAI,OAAO;GAChB,OAAO,KAAK,cAAc,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EACvE;EACA,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,IAAI,QAAQ,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,sBAAsB,IAAI,eAAe,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAC5K;EACF;EACA,IAAI,KAAK,WAAW,KAAA,GAAW;GAC7B,KAAK,IAAI,OAAO;GAChB,WAAW;GACX,OAAO,KACL,UAAU,KAAK,KAAK,qCAAqC,KAAK,OAAO,yBACvE;EACF;EACA,MAAM,QACJ,OAAO,WAAW,IACd,KACA,sBAAsB,OAAO,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EACtE,KAAK,KACH,OAAO,KAAK,IAAI,oBAAoB,WAAW,GAAG,EAAE,+BAA+B,KAAK,KAAK,WAAW,QAAQ,KAAK,IAAI,EAAE,OAAO,MAAM,KAC1I;CACF;CACA,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK;CAC/B,OAAO;EACL;EACA;EACA,GAAI,WAAW,CAAC,oCAAoC,IAAI,CAAC;EACzD,aAAa,QAAQ,KAAK,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EAC5D;EACA,2CAA2C,OAAO;EAClD;EACA,KAAK,KAAK,MAAM;EAChB;CACF,CAAC,CAAC,KAAK,IAAI;AACb"}

package/dist/store/tables.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"tables.d.cts","names":[],"sources":["../../src/store/tables.ts"],"mappings":";;;;;;;;;;;;;YAaY;iBAEK;EACf,MAAM;;EAEN;;EAEA;;iBAGe,UAAU;;EAEzB;EACA;;EAEA,SAAS,OAAO,GAAG;EACnB,qBAAqB;;EAErB,SAAS;EACT,mCAAmC;EACnC,6BAA6B;;EAE7B;IACE,kBAAkB;IAClB;IACA;;;qBAoBS;;;;;;;;;;;;;;;;;;;;;;;YAiPD,wBAAwB;;qBAGvB;;wBAGG,WAAW;;;;;;wBAoBX,kBAAkB;;;;;;;;wBAmDlB,oBAAoB"}
+{"version":3,"file":"tables.d.cts","names":[],"sources":["../../src/store/tables.ts"],"mappings":";;;;;;;;;;;;;YAaY;iBAEK;EACf,MAAM;;EAEN;;EAEA;;iBAGe,UAAU;;EAEzB;EACA;;EAEA,SAAS,OAAO,GAAG;EACnB,qBAAqB;;EAErB,SAAS;EACT,mCAAmC;EACnC,6BAA6B;;EAE7B;IACE,kBAAkB;IAClB;IACA;;;qBAoBS;;;;;;;;;;;;;;;;;;;;;;;YAiQD,wBAAwB;;qBAGvB;;wBAGG,WAAW;;;;;;wBAoBX,kBAAkB;;;;;;;;wBAmDlB,oBAAoB"}

package/dist/store/tables.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"tables.d.mts","names":[],"sources":["../../src/store/tables.ts"],"mappings":";;;;;;;;;;;;;YAaY;iBAEK;EACf,MAAM;;EAEN;;EAEA;;iBAGe,UAAU;;EAEzB;EACA;;EAEA,SAAS,OAAO,GAAG;EACnB,qBAAqB;;EAErB,SAAS;EACT,mCAAmC;EACnC,6BAA6B;;EAE7B;IACE,kBAAkB;IAClB;IACA;;;qBAoBS;;;;;;;;;;;;;;;;;;;;;;;YAiPD,wBAAwB;;qBAGvB;;wBAGG,WAAW;;;;;;wBAoBX,kBAAkB;;;;;;;;wBAmDlB,oBAAoB"}
+{"version":3,"file":"tables.d.mts","names":[],"sources":["../../src/store/tables.ts"],"mappings":";;;;;;;;;;;;;YAaY;iBAEK;EACf,MAAM;;EAEN;;EAEA;;iBAGe,UAAU;;EAEzB;EACA;;EAEA,SAAS,OAAO,GAAG;EACnB,qBAAqB;;EAErB,SAAS;EACT,mCAAmC;EACnC,6BAA6B;;EAE7B;IACE,kBAAkB;IAClB;IACA;;;qBAoBS;;;;;;;;;;;;;;;;;;;;;;;YAiQD,wBAAwB;;qBAGvB;;wBAGG,WAAW;;;;;;wBAoBX,kBAAkB;;;;;;;;wBAmDlB,oBAAoB"}

package/dist/store/tables.mjs

@@ -92,7 +92,8 @@ const TABLES = {
 			hash: text,
 			event: text,
 			where: nullable(jsonb),
-			filter: nullable(jsonb)
+			filter: nullable(jsonb),
+			version: nullable(text, "The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.")
 		},
 		primaryKey: ["workflow"],
 		indexes: [["event"]]
@@ -103,7 +104,8 @@ const TABLES = {
 		columns: {
 			workflow: text,
 			hash: text,
-			segment: text
+			segment: text,
+			version: nullable(text, "The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.")
 		},
 		primaryKey: ["workflow"],
 		indexes: [["segment"]]
@@ -186,7 +188,8 @@ const TABLES = {
 			callbackId: nullable(text, "The callback the current wait parks on; a wake completes it."),
 			generation: integer,
 			deadlineAt: nullable(ts),
-			checkedAt: nullable(ts, "When maintenance last compared the runtime's status with the ledger.")
+			checkedAt: nullable(ts, "When maintenance last compared the runtime's status with the ledger."),
+			stoppedAt: nullable(ts, "When it was stopped (an erasure): an invocation already running goes on to its next checkpoint, so the data waits until it has drained.")
 		},
 		primaryKey: ["instanceId"],
 		indexes: [

package/dist/store/tables.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tables.mjs","names":[],"sources":["../../src/store/tables.ts"],"sourcesContent":["/**\n * The engine's Postgres tables, declared once. Everything that needs their shape derives it from\n * here: the drizzle schema file a host generates and migrates with its own tooling\n * (`renderDrizzleSchema`), the plain DDL (`renderPostgresDdl`), the store's table names, and the\n * check a deploy runs against the live database (`checkPostgresSchema`).\n *\n * The house rules hold for every table: no database defaults (the store writes every value,\n * timestamps included), timestamptz for time, and a UUID v7 row id — generated by the store and\n * guarded by a CHECK — wherever a table has a surrogate key. All tables live in one Postgres\n * schema of their own (`workflow` unless the config names another), so their short names never\n * meet the app's.\n */\n\nexport type ColumnType = 'uuid' | 'text' | 'jsonb' | 'timestamptz' | 'integer' | 'boolean';\n\nexport interface ColumnSpec {\n  type: ColumnType;\n  /** Columns are NOT NULL unless marked. */\n  nullable?: boolean;\n  /** One line for the generated file. */\n  doc?: string;\n}\n\nexport interface TableSpec<K extends string = string> {\n  /** Physical table name inside the schema. */\n  name: string;\n  doc: string;\n  /** Keyed by the drizzle property name; the column name is its snake_case. */\n  columns: Record<K, ColumnSpec>;\n  primaryKey: readonly K[];\n  /** A uuid column whose values must be version 7. */\n  uuidV7?: K;\n  uniqueIndexes?: readonly (readonly K[])[];\n  indexes?: readonly (readonly K[])[];\n  /** Foreign keys, to another table's logical key. */\n  references?: readonly {\n    columns: readonly K[];\n    table: string;\n    foreignColumns: readonly string[];\n  }[];\n}\n\nfunction table<K extends string>(spec: TableSpec<K>): TableSpec<K> {\n  return spec;\n}\n\nconst uuid = { type: 'uuid' } as const;\nconst text = { type: 'text' } as const;\nconst jsonb = { type: 'jsonb' } as const;\nconst ts = { type: 'timestamptz' } as const;\nconst integer = { type: 'integer' } as const;\nconst boolean = { type: 'boolean' } as const;\nconst nullable = <C extends ColumnSpec>(column: C, doc?: string): ColumnSpec => ({\n  ...column,\n  nullable: true,\n  ...(doc === undefined ? {} : { doc }),\n});\n\nexport const TABLES = {\n  event: table({\n    name: 'event',\n    doc: \"Every ingested event, the fact base for `performed(...)` conditions. `event_id` is the occurrence's identity as the sender chose it (a retrying producer sends the same one again); its unique index makes a second delivery a no-op.\",\n    columns: { id: uuid, eventId: text, userId: text, name: text, ts, payload: jsonb },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['eventId']],\n    indexes: [['userId', 'name', 'ts']],\n  }),\n  profile: table({\n    name: 'profile',\n    doc: 'Identified properties per user (`/identify` merges into `props`; a null value means unset).',\n    columns: { userId: text, props: jsonb },\n    primaryKey: ['userId'],\n  }),\n  device: table({\n    name: 'device',\n    doc: 'Push devices, registered through the Worker (`JourneyClient.registerDevice`). Signing out unbinds a device (`user_id` null) rather than removing it; a token APNs / FCM reports as gone is removed.',\n    columns: { token: text, userId: nullable(text), platform: text, ts },\n    primaryKey: ['token'],\n    indexes: [['userId']],\n  }),\n  erasure: table({\n    name: 'erasure',\n    doc: \"Erasures in progress (`forgetUser`): the user's data stays until every running instance is stopped, and the scheduled sweep retries what is left.\",\n    columns: { userId: text, requestedAt: ts },\n    primaryKey: ['userId'],\n  }),\n  suppression: table({\n    name: 'suppression',\n    doc: 'Channels a user opted out of (an email unsubscribe): the engine sends nothing there, and `reachable(channel)` is false.',\n    columns: { userId: text, channel: text, ts },\n    primaryKey: ['userId', 'channel'],\n  }),\n  segment: table({\n    name: 'segment',\n    doc: 'Deployed segment definitions, resolved by name at evaluation time.',\n    columns: { id: text, condition: jsonb, hash: text },\n    primaryKey: ['id'],\n  }),\n  trigger: table({\n    name: 'trigger',\n    doc: 'Event-trigger routes: `where` gates on the event payload, `filter` on the profile.',\n    columns: {\n      workflow: text,\n      hash: text,\n      event: text,\n      where: nullable(jsonb),\n      filter: nullable(jsonb),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['event']],\n  }),\n  segmentTrigger: table({\n    name: 'segment_trigger',\n    doc: 'Segment-entry trigger routes.',\n    columns: { workflow: text, hash: text, segment: text },\n    primaryKey: ['workflow'],\n    indexes: [['segment']],\n  }),\n  segmentMember: table({\n    name: 'segment_member',\n    doc: 'Who is in each deployed segment and since when: kept by the scheduled sweep, and for trigger-routed segments on every event too.',\n    columns: { segment: text, userId: text, ts },\n    primaryKey: ['segment', 'userId'],\n  }),\n  segmentStart: table({\n    name: 'segment_start',\n    doc: 'Workflows a segment entry still has to start for a member: written with the membership, removed as each one starts, so a failed start is retried by the next evaluation instead of being hidden behind the membership.',\n    columns: { segment: text, workflow: text, userId: text, ts },\n    primaryKey: ['segment', 'workflow', 'userId'],\n  }),\n  segmentSnapshot: table({\n    name: 'segment_snapshot',\n    doc: \"Each segment's size at every sweep, the Studio's sparklines.\",\n    columns: { segment: text, takenAt: ts, size: integer },\n    primaryKey: ['segment', 'takenAt'],\n  }),\n  entry: table({\n    name: 'entry',\n    doc: 'Entry ledger: the (workflow, user) primary key is the once policy.',\n    columns: { workflow: text, userId: text, instanceId: text, hash: text, status: text, ts },\n    primaryKey: ['workflow', 'userId'],\n    indexes: [['instanceId']],\n  }),\n  subscription: table({\n    name: 'subscription',\n    doc: 'wait_until wake routing; the primary key makes repeated subscribes idempotent.',\n    columns: { userId: text, event: text, wakeHandle: text, ts },\n    primaryKey: ['wakeHandle', 'event'],\n    indexes: [['userId', 'event']],\n  }),\n  execution: table({\n    name: 'execution',\n    doc: 'Durable executions whose start is an asynchronous submit (AWS Lambda durable functions): written with the entry, so a lost submit response is retried with the same name, target and payload instead of starting a second execution; and the wake callback the instance is parked on now. Unused on Cloudflare.',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      name: text,\n      target: text,\n      input: text,\n      createdAt: ts,\n      submittedAt: nullable(\n        ts,\n        'The runtime accepted the start; null while it may still have to be retried.'\n      ),\n      arn: nullable(text),\n      unresolvedAt: nullable(\n        ts,\n        'Retries ran out before the runtime confirmed the start: whether it runs is unknown, and nothing retries it.'\n      ),\n      callbackId: nullable(text, 'The callback the current wait parks on; a wake completes it.'),\n      generation: integer,\n      deadlineAt: nullable(ts),\n      checkedAt: nullable(\n        ts,\n        \"When maintenance last compared the runtime's status with the ledger.\"\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [['workflow', 'userId'], ['submittedAt'], ['userId']],\n  }),\n  deployment: table({\n    name: 'deployment',\n    doc: \"The Worker version whose compiled bundle the routes came from, one row (`scope` = 'routes'): journeyWorker applies its own bundle only over an older version, so one still serving during a rollout cannot put its routes back. A forced `POST /bundle/deploy` leaves it as it is.\",\n    columns: { scope: text, versionId: text, versionCreatedAt: ts, appliedAt: ts },\n    primaryKey: ['scope'],\n  }),\n  ir: table({\n    name: 'ir',\n    doc: 'Workflow bodies (WorkflowIR), content-addressed.',\n    columns: { contentHash: text, ir: jsonb },\n    primaryKey: ['contentHash'],\n  }),\n  instance: table({\n    name: 'instance',\n    doc: 'One row per journey instance, written when it enters: the node it sits on or last passed (none when a guard ended it before the first), and how it ended (`running` until then; `goal` is a conversion, at `finished_at`).',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      enteredAt: ts,\n      nodeId: nullable(text),\n      nodeAt: nullable(ts),\n      status: text,\n      finishedAt: nullable(ts),\n      convertedAt: nullable(\n        ts,\n        'When the goal was met, whatever the status: with `exitOnMatch: false` a converted instance ends `completed`.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [\n      ['workflow', 'status'],\n      ['workflow', 'finishedAt'],\n    ],\n  }),\n  message: table({\n    name: 'message',\n    doc: \"One row per message copy (a push fans out per device). The idempotency key is the engine's copy identity, so a retried step finds the row it wrote; `channel` is where the copy landed (`email`, `push_ios`, `push_android`).\",\n    columns: {\n      id: uuid,\n      idempotencyKey: text,\n      workflow: text,\n      instanceId: text,\n      nodeId: text,\n      template: text,\n      channel: text,\n      userId: text,\n      sentAt: ts,\n      deliveredAt: nullable(ts, 'The transport accepted it.'),\n      deviceDeliveredAt: nullable(\n        ts,\n        \"A push: the device reported it received (iOS's notification service extension, a browser's service worker).\"\n      ),\n      undeliveredReason: nullable(\n        text,\n        'The transport settled it without delivering (a dead push token).'\n      ),\n      openedAt: nullable(ts, 'First open of any kind, by a person or a machine.'),\n      humanOpenedAt: nullable(ts, 'First open a person made.'),\n      clickedAt: nullable(ts),\n      humanClickedAt: nullable(ts),\n      unsubscribedAt: nullable(ts),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['idempotencyKey']],\n    indexes: [['workflow', 'sentAt'], ['instanceId']],\n  }),\n  messageLink: table({\n    name: 'message_link',\n    doc: \"A sent email's links in document order: the tracked URL names a message and a position, and the redirect goes only to the URL recorded here.\",\n    columns: { messageId: uuid, position: integer, url: text },\n    primaryKey: ['messageId', 'position'],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageOpen: table({\n    name: 'message_open',\n    doc: \"Every open-pixel load or push tap, classified when recorded: `machine` when no person caused it, with the deciding rule in `reason`; the request's network (never its address) kept for revisiting the rules.\",\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      openedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageClick: table({\n    name: 'message_click',\n    doc: 'Every click on a tracked link, classified like opens.',\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      position: integer,\n      url: text,\n      clickedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n} satisfies Record<string, TableSpec>;\n\nexport type TableKey = keyof typeof TABLES;\n\n/** The engine's schema when the config names none. */\nexport const DEFAULT_SCHEMA = 'workflow';\n\n/** `eventId` → `event_id`. */\nexport function columnName(key: string): string {\n  return key.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n}\n\nconst quote = (name: string) => `\"${name.replace(/\"/g, '\"\"')}\"`;\n\nconst SQL_TYPES: Record<ColumnType, string> = {\n  uuid: 'uuid',\n  text: 'text',\n  jsonb: 'jsonb',\n  timestamptz: 'timestamptz',\n  integer: 'integer',\n  boolean: 'boolean',\n};\n\n/**\n * Plain Postgres DDL for every table — for a host without a migration tool, and the tests. A\n * host that migrates with drizzle generates `renderDrizzleSchema` instead and lets drizzle-kit\n * write the migration.\n */\nexport function renderPostgresDdl(schema = DEFAULT_SCHEMA): string {\n  const s = quote(schema);\n  const out = [`CREATE SCHEMA IF NOT EXISTS ${s};`];\n  for (const spec of Object.values(TABLES)) {\n    const lines = Object.entries(spec.columns).map(\n      ([key, column]) =>\n        `  ${quote(columnName(key))} ${SQL_TYPES[column.type]}${column.nullable ? '' : ' NOT NULL'}`\n    );\n    lines.push(`  PRIMARY KEY (${spec.primaryKey.map((k) => quote(columnName(k))).join(', ')})`);\n    if (spec.uuidV7 !== undefined) {\n      lines.push(\n        `  CONSTRAINT ${quote(`${spec.name}_uuid_v7`)} CHECK (substring(${quote(columnName(spec.uuidV7))}::text, 15, 1) = '7')`\n      );\n    }\n    for (const ref of spec.references ?? []) {\n      const target = TABLES[ref.table as TableKey];\n      lines.push(\n        `  FOREIGN KEY (${ref.columns.map((k) => quote(columnName(k))).join(', ')}) REFERENCES ${s}.${quote(target.name)} (${ref.foreignColumns.map((k) => quote(columnName(k))).join(', ')})`\n      );\n    }\n    out.push(`CREATE TABLE IF NOT EXISTS ${s}.${quote(spec.name)} (\\n${lines.join(',\\n')}\\n);`);\n    const index = (unique: boolean) => (keys: readonly string[]) => {\n      const cols = keys.map(columnName);\n      out.push(\n        `CREATE ${unique ? 'UNIQUE ' : ''}INDEX IF NOT EXISTS ${quote(`${spec.name}_${cols.join('_')}_index`)} ON ${s}.${quote(spec.name)} (${cols.map(quote).join(', ')});`\n      );\n    };\n    (spec.uniqueIndexes ?? []).forEach(index(true));\n    (spec.indexes ?? []).forEach(index(false));\n  }\n  return `${out.join('\\n')}\\n`;\n}\n\nconst DRIZZLE_TYPES: Record<ColumnType, (column: string) => string> = {\n  uuid: (c) => `uuid('${c}')`,\n  text: (c) => `text('${c}')`,\n  jsonb: (c) => `jsonb('${c}')`,\n  timestamptz: (c) => `timestamp('${c}', { mode: 'string', withTimezone: true })`,\n  integer: (c) => `integer('${c}')`,\n  boolean: (c) => `boolean('${c}')`,\n};\n\nconst exportName = (key: string) => `workflow${key.charAt(0).toUpperCase()}${key.slice(1)}`;\n\n/**\n * The tables as one drizzle file: `export const workflowSchema = pgSchema(<schema>)` and every\n * table as `workflowSchema.table(...)`. The host re-exports it from its drizzle schema and\n * generates the migration with drizzle-kit, so the migration history stays the host's. The\n * output is deterministic — regenerate and diff it in CI to catch an SDK upgrade that changed the\n * tables.\n */\nexport function renderDrizzleSchema(schema = DEFAULT_SCHEMA): string {\n  const specs = Object.entries(TABLES) as [TableKey, TableSpec][];\n  const used = new Set<string>(['pgSchema']);\n  const body: string[] = [];\n  let needsSql = false;\n  for (const [key, spec] of specs) {\n    const columns = Object.entries(spec.columns).map(([prop, column]) => {\n      used.add(column.type === 'timestamptz' ? 'timestamp' : column.type);\n      const doc = column.doc === undefined ? '' : `    /** ${column.doc} */\\n`;\n      const key =\n        spec.primaryKey.length === 1 && spec.primaryKey[0] === prop ? '.primaryKey()' : '';\n      return `${doc}    ${prop}: ${DRIZZLE_TYPES[column.type](columnName(prop))}${key}${column.nullable ? '' : '.notNull()'},`;\n    });\n    const extras: string[] = [];\n    if (spec.primaryKey.length > 1) {\n      used.add('primaryKey');\n      extras.push(\n        `primaryKey({ columns: [${spec.primaryKey.map((k) => `table.${k}`).join(', ')}] })`\n      );\n    }\n    for (const keys of spec.uniqueIndexes ?? []) {\n      used.add('uniqueIndex');\n      extras.push(`uniqueIndex().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const keys of spec.indexes ?? []) {\n      used.add('index');\n      extras.push(`index().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const ref of spec.references ?? []) {\n      used.add('foreignKey');\n      extras.push(\n        `foreignKey({ columns: [${ref.columns.map((k) => `table.${k}`).join(', ')}], foreignColumns: [${ref.foreignColumns.map((k) => `${exportName(ref.table)}.${k}`).join(', ')}] })`\n      );\n    }\n    if (spec.uuidV7 !== undefined) {\n      used.add('check');\n      needsSql = true;\n      extras.push(\n        `check('${spec.name}_uuid_v7', sql\\`substring(\\${table.${spec.uuidV7}}::text, 15, 1) = '7'\\`)`\n      );\n    }\n    const third =\n      extras.length === 0\n        ? ''\n        : `,\\n  (table) => [\\n${extras.map((e) => `    ${e},`).join('\\n')}\\n  ]`;\n    body.push(\n      `/** ${spec.doc} */\\nexport const ${exportName(key)} = workflowSchema.table(\\n  '${spec.name}',\\n  {\\n${columns.join('\\n')}\\n  }${third}\\n);`\n    );\n  }\n  const imports = [...used].sort();\n  return [\n    '// Generated by `workflow-ui generate` from @shware/workflow — do not edit; regenerate after',\n    '// upgrading the SDK and let drizzle-kit write the migration.',\n    ...(needsSql ? [\"import { sql } from 'drizzle-orm';\"] : []),\n    `import {\\n${imports.map((name) => `  ${name},`).join('\\n')}\\n} from 'drizzle-orm/pg-core';`,\n    '',\n    `export const workflowSchema = pgSchema('${schema}');`,\n    '',\n    body.join('\\n\\n'),\n    '',\n  ].join('\\n');\n}\n"],"mappings":";AA0CA,SAAS,MAAwB,MAAkC;CACjE,OAAO;AACT;AAEA,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAC9B,MAAM,KAAK,EAAE,MAAM,cAAc;AACjC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,YAAkC,QAAW,SAA8B;CAC/E,GAAG;CACH,UAAU;CACV,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC;AAEA,MAAa,SAAS;CACpB,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,SAAS;GAAM,QAAQ;GAAM,MAAM;GAAM;GAAI,SAAS;EAAM;EACjF,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,SAAS,CAAC;EAC3B,SAAS,CAAC;GAAC;GAAU;GAAQ;EAAI,CAAC;CACpC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;EAAM;EACtC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,QAAQ,MAAM;EACZ,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,QAAQ,SAAS,IAAI;GAAG,UAAU;GAAM;EAAG;EACnE,YAAY,CAAC,OAAO;EACpB,SAAS,CAAC,CAAC,QAAQ,CAAC;CACtB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,aAAa;EAAG;EACzC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,SAAS;GAAM;EAAG;EAC3C,YAAY,CAAC,UAAU,SAAS;CAClC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,WAAW;GAAO,MAAM;EAAK;EAClD,YAAY,CAAC,IAAI;CACnB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,OAAO;GACP,OAAO,SAAS,KAAK;GACrB,QAAQ,SAAS,KAAK;EACxB;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,OAAO,CAAC;CACrB,CAAC;CACD,gBAAgB,MAAM;EACpB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,MAAM;GAAM,SAAS;EAAK;EACrD,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,SAAS,CAAC;CACvB,CAAC;CACD,eAAe,MAAM;EACnB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,QAAQ;GAAM;EAAG;EAC3C,YAAY,CAAC,WAAW,QAAQ;CAClC,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,UAAU;GAAM,QAAQ;GAAM;EAAG;EAC3D,YAAY;GAAC;GAAW;GAAY;EAAQ;CAC9C,CAAC;CACD,iBAAiB,MAAM;EACrB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,SAAS;GAAI,MAAM;EAAQ;EACrD,YAAY,CAAC,WAAW,SAAS;CACnC,CAAC;CACD,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,QAAQ;GAAM,YAAY;GAAM,MAAM;GAAM,QAAQ;GAAM;EAAG;EACxF,YAAY,CAAC,YAAY,QAAQ;EACjC,SAAS,CAAC,CAAC,YAAY,CAAC;CAC1B,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;GAAM,YAAY;GAAM;EAAG;EAC3D,YAAY,CAAC,cAAc,OAAO;EAClC,SAAS,CAAC,CAAC,UAAU,OAAO,CAAC;CAC/B,CAAC;CACD,WAAW,MAAM;EACf,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,OAAO;GACP,WAAW;GACX,aAAa,SACX,IACA,6EACF;GACA,KAAK,SAAS,IAAI;GAClB,cAAc,SACZ,IACA,6GACF;GACA,YAAY,SAAS,MAAM,8DAA8D;GACzF,YAAY;GACZ,YAAY,SAAS,EAAE;GACvB,WAAW,SACT,IACA,sEACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS;GAAC,CAAC,YAAY,QAAQ;GAAG,CAAC,aAAa;GAAG,CAAC,QAAQ;EAAC;CAC/D,CAAC;CACD,YAAY,MAAM;EAChB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,kBAAkB;GAAI,WAAW;EAAG;EAC7E,YAAY,CAAC,OAAO;CACtB,CAAC;CACD,IAAI,MAAM;EACR,MAAM;EACN,KAAK;EACL,SAAS;GAAE,aAAa;GAAM,IAAI;EAAM;EACxC,YAAY,CAAC,aAAa;CAC5B,CAAC;CACD,UAAU,MAAM;EACd,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,WAAW;GACX,QAAQ,SAAS,IAAI;GACrB,QAAQ,SAAS,EAAE;GACnB,QAAQ;GACR,YAAY,SAAS,EAAE;GACvB,aAAa,SACX,IACA,8GACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS,CACP,CAAC,YAAY,QAAQ,GACrB,CAAC,YAAY,YAAY,CAC3B;CACF,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,QAAQ;GACR,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,aAAa,SAAS,IAAI,4BAA4B;GACtD,mBAAmB,SACjB,IACA,6GACF;GACA,mBAAmB,SACjB,MACA,kEACF;GACA,UAAU,SAAS,IAAI,mDAAmD;GAC1E,eAAe,SAAS,IAAI,2BAA2B;GACvD,WAAW,SAAS,EAAE;GACtB,gBAAgB,SAAS,EAAE;GAC3B,gBAAgB,SAAS,EAAE;EAC7B;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,gBAAgB,CAAC;EAClC,SAAS,CAAC,CAAC,YAAY,QAAQ,GAAG,CAAC,YAAY,CAAC;CAClD,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,WAAW;GAAM,UAAU;GAAS,KAAK;EAAK;EACzD,YAAY,CAAC,aAAa,UAAU;EACpC,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,KAAK;GACL,WAAW;GACX,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;AACH;;AAKA,MAAa,iBAAiB;;AAG9B,SAAgB,WAAW,KAAqB;CAC9C,OAAO,IAAI,QAAQ,WAAW,MAAM,IAAI,EAAE,YAAY,GAAG;AAC3D;AAEA,MAAM,SAAS,SAAiB,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AAE7D,MAAM,YAAwC;CAC5C,MAAM;CACN,MAAM;CACN,OAAO;CACP,aAAa;CACb,SAAS;CACT,SAAS;AACX;;;;;;AAOA,SAAgB,kBAAkB,SAAS,gBAAwB;CACjE,MAAM,IAAI,MAAM,MAAM;CACtB,MAAM,MAAM,CAAC,+BAA+B,EAAE,EAAE;CAChD,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,GAAG;EACxC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KACxC,CAAC,KAAK,YACL,KAAK,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,UAAU,OAAO,QAAQ,OAAO,WAAW,KAAK,aACnF;EACA,MAAM,KAAK,kBAAkB,KAAK,WAAW,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC3F,IAAI,KAAK,WAAW,KAAA,GAClB,MAAM,KACJ,gBAAgB,MAAM,GAAG,KAAK,KAAK,SAAS,EAAE,oBAAoB,MAAM,WAAW,KAAK,MAAM,CAAC,EAAE,sBACnG;EAEF,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,MAAM,SAAS,OAAO,IAAI;GAC1B,MAAM,KACJ,kBAAkB,IAAI,QAAQ,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,IAAI,EAAE,IAAI,IAAI,eAAe,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACtL;EACF;EACA,IAAI,KAAK,8BAA8B,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;EAC1F,MAAM,SAAS,YAAqB,SAA4B;GAC9D,MAAM,OAAO,KAAK,IAAI,UAAU;GAChC,IAAI,KACF,UAAU,SAAS,YAAY,GAAG,sBAAsB,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,GACnK;EACF;EACA,CAAC,KAAK,iBAAiB,CAAC,EAAA,CAAG,QAAQ,MAAM,IAAI,CAAC;EAC9C,CAAC,KAAK,WAAW,CAAC,EAAA,CAAG,QAAQ,MAAM,KAAK,CAAC;CAC3C;CACA,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE;AAC3B;AAEA,MAAM,gBAAgE;CACpE,OAAO,MAAM,SAAS,EAAE;CACxB,OAAO,MAAM,SAAS,EAAE;CACxB,QAAQ,MAAM,UAAU,EAAE;CAC1B,cAAc,MAAM,cAAc,EAAE;CACpC,UAAU,MAAM,YAAY,EAAE;CAC9B,UAAU,MAAM,YAAY,EAAE;AAChC;AAEA,MAAM,cAAc,QAAgB,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;;;;;;;;AASxF,SAAgB,oBAAoB,SAAS,gBAAwB;CACnE,MAAM,QAAQ,OAAO,QAAQ,MAAM;CACnC,MAAM,uBAAO,IAAI,IAAY,CAAC,UAAU,CAAC;CACzC,MAAM,OAAiB,CAAC;CACxB,IAAI,WAAW;CACf,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;GACnE,KAAK,IAAI,OAAO,SAAS,gBAAgB,cAAc,OAAO,IAAI;GAClE,MAAM,MAAM,OAAO,QAAQ,KAAA,IAAY,KAAK,WAAW,OAAO,IAAI;GAClE,MAAM,MACJ,KAAK,WAAW,WAAW,KAAK,KAAK,WAAW,OAAO,OAAO,kBAAkB;GAClF,OAAO,GAAG,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,OAAO,WAAW,KAAK,aAAa;EACxH,CAAC;EACD,MAAM,SAAmB,CAAC;EAC1B,IAAI,KAAK,WAAW,SAAS,GAAG;GAC9B,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,KAAK,WAAW,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAChF;EACF;EACA,KAAK,MAAM,QAAQ,KAAK,iBAAiB,CAAC,GAAG;GAC3C,KAAK,IAAI,aAAa;GACtB,OAAO,KAAK,oBAAoB,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC7E;EACA,KAAK,MAAM,QAAQ,KAAK,WAAW,CAAC,GAAG;GACrC,KAAK,IAAI,OAAO;GAChB,OAAO,KAAK,cAAc,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EACvE;EACA,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,IAAI,QAAQ,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,sBAAsB,IAAI,eAAe,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAC5K;EACF;EACA,IAAI,KAAK,WAAW,KAAA,GAAW;GAC7B,KAAK,IAAI,OAAO;GAChB,WAAW;GACX,OAAO,KACL,UAAU,KAAK,KAAK,qCAAqC,KAAK,OAAO,yBACvE;EACF;EACA,MAAM,QACJ,OAAO,WAAW,IACd,KACA,sBAAsB,OAAO,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EACtE,KAAK,KACH,OAAO,KAAK,IAAI,oBAAoB,WAAW,GAAG,EAAE,+BAA+B,KAAK,KAAK,WAAW,QAAQ,KAAK,IAAI,EAAE,OAAO,MAAM,KAC1I;CACF;CACA,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK;CAC/B,OAAO;EACL;EACA;EACA,GAAI,WAAW,CAAC,oCAAoC,IAAI,CAAC;EACzD,aAAa,QAAQ,KAAK,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EAC5D;EACA,2CAA2C,OAAO;EAClD;EACA,KAAK,KAAK,MAAM;EAChB;CACF,CAAC,CAAC,KAAK,IAAI;AACb"}
+{"version":3,"file":"tables.mjs","names":[],"sources":["../../src/store/tables.ts"],"sourcesContent":["/**\n * The engine's Postgres tables, declared once. Everything that needs their shape derives it from\n * here: the drizzle schema file a host generates and migrates with its own tooling\n * (`renderDrizzleSchema`), the plain DDL (`renderPostgresDdl`), the store's table names, and the\n * check a deploy runs against the live database (`checkPostgresSchema`).\n *\n * The house rules hold for every table: no database defaults (the store writes every value,\n * timestamps included), timestamptz for time, and a UUID v7 row id — generated by the store and\n * guarded by a CHECK — wherever a table has a surrogate key. All tables live in one Postgres\n * schema of their own (`workflow` unless the config names another), so their short names never\n * meet the app's.\n */\n\nexport type ColumnType = 'uuid' | 'text' | 'jsonb' | 'timestamptz' | 'integer' | 'boolean';\n\nexport interface ColumnSpec {\n  type: ColumnType;\n  /** Columns are NOT NULL unless marked. */\n  nullable?: boolean;\n  /** One line for the generated file. */\n  doc?: string;\n}\n\nexport interface TableSpec<K extends string = string> {\n  /** Physical table name inside the schema. */\n  name: string;\n  doc: string;\n  /** Keyed by the drizzle property name; the column name is its snake_case. */\n  columns: Record<K, ColumnSpec>;\n  primaryKey: readonly K[];\n  /** A uuid column whose values must be version 7. */\n  uuidV7?: K;\n  uniqueIndexes?: readonly (readonly K[])[];\n  indexes?: readonly (readonly K[])[];\n  /** Foreign keys, to another table's logical key. */\n  references?: readonly {\n    columns: readonly K[];\n    table: string;\n    foreignColumns: readonly string[];\n  }[];\n}\n\nfunction table<K extends string>(spec: TableSpec<K>): TableSpec<K> {\n  return spec;\n}\n\nconst uuid = { type: 'uuid' } as const;\nconst text = { type: 'text' } as const;\nconst jsonb = { type: 'jsonb' } as const;\nconst ts = { type: 'timestamptz' } as const;\nconst integer = { type: 'integer' } as const;\nconst boolean = { type: 'boolean' } as const;\nconst nullable = <C extends ColumnSpec>(column: C, doc?: string): ColumnSpec => ({\n  ...column,\n  nullable: true,\n  ...(doc === undefined ? {} : { doc }),\n});\n\nexport const TABLES = {\n  event: table({\n    name: 'event',\n    doc: \"Every ingested event, the fact base for `performed(...)` conditions. `event_id` is the occurrence's identity as the sender chose it (a retrying producer sends the same one again); its unique index makes a second delivery a no-op.\",\n    columns: { id: uuid, eventId: text, userId: text, name: text, ts, payload: jsonb },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['eventId']],\n    indexes: [['userId', 'name', 'ts']],\n  }),\n  profile: table({\n    name: 'profile',\n    doc: 'Identified properties per user (`/identify` merges into `props`; a null value means unset).',\n    columns: { userId: text, props: jsonb },\n    primaryKey: ['userId'],\n  }),\n  device: table({\n    name: 'device',\n    doc: 'Push devices, registered through the Worker (`JourneyClient.registerDevice`). Signing out unbinds a device (`user_id` null) rather than removing it; a token APNs / FCM reports as gone is removed.',\n    columns: { token: text, userId: nullable(text), platform: text, ts },\n    primaryKey: ['token'],\n    indexes: [['userId']],\n  }),\n  erasure: table({\n    name: 'erasure',\n    doc: \"Erasures in progress (`forgetUser`): the user's data stays until every running instance is stopped, and the scheduled sweep retries what is left.\",\n    columns: { userId: text, requestedAt: ts },\n    primaryKey: ['userId'],\n  }),\n  suppression: table({\n    name: 'suppression',\n    doc: 'Channels a user opted out of (an email unsubscribe): the engine sends nothing there, and `reachable(channel)` is false.',\n    columns: { userId: text, channel: text, ts },\n    primaryKey: ['userId', 'channel'],\n  }),\n  segment: table({\n    name: 'segment',\n    doc: 'Deployed segment definitions, resolved by name at evaluation time.',\n    columns: { id: text, condition: jsonb, hash: text },\n    primaryKey: ['id'],\n  }),\n  trigger: table({\n    name: 'trigger',\n    doc: 'Event-trigger routes: `where` gates on the event payload, `filter` on the profile.',\n    columns: {\n      workflow: text,\n      hash: text,\n      event: text,\n      where: nullable(jsonb),\n      filter: nullable(jsonb),\n      version: nullable(\n        text,\n        'The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.'\n      ),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['event']],\n  }),\n  segmentTrigger: table({\n    name: 'segment_trigger',\n    doc: 'Segment-entry trigger routes.',\n    columns: {\n      workflow: text,\n      hash: text,\n      segment: text,\n      version: nullable(\n        text,\n        'The code version whose compiled bundle put this route here (null after a forced deploy): an instance it starts runs on that version, so its IR and its code always match.'\n      ),\n    },\n    primaryKey: ['workflow'],\n    indexes: [['segment']],\n  }),\n  segmentMember: table({\n    name: 'segment_member',\n    doc: 'Who is in each deployed segment and since when: kept by the scheduled sweep, and for trigger-routed segments on every event too.',\n    columns: { segment: text, userId: text, ts },\n    primaryKey: ['segment', 'userId'],\n  }),\n  segmentStart: table({\n    name: 'segment_start',\n    doc: 'Workflows a segment entry still has to start for a member: written with the membership, removed as each one starts, so a failed start is retried by the next evaluation instead of being hidden behind the membership.',\n    columns: { segment: text, workflow: text, userId: text, ts },\n    primaryKey: ['segment', 'workflow', 'userId'],\n  }),\n  segmentSnapshot: table({\n    name: 'segment_snapshot',\n    doc: \"Each segment's size at every sweep, the Studio's sparklines.\",\n    columns: { segment: text, takenAt: ts, size: integer },\n    primaryKey: ['segment', 'takenAt'],\n  }),\n  entry: table({\n    name: 'entry',\n    doc: 'Entry ledger: the (workflow, user) primary key is the once policy.',\n    columns: { workflow: text, userId: text, instanceId: text, hash: text, status: text, ts },\n    primaryKey: ['workflow', 'userId'],\n    indexes: [['instanceId']],\n  }),\n  subscription: table({\n    name: 'subscription',\n    doc: 'wait_until wake routing; the primary key makes repeated subscribes idempotent.',\n    columns: { userId: text, event: text, wakeHandle: text, ts },\n    primaryKey: ['wakeHandle', 'event'],\n    indexes: [['userId', 'event']],\n  }),\n  execution: table({\n    name: 'execution',\n    doc: 'Durable executions whose start is an asynchronous submit (AWS Lambda durable functions): written with the entry, so a lost submit response is retried with the same name, target and payload instead of starting a second execution; and the wake callback the instance is parked on now. Unused on Cloudflare.',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      name: text,\n      target: text,\n      input: text,\n      createdAt: ts,\n      submittedAt: nullable(\n        ts,\n        'The runtime accepted the start; null while it may still have to be retried.'\n      ),\n      arn: nullable(text),\n      unresolvedAt: nullable(\n        ts,\n        'Retries ran out before the runtime confirmed the start: whether it runs is unknown, and nothing retries it.'\n      ),\n      callbackId: nullable(text, 'The callback the current wait parks on; a wake completes it.'),\n      generation: integer,\n      deadlineAt: nullable(ts),\n      checkedAt: nullable(\n        ts,\n        \"When maintenance last compared the runtime's status with the ledger.\"\n      ),\n      stoppedAt: nullable(\n        ts,\n        'When it was stopped (an erasure): an invocation already running goes on to its next checkpoint, so the data waits until it has drained.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [['workflow', 'userId'], ['submittedAt'], ['userId']],\n  }),\n  deployment: table({\n    name: 'deployment',\n    doc: \"The Worker version whose compiled bundle the routes came from, one row (`scope` = 'routes'): journeyWorker applies its own bundle only over an older version, so one still serving during a rollout cannot put its routes back. A forced `POST /bundle/deploy` leaves it as it is.\",\n    columns: { scope: text, versionId: text, versionCreatedAt: ts, appliedAt: ts },\n    primaryKey: ['scope'],\n  }),\n  ir: table({\n    name: 'ir',\n    doc: 'Workflow bodies (WorkflowIR), content-addressed.',\n    columns: { contentHash: text, ir: jsonb },\n    primaryKey: ['contentHash'],\n  }),\n  instance: table({\n    name: 'instance',\n    doc: 'One row per journey instance, written when it enters: the node it sits on or last passed (none when a guard ended it before the first), and how it ended (`running` until then; `goal` is a conversion, at `finished_at`).',\n    columns: {\n      instanceId: text,\n      workflow: text,\n      userId: text,\n      enteredAt: ts,\n      nodeId: nullable(text),\n      nodeAt: nullable(ts),\n      status: text,\n      finishedAt: nullable(ts),\n      convertedAt: nullable(\n        ts,\n        'When the goal was met, whatever the status: with `exitOnMatch: false` a converted instance ends `completed`.'\n      ),\n    },\n    primaryKey: ['instanceId'],\n    indexes: [\n      ['workflow', 'status'],\n      ['workflow', 'finishedAt'],\n    ],\n  }),\n  message: table({\n    name: 'message',\n    doc: \"One row per message copy (a push fans out per device). The idempotency key is the engine's copy identity, so a retried step finds the row it wrote; `channel` is where the copy landed (`email`, `push_ios`, `push_android`).\",\n    columns: {\n      id: uuid,\n      idempotencyKey: text,\n      workflow: text,\n      instanceId: text,\n      nodeId: text,\n      template: text,\n      channel: text,\n      userId: text,\n      sentAt: ts,\n      deliveredAt: nullable(ts, 'The transport accepted it.'),\n      deviceDeliveredAt: nullable(\n        ts,\n        \"A push: the device reported it received (iOS's notification service extension, a browser's service worker).\"\n      ),\n      undeliveredReason: nullable(\n        text,\n        'The transport settled it without delivering (a dead push token).'\n      ),\n      openedAt: nullable(ts, 'First open of any kind, by a person or a machine.'),\n      humanOpenedAt: nullable(ts, 'First open a person made.'),\n      clickedAt: nullable(ts),\n      humanClickedAt: nullable(ts),\n      unsubscribedAt: nullable(ts),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    uniqueIndexes: [['idempotencyKey']],\n    indexes: [['workflow', 'sentAt'], ['instanceId']],\n  }),\n  messageLink: table({\n    name: 'message_link',\n    doc: \"A sent email's links in document order: the tracked URL names a message and a position, and the redirect goes only to the URL recorded here.\",\n    columns: { messageId: uuid, position: integer, url: text },\n    primaryKey: ['messageId', 'position'],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageOpen: table({\n    name: 'message_open',\n    doc: \"Every open-pixel load or push tap, classified when recorded: `machine` when no person caused it, with the deciding rule in `reason`; the request's network (never its address) kept for revisiting the rules.\",\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      openedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n  messageClick: table({\n    name: 'message_click',\n    doc: 'Every click on a tracked link, classified like opens.',\n    columns: {\n      id: uuid,\n      messageId: uuid,\n      position: integer,\n      url: text,\n      clickedAt: ts,\n      machine: boolean,\n      reason: nullable(text),\n      userAgent: nullable(text),\n      asn: nullable(integer),\n      asOrganization: nullable(text),\n      country: nullable(text),\n    },\n    primaryKey: ['id'],\n    uuidV7: 'id',\n    indexes: [['messageId']],\n    references: [{ columns: ['messageId'], table: 'message', foreignColumns: ['id'] }],\n  }),\n} satisfies Record<string, TableSpec>;\n\nexport type TableKey = keyof typeof TABLES;\n\n/** The engine's schema when the config names none. */\nexport const DEFAULT_SCHEMA = 'workflow';\n\n/** `eventId` → `event_id`. */\nexport function columnName(key: string): string {\n  return key.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);\n}\n\nconst quote = (name: string) => `\"${name.replace(/\"/g, '\"\"')}\"`;\n\nconst SQL_TYPES: Record<ColumnType, string> = {\n  uuid: 'uuid',\n  text: 'text',\n  jsonb: 'jsonb',\n  timestamptz: 'timestamptz',\n  integer: 'integer',\n  boolean: 'boolean',\n};\n\n/**\n * Plain Postgres DDL for every table — for a host without a migration tool, and the tests. A\n * host that migrates with drizzle generates `renderDrizzleSchema` instead and lets drizzle-kit\n * write the migration.\n */\nexport function renderPostgresDdl(schema = DEFAULT_SCHEMA): string {\n  const s = quote(schema);\n  const out = [`CREATE SCHEMA IF NOT EXISTS ${s};`];\n  for (const spec of Object.values(TABLES)) {\n    const lines = Object.entries(spec.columns).map(\n      ([key, column]) =>\n        `  ${quote(columnName(key))} ${SQL_TYPES[column.type]}${column.nullable ? '' : ' NOT NULL'}`\n    );\n    lines.push(`  PRIMARY KEY (${spec.primaryKey.map((k) => quote(columnName(k))).join(', ')})`);\n    if (spec.uuidV7 !== undefined) {\n      lines.push(\n        `  CONSTRAINT ${quote(`${spec.name}_uuid_v7`)} CHECK (substring(${quote(columnName(spec.uuidV7))}::text, 15, 1) = '7')`\n      );\n    }\n    for (const ref of spec.references ?? []) {\n      const target = TABLES[ref.table as TableKey];\n      lines.push(\n        `  FOREIGN KEY (${ref.columns.map((k) => quote(columnName(k))).join(', ')}) REFERENCES ${s}.${quote(target.name)} (${ref.foreignColumns.map((k) => quote(columnName(k))).join(', ')})`\n      );\n    }\n    out.push(`CREATE TABLE IF NOT EXISTS ${s}.${quote(spec.name)} (\\n${lines.join(',\\n')}\\n);`);\n    const index = (unique: boolean) => (keys: readonly string[]) => {\n      const cols = keys.map(columnName);\n      out.push(\n        `CREATE ${unique ? 'UNIQUE ' : ''}INDEX IF NOT EXISTS ${quote(`${spec.name}_${cols.join('_')}_index`)} ON ${s}.${quote(spec.name)} (${cols.map(quote).join(', ')});`\n      );\n    };\n    (spec.uniqueIndexes ?? []).forEach(index(true));\n    (spec.indexes ?? []).forEach(index(false));\n  }\n  return `${out.join('\\n')}\\n`;\n}\n\nconst DRIZZLE_TYPES: Record<ColumnType, (column: string) => string> = {\n  uuid: (c) => `uuid('${c}')`,\n  text: (c) => `text('${c}')`,\n  jsonb: (c) => `jsonb('${c}')`,\n  timestamptz: (c) => `timestamp('${c}', { mode: 'string', withTimezone: true })`,\n  integer: (c) => `integer('${c}')`,\n  boolean: (c) => `boolean('${c}')`,\n};\n\nconst exportName = (key: string) => `workflow${key.charAt(0).toUpperCase()}${key.slice(1)}`;\n\n/**\n * The tables as one drizzle file: `export const workflowSchema = pgSchema(<schema>)` and every\n * table as `workflowSchema.table(...)`. The host re-exports it from its drizzle schema and\n * generates the migration with drizzle-kit, so the migration history stays the host's. The\n * output is deterministic — regenerate and diff it in CI to catch an SDK upgrade that changed the\n * tables.\n */\nexport function renderDrizzleSchema(schema = DEFAULT_SCHEMA): string {\n  const specs = Object.entries(TABLES) as [TableKey, TableSpec][];\n  const used = new Set<string>(['pgSchema']);\n  const body: string[] = [];\n  let needsSql = false;\n  for (const [key, spec] of specs) {\n    const columns = Object.entries(spec.columns).map(([prop, column]) => {\n      used.add(column.type === 'timestamptz' ? 'timestamp' : column.type);\n      const doc = column.doc === undefined ? '' : `    /** ${column.doc} */\\n`;\n      const key =\n        spec.primaryKey.length === 1 && spec.primaryKey[0] === prop ? '.primaryKey()' : '';\n      return `${doc}    ${prop}: ${DRIZZLE_TYPES[column.type](columnName(prop))}${key}${column.nullable ? '' : '.notNull()'},`;\n    });\n    const extras: string[] = [];\n    if (spec.primaryKey.length > 1) {\n      used.add('primaryKey');\n      extras.push(\n        `primaryKey({ columns: [${spec.primaryKey.map((k) => `table.${k}`).join(', ')}] })`\n      );\n    }\n    for (const keys of spec.uniqueIndexes ?? []) {\n      used.add('uniqueIndex');\n      extras.push(`uniqueIndex().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const keys of spec.indexes ?? []) {\n      used.add('index');\n      extras.push(`index().on(${keys.map((k) => `table.${k}`).join(', ')})`);\n    }\n    for (const ref of spec.references ?? []) {\n      used.add('foreignKey');\n      extras.push(\n        `foreignKey({ columns: [${ref.columns.map((k) => `table.${k}`).join(', ')}], foreignColumns: [${ref.foreignColumns.map((k) => `${exportName(ref.table)}.${k}`).join(', ')}] })`\n      );\n    }\n    if (spec.uuidV7 !== undefined) {\n      used.add('check');\n      needsSql = true;\n      extras.push(\n        `check('${spec.name}_uuid_v7', sql\\`substring(\\${table.${spec.uuidV7}}::text, 15, 1) = '7'\\`)`\n      );\n    }\n    const third =\n      extras.length === 0\n        ? ''\n        : `,\\n  (table) => [\\n${extras.map((e) => `    ${e},`).join('\\n')}\\n  ]`;\n    body.push(\n      `/** ${spec.doc} */\\nexport const ${exportName(key)} = workflowSchema.table(\\n  '${spec.name}',\\n  {\\n${columns.join('\\n')}\\n  }${third}\\n);`\n    );\n  }\n  const imports = [...used].sort();\n  return [\n    '// Generated by `workflow-ui generate` from @shware/workflow — do not edit; regenerate after',\n    '// upgrading the SDK and let drizzle-kit write the migration.',\n    ...(needsSql ? [\"import { sql } from 'drizzle-orm';\"] : []),\n    `import {\\n${imports.map((name) => `  ${name},`).join('\\n')}\\n} from 'drizzle-orm/pg-core';`,\n    '',\n    `export const workflowSchema = pgSchema('${schema}');`,\n    '',\n    body.join('\\n\\n'),\n    '',\n  ].join('\\n');\n}\n"],"mappings":";AA0CA,SAAS,MAAwB,MAAkC;CACjE,OAAO;AACT;AAEA,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,OAAO,EAAE,MAAM,OAAO;AAC5B,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAC9B,MAAM,KAAK,EAAE,MAAM,cAAc;AACjC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,UAAU,EAAE,MAAM,UAAU;AAClC,MAAM,YAAkC,QAAW,SAA8B;CAC/E,GAAG;CACH,UAAU;CACV,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC;AAEA,MAAa,SAAS;CACpB,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,SAAS;GAAM,QAAQ;GAAM,MAAM;GAAM;GAAI,SAAS;EAAM;EACjF,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,SAAS,CAAC;EAC3B,SAAS,CAAC;GAAC;GAAU;GAAQ;EAAI,CAAC;CACpC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;EAAM;EACtC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,QAAQ,MAAM;EACZ,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,QAAQ,SAAS,IAAI;GAAG,UAAU;GAAM;EAAG;EACnE,YAAY,CAAC,OAAO;EACpB,SAAS,CAAC,CAAC,QAAQ,CAAC;CACtB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,aAAa;EAAG;EACzC,YAAY,CAAC,QAAQ;CACvB,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,SAAS;GAAM;EAAG;EAC3C,YAAY,CAAC,UAAU,SAAS;CAClC,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GAAE,IAAI;GAAM,WAAW;GAAO,MAAM;EAAK;EAClD,YAAY,CAAC,IAAI;CACnB,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,OAAO;GACP,OAAO,SAAS,KAAK;GACrB,QAAQ,SAAS,KAAK;GACtB,SAAS,SACP,MACA,2KACF;EACF;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,OAAO,CAAC;CACrB,CAAC;CACD,gBAAgB,MAAM;EACpB,MAAM;EACN,KAAK;EACL,SAAS;GACP,UAAU;GACV,MAAM;GACN,SAAS;GACT,SAAS,SACP,MACA,2KACF;EACF;EACA,YAAY,CAAC,UAAU;EACvB,SAAS,CAAC,CAAC,SAAS,CAAC;CACvB,CAAC;CACD,eAAe,MAAM;EACnB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,QAAQ;GAAM;EAAG;EAC3C,YAAY,CAAC,WAAW,QAAQ;CAClC,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,UAAU;GAAM,QAAQ;GAAM;EAAG;EAC3D,YAAY;GAAC;GAAW;GAAY;EAAQ;CAC9C,CAAC;CACD,iBAAiB,MAAM;EACrB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,SAAS;GAAM,SAAS;GAAI,MAAM;EAAQ;EACrD,YAAY,CAAC,WAAW,SAAS;CACnC,CAAC;CACD,OAAO,MAAM;EACX,MAAM;EACN,KAAK;EACL,SAAS;GAAE,UAAU;GAAM,QAAQ;GAAM,YAAY;GAAM,MAAM;GAAM,QAAQ;GAAM;EAAG;EACxF,YAAY,CAAC,YAAY,QAAQ;EACjC,SAAS,CAAC,CAAC,YAAY,CAAC;CAC1B,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,QAAQ;GAAM,OAAO;GAAM,YAAY;GAAM;EAAG;EAC3D,YAAY,CAAC,cAAc,OAAO;EAClC,SAAS,CAAC,CAAC,UAAU,OAAO,CAAC;CAC/B,CAAC;CACD,WAAW,MAAM;EACf,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,OAAO;GACP,WAAW;GACX,aAAa,SACX,IACA,6EACF;GACA,KAAK,SAAS,IAAI;GAClB,cAAc,SACZ,IACA,6GACF;GACA,YAAY,SAAS,MAAM,8DAA8D;GACzF,YAAY;GACZ,YAAY,SAAS,EAAE;GACvB,WAAW,SACT,IACA,sEACF;GACA,WAAW,SACT,IACA,yIACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS;GAAC,CAAC,YAAY,QAAQ;GAAG,CAAC,aAAa;GAAG,CAAC,QAAQ;EAAC;CAC/D,CAAC;CACD,YAAY,MAAM;EAChB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,OAAO;GAAM,WAAW;GAAM,kBAAkB;GAAI,WAAW;EAAG;EAC7E,YAAY,CAAC,OAAO;CACtB,CAAC;CACD,IAAI,MAAM;EACR,MAAM;EACN,KAAK;EACL,SAAS;GAAE,aAAa;GAAM,IAAI;EAAM;EACxC,YAAY,CAAC,aAAa;CAC5B,CAAC;CACD,UAAU,MAAM;EACd,MAAM;EACN,KAAK;EACL,SAAS;GACP,YAAY;GACZ,UAAU;GACV,QAAQ;GACR,WAAW;GACX,QAAQ,SAAS,IAAI;GACrB,QAAQ,SAAS,EAAE;GACnB,QAAQ;GACR,YAAY,SAAS,EAAE;GACvB,aAAa,SACX,IACA,8GACF;EACF;EACA,YAAY,CAAC,YAAY;EACzB,SAAS,CACP,CAAC,YAAY,QAAQ,GACrB,CAAC,YAAY,YAAY,CAC3B;CACF,CAAC;CACD,SAAS,MAAM;EACb,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,gBAAgB;GAChB,UAAU;GACV,YAAY;GACZ,QAAQ;GACR,UAAU;GACV,SAAS;GACT,QAAQ;GACR,QAAQ;GACR,aAAa,SAAS,IAAI,4BAA4B;GACtD,mBAAmB,SACjB,IACA,6GACF;GACA,mBAAmB,SACjB,MACA,kEACF;GACA,UAAU,SAAS,IAAI,mDAAmD;GAC1E,eAAe,SAAS,IAAI,2BAA2B;GACvD,WAAW,SAAS,EAAE;GACtB,gBAAgB,SAAS,EAAE;GAC3B,gBAAgB,SAAS,EAAE;EAC7B;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,eAAe,CAAC,CAAC,gBAAgB,CAAC;EAClC,SAAS,CAAC,CAAC,YAAY,QAAQ,GAAG,CAAC,YAAY,CAAC;CAClD,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GAAE,WAAW;GAAM,UAAU;GAAS,KAAK;EAAK;EACzD,YAAY,CAAC,aAAa,UAAU;EACpC,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,aAAa,MAAM;EACjB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;CACD,cAAc,MAAM;EAClB,MAAM;EACN,KAAK;EACL,SAAS;GACP,IAAI;GACJ,WAAW;GACX,UAAU;GACV,KAAK;GACL,WAAW;GACX,SAAS;GACT,QAAQ,SAAS,IAAI;GACrB,WAAW,SAAS,IAAI;GACxB,KAAK,SAAS,OAAO;GACrB,gBAAgB,SAAS,IAAI;GAC7B,SAAS,SAAS,IAAI;EACxB;EACA,YAAY,CAAC,IAAI;EACjB,QAAQ;EACR,SAAS,CAAC,CAAC,WAAW,CAAC;EACvB,YAAY,CAAC;GAAE,SAAS,CAAC,WAAW;GAAG,OAAO;GAAW,gBAAgB,CAAC,IAAI;EAAE,CAAC;CACnF,CAAC;AACH;;AAKA,MAAa,iBAAiB;;AAG9B,SAAgB,WAAW,KAAqB;CAC9C,OAAO,IAAI,QAAQ,WAAW,MAAM,IAAI,EAAE,YAAY,GAAG;AAC3D;AAEA,MAAM,SAAS,SAAiB,IAAI,KAAK,QAAQ,MAAM,MAAI,EAAE;AAE7D,MAAM,YAAwC;CAC5C,MAAM;CACN,MAAM;CACN,OAAO;CACP,aAAa;CACb,SAAS;CACT,SAAS;AACX;;;;;;AAOA,SAAgB,kBAAkB,SAAS,gBAAwB;CACjE,MAAM,IAAI,MAAM,MAAM;CACtB,MAAM,MAAM,CAAC,+BAA+B,EAAE,EAAE;CAChD,KAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,GAAG;EACxC,MAAM,QAAQ,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KACxC,CAAC,KAAK,YACL,KAAK,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,UAAU,OAAO,QAAQ,OAAO,WAAW,KAAK,aACnF;EACA,MAAM,KAAK,kBAAkB,KAAK,WAAW,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC3F,IAAI,KAAK,WAAW,KAAA,GAClB,MAAM,KACJ,gBAAgB,MAAM,GAAG,KAAK,KAAK,SAAS,EAAE,oBAAoB,MAAM,WAAW,KAAK,MAAM,CAAC,EAAE,sBACnG;EAEF,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,MAAM,SAAS,OAAO,IAAI;GAC1B,MAAM,KACJ,kBAAkB,IAAI,QAAQ,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,OAAO,IAAI,EAAE,IAAI,IAAI,eAAe,KAAK,MAAM,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EACtL;EACF;EACA,IAAI,KAAK,8BAA8B,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,MAAM,MAAM,KAAK,KAAK,EAAE,KAAK;EAC1F,MAAM,SAAS,YAAqB,SAA4B;GAC9D,MAAM,OAAO,KAAK,IAAI,UAAU;GAChC,IAAI,KACF,UAAU,SAAS,YAAY,GAAG,sBAAsB,MAAM,GAAG,KAAK,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,GACnK;EACF;EACA,CAAC,KAAK,iBAAiB,CAAC,EAAA,CAAG,QAAQ,MAAM,IAAI,CAAC;EAC9C,CAAC,KAAK,WAAW,CAAC,EAAA,CAAG,QAAQ,MAAM,KAAK,CAAC;CAC3C;CACA,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE;AAC3B;AAEA,MAAM,gBAAgE;CACpE,OAAO,MAAM,SAAS,EAAE;CACxB,OAAO,MAAM,SAAS,EAAE;CACxB,QAAQ,MAAM,UAAU,EAAE;CAC1B,cAAc,MAAM,cAAc,EAAE;CACpC,UAAU,MAAM,YAAY,EAAE;CAC9B,UAAU,MAAM,YAAY,EAAE;AAChC;AAEA,MAAM,cAAc,QAAgB,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;;;;;;;;AASxF,SAAgB,oBAAoB,SAAS,gBAAwB;CACnE,MAAM,QAAQ,OAAO,QAAQ,MAAM;CACnC,MAAM,uBAAO,IAAI,IAAY,CAAC,UAAU,CAAC;CACzC,MAAM,OAAiB,CAAC;CACxB,IAAI,WAAW;CACf,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO;EAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;GACnE,KAAK,IAAI,OAAO,SAAS,gBAAgB,cAAc,OAAO,IAAI;GAClE,MAAM,MAAM,OAAO,QAAQ,KAAA,IAAY,KAAK,WAAW,OAAO,IAAI;GAClE,MAAM,MACJ,KAAK,WAAW,WAAW,KAAK,KAAK,WAAW,OAAO,OAAO,kBAAkB;GAClF,OAAO,GAAG,IAAI,MAAM,KAAK,IAAI,cAAc,OAAO,KAAK,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,OAAO,WAAW,KAAK,aAAa;EACxH,CAAC;EACD,MAAM,SAAmB,CAAC;EAC1B,IAAI,KAAK,WAAW,SAAS,GAAG;GAC9B,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,KAAK,WAAW,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAChF;EACF;EACA,KAAK,MAAM,QAAQ,KAAK,iBAAiB,CAAC,GAAG;GAC3C,KAAK,IAAI,aAAa;GACtB,OAAO,KAAK,oBAAoB,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EAC7E;EACA,KAAK,MAAM,QAAQ,KAAK,WAAW,CAAC,GAAG;GACrC,KAAK,IAAI,OAAO;GAChB,OAAO,KAAK,cAAc,KAAK,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;EACvE;EACA,KAAK,MAAM,OAAO,KAAK,cAAc,CAAC,GAAG;GACvC,KAAK,IAAI,YAAY;GACrB,OAAO,KACL,0BAA0B,IAAI,QAAQ,KAAK,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,sBAAsB,IAAI,eAAe,KAAK,MAAM,GAAG,WAAW,IAAI,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,KAC5K;EACF;EACA,IAAI,KAAK,WAAW,KAAA,GAAW;GAC7B,KAAK,IAAI,OAAO;GAChB,WAAW;GACX,OAAO,KACL,UAAU,KAAK,KAAK,qCAAqC,KAAK,OAAO,yBACvE;EACF;EACA,MAAM,QACJ,OAAO,WAAW,IACd,KACA,sBAAsB,OAAO,KAAK,MAAM,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EACtE,KAAK,KACH,OAAO,KAAK,IAAI,oBAAoB,WAAW,GAAG,EAAE,+BAA+B,KAAK,KAAK,WAAW,QAAQ,KAAK,IAAI,EAAE,OAAO,MAAM,KAC1I;CACF;CACA,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK;CAC/B,OAAO;EACL;EACA;EACA,GAAI,WAAW,CAAC,oCAAoC,IAAI,CAAC;EACzD,aAAa,QAAQ,KAAK,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;EAC5D;EACA,2CAA2C,OAAO;EAClD;EACA,KAAK,KAAK,MAAM;EAChB;CACF,CAAC,CAAC,KAAK,IAAI;AACb"}

package/dist/transports/cloudflare-email.cjs

@@ -1,16 +1,20 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_email = require("../email.cjs");
+const require_engine_retry = require("../engine/retry.cjs");
 //#region src/transports/cloudflare-email.ts
 /** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
 var CloudflareEmailError = class extends Error {
 	status;
 	errors;
 	name = "CloudflareEmailError";
+	/** A refused request (bad token, invalid schema) fails the same way every time. */
+	retryable;
 	constructor(status, errors) {
 		const said = errors.map((e) => `${e.code ?? "?"} ${e.message ?? ""}`.trim()).join("; ");
 		super(`Cloudflare Email send failed (${status})${said === "" ? "" : `: ${said}`}`);
 		this.status = status;
 		this.errors = errors;
+		this.retryable = status < 400 || require_engine_retry.isRetryableStatus(status);
 	}
 };
 function cloudflareEmailTransport(options) {

package/dist/transports/cloudflare-email.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare-email.cjs","names":["mimeAddress"],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;;AA4BA,IAAa,uBAAb,cAA0C,MAAM;CAGnC;CACA;CAHX,OAAyB;CACzB,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;CAIX;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAMA,cAAAA,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAUA,cAAAA,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}
+{"version":3,"file":"cloudflare-email.cjs","names":["isRetryableStatus","mimeAddress"],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\nimport { isRetryableStatus } from '../engine/retry';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  /** A refused request (bad token, invalid schema) fails the same way every time. */\n  readonly retryable: boolean;\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n    // A 200 with `success: false` says nothing about retrying: treat it as transient\n    this.retryable = status < 400 || isRetryableStatus(status);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;;;AA6BA,IAAa,uBAAb,cAA0C,MAAM;CAKnC;CACA;CALX,OAAyB;;CAEzB;CACA,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;EAKT,KAAK,YAAY,SAAS,OAAOA,qBAAAA,kBAAkB,MAAM;CAC3D;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAMC,cAAAA,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAUA,cAAAA,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}

package/dist/transports/cloudflare-email.d.cts

@@ -28,6 +28,8 @@ export declare class CloudflareEmailError extends Error {
     message?: string;
   }[];
   readonly name = "CloudflareEmailError";
+  /** A refused request (bad token, invalid schema) fails the same way every time. */
+  readonly retryable: boolean;
   constructor(status: number, errors: readonly {
     code?: number;
     message?: string;

package/dist/transports/cloudflare-email.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare-email.d.cts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAUY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAG7B;WACA;IAAmB;IAAe;;WAH3B;EAClB,YACW,gBACA;IAAmB;IAAe;;;wBAO/B,yBAAyB,SAAS,kCAAkC"}
+{"version":3,"file":"cloudflare-email.d.cts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAWY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAK7B;WACA;IAAmB;IAAe;;WAL3B;;WAET;EACT,YACW,gBACA;IAAmB;IAAe;;;wBAS/B,yBAAyB,SAAS,kCAAkC"}

package/dist/transports/cloudflare-email.d.mts

@@ -28,6 +28,8 @@ export declare class CloudflareEmailError extends Error {
     message?: string;
   }[];
   readonly name = "CloudflareEmailError";
+  /** A refused request (bad token, invalid schema) fails the same way every time. */
+  readonly retryable: boolean;
   constructor(status: number, errors: readonly {
     code?: number;
     message?: string;

package/dist/transports/cloudflare-email.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare-email.d.mts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAUY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAG7B;WACA;IAAmB;IAAe;;WAH3B;EAClB,YACW,gBACA;IAAmB;IAAe;;;wBAO/B,yBAAyB,SAAS,kCAAkC"}
+{"version":3,"file":"cloudflare-email.d.mts","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"mappings":";;;;;;;;YAWY;;EAGN,SAAS;EACT;EACA;;EAGA;EACA;;EAEA;;EAEA;EACA,eAAe;;;qBAIR,6BAA6B;WAK7B;WACA;IAAmB;IAAe;;WAL3B;;WAET;EACT,YACW,gBACA;IAAmB;IAAe;;;wBAS/B,yBAAyB,SAAS,kCAAkC"}

package/dist/transports/cloudflare-email.mjs

@@ -1,15 +1,19 @@
 import { mimeAddress } from "../email.mjs";
+import { isRetryableStatus } from "../engine/retry.mjs";
 //#region src/transports/cloudflare-email.ts
 /** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */
 var CloudflareEmailError = class extends Error {
 	status;
 	errors;
 	name = "CloudflareEmailError";
+	/** A refused request (bad token, invalid schema) fails the same way every time. */
+	retryable;
 	constructor(status, errors) {
 		const said = errors.map((e) => `${e.code ?? "?"} ${e.message ?? ""}`.trim()).join("; ");
 		super(`Cloudflare Email send failed (${status})${said === "" ? "" : `: ${said}`}`);
 		this.status = status;
 		this.errors = errors;
+		this.retryable = status < 400 || isRetryableStatus(status);
 	}
 };
 function cloudflareEmailTransport(options) {

package/dist/transports/cloudflare-email.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare-email.mjs","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;AA4BA,IAAa,uBAAb,cAA0C,MAAM;CAGnC;CACA;CAHX,OAAyB;CACzB,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;CAIX;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAM,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}
+{"version":3,"file":"cloudflare-email.mjs","names":[],"sources":["../../src/transports/cloudflare-email.ts"],"sourcesContent":["import type { EmailBindingLike } from '../cloudflare/bindings';\nimport { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\nimport { isRetryableStatus } from '../engine/retry';\n\n/**\n * `@shware/workflow/transports/cloudflare-email` — Cloudflare Email Service, through the\n * Worker's `send_email` binding or, from anywhere else (a Lambda), its REST API. Both take the\n * same finished email; only the call and the way each reports a failure differ.\n */\n\nexport type CloudflareEmailTransportOptions =\n  | {\n      /** The Worker's `send_email` binding. */\n      binding: EmailBindingLike;\n      accountId?: never;\n      apiToken?: never;\n    }\n  | {\n      binding?: never;\n      accountId: string;\n      /** An API token allowed to send email for the account. */\n      apiToken: string;\n      /** Defaults to `https://api.cloudflare.com/client/v4`. */\n      endpoint?: string;\n      fetch?: typeof fetch;\n    };\n\n/** The REST API refused the email: `errors` are Cloudflare's `{ code, message }` pairs. */\nexport class CloudflareEmailError extends Error {\n  override readonly name = 'CloudflareEmailError';\n  /** A refused request (bad token, invalid schema) fails the same way every time. */\n  readonly retryable: boolean;\n  constructor(\n    readonly status: number,\n    readonly errors: readonly { code?: number; message?: string }[]\n  ) {\n    const said = errors.map((e) => `${e.code ?? '?'} ${e.message ?? ''}`.trim()).join('; ');\n    super(`Cloudflare Email send failed (${status})${said === '' ? '' : `: ${said}`}`);\n    // A 200 with `success: false` says nothing about retrying: treat it as transient\n    this.retryable = status < 400 || isRetryableStatus(status);\n  }\n}\n\nexport function cloudflareEmailTransport(options: CloudflareEmailTransportOptions): EmailTransport {\n  if (options.binding !== undefined) {\n    const { binding } = options;\n    return {\n      async send(message) {\n        // The binding takes the key and drops the duplicate a retry or replay produces\n        const result: unknown = await binding.send(message);\n        const id = (result as { messageId?: unknown } | null | undefined)?.messageId;\n        return typeof id === 'string' ? { providerMessageId: id } : {};\n      },\n    };\n  }\n  // Checked at runtime too: a JS caller can pass neither\n  const given = options as { accountId?: unknown; apiToken?: unknown };\n  if (typeof given.accountId !== 'string' || typeof given.apiToken !== 'string') {\n    throw new TypeError('cloudflareEmailTransport needs { binding } or { accountId, apiToken }');\n  }\n  const { accountId, apiToken } = options;\n  const endpoint = (options.endpoint ?? 'https://api.cloudflare.com/client/v4').replace(/\\/$/, '');\n  const fetchImpl = options.fetch ?? fetch;\n  return {\n    async send(message: EmailMessage) {\n      const response = await fetchImpl(\n        `${endpoint}/accounts/${encodeURIComponent(accountId)}/email/sending/send`,\n        {\n          method: 'POST',\n          headers: {\n            authorization: `Bearer ${apiToken}`,\n            'content-type': 'application/json',\n          },\n          body: JSON.stringify({\n            from: mimeAddress(message.from),\n            to: message.to,\n            ...(message.replyTo === undefined ? {} : { reply_to: mimeAddress(message.replyTo) }),\n            subject: message.subject,\n            html: message.html,\n          }),\n        }\n      );\n      let body: { success?: unknown; errors?: unknown; result?: { message_id?: unknown } } = {};\n      try {\n        body = (await response.json()) as typeof body;\n      } catch {\n        body = {};\n      }\n      if (!response.ok || body.success !== true) {\n        throw new CloudflareEmailError(\n          response.status,\n          Array.isArray(body.errors) ? (body.errors as { code?: number; message?: string }[]) : []\n        );\n      }\n      // No server-side de-duplication is documented for the REST API: a retry after an accepted\n      // send can deliver twice (at least once, like SES)\n      const id = body.result?.message_id;\n      return typeof id === 'string' ? { providerMessageId: id } : {};\n    },\n  };\n}\n"],"mappings":";;;;AA6BA,IAAa,uBAAb,cAA0C,MAAM;CAKnC;CACA;CALX,OAAyB;;CAEzB;CACA,YACE,QACA,QACA;EACA,MAAM,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;EACtF,MAAM,iCAAiC,OAAO,GAAG,SAAS,KAAK,KAAK,KAAK,QAAQ;EAJxE,KAAA,SAAA;EACA,KAAA,SAAA;EAKT,KAAK,YAAY,SAAS,OAAO,kBAAkB,MAAM;CAC3D;AACF;AAEA,SAAgB,yBAAyB,SAA0D;CACjG,IAAI,QAAQ,YAAY,KAAA,GAAW;EACjC,MAAM,EAAE,YAAY;EACpB,OAAO,EACL,MAAM,KAAK,SAAS;GAGlB,MAAM,MAAM,MADkB,QAAQ,KAAK,OAAO,EAAA,EACiB;GACnE,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;EAC/D,EACF;CACF;CAEA,MAAM,QAAQ;CACd,IAAI,OAAO,MAAM,cAAc,YAAY,OAAO,MAAM,aAAa,UACnE,MAAM,IAAI,UAAU,uEAAuE;CAE7F,MAAM,EAAE,WAAW,aAAa;CAChC,MAAM,YAAY,QAAQ,YAAY,uCAAA,CAAwC,QAAQ,OAAO,EAAE;CAC/F,MAAM,YAAY,QAAQ,SAAS;CACnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,WAAW,MAAM,UACrB,GAAG,SAAS,YAAY,mBAAmB,SAAS,EAAE,sBACtD;GACE,QAAQ;GACR,SAAS;IACP,eAAe,UAAU;IACzB,gBAAgB;GAClB;GACA,MAAM,KAAK,UAAU;IACnB,MAAM,YAAY,QAAQ,IAAI;IAC9B,IAAI,QAAQ;IACZ,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU,YAAY,QAAQ,OAAO,EAAE;IAClF,SAAS,QAAQ;IACjB,MAAM,QAAQ;GAChB,CAAC;EACH,CACF;EACA,IAAI,OAAmF,CAAC;EACxF,IAAI;GACF,OAAQ,MAAM,SAAS,KAAK;EAC9B,QAAQ;GACN,OAAO,CAAC;EACV;EACA,IAAI,CAAC,SAAS,MAAM,KAAK,YAAY,MACnC,MAAM,IAAI,qBACR,SAAS,QACT,MAAM,QAAQ,KAAK,MAAM,IAAK,KAAK,SAAmD,CAAC,CACzF;EAIF,MAAM,KAAK,KAAK,QAAQ;EACxB,OAAO,OAAO,OAAO,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC/D,EACF;AACF"}

package/dist/transports/ses.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_email = require("../email.cjs");
+const require_engine_retry = require("../engine/retry.cjs");
 const require_transports_sigv4 = require("./sigv4.cjs");
 //#region src/transports/ses.ts
 /** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */
@@ -7,10 +8,13 @@ var SesSendError = class extends Error {
 	status;
 	type;
 	name = "SesSendError";
+	/** A rejected request (an unverified sender, a bad address) fails the same way every time. */
+	retryable;
 	constructor(status, type, message) {
 		super(`SES SendEmail failed (${status}${type === void 0 ? "" : ` ${type}`}): ${message}`);
 		this.status = status;
 		this.type = type;
+		this.retryable = require_engine_retry.isRetryableStatus(status);
 	}
 };
 function environmentCredentials() {

package/dist/transports/ses.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ses.cjs","names":["mimeAddress","signRequest"],"sources":["../../src/transports/ses.ts"],"sourcesContent":["import { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\nimport { signRequest } from './sigv4';\n\n/**\n * `@shware/workflow/transports/ses` — email through Amazon SES (the v2 `SendEmail` API) over\n * plain `fetch` with a SigV4 signature, so the same transport runs in a Lambda and in a Worker.\n * Nothing here loads the AWS SDK or a Node-only credential chain.\n */\n\nexport interface AwsCredentials {\n  accessKeyId: string;\n  secretAccessKey: string;\n  /** Present for temporary credentials (a role's): signed with the request. */\n  sessionToken?: string | undefined;\n}\n\n/** Called on every send, so rotated temporary credentials are picked up rather than frozen. */\nexport type AwsCredentialProvider = () => AwsCredentials | Promise<AwsCredentials>;\n\nexport interface SesEmailTransportOptions {\n  region: string;\n  /**\n   * Fixed credentials, or a provider read on every send. Defaults to the process environment's\n   * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`, read at send time —\n   * a Lambda's execution role. A Worker passes them explicitly from its validated env.\n   */\n  credentials?: AwsCredentials | AwsCredentialProvider;\n  /** An SES configuration set (event publishing, a dedicated IP pool). */\n  configurationSetName?: string;\n  /** Defaults to `https://email.<region>.amazonaws.com`. */\n  endpoint?: string;\n  fetch?: typeof fetch;\n}\n\n/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */\nexport class SesSendError extends Error {\n  override readonly name = 'SesSendError';\n  constructor(\n    readonly status: number,\n    readonly type: string | undefined,\n    message: string\n  ) {\n    super(`SES SendEmail failed (${status}${type === undefined ? '' : ` ${type}`}): ${message}`);\n  }\n}\n\nfunction environmentCredentials(): AwsCredentials {\n  // Read through globalThis: a Worker has no `process`, and must pass credentials instead\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process\n    ?.env;\n  const accessKeyId = env?.AWS_ACCESS_KEY_ID;\n  const secretAccessKey = env?.AWS_SECRET_ACCESS_KEY;\n  if (accessKeyId === undefined || secretAccessKey === undefined) {\n    throw new Error(\n      'sesEmailTransport: no credentials — pass `credentials`, or run where AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are set (a Lambda execution role)'\n    );\n  }\n  return { accessKeyId, secretAccessKey, sessionToken: env?.AWS_SESSION_TOKEN };\n}\n\nexport function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport {\n  const endpoint = (options.endpoint ?? `https://email.${options.region}.amazonaws.com`).replace(\n    /\\/$/,\n    ''\n  );\n  const credentials = async (): Promise<AwsCredentials> => {\n    const configured = options.credentials;\n    if (configured === undefined) return environmentCredentials();\n    return typeof configured === 'function' ? configured() : configured;\n  };\n  const fetchImpl = options.fetch ?? fetch;\n\n  return {\n    async send(message: EmailMessage) {\n      const body = JSON.stringify({\n        FromEmailAddress: mimeAddress(message.from),\n        Destination: { ToAddresses: [message.to] },\n        ...(message.replyTo === undefined\n          ? {}\n          : { ReplyToAddresses: [mimeAddress(message.replyTo)] }),\n        Content: {\n          Simple: {\n            Subject: { Data: message.subject, Charset: 'UTF-8' },\n            Body: { Html: { Data: message.html, Charset: 'UTF-8' } },\n          },\n        },\n        ...(options.configurationSetName === undefined\n          ? {}\n          : { ConfigurationSetName: options.configurationSetName }),\n      });\n      const url = `${endpoint}/v2/email/outbound-emails`;\n      const headers = await signRequest({\n        method: 'POST',\n        url,\n        headers: { 'content-type': 'application/json' },\n        body,\n        credentials: await credentials(),\n        region: options.region,\n        service: 'ses',\n      });\n      // No retries here: the durable step owns them, and counts them — SES cannot de-duplicate,\n      // so every extra attempt of an accepted send is another chance to deliver twice\n      const response = await fetchImpl(url, { method: 'POST', headers, body });\n      const text = await response.text();\n      if (!response.ok) {\n        let detail = text;\n        try {\n          const parsed = JSON.parse(text) as { message?: unknown; Message?: unknown };\n          const said = parsed.message ?? parsed.Message;\n          if (typeof said === 'string') detail = said;\n        } catch {\n          // Not JSON: the raw body says what went wrong\n        }\n        const type = response.headers.get('x-amzn-errortype')?.split(':')[0];\n        throw new SesSendError(response.status, type, detail);\n      }\n      let messageId: unknown;\n      try {\n        messageId = (JSON.parse(text) as { MessageId?: unknown }).MessageId;\n      } catch {\n        messageId = undefined;\n      }\n      return typeof messageId === 'string' ? { providerMessageId: messageId } : {};\n    },\n  };\n}\n"],"mappings":";;;;;AAoCA,IAAa,eAAb,cAAkC,MAAM;CAG3B;CACA;CAHX,OAAyB;CACzB,YACE,QACA,MACA,SACA;EACA,MAAM,yBAAyB,SAAS,SAAS,KAAA,IAAY,KAAK,IAAI,OAAO,KAAK,SAAS;EAJlF,KAAA,SAAA;EACA,KAAA,OAAA;CAIX;AACF;AAEA,SAAS,yBAAyC;CAEhD,MAAM,MAAO,WAA0E,SACnF;CACJ,MAAM,cAAc,KAAK;CACzB,MAAM,kBAAkB,KAAK;CAC7B,IAAI,gBAAgB,KAAA,KAAa,oBAAoB,KAAA,GACnD,MAAM,IAAI,MACR,oJACF;CAEF,OAAO;EAAE;EAAa;EAAiB,cAAc,KAAK;CAAkB;AAC9E;AAEA,SAAgB,kBAAkB,SAAmD;CACnF,MAAM,YAAY,QAAQ,YAAY,iBAAiB,QAAQ,OAAO,gBAAA,CAAiB,QACrF,OACA,EACF;CACA,MAAM,cAAc,YAAqC;EACvD,MAAM,aAAa,QAAQ;EAC3B,IAAI,eAAe,KAAA,GAAW,OAAO,uBAAuB;EAC5D,OAAO,OAAO,eAAe,aAAa,WAAW,IAAI;CAC3D;CACA,MAAM,YAAY,QAAQ,SAAS;CAEnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,OAAO,KAAK,UAAU;GAC1B,kBAAkBA,cAAAA,YAAY,QAAQ,IAAI;GAC1C,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE;GACzC,GAAI,QAAQ,YAAY,KAAA,IACpB,CAAC,IACD,EAAE,kBAAkB,CAACA,cAAAA,YAAY,QAAQ,OAAO,CAAC,EAAE;GACvD,SAAS,EACP,QAAQ;IACN,SAAS;KAAE,MAAM,QAAQ;KAAS,SAAS;IAAQ;IACnD,MAAM,EAAE,MAAM;KAAE,MAAM,QAAQ;KAAM,SAAS;IAAQ,EAAE;GACzD,EACF;GACA,GAAI,QAAQ,yBAAyB,KAAA,IACjC,CAAC,IACD,EAAE,sBAAsB,QAAQ,qBAAqB;EAC3D,CAAC;EACD,MAAM,MAAM,GAAG,SAAS;EACxB,MAAM,UAAU,MAAMC,yBAAAA,YAAY;GAChC,QAAQ;GACR;GACA,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C;GACA,aAAa,MAAM,YAAY;GAC/B,QAAQ,QAAQ;GAChB,SAAS;EACX,CAAC;EAGD,MAAM,WAAW,MAAM,UAAU,KAAK;GAAE,QAAQ;GAAQ;GAAS;EAAK,CAAC;EACvE,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,SAAS;GACb,IAAI;IACF,MAAM,SAAS,KAAK,MAAM,IAAI;IAC9B,MAAM,OAAO,OAAO,WAAW,OAAO;IACtC,IAAI,OAAO,SAAS,UAAU,SAAS;GACzC,QAAQ,CAER;GACA,MAAM,OAAO,SAAS,QAAQ,IAAI,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;GAClE,MAAM,IAAI,aAAa,SAAS,QAAQ,MAAM,MAAM;EACtD;EACA,IAAI;EACJ,IAAI;GACF,YAAa,KAAK,MAAM,IAAI,CAAC,CAA6B;EAC5D,QAAQ;GACN,YAAY,KAAA;EACd;EACA,OAAO,OAAO,cAAc,WAAW,EAAE,mBAAmB,UAAU,IAAI,CAAC;CAC7E,EACF;AACF"}
+{"version":3,"file":"ses.cjs","names":["isRetryableStatus","mimeAddress","signRequest"],"sources":["../../src/transports/ses.ts"],"sourcesContent":["import { mimeAddress } from '../email';\nimport type { EmailMessage, EmailTransport } from '../email-sender';\nimport { isRetryableStatus } from '../engine/retry';\nimport { signRequest } from './sigv4';\n\n/**\n * `@shware/workflow/transports/ses` — email through Amazon SES (the v2 `SendEmail` API) over\n * plain `fetch` with a SigV4 signature, so the same transport runs in a Lambda and in a Worker.\n * Nothing here loads the AWS SDK or a Node-only credential chain.\n */\n\nexport interface AwsCredentials {\n  accessKeyId: string;\n  secretAccessKey: string;\n  /** Present for temporary credentials (a role's): signed with the request. */\n  sessionToken?: string | undefined;\n}\n\n/** Called on every send, so rotated temporary credentials are picked up rather than frozen. */\nexport type AwsCredentialProvider = () => AwsCredentials | Promise<AwsCredentials>;\n\nexport interface SesEmailTransportOptions {\n  region: string;\n  /**\n   * Fixed credentials, or a provider read on every send. Defaults to the process environment's\n   * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY` / `AWS_SESSION_TOKEN`, read at send time —\n   * a Lambda's execution role. A Worker passes them explicitly from its validated env.\n   */\n  credentials?: AwsCredentials | AwsCredentialProvider;\n  /** An SES configuration set (event publishing, a dedicated IP pool). */\n  configurationSetName?: string;\n  /** Defaults to `https://email.<region>.amazonaws.com`. */\n  endpoint?: string;\n  fetch?: typeof fetch;\n}\n\n/** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */\nexport class SesSendError extends Error {\n  override readonly name = 'SesSendError';\n  /** A rejected request (an unverified sender, a bad address) fails the same way every time. */\n  readonly retryable: boolean;\n  constructor(\n    readonly status: number,\n    readonly type: string | undefined,\n    message: string\n  ) {\n    super(`SES SendEmail failed (${status}${type === undefined ? '' : ` ${type}`}): ${message}`);\n    this.retryable = isRetryableStatus(status);\n  }\n}\n\nfunction environmentCredentials(): AwsCredentials {\n  // Read through globalThis: a Worker has no `process`, and must pass credentials instead\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } }).process\n    ?.env;\n  const accessKeyId = env?.AWS_ACCESS_KEY_ID;\n  const secretAccessKey = env?.AWS_SECRET_ACCESS_KEY;\n  if (accessKeyId === undefined || secretAccessKey === undefined) {\n    throw new Error(\n      'sesEmailTransport: no credentials — pass `credentials`, or run where AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY are set (a Lambda execution role)'\n    );\n  }\n  return { accessKeyId, secretAccessKey, sessionToken: env?.AWS_SESSION_TOKEN };\n}\n\nexport function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport {\n  const endpoint = (options.endpoint ?? `https://email.${options.region}.amazonaws.com`).replace(\n    /\\/$/,\n    ''\n  );\n  const credentials = async (): Promise<AwsCredentials> => {\n    const configured = options.credentials;\n    if (configured === undefined) return environmentCredentials();\n    return typeof configured === 'function' ? configured() : configured;\n  };\n  const fetchImpl = options.fetch ?? fetch;\n\n  return {\n    async send(message: EmailMessage) {\n      const body = JSON.stringify({\n        FromEmailAddress: mimeAddress(message.from),\n        Destination: { ToAddresses: [message.to] },\n        ...(message.replyTo === undefined\n          ? {}\n          : { ReplyToAddresses: [mimeAddress(message.replyTo)] }),\n        Content: {\n          Simple: {\n            Subject: { Data: message.subject, Charset: 'UTF-8' },\n            Body: { Html: { Data: message.html, Charset: 'UTF-8' } },\n          },\n        },\n        ...(options.configurationSetName === undefined\n          ? {}\n          : { ConfigurationSetName: options.configurationSetName }),\n      });\n      const url = `${endpoint}/v2/email/outbound-emails`;\n      const headers = await signRequest({\n        method: 'POST',\n        url,\n        headers: { 'content-type': 'application/json' },\n        body,\n        credentials: await credentials(),\n        region: options.region,\n        service: 'ses',\n      });\n      // No retries here: the durable step owns them, and counts them — SES cannot de-duplicate,\n      // so every extra attempt of an accepted send is another chance to deliver twice\n      const response = await fetchImpl(url, { method: 'POST', headers, body });\n      const text = await response.text();\n      if (!response.ok) {\n        let detail = text;\n        try {\n          const parsed = JSON.parse(text) as { message?: unknown; Message?: unknown };\n          const said = parsed.message ?? parsed.Message;\n          if (typeof said === 'string') detail = said;\n        } catch {\n          // Not JSON: the raw body says what went wrong\n        }\n        const type = response.headers.get('x-amzn-errortype')?.split(':')[0];\n        throw new SesSendError(response.status, type, detail);\n      }\n      let messageId: unknown;\n      try {\n        messageId = (JSON.parse(text) as { MessageId?: unknown }).MessageId;\n      } catch {\n        messageId = undefined;\n      }\n      return typeof messageId === 'string' ? { providerMessageId: messageId } : {};\n    },\n  };\n}\n"],"mappings":";;;;;;AAqCA,IAAa,eAAb,cAAkC,MAAM;CAK3B;CACA;CALX,OAAyB;;CAEzB;CACA,YACE,QACA,MACA,SACA;EACA,MAAM,yBAAyB,SAAS,SAAS,KAAA,IAAY,KAAK,IAAI,OAAO,KAAK,SAAS;EAJlF,KAAA,SAAA;EACA,KAAA,OAAA;EAIT,KAAK,YAAYA,qBAAAA,kBAAkB,MAAM;CAC3C;AACF;AAEA,SAAS,yBAAyC;CAEhD,MAAM,MAAO,WAA0E,SACnF;CACJ,MAAM,cAAc,KAAK;CACzB,MAAM,kBAAkB,KAAK;CAC7B,IAAI,gBAAgB,KAAA,KAAa,oBAAoB,KAAA,GACnD,MAAM,IAAI,MACR,oJACF;CAEF,OAAO;EAAE;EAAa;EAAiB,cAAc,KAAK;CAAkB;AAC9E;AAEA,SAAgB,kBAAkB,SAAmD;CACnF,MAAM,YAAY,QAAQ,YAAY,iBAAiB,QAAQ,OAAO,gBAAA,CAAiB,QACrF,OACA,EACF;CACA,MAAM,cAAc,YAAqC;EACvD,MAAM,aAAa,QAAQ;EAC3B,IAAI,eAAe,KAAA,GAAW,OAAO,uBAAuB;EAC5D,OAAO,OAAO,eAAe,aAAa,WAAW,IAAI;CAC3D;CACA,MAAM,YAAY,QAAQ,SAAS;CAEnC,OAAO,EACL,MAAM,KAAK,SAAuB;EAChC,MAAM,OAAO,KAAK,UAAU;GAC1B,kBAAkBC,cAAAA,YAAY,QAAQ,IAAI;GAC1C,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE,EAAE;GACzC,GAAI,QAAQ,YAAY,KAAA,IACpB,CAAC,IACD,EAAE,kBAAkB,CAACA,cAAAA,YAAY,QAAQ,OAAO,CAAC,EAAE;GACvD,SAAS,EACP,QAAQ;IACN,SAAS;KAAE,MAAM,QAAQ;KAAS,SAAS;IAAQ;IACnD,MAAM,EAAE,MAAM;KAAE,MAAM,QAAQ;KAAM,SAAS;IAAQ,EAAE;GACzD,EACF;GACA,GAAI,QAAQ,yBAAyB,KAAA,IACjC,CAAC,IACD,EAAE,sBAAsB,QAAQ,qBAAqB;EAC3D,CAAC;EACD,MAAM,MAAM,GAAG,SAAS;EACxB,MAAM,UAAU,MAAMC,yBAAAA,YAAY;GAChC,QAAQ;GACR;GACA,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C;GACA,aAAa,MAAM,YAAY;GAC/B,QAAQ,QAAQ;GAChB,SAAS;EACX,CAAC;EAGD,MAAM,WAAW,MAAM,UAAU,KAAK;GAAE,QAAQ;GAAQ;GAAS;EAAK,CAAC;EACvE,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,IAAI,CAAC,SAAS,IAAI;GAChB,IAAI,SAAS;GACb,IAAI;IACF,MAAM,SAAS,KAAK,MAAM,IAAI;IAC9B,MAAM,OAAO,OAAO,WAAW,OAAO;IACtC,IAAI,OAAO,SAAS,UAAU,SAAS;GACzC,QAAQ,CAER;GACA,MAAM,OAAO,SAAS,QAAQ,IAAI,kBAAkB,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;GAClE,MAAM,IAAI,aAAa,SAAS,QAAQ,MAAM,MAAM;EACtD;EACA,IAAI;EACJ,IAAI;GACF,YAAa,KAAK,MAAM,IAAI,CAAC,CAA6B;EAC5D,QAAQ;GACN,YAAY,KAAA;EACd;EACA,OAAO,OAAO,cAAc,WAAW,EAAE,mBAAmB,UAAU,IAAI,CAAC;CAC7E,EACF;AACF"}

package/dist/transports/ses.d.cts

@@ -32,6 +32,8 @@ export declare class SesSendError extends Error {
   readonly status: number;
   readonly type: string | undefined;
   readonly name = "SesSendError";
+  /** A rejected request (an unverified sender, a bad address) fails the same way every time. */
+  readonly retryable: boolean;
   constructor(status: number, type: string | undefined, message: string);
 }
 export declare function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport;

package/dist/transports/ses.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"ses.d.cts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAUiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAGrB;WACA;WAHO;EAClB,YACW,gBACA,0BACT;;wBAoBY,kBAAkB,SAAS,2BAA2B"}
+{"version":3,"file":"ses.d.cts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAWiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAKrB;WACA;WALO;;WAET;EACT,YACW,gBACA,0BACT;;wBAqBY,kBAAkB,SAAS,2BAA2B"}

package/dist/transports/ses.d.mts

@@ -32,6 +32,8 @@ export declare class SesSendError extends Error {
   readonly status: number;
   readonly type: string | undefined;
   readonly name = "SesSendError";
+  /** A rejected request (an unverified sender, a bad address) fails the same way every time. */
+  readonly retryable: boolean;
   constructor(status: number, type: string | undefined, message: string);
 }
 export declare function sesEmailTransport(options: SesEmailTransportOptions): EmailTransport;

package/dist/transports/ses.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"ses.d.mts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAUiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAGrB;WACA;WAHO;EAClB,YACW,gBACA,0BACT;;wBAoBY,kBAAkB,SAAS,2BAA2B"}
+{"version":3,"file":"ses.d.mts","names":[],"sources":["../../src/transports/ses.ts"],"mappings":";;;;;;;iBAWiB;EACf;EACA;;EAEA;;;YAIU,8BAA8B,iBAAiB,QAAQ;iBAElD;EACf;;;;;;EAMA,cAAc,iBAAiB;;EAE/B;;EAEA;EACA,eAAe;;;qBAIJ,qBAAqB;WAKrB;WACA;WALO;;WAET;EACT,YACW,gBACA,0BACT;;wBAqBY,kBAAkB,SAAS,2BAA2B"}

package/dist/transports/ses.mjs

@@ -1,4 +1,5 @@
 import { mimeAddress } from "../email.mjs";
+import { isRetryableStatus } from "../engine/retry.mjs";
 import { signRequest } from "./sigv4.mjs";
 //#region src/transports/ses.ts
 /** An SES error response: `type` is SES's error code (`MessageRejected`, `TooManyRequestsException`, ...). */
@@ -6,10 +7,13 @@ var SesSendError = class extends Error {
 	status;
 	type;
 	name = "SesSendError";
+	/** A rejected request (an unverified sender, a bad address) fails the same way every time. */
+	retryable;
 	constructor(status, type, message) {
 		super(`SES SendEmail failed (${status}${type === void 0 ? "" : ` ${type}`}): ${message}`);
 		this.status = status;
 		this.type = type;
+		this.retryable = isRetryableStatus(status);
 	}
 };
 function environmentCredentials() {