@shware/workflow 7.0.0 → 8.0.0

package/dist/client.d.cts

@@ -1,6 +1,7 @@
 import { Contract, ContractIssue, ProfilePatch, Topic } from "./contract.cjs";
 import { ProfileProps } from "./store/index.cjs";
-import { ChannelSubscriptions, ChannelSubscriptionsPatch, DeployResult, IdentifyResult, IngestResult, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch } from "./host/ingest.cjs";
+import { ChannelSubscriptions, ChannelSubscriptionsPatch, DeployResult, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch } from "./host/ingest.cjs";
+import { BatchEvent, BatchResult, JourneyBatch } from "./host/batch.cjs";
 import * as core from "zod/v4/core";
 /**
  * `@shware/workflow/client` — the producer side of the ingest API, for the
@@ -10,8 +11,8 @@ import * as core from "zod/v4/core";
  */
 export interface JourneyClientOptions<C extends Contract | undefined = undefined> {
   /**
-   * The shared `defineContract(...)`: types `track` (the event name picks the
-   * payload type) and `identify`, and checks both before anything is sent.
+   * The shared `defineContract(...)`: types `ingest` (the event name picks the payload type, the
+   * profile patch is the contract's), and checks both before anything is sent.
    */
   contract?: C;
   /** The journey Worker's origin, e.g. `https://workflow.example.com`. */
@@ -35,39 +36,82 @@ export declare class JourneyValidationError extends Error {
   constructor(path: string, event: string | undefined, issues: ContractIssue[]);
 }
 type EventsOf<C> = C extends Contract<infer E> ? E : never;
-/** Event names: the contract's, or any string without one. */
-export type ClientEventName<C> = [C] extends [undefined] ? string : keyof EventsOf<C> & string;
-type TrackArgs<C, K> = [C] extends [undefined] ? [payload?: Record<string, unknown>, options?: TrackOptions] : K extends keyof EventsOf<C> ? [payload: core.input<EventsOf<C>[K]>, options?: TrackOptions] : never;
 type IdentifyProps<C> = [C] extends [undefined] ? ProfileProps : C extends Contract<Record<string, core.$ZodObject>, infer P> ? ProfilePatch<P> : never;
 /** The topics the client's contract declares; any string without a contract. */
 export type ClientTopic<C> = [C] extends [undefined] ? string : Topic<C>;
-export interface TrackOptions {
-  /** The occurrence's identity: a retry with the same id is recorded once. */
+/** One event of a batch: with a contract, the name picks the payload type. */
+export type BatchEventInput<C> = [C] extends [undefined] ? {
+  event: string;
+  payload?: Record<string, unknown>;
   id?: string;
-  /** When it happened (epoch ms); the Worker's clock when omitted. */
   ts?: number;
+} : { [K in keyof EventsOf<C> & string]: {
+  event: K;
+  payload: core.input<EventsOf<C>[K]>;
+  id?: string;
+  ts?: number;
+}; }[keyof EventsOf<C> & string];
+/**
+ * Who a report or device is about: a signed-in user, or a visitor before sign-in (a stable id for
+ * one client, renewed when a user signs out). Naming both says this visitor is this user: what the
+ * engine knows of the visitor moves to the user, once.
+ */
+export type JourneyIdentity = {
+  userId: string;
+  visitorId?: string | undefined;
+} | {
+  userId?: undefined;
+  visitorId: string;
+};
+/** What the profile now says and what they just did, as one report. */
+export type BatchInput<C> = JourneyIdentity & {
+  /** Merged before the first event: a journey the events start finds this recipient. */
+  profile?: IdentifyProps<C>;
+  events?: readonly BatchEventInput<C>[];
+};
+/** The producer side of a queue (the subset of a Cloudflare Queues binding used). */
+export interface JourneyQueueBinding {
+  send(body: JourneyBatch): Promise<unknown>;
+}
+export interface JourneyQueueOptions<C extends Contract | undefined = undefined> {
+  /** The shared `defineContract(...)`: types `ingest` and checks each batch before it is sent. */
+  contract?: C;
+  /** The queue `journeyWorker`'s `queue` handler consumes. */
+  queue: JourneyQueueBinding;
+}
+/**
+ * `JourneyClient.ingest` through a queue, for a producer that must not lose a report and must not
+ * wait for the engine: once `ingest` resolves the batch is durable, and the consumer retries it
+ * until it is applied. Delivery is at least once and in no guaranteed order: the batch is the unit
+ * that stays in order and event ids and property times absorb the rest. A rejected `ingest` was
+ * not queued; the caller decides (a 5xx so its client retries, say).
+ */
+export declare class JourneyQueue<C extends Contract | undefined = undefined> {
+  private readonly options;
+  constructor(options: JourneyQueueOptions<C>);
+  ingest(input: BatchInput<C>): Promise<void>;
 }
 export declare class JourneyClient<C extends Contract | undefined = undefined> {
   private readonly options;
   constructor(options: JourneyClientOptions<C>);
-  /** Merge profile properties (`null` clears one). Every property a journey reads must be identified before the event that starts it. */
-  identify(userId: string, props: IdentifyProps<C>): Promise<IdentifyResult>;
   /**
-   * Record an event; the Worker starts every journey whose trigger matches it
-   * and wakes waits on it. A caller that retries should pass the same `id`
-   * each time: the Worker stores one occurrence per id, so a retry after a
-   * timeout cannot double-count the event. `ts` defaults to the Worker's clock.
+   * The one way in: a profile and the events it belongs to, as one batch. A visitor who signed in
+   * merges first, then the profile, then the events in order, so a journey cannot start without
+   * its recipient. A caller that retries should pass each event's `id`: the Worker stores one
+   * occurrence per id. `ts` defaults to now. `JourneyQueue` is the same report through a queue.
    */
-  track<K extends ClientEventName<C>>(userId: string, event: K, ...args: TrackArgs<C, K>): Promise<IngestResult>;
+  ingest(input: BatchInput<C>): Promise<BatchResult>;
   /**
-   * A push token the app registered for the user (call it on every registration: a token moves
-   * to the latest user). The engine keeps devices itself — pushes go to them, a token APNs / FCM
-   * reports as gone is dropped — and journeys waiting on `reachable('push')` wake.
+   * A push token registered for whoever holds the device now (call it on every registration): a
+   * token moves to the latest owner, and a `deviceId` seen with a new token replaces the old one.
+   * The engine keeps devices itself — pushes go to them, a token APNs / FCM reports as gone is
+   * dropped — and journeys waiting on `reachable('push')` wake. Naming both ids merges the visitor,
+   * as `ingest` does.
    */
-  registerDevice(userId: string, device: {
+  registerDevice(device: JourneyIdentity & {
+    deviceId?: string;
     token: string;
     platform: 'ios' | 'android' | 'web';
-    ts?: number;
   }): Promise<{
     ok: true;
     woke: number;
@@ -91,6 +135,12 @@ export declare class JourneyClient<C extends Contract | undefined = undefined> {
     erased: boolean;
     pending: string[];
   }>;
+  /** `forgetUser` for a visitor who never signed in. */
+  forgetVisitor(visitorId: string): Promise<{
+    ok: true;
+    erased: boolean;
+    pending: string[];
+  }>;
   /** The user signed out on that device: the token stays registered, bound to nobody. */
   unbindDevice(token: string): Promise<{
     ok: true;
@@ -139,5 +189,5 @@ export declare class JourneyClient<C extends Contract | undefined = undefined> {
   private post;
   private request;
 }
-export type { ChannelSubscriptions, ChannelSubscriptionsPatch, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch };
+export type { BatchEvent, BatchResult, ChannelSubscriptions, ChannelSubscriptionsPatch, JourneyBatch, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch };
 //# sourceMappingURL=client.d.cts.map

package/dist/client.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.cts","names":[],"sources":["../src/client.ts"],"mappings":";;;;;;;;;;iBAoBiB,qBAAqB,UAAU;;;;;EAK9C,WAAW;;EAEX;;EAEA;;EAEA,eAAe;;qBAGJ,2BAA2B;WAE3B;WACA;WACA;EAHX,YACW,cACA,gBACA;;;qBAQA,+BAA+B;WAE/B;WACA;WACA,QAAQ;EAHnB,YACW,cACA,2BACA,QAAQ;;KAWhB,SAAS,KAAK,UAAU,eAAe,KAAK;;YAErC,gBAAgB,MAAM,wCAAwC,SAAS;KAC9E,UAAU,GAAG,MAAM,0BACnB,UAAU,yBAAyB,UAAU,gBAC9C,gBAAgB,SAAS,MACtB,SAAS,KAAK,MAAM,SAAS,GAAG,KAAK,UAAU;KAEjD,cAAc,MAAM,yBACrB,eACA,UAAU,SAAS,eAAe,KAAK,mBAAmB,KACxD,aAAa;;YAIP,YAAY,MAAM,kCAAkC,MAAM;iBAYrD;;EAEf;;EAEA;;qBAGW,cAAc,UAAU;mBACN;EAA7B,YAA6B,SAAS,qBAAqB;;EAG3D,SAAS,gBAAgB,OAAO,cAAc,KAAK,QAAQ;;;;;;;EAgB3D,MAAM,UAAU,gBAAgB,IAC9B,gBACA,OAAO,MACJ,MAAM,UAAU,GAAG,KACrB,QAAQ;;;;;;EAsBX,eACE,gBACA;IAAU;IAAe;IAAqC;MAC7D;IAAU;IAAU;;;;;;EAcvB,cAAc,gBAAgB,oBAAoB;IAAU;IAAU;;;;;;;;EAUtE,WAAW,iBAAiB;IAAU;IAAU;IAAiB;;;EAKjE,aAAa,gBAAgB;IAAU;IAAU;;;EAKjD,aAAa,gBAAgB;IAAU;IAAU;;;;;;;;;;EAYjD,iBAAiB,iBAAiB,QAAQ,cAAc,YAAY;;;;;;;;;;EAapE,iBACE,gBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,cAAc,YAAY;;;;;;;;;;EAerC,0BAA0B,oBAAoB,QAAQ,qBAAqB,YAAY;;EAKvF,0BACE,mBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,qBAAqB,YAAY;;UAOpC;;EAmBR,OAAO,kBAAkB,QAAQ;UAIzB;UAIM"}
+{"version":3,"file":"client.d.cts","names":[],"sources":["../src/client.ts"],"mappings":";;;;;;;;;;;iBAmBiB,qBAAqB,UAAU;;;;;EAK9C,WAAW;;EAEX;;EAEA;;EAEA,eAAe;;qBAGJ,2BAA2B;WAE3B;WACA;WACA;EAHX,YACW,cACA,gBACA;;;qBAQA,+BAA+B;WAE/B;WACA;WACA,QAAQ;EAHnB,YACW,cACA,2BACA,QAAQ;;KAWhB,SAAS,KAAK,UAAU,eAAe,KAAK;KAC5C,cAAc,MAAM,yBACrB,eACA,UAAU,SAAS,eAAe,KAAK,mBAAmB,KACxD,aAAa;;YAIP,YAAY,MAAM,kCAAkC,MAAM;;YAc1D,gBAAgB,MAAM;EAC5B;EAAe,UAAU;EAAyB;EAAa;OAE9D,WAAW,SAAS;EACnB,OAAO;EACP,SAAS,KAAK,MAAM,SAAS,GAAG;EAChC;EACA;WAEI,SAAS;;;;;;YAOT;EACN;EAAgB;;EAChB;EAAoB;;;YAGd,WAAW,KAAK;;EAE1B,UAAU,cAAc;EACxB,kBAAkB,gBAAgB;;;iBAmDnB;EACf,KAAK,MAAM,eAAe;;iBAGX,oBAAoB,UAAU;;EAE7C,WAAW;;EAEX,OAAO;;;;;;;;;qBAUI,aAAa,UAAU;mBACL;EAA7B,YAA6B,SAAS,oBAAoB;EAEpD,OAAO,OAAO,WAAW,KAAK;;qBAKzB,cAAc,UAAU;mBACN;EAA7B,YAA6B,SAAS,qBAAqB;;;;;;;EAQrD,OAAO,OAAO,WAAW,KAAK,QAAQ;;;;;;;;EAW5C,eACE,QAAQ;IACN;IACA;IACA;MAED;IAAU;IAAU;;;;;;EAQvB,cAAc,gBAAgB,oBAAoB;IAAU;IAAU;;;;;;;;EAUtE,WAAW,iBAAiB;IAAU;IAAU;IAAiB;;;EAKjE,cAAc,oBAAoB;IAAU;IAAU;IAAiB;;;EAKvE,aAAa,gBAAgB;IAAU;IAAU;;;EAKjD,aAAa,gBAAgB;IAAU;IAAU;;;;;;;;;;EAYjD,iBAAiB,iBAAiB,QAAQ,cAAc,YAAY;;;;;;;;;;EAapE,iBACE,gBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,cAAc,YAAY;;;;;;;;;;EAerC,0BAA0B,oBAAoB,QAAQ,qBAAqB,YAAY;;EAKvF,0BACE,mBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,qBAAqB,YAAY;;UAOpC;;EAmBR,OAAO,kBAAkB,QAAQ;UAIzB;UAIM"}

package/dist/client.d.mts

@@ -1,6 +1,7 @@
 import { Contract, ContractIssue, ProfilePatch, Topic } from "./contract.mjs";
 import { ProfileProps } from "./store/index.mjs";
-import { ChannelSubscriptions, ChannelSubscriptionsPatch, DeployResult, IdentifyResult, IngestResult, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch } from "./host/ingest.mjs";
+import { ChannelSubscriptions, ChannelSubscriptionsPatch, DeployResult, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch } from "./host/ingest.mjs";
+import { BatchEvent, BatchResult, JourneyBatch } from "./host/batch.mjs";
 import * as core from "zod/v4/core";
 /**
  * `@shware/workflow/client` — the producer side of the ingest API, for the
@@ -10,8 +11,8 @@ import * as core from "zod/v4/core";
  */
 export interface JourneyClientOptions<C extends Contract | undefined = undefined> {
   /**
-   * The shared `defineContract(...)`: types `track` (the event name picks the
-   * payload type) and `identify`, and checks both before anything is sent.
+   * The shared `defineContract(...)`: types `ingest` (the event name picks the payload type, the
+   * profile patch is the contract's), and checks both before anything is sent.
    */
   contract?: C;
   /** The journey Worker's origin, e.g. `https://workflow.example.com`. */
@@ -35,39 +36,82 @@ export declare class JourneyValidationError extends Error {
   constructor(path: string, event: string | undefined, issues: ContractIssue[]);
 }
 type EventsOf<C> = C extends Contract<infer E> ? E : never;
-/** Event names: the contract's, or any string without one. */
-export type ClientEventName<C> = [C] extends [undefined] ? string : keyof EventsOf<C> & string;
-type TrackArgs<C, K> = [C] extends [undefined] ? [payload?: Record<string, unknown>, options?: TrackOptions] : K extends keyof EventsOf<C> ? [payload: core.input<EventsOf<C>[K]>, options?: TrackOptions] : never;
 type IdentifyProps<C> = [C] extends [undefined] ? ProfileProps : C extends Contract<Record<string, core.$ZodObject>, infer P> ? ProfilePatch<P> : never;
 /** The topics the client's contract declares; any string without a contract. */
 export type ClientTopic<C> = [C] extends [undefined] ? string : Topic<C>;
-export interface TrackOptions {
-  /** The occurrence's identity: a retry with the same id is recorded once. */
+/** One event of a batch: with a contract, the name picks the payload type. */
+export type BatchEventInput<C> = [C] extends [undefined] ? {
+  event: string;
+  payload?: Record<string, unknown>;
   id?: string;
-  /** When it happened (epoch ms); the Worker's clock when omitted. */
   ts?: number;
+} : { [K in keyof EventsOf<C> & string]: {
+  event: K;
+  payload: core.input<EventsOf<C>[K]>;
+  id?: string;
+  ts?: number;
+}; }[keyof EventsOf<C> & string];
+/**
+ * Who a report or device is about: a signed-in user, or a visitor before sign-in (a stable id for
+ * one client, renewed when a user signs out). Naming both says this visitor is this user: what the
+ * engine knows of the visitor moves to the user, once.
+ */
+export type JourneyIdentity = {
+  userId: string;
+  visitorId?: string | undefined;
+} | {
+  userId?: undefined;
+  visitorId: string;
+};
+/** What the profile now says and what they just did, as one report. */
+export type BatchInput<C> = JourneyIdentity & {
+  /** Merged before the first event: a journey the events start finds this recipient. */
+  profile?: IdentifyProps<C>;
+  events?: readonly BatchEventInput<C>[];
+};
+/** The producer side of a queue (the subset of a Cloudflare Queues binding used). */
+export interface JourneyQueueBinding {
+  send(body: JourneyBatch): Promise<unknown>;
+}
+export interface JourneyQueueOptions<C extends Contract | undefined = undefined> {
+  /** The shared `defineContract(...)`: types `ingest` and checks each batch before it is sent. */
+  contract?: C;
+  /** The queue `journeyWorker`'s `queue` handler consumes. */
+  queue: JourneyQueueBinding;
+}
+/**
+ * `JourneyClient.ingest` through a queue, for a producer that must not lose a report and must not
+ * wait for the engine: once `ingest` resolves the batch is durable, and the consumer retries it
+ * until it is applied. Delivery is at least once and in no guaranteed order: the batch is the unit
+ * that stays in order and event ids and property times absorb the rest. A rejected `ingest` was
+ * not queued; the caller decides (a 5xx so its client retries, say).
+ */
+export declare class JourneyQueue<C extends Contract | undefined = undefined> {
+  private readonly options;
+  constructor(options: JourneyQueueOptions<C>);
+  ingest(input: BatchInput<C>): Promise<void>;
 }
 export declare class JourneyClient<C extends Contract | undefined = undefined> {
   private readonly options;
   constructor(options: JourneyClientOptions<C>);
-  /** Merge profile properties (`null` clears one). Every property a journey reads must be identified before the event that starts it. */
-  identify(userId: string, props: IdentifyProps<C>): Promise<IdentifyResult>;
   /**
-   * Record an event; the Worker starts every journey whose trigger matches it
-   * and wakes waits on it. A caller that retries should pass the same `id`
-   * each time: the Worker stores one occurrence per id, so a retry after a
-   * timeout cannot double-count the event. `ts` defaults to the Worker's clock.
+   * The one way in: a profile and the events it belongs to, as one batch. A visitor who signed in
+   * merges first, then the profile, then the events in order, so a journey cannot start without
+   * its recipient. A caller that retries should pass each event's `id`: the Worker stores one
+   * occurrence per id. `ts` defaults to now. `JourneyQueue` is the same report through a queue.
    */
-  track<K extends ClientEventName<C>>(userId: string, event: K, ...args: TrackArgs<C, K>): Promise<IngestResult>;
+  ingest(input: BatchInput<C>): Promise<BatchResult>;
   /**
-   * A push token the app registered for the user (call it on every registration: a token moves
-   * to the latest user). The engine keeps devices itself — pushes go to them, a token APNs / FCM
-   * reports as gone is dropped — and journeys waiting on `reachable('push')` wake.
+   * A push token registered for whoever holds the device now (call it on every registration): a
+   * token moves to the latest owner, and a `deviceId` seen with a new token replaces the old one.
+   * The engine keeps devices itself — pushes go to them, a token APNs / FCM reports as gone is
+   * dropped — and journeys waiting on `reachable('push')` wake. Naming both ids merges the visitor,
+   * as `ingest` does.
    */
-  registerDevice(userId: string, device: {
+  registerDevice(device: JourneyIdentity & {
+    deviceId?: string;
     token: string;
     platform: 'ios' | 'android' | 'web';
-    ts?: number;
   }): Promise<{
     ok: true;
     woke: number;
@@ -91,6 +135,12 @@ export declare class JourneyClient<C extends Contract | undefined = undefined> {
     erased: boolean;
     pending: string[];
   }>;
+  /** `forgetUser` for a visitor who never signed in. */
+  forgetVisitor(visitorId: string): Promise<{
+    ok: true;
+    erased: boolean;
+    pending: string[];
+  }>;
   /** The user signed out on that device: the token stays registered, bound to nobody. */
   unbindDevice(token: string): Promise<{
     ok: true;
@@ -139,5 +189,5 @@ export declare class JourneyClient<C extends Contract | undefined = undefined> {
   private post;
   private request;
 }
-export type { ChannelSubscriptions, ChannelSubscriptionsPatch, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch };
+export type { BatchEvent, BatchResult, ChannelSubscriptions, ChannelSubscriptionsPatch, JourneyBatch, MessageOrigin, MessageSubscriptions, SubscriptionChannel, Subscriptions, SubscriptionsPatch };
 //# sourceMappingURL=client.d.mts.map

package/dist/client.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"mappings":";;;;;;;;;;iBAoBiB,qBAAqB,UAAU;;;;;EAK9C,WAAW;;EAEX;;EAEA;;EAEA,eAAe;;qBAGJ,2BAA2B;WAE3B;WACA;WACA;EAHX,YACW,cACA,gBACA;;;qBAQA,+BAA+B;WAE/B;WACA;WACA,QAAQ;EAHnB,YACW,cACA,2BACA,QAAQ;;KAWhB,SAAS,KAAK,UAAU,eAAe,KAAK;;YAErC,gBAAgB,MAAM,wCAAwC,SAAS;KAC9E,UAAU,GAAG,MAAM,0BACnB,UAAU,yBAAyB,UAAU,gBAC9C,gBAAgB,SAAS,MACtB,SAAS,KAAK,MAAM,SAAS,GAAG,KAAK,UAAU;KAEjD,cAAc,MAAM,yBACrB,eACA,UAAU,SAAS,eAAe,KAAK,mBAAmB,KACxD,aAAa;;YAIP,YAAY,MAAM,kCAAkC,MAAM;iBAYrD;;EAEf;;EAEA;;qBAGW,cAAc,UAAU;mBACN;EAA7B,YAA6B,SAAS,qBAAqB;;EAG3D,SAAS,gBAAgB,OAAO,cAAc,KAAK,QAAQ;;;;;;;EAgB3D,MAAM,UAAU,gBAAgB,IAC9B,gBACA,OAAO,MACJ,MAAM,UAAU,GAAG,KACrB,QAAQ;;;;;;EAsBX,eACE,gBACA;IAAU;IAAe;IAAqC;MAC7D;IAAU;IAAU;;;;;;EAcvB,cAAc,gBAAgB,oBAAoB;IAAU;IAAU;;;;;;;;EAUtE,WAAW,iBAAiB;IAAU;IAAU;IAAiB;;;EAKjE,aAAa,gBAAgB;IAAU;IAAU;;;EAKjD,aAAa,gBAAgB;IAAU;IAAU;;;;;;;;;;EAYjD,iBAAiB,iBAAiB,QAAQ,cAAc,YAAY;;;;;;;;;;EAapE,iBACE,gBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,cAAc,YAAY;;;;;;;;;;EAerC,0BAA0B,oBAAoB,QAAQ,qBAAqB,YAAY;;EAKvF,0BACE,mBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,qBAAqB,YAAY;;UAOpC;;EAmBR,OAAO,kBAAkB,QAAQ;UAIzB;UAIM"}
+{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"mappings":";;;;;;;;;;;iBAmBiB,qBAAqB,UAAU;;;;;EAK9C,WAAW;;EAEX;;EAEA;;EAEA,eAAe;;qBAGJ,2BAA2B;WAE3B;WACA;WACA;EAHX,YACW,cACA,gBACA;;;qBAQA,+BAA+B;WAE/B;WACA;WACA,QAAQ;EAHnB,YACW,cACA,2BACA,QAAQ;;KAWhB,SAAS,KAAK,UAAU,eAAe,KAAK;KAC5C,cAAc,MAAM,yBACrB,eACA,UAAU,SAAS,eAAe,KAAK,mBAAmB,KACxD,aAAa;;YAIP,YAAY,MAAM,kCAAkC,MAAM;;YAc1D,gBAAgB,MAAM;EAC5B;EAAe,UAAU;EAAyB;EAAa;OAE9D,WAAW,SAAS;EACnB,OAAO;EACP,SAAS,KAAK,MAAM,SAAS,GAAG;EAChC;EACA;WAEI,SAAS;;;;;;YAOT;EACN;EAAgB;;EAChB;EAAoB;;;YAGd,WAAW,KAAK;;EAE1B,UAAU,cAAc;EACxB,kBAAkB,gBAAgB;;;iBAmDnB;EACf,KAAK,MAAM,eAAe;;iBAGX,oBAAoB,UAAU;;EAE7C,WAAW;;EAEX,OAAO;;;;;;;;;qBAUI,aAAa,UAAU;mBACL;EAA7B,YAA6B,SAAS,oBAAoB;EAEpD,OAAO,OAAO,WAAW,KAAK;;qBAKzB,cAAc,UAAU;mBACN;EAA7B,YAA6B,SAAS,qBAAqB;;;;;;;EAQrD,OAAO,OAAO,WAAW,KAAK,QAAQ;;;;;;;;EAW5C,eACE,QAAQ;IACN;IACA;IACA;MAED;IAAU;IAAU;;;;;;EAQvB,cAAc,gBAAgB,oBAAoB;IAAU;IAAU;;;;;;;;EAUtE,WAAW,iBAAiB;IAAU;IAAU;IAAiB;;;EAKjE,cAAc,oBAAoB;IAAU;IAAU;IAAiB;;;EAKvE,aAAa,gBAAgB;IAAU;IAAU;;;EAKjD,aAAa,gBAAgB;IAAU;IAAU;;;;;;;;;;EAYjD,iBAAiB,iBAAiB,QAAQ,cAAc,YAAY;;;;;;;;;;EAapE,iBACE,gBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,cAAc,YAAY;;;;;;;;;;EAerC,0BAA0B,oBAAoB,QAAQ,qBAAqB,YAAY;;EAKvF,0BACE,mBACA,OAAO,mBAAmB,YAAY,MACrC,QAAQ,qBAAqB,YAAY;;UAOpC;;EAmBR,OAAO,kBAAkB,QAAQ;UAIzB;UAIM"}

package/dist/client.mjs

@@ -25,57 +25,77 @@ var JourneyValidationError = class extends Error {
 		this.name = "JourneyValidationError";
 	}
 };
-var JourneyClient = class {
+/**
+* The batch as it travels: checked against the contract, with the time and the event ids and
+* timestamps fixed here, so every redelivery is the same report.
+*/
+function prepareBatch(contract, input) {
+	const { userId, visitorId, profile, events } = input;
+	if (contract !== void 0) {
+		if (profile !== void 0) {
+			const result = contract.parseProfilePatch(profile);
+			if (!result.ok) throw new JourneyValidationError("/ingest", void 0, result.issues);
+		}
+		for (const { event, payload } of events ?? []) {
+			const result = contract.parseEvent(event, payload ?? {});
+			if (!result.ok) throw new JourneyValidationError("/ingest", event, result.issues);
+		}
+	}
+	const now = Date.now();
+	return {
+		...userId === void 0 ? {} : { userId },
+		...visitorId === void 0 ? {} : { visitorId },
+		...profile === void 0 ? {} : {
+			profile,
+			at: now
+		},
+		...events === void 0 ? {} : { events: events.map((e) => ({
+			event: e.event,
+			payload: e.payload ?? {},
+			id: e.id ?? crypto.randomUUID(),
+			ts: e.ts ?? now
+		})) }
+	};
+}
+/**
+* `JourneyClient.ingest` through a queue, for a producer that must not lose a report and must not
+* wait for the engine: once `ingest` resolves the batch is durable, and the consumer retries it
+* until it is applied. Delivery is at least once and in no guaranteed order: the batch is the unit
+* that stays in order and event ids and property times absorb the rest. A rejected `ingest` was
+* not queued; the caller decides (a 5xx so its client retries, say).
+*/
+var JourneyQueue = class {
 	options;
 	constructor(options) {
 		this.options = options;
 	}
-	/** Merge profile properties (`null` clears one). Every property a journey reads must be identified before the event that starts it. */
-	identify(userId, props) {
-		const contract = this.options.contract;
-		if (contract !== void 0) {
-			const result = contract.parseProfilePatch(props);
-			if (!result.ok) return Promise.reject(new JourneyValidationError("/identify", void 0, result.issues));
-		}
-		return this.post("/identify", {
-			userId,
-			props
-		});
+	async ingest(input) {
+		await this.options.queue.send(prepareBatch(this.options.contract, input));
+	}
+};
+var JourneyClient = class {
+	options;
+	constructor(options) {
+		this.options = options;
 	}
 	/**
-	* Record an event; the Worker starts every journey whose trigger matches it
-	* and wakes waits on it. A caller that retries should pass the same `id`
-	* each time: the Worker stores one occurrence per id, so a retry after a
-	* timeout cannot double-count the event. `ts` defaults to the Worker's clock.
+	* The one way in: a profile and the events it belongs to, as one batch. A visitor who signed in
+	* merges first, then the profile, then the events in order, so a journey cannot start without
+	* its recipient. A caller that retries should pass each event's `id`: the Worker stores one
+	* occurrence per id. `ts` defaults to now. `JourneyQueue` is the same report through a queue.
 	*/
-	track(userId, event, ...args) {
-		const [payload = {}, options = {}] = args;
-		const contract = this.options.contract;
-		if (contract !== void 0) {
-			const result = contract.parseEvent(event, payload);
-			if (!result.ok) return Promise.reject(new JourneyValidationError("/events", event, result.issues));
-		}
-		return this.post("/events", {
-			userId,
-			event,
-			payload,
-			...options.id === void 0 ? {} : { id: options.id },
-			...options.ts === void 0 ? {} : { ts: options.ts }
-		});
+	async ingest(input) {
+		return this.post("/ingest", prepareBatch(this.options.contract, input));
 	}
 	/**
-	* A push token the app registered for the user (call it on every registration: a token moves
-	* to the latest user). The engine keeps devices itself — pushes go to them, a token APNs / FCM
-	* reports as gone is dropped — and journeys waiting on `reachable('push')` wake.
+	* A push token registered for whoever holds the device now (call it on every registration): a
+	* token moves to the latest owner, and a `deviceId` seen with a new token replaces the old one.
+	* The engine keeps devices itself — pushes go to them, a token APNs / FCM reports as gone is
+	* dropped — and journeys waiting on `reachable('push')` wake. Naming both ids merges the visitor,
+	* as `ingest` does.
 	*/
-	registerDevice(userId, device) {
-		const { token, platform, ts } = device;
-		return this.post("/devices", {
-			userId,
-			token,
-			platform,
-			...ts === void 0 ? {} : { ts }
-		});
+	registerDevice(device) {
+		return this.post("/devices", device);
 	}
 	/**
 	* A journey push tapped open: the `message_id` the push carried, reported for the user who
@@ -96,6 +116,10 @@ var JourneyClient = class {
 	forgetUser(userId) {
 		return this.post("/users/forget", { userId });
 	}
+	/** `forgetUser` for a visitor who never signed in. */
+	forgetVisitor(visitorId) {
+		return this.post("/users/forget", { visitorId });
+	}
 	/** The user signed out on that device: the token stays registered, bound to nobody. */
 	unbindDevice(token) {
 		return this.post("/devices/unbind", { token });
@@ -183,6 +207,6 @@ var JourneyClient = class {
 };
 const subscriptionsPath = (userId) => `/subscriptions/${encodeURIComponent(userId)}`;
 const subscriptionsByMessagePath = (messageId) => `/subscriptions/by-message/${encodeURIComponent(messageId)}`;
-export { JourneyClient, JourneyClientError, JourneyValidationError };
+export { JourneyClient, JourneyClientError, JourneyQueue, JourneyValidationError };
 
 //# sourceMappingURL=client.mjs.map

package/dist/client.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["import type * as core from 'zod/v4/core';\nimport type { Contract, ContractIssue, ProfilePatch, Topic } from './contract';\nimport {\n  type DeployResult,\n  type IdentifyResult,\n  type IngestResult,\n  type MessageSubscriptions,\n  SUBSCRIPTION_CHANNELS,\n  type Subscriptions,\n  type SubscriptionsPatch,\n} from './host/ingest';\nimport type { ProfileProps } from './store';\n\n/**\n * `@shware/workflow/client` — the producer side of the ingest API, for the\n * service that knows what users do (an api server, a webhook handler). Plain\n * fetch, no dependencies; errors carry the status and body so a caller can\n * log them without failing the request that triggered the report.\n */\n\nexport interface JourneyClientOptions<C extends Contract | undefined = undefined> {\n  /**\n   * The shared `defineContract(...)`: types `track` (the event name picks the\n   * payload type) and `identify`, and checks both before anything is sent.\n   */\n  contract?: C;\n  /** The journey Worker's origin, e.g. `https://workflow.example.com`. */\n  origin: string;\n  /** Its API_TOKEN, sent as a bearer; omit against an open local instance. */\n  token?: string;\n  /** Fetch implementation (defaults to the global one). */\n  fetch?: typeof fetch;\n}\n\nexport class JourneyClientError extends Error {\n  constructor(\n    readonly path: string,\n    readonly status: number,\n    readonly body: string\n  ) {\n    super(`journey ${path} failed: ${status} ${body}`);\n    this.name = 'JourneyClientError';\n  }\n}\n\n/** A payload or profile patch the contract refuses — raised before the request, with the field paths. */\nexport class JourneyValidationError extends Error {\n  constructor(\n    readonly path: string,\n    readonly event: string | undefined,\n    readonly issues: ContractIssue[]\n  ) {\n    super(\n      `journey ${path}${event === undefined ? '' : ` '${event}'`} refused by the contract: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n    this.name = 'JourneyValidationError';\n  }\n}\n\ntype EventsOf<C> = C extends Contract<infer E> ? E : never;\n/** Event names: the contract's, or any string without one. */\nexport type ClientEventName<C> = [C] extends [undefined] ? string : keyof EventsOf<C> & string;\ntype TrackArgs<C, K> = [C] extends [undefined]\n  ? [payload?: Record<string, unknown>, options?: TrackOptions]\n  : K extends keyof EventsOf<C>\n    ? [payload: core.input<EventsOf<C>[K]>, options?: TrackOptions]\n    : never;\ntype IdentifyProps<C> = [C] extends [undefined]\n  ? ProfileProps\n  : C extends Contract<Record<string, core.$ZodObject>, infer P>\n    ? ProfilePatch<P>\n    : never;\n\n/** The topics the client's contract declares; any string without a contract. */\nexport type ClientTopic<C> = [C] extends [undefined] ? string : Topic<C>;\n\nexport type {\n  ChannelSubscriptions,\n  ChannelSubscriptionsPatch,\n  MessageOrigin,\n  MessageSubscriptions,\n  SubscriptionChannel,\n  Subscriptions,\n  SubscriptionsPatch,\n} from './host/ingest';\n\nexport interface TrackOptions {\n  /** The occurrence's identity: a retry with the same id is recorded once. */\n  id?: string;\n  /** When it happened (epoch ms); the Worker's clock when omitted. */\n  ts?: number;\n}\n\nexport class JourneyClient<C extends Contract | undefined = undefined> {\n  constructor(private readonly options: JourneyClientOptions<C>) {}\n\n  /** Merge profile properties (`null` clears one). Every property a journey reads must be identified before the event that starts it. */\n  identify(userId: string, props: IdentifyProps<C>): Promise<IdentifyResult> {\n    const contract = this.options.contract;\n    if (contract !== undefined) {\n      const result = contract.parseProfilePatch(props);\n      if (!result.ok)\n        return Promise.reject(new JourneyValidationError('/identify', undefined, result.issues));\n    }\n    return this.post<IdentifyResult>('/identify', { userId, props });\n  }\n\n  /**\n   * Record an event; the Worker starts every journey whose trigger matches it\n   * and wakes waits on it. A caller that retries should pass the same `id`\n   * each time: the Worker stores one occurrence per id, so a retry after a\n   * timeout cannot double-count the event. `ts` defaults to the Worker's clock.\n   */\n  track<K extends ClientEventName<C>>(\n    userId: string,\n    event: K,\n    ...args: TrackArgs<C, K>\n  ): Promise<IngestResult> {\n    const [payload = {}, options = {}] = args as [Record<string, unknown>?, TrackOptions?];\n    const contract = this.options.contract;\n    if (contract !== undefined) {\n      const result = contract.parseEvent(event, payload);\n      if (!result.ok)\n        return Promise.reject(new JourneyValidationError('/events', event, result.issues));\n    }\n    return this.post<IngestResult>('/events', {\n      userId,\n      event,\n      payload,\n      ...(options.id === undefined ? {} : { id: options.id }),\n      ...(options.ts === undefined ? {} : { ts: options.ts }),\n    });\n  }\n\n  /**\n   * A push token the app registered for the user (call it on every registration: a token moves\n   * to the latest user). The engine keeps devices itself — pushes go to them, a token APNs / FCM\n   * reports as gone is dropped — and journeys waiting on `reachable('push')` wake.\n   */\n  registerDevice(\n    userId: string,\n    device: { token: string; platform: 'ios' | 'android' | 'web'; ts?: number }\n  ): Promise<{ ok: true; woke: number }> {\n    const { token, platform, ts } = device;\n    return this.post('/devices', {\n      userId,\n      token,\n      platform,\n      ...(ts === undefined ? {} : { ts }),\n    });\n  }\n\n  /**\n   * A journey push tapped open: the `message_id` the push carried, reported for the user who\n   * tapped it. Recorded as a human open on the copy (an email's opens are tracked by the Worker).\n   */\n  messageOpened(userId: string, messageId: string): Promise<{ ok: true; recorded: boolean }> {\n    return this.post('/messages/opened', { userId, messageId });\n  }\n\n  /**\n   * A deleted account: the engine records the erasure, stops the user's running journeys, then\n   * erases everything it keeps about them (profile, devices, events, reporting). Once this\n   * resolves the request is durable: `erased: false` means an instance would not stop yet, and\n   * the Worker's scheduled sweep finishes the job.\n   */\n  forgetUser(userId: string): Promise<{ ok: true; erased: boolean; pending: string[] }> {\n    return this.post('/users/forget', { userId });\n  }\n\n  /** The user signed out on that device: the token stays registered, bound to nobody. */\n  unbindDevice(token: string): Promise<{ ok: true; woke: number }> {\n    return this.post('/devices/unbind', { token });\n  }\n\n  /** Forget a push token for good (an uninstall the app learned of, a token it replaced). */\n  removeDevice(token: string): Promise<{ ok: true; woke: number }> {\n    return this.post('/devices/remove', { token });\n  }\n\n  /**\n   * Where the user stands, topic × channel: for `email` and for `push`, `all` (false once they\n   * opted out of the whole channel) and each declared topic (false once they opted out of it on\n   * that channel) — the engine's record, which a preference page shows as it is. The two are\n   * independent flags: a topic answers its own opt-out even while `all` is false, so `all: false`\n   * masks every topic however they read (nothing is sent on the channel until it is true again).\n   * Rejects with a 410 for an erased user.\n   */\n  getSubscriptions(userId: string): Promise<Subscriptions<ClientTopic<C>>> {\n    return this.request('GET', subscriptionsPath(userId));\n  }\n\n  /**\n   * Set subscriptions: only what the patch names changes, per channel (`{ email: { topics: {\n   * newsletter: false } } }` opts out of one topic's emails, `{ push: { all: false } }` of every\n   * push — the in-app opt-out App Store Review Guideline 4.5.4 asks for). `all: true` clears the\n   * channel-wide opt-out only: a topic opted out on its own stays off until the patch names it,\n   * so a preference page's \"subscribe to all\" sends `all: true` plus every topic `true`. Answers\n   * the subscriptions as they now stand. With a contract, a topic it does not declare is refused\n   * here, before the request; the engine refuses it too.\n   */\n  setSubscriptions(\n    userId: string,\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): Promise<Subscriptions<ClientTopic<C>>> {\n    const refused = this.undeclaredTopics(patch);\n    if (refused !== undefined) return Promise.reject(refused);\n    return this.request('PUT', subscriptionsPath(userId), patch);\n  }\n\n  /**\n   * `getSubscriptions` for the recipient of one copy, by the message id an email's preferences\n   * link carries (`email.preferencesUrl?m=<message id>`): how a preference page works without a\n   * sign-in. The answer adds `message: { channel, topic }`, the copy the page was opened from,\n   * so it can highlight that topic. Rejects with a 404 for an id that names no copy — never\n   * sent, or erased with its user — and for a transactional one; the page should show the link\n   * as expired. The message id is the capability, so the app proxies this behind its own API\n   * and rate-limits it.\n   */\n  getSubscriptionsByMessage(messageId: string): Promise<MessageSubscriptions<ClientTopic<C>>> {\n    return this.request('GET', subscriptionsByMessagePath(messageId));\n  }\n\n  /** `setSubscriptions` for the recipient of one copy; the patch and the answer are those of `getSubscriptionsByMessage`. */\n  setSubscriptionsByMessage(\n    messageId: string,\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): Promise<MessageSubscriptions<ClientTopic<C>>> {\n    const refused = this.undeclaredTopics(patch);\n    if (refused !== undefined) return Promise.reject(refused);\n    return this.request('PUT', subscriptionsByMessagePath(messageId), patch);\n  }\n\n  /** With a contract, the refusal of a patch naming a topic it does not declare; undefined when the patch is fine. */\n  private undeclaredTopics(\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): JourneyValidationError | undefined {\n    const contract = this.options.contract;\n    if (contract === undefined) return undefined;\n    const issues: ContractIssue[] = [];\n    for (const channel of SUBSCRIPTION_CHANNELS) {\n      for (const topic of Object.keys(patch[channel]?.topics ?? {})) {\n        // `includes`, not the predicate: narrowing `string` by a `topic is string` leaves `never`\n        if (contract.topics.includes(topic)) continue;\n        issues.push({ path: `${channel}.topics.${topic}`, message: 'not a declared topic' });\n      }\n    }\n    return issues.length > 0\n      ? new JourneyValidationError('/subscriptions', undefined, issues)\n      : undefined;\n  }\n\n  /** Deploy a compiled bundle (BundleIR). */\n  deploy(bundle: unknown): Promise<DeployResult> {\n    return this.post<DeployResult>('/deploy', bundle);\n  }\n\n  private post<T>(path: string, body: unknown): Promise<T> {\n    return this.request<T>('POST', path, body);\n  }\n\n  private async request<T>(\n    method: 'GET' | 'POST' | 'PUT',\n    path: string,\n    body?: unknown\n  ): Promise<T> {\n    const headers: Record<string, string> = {};\n    if (body !== undefined) headers['content-type'] = 'application/json';\n    if (this.options.token !== undefined) headers.authorization = `Bearer ${this.options.token}`;\n    const doFetch = this.options.fetch ?? fetch;\n    const response = await doFetch(`${this.options.origin.replace(/\\/$/, '')}${path}`, {\n      method,\n      headers,\n      ...(body === undefined ? {} : { body: JSON.stringify(body) }),\n    });\n    if (!response.ok) throw new JourneyClientError(path, response.status, await response.text());\n    return (await response.json()) as T;\n  }\n}\n\nconst subscriptionsPath = (userId: string) => `/subscriptions/${encodeURIComponent(userId)}`;\nconst subscriptionsByMessagePath = (messageId: string) =>\n  `/subscriptions/by-message/${encodeURIComponent(messageId)}`;\n"],"mappings":";;AAkCA,IAAa,qBAAb,cAAwC,MAAM;CAEjC;CACA;CACA;CAHX,YACE,MACA,QACA,MACA;EACA,MAAM,WAAW,KAAK,WAAW,OAAO,GAAG,MAAM;EAJxC,KAAA,OAAA;EACA,KAAA,SAAA;EACA,KAAA,OAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,yBAAb,cAA4C,MAAM;CAErC;CACA;CACA;CAHX,YACE,MACA,OACA,QACA;EACA,MACE,WAAW,OAAO,UAAU,KAAA,IAAY,KAAK,KAAK,MAAM,GAAG,4BAA4B,OACpF,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EARS,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EAOT,KAAK,OAAO;CACd;AACF;AAoCA,IAAa,gBAAb,MAAuE;CACxC;CAA7B,YAAY,SAAmD;EAAlC,KAAA,UAAA;CAAmC;;CAGhE,SAAS,QAAgB,OAAkD;EACzE,MAAM,WAAW,KAAK,QAAQ;EAC9B,IAAI,aAAa,KAAA,GAAW;GAC1B,MAAM,SAAS,SAAS,kBAAkB,KAAK;GAC/C,IAAI,CAAC,OAAO,IACV,OAAO,QAAQ,OAAO,IAAI,uBAAuB,aAAa,KAAA,GAAW,OAAO,MAAM,CAAC;EAC3F;EACA,OAAO,KAAK,KAAqB,aAAa;GAAE;GAAQ;EAAM,CAAC;CACjE;;;;;;;CAQA,MACE,QACA,OACA,GAAG,MACoB;EACvB,MAAM,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK;EACrC,MAAM,WAAW,KAAK,QAAQ;EAC9B,IAAI,aAAa,KAAA,GAAW;GAC1B,MAAM,SAAS,SAAS,WAAW,OAAO,OAAO;GACjD,IAAI,CAAC,OAAO,IACV,OAAO,QAAQ,OAAO,IAAI,uBAAuB,WAAW,OAAO,OAAO,MAAM,CAAC;EACrF;EACA,OAAO,KAAK,KAAmB,WAAW;GACxC;GACA;GACA;GACA,GAAI,QAAQ,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;GACrD,GAAI,QAAQ,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG;EACvD,CAAC;CACH;;;;;;CAOA,eACE,QACA,QACqC;EACrC,MAAM,EAAE,OAAO,UAAU,OAAO;EAChC,OAAO,KAAK,KAAK,YAAY;GAC3B;GACA;GACA;GACA,GAAI,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,GAAG;EACnC,CAAC;CACH;;;;;CAMA,cAAc,QAAgB,WAA6D;EACzF,OAAO,KAAK,KAAK,oBAAoB;GAAE;GAAQ;EAAU,CAAC;CAC5D;;;;;;;CAQA,WAAW,QAA2E;EACpF,OAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;CAC9C;;CAGA,aAAa,OAAoD;EAC/D,OAAO,KAAK,KAAK,mBAAmB,EAAE,MAAM,CAAC;CAC/C;;CAGA,aAAa,OAAoD;EAC/D,OAAO,KAAK,KAAK,mBAAmB,EAAE,MAAM,CAAC;CAC/C;;;;;;;;;CAUA,iBAAiB,QAAwD;EACvE,OAAO,KAAK,QAAQ,OAAO,kBAAkB,MAAM,CAAC;CACtD;;;;;;;;;;CAWA,iBACE,QACA,OACwC;EACxC,MAAM,UAAU,KAAK,iBAAiB,KAAK;EAC3C,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,OAAO,OAAO;EACxD,OAAO,KAAK,QAAQ,OAAO,kBAAkB,MAAM,GAAG,KAAK;CAC7D;;;;;;;;;;CAWA,0BAA0B,WAAkE;EAC1F,OAAO,KAAK,QAAQ,OAAO,2BAA2B,SAAS,CAAC;CAClE;;CAGA,0BACE,WACA,OAC+C;EAC/C,MAAM,UAAU,KAAK,iBAAiB,KAAK;EAC3C,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,OAAO,OAAO;EACxD,OAAO,KAAK,QAAQ,OAAO,2BAA2B,SAAS,GAAG,KAAK;CACzE;;CAGA,iBACE,OACoC;EACpC,MAAM,WAAW,KAAK,QAAQ;EAC9B,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;EACnC,MAAM,SAA0B,CAAC;EACjC,KAAK,MAAM,WAAW,uBACpB,KAAK,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG;GAE7D,IAAI,SAAS,OAAO,SAAS,KAAK,GAAG;GACrC,OAAO,KAAK;IAAE,MAAM,GAAG,QAAQ,UAAU;IAAS,SAAS;GAAuB,CAAC;EACrF;EAEF,OAAO,OAAO,SAAS,IACnB,IAAI,uBAAuB,kBAAkB,KAAA,GAAW,MAAM,IAC9D,KAAA;CACN;;CAGA,OAAO,QAAwC;EAC7C,OAAO,KAAK,KAAmB,WAAW,MAAM;CAClD;CAEA,KAAgB,MAAc,MAA2B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC3C;CAEA,MAAc,QACZ,QACA,MACA,MACY;EACZ,MAAM,UAAkC,CAAC;EACzC,IAAI,SAAS,KAAA,GAAW,QAAQ,kBAAkB;EAClD,IAAI,KAAK,QAAQ,UAAU,KAAA,GAAW,QAAQ,gBAAgB,UAAU,KAAK,QAAQ;EAErF,MAAM,WAAW,OADD,KAAK,QAAQ,SAAS,MAAA,CACP,GAAG,KAAK,QAAQ,OAAO,QAAQ,OAAO,EAAE,IAAI,QAAQ;GACjF;GACA;GACA,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE;EAC7D,CAAC;EACD,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,mBAAmB,MAAM,SAAS,QAAQ,MAAM,SAAS,KAAK,CAAC;EAC3F,OAAQ,MAAM,SAAS,KAAK;CAC9B;AACF;AAEA,MAAM,qBAAqB,WAAmB,kBAAkB,mBAAmB,MAAM;AACzF,MAAM,8BAA8B,cAClC,6BAA6B,mBAAmB,SAAS"}
+{"version":3,"file":"client.mjs","names":[],"sources":["../src/client.ts"],"sourcesContent":["import type * as core from 'zod/v4/core';\nimport type { Contract, ContractIssue, ProfilePatch, Topic } from './contract';\nimport type { BatchResult, JourneyBatch } from './host/batch';\nimport {\n  type DeployResult,\n  type MessageSubscriptions,\n  SUBSCRIPTION_CHANNELS,\n  type Subscriptions,\n  type SubscriptionsPatch,\n} from './host/ingest';\nimport type { ProfileProps } from './store';\n\n/**\n * `@shware/workflow/client` — the producer side of the ingest API, for the\n * service that knows what users do (an api server, a webhook handler). Plain\n * fetch, no dependencies; errors carry the status and body so a caller can\n * log them without failing the request that triggered the report.\n */\n\nexport interface JourneyClientOptions<C extends Contract | undefined = undefined> {\n  /**\n   * The shared `defineContract(...)`: types `ingest` (the event name picks the payload type, the\n   * profile patch is the contract's), and checks both before anything is sent.\n   */\n  contract?: C;\n  /** The journey Worker's origin, e.g. `https://workflow.example.com`. */\n  origin: string;\n  /** Its API_TOKEN, sent as a bearer; omit against an open local instance. */\n  token?: string;\n  /** Fetch implementation (defaults to the global one). */\n  fetch?: typeof fetch;\n}\n\nexport class JourneyClientError extends Error {\n  constructor(\n    readonly path: string,\n    readonly status: number,\n    readonly body: string\n  ) {\n    super(`journey ${path} failed: ${status} ${body}`);\n    this.name = 'JourneyClientError';\n  }\n}\n\n/** A payload or profile patch the contract refuses — raised before the request, with the field paths. */\nexport class JourneyValidationError extends Error {\n  constructor(\n    readonly path: string,\n    readonly event: string | undefined,\n    readonly issues: ContractIssue[]\n  ) {\n    super(\n      `journey ${path}${event === undefined ? '' : ` '${event}'`} refused by the contract: ${issues\n        .map((i) => `${i.path || '(root)'} ${i.message}`)\n        .join('; ')}`\n    );\n    this.name = 'JourneyValidationError';\n  }\n}\n\ntype EventsOf<C> = C extends Contract<infer E> ? E : never;\ntype IdentifyProps<C> = [C] extends [undefined]\n  ? ProfileProps\n  : C extends Contract<Record<string, core.$ZodObject>, infer P>\n    ? ProfilePatch<P>\n    : never;\n\n/** The topics the client's contract declares; any string without a contract. */\nexport type ClientTopic<C> = [C] extends [undefined] ? string : Topic<C>;\n\nexport type { BatchEvent, BatchResult, JourneyBatch } from './host/batch';\nexport type {\n  ChannelSubscriptions,\n  ChannelSubscriptionsPatch,\n  MessageOrigin,\n  MessageSubscriptions,\n  SubscriptionChannel,\n  Subscriptions,\n  SubscriptionsPatch,\n} from './host/ingest';\n\n/** One event of a batch: with a contract, the name picks the payload type. */\nexport type BatchEventInput<C> = [C] extends [undefined]\n  ? { event: string; payload?: Record<string, unknown>; id?: string; ts?: number }\n  : {\n      [K in keyof EventsOf<C> & string]: {\n        event: K;\n        payload: core.input<EventsOf<C>[K]>;\n        id?: string;\n        ts?: number;\n      };\n    }[keyof EventsOf<C> & string];\n\n/**\n * Who a report or device is about: a signed-in user, or a visitor before sign-in (a stable id for\n * one client, renewed when a user signs out). Naming both says this visitor is this user: what the\n * engine knows of the visitor moves to the user, once.\n */\nexport type JourneyIdentity =\n  | { userId: string; visitorId?: string | undefined }\n  | { userId?: undefined; visitorId: string };\n\n/** What the profile now says and what they just did, as one report. */\nexport type BatchInput<C> = JourneyIdentity & {\n  /** Merged before the first event: a journey the events start finds this recipient. */\n  profile?: IdentifyProps<C>;\n  events?: readonly BatchEventInput<C>[];\n};\n\n/**\n * The batch as it travels: checked against the contract, with the time and the event ids and\n * timestamps fixed here, so every redelivery is the same report.\n */\nfunction prepareBatch<C extends Contract | undefined>(\n  contract: C,\n  input: BatchInput<C>\n): JourneyBatch {\n  const { userId, visitorId, profile, events } = input as {\n    userId?: string;\n    visitorId?: string;\n    profile?: ProfileProps;\n    events?: readonly {\n      event: string;\n      payload?: Record<string, unknown>;\n      id?: string;\n      ts?: number;\n    }[];\n  };\n  if (contract !== undefined) {\n    if (profile !== undefined) {\n      const result = contract.parseProfilePatch(profile);\n      if (!result.ok) throw new JourneyValidationError('/ingest', undefined, result.issues);\n    }\n    for (const { event, payload } of events ?? []) {\n      const result = contract.parseEvent(event, payload ?? {});\n      if (!result.ok) throw new JourneyValidationError('/ingest', event, result.issues);\n    }\n  }\n  const now = Date.now();\n  return {\n    ...(userId === undefined ? {} : { userId }),\n    ...(visitorId === undefined ? {} : { visitorId }),\n    ...(profile === undefined ? {} : { profile, at: now }),\n    ...(events === undefined\n      ? {}\n      : {\n          events: events.map((e) => ({\n            event: e.event,\n            payload: e.payload ?? {},\n            id: e.id ?? crypto.randomUUID(),\n            ts: e.ts ?? now,\n          })),\n        }),\n  };\n}\n\n/** The producer side of a queue (the subset of a Cloudflare Queues binding used). */\nexport interface JourneyQueueBinding {\n  send(body: JourneyBatch): Promise<unknown>;\n}\n\nexport interface JourneyQueueOptions<C extends Contract | undefined = undefined> {\n  /** The shared `defineContract(...)`: types `ingest` and checks each batch before it is sent. */\n  contract?: C;\n  /** The queue `journeyWorker`'s `queue` handler consumes. */\n  queue: JourneyQueueBinding;\n}\n\n/**\n * `JourneyClient.ingest` through a queue, for a producer that must not lose a report and must not\n * wait for the engine: once `ingest` resolves the batch is durable, and the consumer retries it\n * until it is applied. Delivery is at least once and in no guaranteed order: the batch is the unit\n * that stays in order and event ids and property times absorb the rest. A rejected `ingest` was\n * not queued; the caller decides (a 5xx so its client retries, say).\n */\nexport class JourneyQueue<C extends Contract | undefined = undefined> {\n  constructor(private readonly options: JourneyQueueOptions<C>) {}\n\n  async ingest(input: BatchInput<C>): Promise<void> {\n    await this.options.queue.send(prepareBatch(this.options.contract as C, input));\n  }\n}\n\nexport class JourneyClient<C extends Contract | undefined = undefined> {\n  constructor(private readonly options: JourneyClientOptions<C>) {}\n\n  /**\n   * The one way in: a profile and the events it belongs to, as one batch. A visitor who signed in\n   * merges first, then the profile, then the events in order, so a journey cannot start without\n   * its recipient. A caller that retries should pass each event's `id`: the Worker stores one\n   * occurrence per id. `ts` defaults to now. `JourneyQueue` is the same report through a queue.\n   */\n  async ingest(input: BatchInput<C>): Promise<BatchResult> {\n    return this.post<BatchResult>('/ingest', prepareBatch(this.options.contract as C, input));\n  }\n\n  /**\n   * A push token registered for whoever holds the device now (call it on every registration): a\n   * token moves to the latest owner, and a `deviceId` seen with a new token replaces the old one.\n   * The engine keeps devices itself — pushes go to them, a token APNs / FCM reports as gone is\n   * dropped — and journeys waiting on `reachable('push')` wake. Naming both ids merges the visitor,\n   * as `ingest` does.\n   */\n  registerDevice(\n    device: JourneyIdentity & {\n      deviceId?: string;\n      token: string;\n      platform: 'ios' | 'android' | 'web';\n    }\n  ): Promise<{ ok: true; woke: number }> {\n    return this.post('/devices', device);\n  }\n\n  /**\n   * A journey push tapped open: the `message_id` the push carried, reported for the user who\n   * tapped it. Recorded as a human open on the copy (an email's opens are tracked by the Worker).\n   */\n  messageOpened(userId: string, messageId: string): Promise<{ ok: true; recorded: boolean }> {\n    return this.post('/messages/opened', { userId, messageId });\n  }\n\n  /**\n   * A deleted account: the engine records the erasure, stops the user's running journeys, then\n   * erases everything it keeps about them (profile, devices, events, reporting). Once this\n   * resolves the request is durable: `erased: false` means an instance would not stop yet, and\n   * the Worker's scheduled sweep finishes the job.\n   */\n  forgetUser(userId: string): Promise<{ ok: true; erased: boolean; pending: string[] }> {\n    return this.post('/users/forget', { userId });\n  }\n\n  /** `forgetUser` for a visitor who never signed in. */\n  forgetVisitor(visitorId: string): Promise<{ ok: true; erased: boolean; pending: string[] }> {\n    return this.post('/users/forget', { visitorId });\n  }\n\n  /** The user signed out on that device: the token stays registered, bound to nobody. */\n  unbindDevice(token: string): Promise<{ ok: true; woke: number }> {\n    return this.post('/devices/unbind', { token });\n  }\n\n  /** Forget a push token for good (an uninstall the app learned of, a token it replaced). */\n  removeDevice(token: string): Promise<{ ok: true; woke: number }> {\n    return this.post('/devices/remove', { token });\n  }\n\n  /**\n   * Where the user stands, topic × channel: for `email` and for `push`, `all` (false once they\n   * opted out of the whole channel) and each declared topic (false once they opted out of it on\n   * that channel) — the engine's record, which a preference page shows as it is. The two are\n   * independent flags: a topic answers its own opt-out even while `all` is false, so `all: false`\n   * masks every topic however they read (nothing is sent on the channel until it is true again).\n   * Rejects with a 410 for an erased user.\n   */\n  getSubscriptions(userId: string): Promise<Subscriptions<ClientTopic<C>>> {\n    return this.request('GET', subscriptionsPath(userId));\n  }\n\n  /**\n   * Set subscriptions: only what the patch names changes, per channel (`{ email: { topics: {\n   * newsletter: false } } }` opts out of one topic's emails, `{ push: { all: false } }` of every\n   * push — the in-app opt-out App Store Review Guideline 4.5.4 asks for). `all: true` clears the\n   * channel-wide opt-out only: a topic opted out on its own stays off until the patch names it,\n   * so a preference page's \"subscribe to all\" sends `all: true` plus every topic `true`. Answers\n   * the subscriptions as they now stand. With a contract, a topic it does not declare is refused\n   * here, before the request; the engine refuses it too.\n   */\n  setSubscriptions(\n    userId: string,\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): Promise<Subscriptions<ClientTopic<C>>> {\n    const refused = this.undeclaredTopics(patch);\n    if (refused !== undefined) return Promise.reject(refused);\n    return this.request('PUT', subscriptionsPath(userId), patch);\n  }\n\n  /**\n   * `getSubscriptions` for the recipient of one copy, by the message id an email's preferences\n   * link carries (`email.preferencesUrl?m=<message id>`): how a preference page works without a\n   * sign-in. The answer adds `message: { channel, topic }`, the copy the page was opened from,\n   * so it can highlight that topic. Rejects with a 404 for an id that names no copy — never\n   * sent, or erased with its user — and for a transactional one; the page should show the link\n   * as expired. The message id is the capability, so the app proxies this behind its own API\n   * and rate-limits it.\n   */\n  getSubscriptionsByMessage(messageId: string): Promise<MessageSubscriptions<ClientTopic<C>>> {\n    return this.request('GET', subscriptionsByMessagePath(messageId));\n  }\n\n  /** `setSubscriptions` for the recipient of one copy; the patch and the answer are those of `getSubscriptionsByMessage`. */\n  setSubscriptionsByMessage(\n    messageId: string,\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): Promise<MessageSubscriptions<ClientTopic<C>>> {\n    const refused = this.undeclaredTopics(patch);\n    if (refused !== undefined) return Promise.reject(refused);\n    return this.request('PUT', subscriptionsByMessagePath(messageId), patch);\n  }\n\n  /** With a contract, the refusal of a patch naming a topic it does not declare; undefined when the patch is fine. */\n  private undeclaredTopics(\n    patch: SubscriptionsPatch<ClientTopic<C>>\n  ): JourneyValidationError | undefined {\n    const contract = this.options.contract;\n    if (contract === undefined) return undefined;\n    const issues: ContractIssue[] = [];\n    for (const channel of SUBSCRIPTION_CHANNELS) {\n      for (const topic of Object.keys(patch[channel]?.topics ?? {})) {\n        // `includes`, not the predicate: narrowing `string` by a `topic is string` leaves `never`\n        if (contract.topics.includes(topic)) continue;\n        issues.push({ path: `${channel}.topics.${topic}`, message: 'not a declared topic' });\n      }\n    }\n    return issues.length > 0\n      ? new JourneyValidationError('/subscriptions', undefined, issues)\n      : undefined;\n  }\n\n  /** Deploy a compiled bundle (BundleIR). */\n  deploy(bundle: unknown): Promise<DeployResult> {\n    return this.post<DeployResult>('/deploy', bundle);\n  }\n\n  private post<T>(path: string, body: unknown): Promise<T> {\n    return this.request<T>('POST', path, body);\n  }\n\n  private async request<T>(\n    method: 'GET' | 'POST' | 'PUT',\n    path: string,\n    body?: unknown\n  ): Promise<T> {\n    const headers: Record<string, string> = {};\n    if (body !== undefined) headers['content-type'] = 'application/json';\n    if (this.options.token !== undefined) headers.authorization = `Bearer ${this.options.token}`;\n    const doFetch = this.options.fetch ?? fetch;\n    const response = await doFetch(`${this.options.origin.replace(/\\/$/, '')}${path}`, {\n      method,\n      headers,\n      ...(body === undefined ? {} : { body: JSON.stringify(body) }),\n    });\n    if (!response.ok) throw new JourneyClientError(path, response.status, await response.text());\n    return (await response.json()) as T;\n  }\n}\n\nconst subscriptionsPath = (userId: string) => `/subscriptions/${encodeURIComponent(userId)}`;\nconst subscriptionsByMessagePath = (messageId: string) =>\n  `/subscriptions/by-message/${encodeURIComponent(messageId)}`;\n"],"mappings":";;AAiCA,IAAa,qBAAb,cAAwC,MAAM;CAEjC;CACA;CACA;CAHX,YACE,MACA,QACA,MACA;EACA,MAAM,WAAW,KAAK,WAAW,OAAO,GAAG,MAAM;EAJxC,KAAA,OAAA;EACA,KAAA,SAAA;EACA,KAAA,OAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAGA,IAAa,yBAAb,cAA4C,MAAM;CAErC;CACA;CACA;CAHX,YACE,MACA,OACA,QACA;EACA,MACE,WAAW,OAAO,UAAU,KAAA,IAAY,KAAK,KAAK,MAAM,GAAG,4BAA4B,OACpF,KAAK,MAAM,GAAG,EAAE,QAAQ,SAAS,GAAG,EAAE,SAAS,CAAC,CAChD,KAAK,IAAI,GACd;EARS,KAAA,OAAA;EACA,KAAA,QAAA;EACA,KAAA,SAAA;EAOT,KAAK,OAAO;CACd;AACF;;;;;AAuDA,SAAS,aACP,UACA,OACc;CACd,MAAM,EAAE,QAAQ,WAAW,SAAS,WAAW;CAW/C,IAAI,aAAa,KAAA,GAAW;EAC1B,IAAI,YAAY,KAAA,GAAW;GACzB,MAAM,SAAS,SAAS,kBAAkB,OAAO;GACjD,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,uBAAuB,WAAW,KAAA,GAAW,OAAO,MAAM;EACtF;EACA,KAAK,MAAM,EAAE,OAAO,aAAa,UAAU,CAAC,GAAG;GAC7C,MAAM,SAAS,SAAS,WAAW,OAAO,WAAW,CAAC,CAAC;GACvD,IAAI,CAAC,OAAO,IAAI,MAAM,IAAI,uBAAuB,WAAW,OAAO,OAAO,MAAM;EAClF;CACF;CACA,MAAM,MAAM,KAAK,IAAI;CACrB,OAAO;EACL,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EACzC,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;EAC/C,GAAI,YAAY,KAAA,IAAY,CAAC,IAAI;GAAE;GAAS,IAAI;EAAI;EACpD,GAAI,WAAW,KAAA,IACX,CAAC,IACD,EACE,QAAQ,OAAO,KAAK,OAAO;GACzB,OAAO,EAAE;GACT,SAAS,EAAE,WAAW,CAAC;GACvB,IAAI,EAAE,MAAM,OAAO,WAAW;GAC9B,IAAI,EAAE,MAAM;EACd,EAAE,EACJ;CACN;AACF;;;;;;;;AAqBA,IAAa,eAAb,MAAsE;CACvC;CAA7B,YAAY,SAAkD;EAAjC,KAAA,UAAA;CAAkC;CAE/D,MAAM,OAAO,OAAqC;EAChD,MAAM,KAAK,QAAQ,MAAM,KAAK,aAAa,KAAK,QAAQ,UAAe,KAAK,CAAC;CAC/E;AACF;AAEA,IAAa,gBAAb,MAAuE;CACxC;CAA7B,YAAY,SAAmD;EAAlC,KAAA,UAAA;CAAmC;;;;;;;CAQhE,MAAM,OAAO,OAA4C;EACvD,OAAO,KAAK,KAAkB,WAAW,aAAa,KAAK,QAAQ,UAAe,KAAK,CAAC;CAC1F;;;;;;;;CASA,eACE,QAKqC;EACrC,OAAO,KAAK,KAAK,YAAY,MAAM;CACrC;;;;;CAMA,cAAc,QAAgB,WAA6D;EACzF,OAAO,KAAK,KAAK,oBAAoB;GAAE;GAAQ;EAAU,CAAC;CAC5D;;;;;;;CAQA,WAAW,QAA2E;EACpF,OAAO,KAAK,KAAK,iBAAiB,EAAE,OAAO,CAAC;CAC9C;;CAGA,cAAc,WAA8E;EAC1F,OAAO,KAAK,KAAK,iBAAiB,EAAE,UAAU,CAAC;CACjD;;CAGA,aAAa,OAAoD;EAC/D,OAAO,KAAK,KAAK,mBAAmB,EAAE,MAAM,CAAC;CAC/C;;CAGA,aAAa,OAAoD;EAC/D,OAAO,KAAK,KAAK,mBAAmB,EAAE,MAAM,CAAC;CAC/C;;;;;;;;;CAUA,iBAAiB,QAAwD;EACvE,OAAO,KAAK,QAAQ,OAAO,kBAAkB,MAAM,CAAC;CACtD;;;;;;;;;;CAWA,iBACE,QACA,OACwC;EACxC,MAAM,UAAU,KAAK,iBAAiB,KAAK;EAC3C,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,OAAO,OAAO;EACxD,OAAO,KAAK,QAAQ,OAAO,kBAAkB,MAAM,GAAG,KAAK;CAC7D;;;;;;;;;;CAWA,0BAA0B,WAAkE;EAC1F,OAAO,KAAK,QAAQ,OAAO,2BAA2B,SAAS,CAAC;CAClE;;CAGA,0BACE,WACA,OAC+C;EAC/C,MAAM,UAAU,KAAK,iBAAiB,KAAK;EAC3C,IAAI,YAAY,KAAA,GAAW,OAAO,QAAQ,OAAO,OAAO;EACxD,OAAO,KAAK,QAAQ,OAAO,2BAA2B,SAAS,GAAG,KAAK;CACzE;;CAGA,iBACE,OACoC;EACpC,MAAM,WAAW,KAAK,QAAQ;EAC9B,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;EACnC,MAAM,SAA0B,CAAC;EACjC,KAAK,MAAM,WAAW,uBACpB,KAAK,MAAM,SAAS,OAAO,KAAK,MAAM,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG;GAE7D,IAAI,SAAS,OAAO,SAAS,KAAK,GAAG;GACrC,OAAO,KAAK;IAAE,MAAM,GAAG,QAAQ,UAAU;IAAS,SAAS;GAAuB,CAAC;EACrF;EAEF,OAAO,OAAO,SAAS,IACnB,IAAI,uBAAuB,kBAAkB,KAAA,GAAW,MAAM,IAC9D,KAAA;CACN;;CAGA,OAAO,QAAwC;EAC7C,OAAO,KAAK,KAAmB,WAAW,MAAM;CAClD;CAEA,KAAgB,MAAc,MAA2B;EACvD,OAAO,KAAK,QAAW,QAAQ,MAAM,IAAI;CAC3C;CAEA,MAAc,QACZ,QACA,MACA,MACY;EACZ,MAAM,UAAkC,CAAC;EACzC,IAAI,SAAS,KAAA,GAAW,QAAQ,kBAAkB;EAClD,IAAI,KAAK,QAAQ,UAAU,KAAA,GAAW,QAAQ,gBAAgB,UAAU,KAAK,QAAQ;EAErF,MAAM,WAAW,OADD,KAAK,QAAQ,SAAS,MAAA,CACP,GAAG,KAAK,QAAQ,OAAO,QAAQ,OAAO,EAAE,IAAI,QAAQ;GACjF;GACA;GACA,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,IAAI,EAAE;EAC7D,CAAC;EACD,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,mBAAmB,MAAM,SAAS,QAAQ,MAAM,SAAS,KAAK,CAAC;EAC3F,OAAQ,MAAM,SAAS,KAAK;CAC9B;AACF;AAEA,MAAM,qBAAqB,WAAmB,kBAAkB,mBAAmB,MAAM;AACzF,MAAM,8BAA8B,cAClC,6BAA6B,mBAAmB,SAAS"}

package/dist/cloudflare/index.d.cts

@@ -8,16 +8,17 @@ import { PostgresReporting } from "../store/postgres-reporting.cjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.cjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.cjs";
 import { Authorize, authorized, bearerMatches, timingSafeEqual } from "../host/auth.cjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
 import { EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.cjs";
 import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.cjs";
 import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.cjs";
-import { EnvValidationError } from "../host/journey-host.cjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.cjs";
 import { IngestValidation, handleRequest } from "../host/http.cjs";
+import { QueueMessageLike } from "../host/batch.cjs";
+import { EnvValidationError } from "../host/journey-host.cjs";
 import { JourneyRunner } from "./runner.cjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.cjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.cjs";
 import { reportingObserver } from "../reporting/observer.cjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.cjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.cjs";
-export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };
+export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type QueueMessageLike, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/index.d.mts

@@ -8,16 +8,17 @@ import { PostgresReporting } from "../store/postgres-reporting.mjs";
 import { BundleVersion, Engagement, EntryInput, EntryOutcome, EventInput, JourneyReporting, JourneyStore, MessageRecord, ProfileProps, SchemaMismatchError, SegmentTriggerRoute, StoreLease, TriggerRoute } from "../store/index.mjs";
 import { EmailMessage, EmailRenderer, EmailSender, EmailSenderOptions, EmailTransport, RenderedEmail, trackEmail } from "../email-sender.mjs";
 import { Authorize, authorized, bearerMatches, timingSafeEqual } from "../host/auth.mjs";
+import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { EmailBindingLike, WAKE_TIMEOUT_TOLERANCE_MS, cloudflareJourneyBinding, wakeExpired } from "./bindings.mjs";
 import { InstanceNotFoundError, JourneyEnv, JourneyParams, WAKE_EVENT_TYPE, WorkflowBindingLike, WorkflowInstanceLike } from "../host/platform.mjs";
 import { BundleIntegrityError, DeployResult, DeviceRegistration, IdentifyResult, IngestInput, IngestResult, SWEEP_PAGE_SIZE, SweepPage, SweepResult, deployBundle, forgetUser, identifyUser, ingestEvent, registerDevice, removeDevice, sweepMaintenance, sweepSegments, sweepSegmentsPaged, unbindDevice } from "../host/ingest.mjs";
-import { EnvValidationError } from "../host/journey-host.mjs";
-import { TrackingOptions, handleTracking, recordPushOpen } from "../reporting/tracking.mjs";
 import { IngestValidation, handleRequest } from "../host/http.mjs";
+import { QueueMessageLike } from "../host/batch.mjs";
+import { EnvValidationError } from "../host/journey-host.mjs";
 import { JourneyRunner } from "./runner.mjs";
 import { LogMessageSender, WebhookMessageSender, routeByChannel, routeByPlatform } from "../host/senders.mjs";
 import { ChannelsConfig, channelsFromConfig, journeyMode, runtimeFromConfig } from "../host/channels.mjs";
 import { reportingObserver } from "../reporting/observer.mjs";
 import { BURST_WINDOW_MS, ClassifyOptions, ClickFacts, DEFAULT_QUICK_MS, RequestFacts, Verdict, classifyClick, classifyOpen } from "../reporting/classify.mjs";
 import { ExecutionContextLike, JourneyWorker, JourneyWorkerOptions, journeyWorker } from "./worker.mjs";
-export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };
+export { type Authorize, BURST_WINDOW_MS, BundleIntegrityError, type BundleVersion, type ChannelsConfig, type ClassifyOptions, type ClickFacts, DEFAULT_QUICK_MS, type DeployResult, type DeviceRegistration, type EmailAddress, type EmailBindingLike, type EmailMessage, type EmailRenderer, EmailSender, type EmailSenderOptions, type EmailTransport, type Engagement, type EntryInput, type EntryOutcome, EnvValidationError, type EventInput, type ExecutionContextLike, type IdentifyResult, type IngestInput, type IngestResult, type IngestValidation, InstanceNotFoundError, type JourneyEnv, JourneyFactSource, type JourneyObserver, type JourneyParams, type JourneyReporting, JourneyRunner, type JourneyStore, type JourneyWorker, type JourneyWorkerOptions, type LinkPurpose, LogMessageSender, type MessageRecord, type MessageTracking, type OutboundMessage, PostgresJourneyStore, type PostgresJourneyStoreOptions, PostgresReporting, type ProfileProps, type PushDevice, type QueueMessageLike, type RenderedEmail, type RequestFacts, SWEEP_PAGE_SIZE, SchemaMismatchError, type SegmentTriggerRoute, type SendResult, type SqlClientLike, type StoreLease, type SweepPage, type SweepResult, type TrackingOptions, type TriggerRoute, UserErasedError, type Verdict, WAKE_EVENT_TYPE, WAKE_TIMEOUT_TOLERANCE_MS, WebhookMessageSender, type WorkflowBindingLike, type WorkflowInstanceLike, authorized, bearerMatches, channelsFromConfig, classifyClick, classifyOpen, cloudflareJourneyBinding, deployBundle, forgetUser, handleRequest, handleTracking, identifyUser, ingestEvent, journeyMode, journeyWorker, recordPushOpen, registerDevice, removeDevice, reportingObserver, routeByChannel, routeByPlatform, runtimeFromConfig, sweepMaintenance, sweepSegments, sweepSegmentsPaged, timingSafeEqual, trackEmail, unbindDevice, wakeExpired };

package/dist/cloudflare/runner.cjs

@@ -1,5 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_engine_retry = require("../engine/retry.cjs");
+const require_store_identity = require("../store/identity.cjs");
+require("../store/index.cjs");
 const require_host_platform = require("../host/platform.cjs");
 const require_runtime = require("../runtime.cjs");
 const require_host_execute = require("../host/execute.cjs");
@@ -52,7 +54,7 @@ var CfEngineStep = class {
 		return this.step.sleep(name, ms);
 	}
 	subscribe(name, events) {
-		return this.step.do(name, () => this.store.subscribe(this.instanceId, this.userId, events, Date.now()));
+		return this.step.do(name, () => require_store_identity.instanceOwner(this.store, this.instanceId, this.userId).then((owner) => this.store.subscribe(this.instanceId, owner, events, Date.now())));
 	}
 	unsubscribe(name) {
 		return this.step.do(name, () => this.store.unsubscribe(this.instanceId));