@tier0/sdk-v2 0.0.0-stage → 0.2.1

package/dist/esm/data/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../../src/data/bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAA2B,MAAM,aAAa,CAAC;AAyD3F,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,8DAA8D;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAEnC,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,CACL,KAAK,YAAY,SAAS;QAC1B,CAAC,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC,QAAQ,CAAC,CACzF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAc,EAAE,CAAc;IACvD,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,YAAoB,EAAE,KAAa;IACvD,OAAO,QAAQ,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;AACjG,CAAC;AAED,wFAAwF;AACxF,MAAM,cAAc,GAA2B;IAC7C,aAAa,EAAE,iFAAiF;IAChG,cAAc,EAAE,wGAAwG;IACxH,WAAW,EAAE,uDAAuD;IACpE,YAAY,EAAE,6DAA6D;IAC3E,WAAW,EAAE,4DAA4D;IACzE,aAAa,EAAE,2BAA2B;IAC1C,gBAAgB,EACd,mJAAmJ;IACrJ,eAAe,EACb,mJAAmJ;CACtJ,CAAC;AAEF,SAAS,iBAAiB,CAAC,SAA2B;IACpD,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,GAAG,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,OAAO,IAAI,GAAG,cAAc,QAAQ,CAAC,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxI,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,MAAM,IAAI,UAAU,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;IACzE,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAgB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB;IAC/C,OAAO,OAAO;SACX,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClB,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CACzB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9I,CACF;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1D,IAAI,OAAO,GAAgC,IAAI,CAAC;IAChD,IAAI,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAE3C,KAAK,UAAU,aAAa,CAAC,KAA2B;QACtD,wEAAwE;QACxE,OAAO,IAAI,CAA8C,sBAAsB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,YAAoB,EAAE,KAAa,EAAE,SAA2D;QAC7H,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,EAAE;oBAC7B,YAAY;oBACZ,SAAS;oBACT,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,IAAI;oBACZ,cAAc,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC;iBAClD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0FAA0F;gBAC1F,wFAAwF;gBACxF,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,aAAa;oBAAE,MAAM,KAAK,CAAC;gBAC1H,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,OAAuB;QAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,SAAS;YAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACjH,MAAM,IAAI,GAAG,UAAU,EAAE,IAAI,CAAC;YAC9B,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACxD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;oBACtC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAmC,CAAC,CAAC;oBACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC,CAAC,CAAC;gBACH,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,gBAAgB,EAAE,CAAC;oBACxE,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,GAAG,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC;gBACzH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,iBAAiB,SAAS,CAAC,MAAM,oBAAoB,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,KAAK,+CAA+C,EAAE,KAAK,CAAC,CAAC;YACtH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,GAAG,CAAC,OAA6B;QAC9C,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,QAAQ,GAAgD,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC1C,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;oBAAE,MAAM,KAAK,CAAC;gBACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,OAAO,CAAC,SAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,MAAM,IAAI,SAAS,CAAC;wBAClB,OAAO,EACL,kGAAkG,OAAO,EAAE;wBAC7G,MAAM,EAAE,GAAG;wBACX,IAAI,EAAE,iBAAiB;wBACvB,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,qEAAqE;gBACrE,uDAAuD;gBACvD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBACtF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBACpF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;oBAAE,MAAM,KAAK,CAAC;gBAClD,MAAM,CAAC,KAAK,CAAC,sFAAsF,OAAO,EAAE,CAAC,CAAC;gBAC9G,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;gBAC5B,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;QAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,QAAQ,CAAC,YAAY;gBAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,wBAAwB,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,wBAAwB,CAAC,CAAC;YAC/E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CACT,WAAW,MAAM,CAAC,KAAK,4EAA4E;oBACjG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzF,CAAC;YACJ,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,4EAA4E;gBAC5E,MAAM,CAAC,IAAI,CACT,0EAA0E,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAC9I,gHAAgH,CACnH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAE1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,SAAS,CAAC;oBAClB,OAAO,EACL,4CAA4C,QAAQ,IAAI;wBACxD,mHAAmH;wBACnH,gGAAgG;oBAClG,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,iBAAiB;oBACvB,gEAAgE;oBAChE,SAAS,EAAE,WAAW;oBACtB,OAAO,EAAE,EAAE,OAAO,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;IAED,kGAAkG;IAClG,SAAS,MAAM;QACb,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE;aAC1B,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;aACnD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACL,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,OAAO,CAAC,MAAmB,EAAE,KAAgB;QAC1D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;QAC7B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,WAAW,GAAG,mBAAmB;YAAE,OAAO,KAAK,CAAC;QAC1D,WAAW,GAAG,GAAG,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,+CAA+C,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;QACxH,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,OAAO,CAAI,EAAoB,EAAE,UAA+B,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,KAAkB,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;gBAAE,MAAM,KAAK,CAAC;YACrD,OAAO,EAAE,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,UAAgC;QACrD,MAAM,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,SAAS,CAAC;gBAClB,OAAO,EAAE,eAAe,UAAU,CAAC,KAAK,kEAAkE;gBAC1G,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["/**\n * First-access bootstrap: one batched `ensure` of every declared collection.\n *\n * - ensure only creates or widens; storage never narrows from here, so old\n *   and new code may cold-start in any order.\n * - The result is memoized per client, i.e. per server process; a client\n *   built from edited declarations ensures again.\n *   Failures are not memoized: a later call retries (an imported App may\n *   answer \"hosted App is not ready\").\n * - Seed documents are inserted only for collections ensure reports as\n *   `created`: fixed `_id`s, atomic chunks of 200 with a stable idempotency\n *   key per chunk, so a failed chunk (outcome unknown, or marked safe to\n *   resend) is replayed after a short wait instead of duplicated. Seed writes\n *   never carry a data subject.\n * - Preview throws on SCHEMA_CONFLICT and warnings so the worker sees them;\n *   a deployment logs them and keeps serving with the IDs it has.\n * - Self-healing: a Preview reset hard-deletes collections, and a worker or\n *   admin may archive one, while this process still holds the old IDs. A\n *   record call that fails with `data.reason` COLLECTION_NOT_FOUND or\n *   COLLECTION_NOT_GRANTED drops the memo, ensures again (seeding what is created)\n *   and retries the call once, but only when a collection ID actually\n *   changed. Rebuilds are limited to one per REBUILD_INTERVAL_MS per client;\n *   APP_GRANT_REVOKED is never retried (ensure itself reports it).\n * - `ignored` notes never fail a request. ensure never writes annotations, so\n *   an edited `.describe()` or collection description comes back as\n *   ANNOTATION_NOT_APPLIED; it is logged as a warning pointing at\n *   schema:replace, which is the only way to change stored annotations.\n */\nimport { createHash } from 'node:crypto';\nimport type { DataCall } from './call.js';\nimport { MAX_ATOMIC_ITEMS } from './collection.js';\nimport type { CollectionDefinition } from './define.js';\nimport { ACCESS_REASONS, DataError } from './error.js';\nimport { compileCollection, validateDocument, type CompiledCollection } from './schema.js';\n\nexport type DataEnvironment = 'preview' | 'deployed';\n\nexport interface EnsureWarning {\n  code: string;\n  path?: string;\n  message?: string;\n}\n\nexport interface EnsureNote {\n  path: string;\n  reason?: string;\n  message?: string;\n}\n\nexport interface EnsureResult {\n  alias: string;\n  collectionId: string;\n  revision: number;\n  status: 'created' | 'unchanged' | 'widened';\n  ignored?: EnsureNote[];\n  warnings?: EnsureWarning[];\n  indexStatus?: unknown[];\n}\n\nexport interface EnsureConflict {\n  alias: string;\n  collectionId?: string;\n  path?: string;\n  reason?: string;\n  current?: string;\n  declared?: string;\n}\n\nexport interface EnsureState {\n  appId?: string;\n  results: EnsureResult[];\n  /** Lower-cased alias → collection ID. */\n  collectionIds: Map<string, string>;\n  /** Declarations that conflicted in a deployment (served with their existing ID, if any). */\n  conflicts: EnsureConflict[];\n}\n\nexport interface Logger {\n  info(...args: unknown[]): void;\n  warn(...args: unknown[]): void;\n  error(...args: unknown[]): void;\n}\n\nexport interface BootstrapConfig {\n  call: DataCall;\n  collections: readonly CollectionDefinition[];\n  environment: DataEnvironment;\n  logger: Logger;\n}\n\nconst SEED_ATTEMPTS = 3;\n/** Wait before replaying seed chunk attempt n+1: n × this. */\nexport const SEED_RETRY_MS = 1_000;\n\n/** At most one self-healing rebuild per client in this window. */\nexport const REBUILD_INTERVAL_MS = 30_000;\n\n/**\n * Whether a record call failed because the collection ID it used is gone or\n * no longer granted, by UNS's stable `data.reason` code. Archive and Preview\n * purge also remove the App grant, so most stale IDs answer\n * COLLECTION_NOT_GRANTED or COLLECTION_NOT_FOUND. APP_PERMISSION_MISSING (the\n * key lacks e.g. `uns.delete`) and APP_GRANT_REVOKED are not stale IDs.\n */\nexport function isStaleCollectionError(error: unknown): boolean {\n  return (\n    error instanceof DataError &&\n    (error.reason === ACCESS_REASONS.notGranted || error.reason === ACCESS_REASONS.notFound)\n  );\n}\n\nfunction sameCollectionIds(a: EnsureState, b: EnsureState): boolean {\n  if (a.collectionIds.size !== b.collectionIds.size) return false;\n  for (const [alias, id] of a.collectionIds) {\n    if (b.collectionIds.get(alias) !== id) return false;\n  }\n  return true;\n}\n\n/** Idempotency key of one seed chunk (UNS keys are at most 96 characters). */\nfunction seedChunkKey(collectionId: string, chunk: number): string {\n  return `seed-${createHash('sha256').update(collectionId).digest('hex').slice(0, 40)}-${chunk}`;\n}\n\n/** What to do about each SCHEMA_CONFLICT reason (CloudAppCollectionConflict.reason). */\nconst CONFLICT_HINTS: Record<string, string> = {\n  TYPE_CONFLICT: \"a field's type cannot change; use a new field name and backfill with updateMany\",\n  LIMIT_EXCEEDED: 'the joined schema exceeds a UNS limit (depth, properties, enum values or indexes); split the structure',\n  OPEN_OBJECT: 'every object must be closed; declare it with z.object',\n  ALIAS_IN_USE: 'the alias belongs to another collection; pick another alias',\n  NAME_IN_USE: 'the name belongs to another collection; pick another alias',\n  INVALID_INDEX: 'fix the index declaration',\n  JOIN_UNSUPPORTED:\n    'the stored schema holds a node the declaration cannot widen (e.g. enum values outside its range); repair it with schema:replace via the tier0 MCP',\n  DATA_RULE_FIELD:\n    'an employee data rule (ownerField / stateField) uses this field; keep it required with the same type, or ask a workspace admin to change the rule',\n};\n\nfunction describeConflicts(conflicts: EnsureConflict[]): string {\n  return conflicts\n    .map((conflict) => {\n      const where = `${conflict.alias}${conflict.path ? `.${conflict.path}` : ''}`;\n      const types = conflict.current || conflict.declared ? ` (stored ${conflict.current ?? '?'}, declared ${conflict.declared ?? '?'})` : '';\n      const hint = conflict.reason && CONFLICT_HINTS[conflict.reason] ? ` — ${CONFLICT_HINTS[conflict.reason]}` : '';\n      return `  - ${where}: ${conflict.reason ?? 'conflict'}${types}${hint}`;\n    })\n    .join('\\n');\n}\n\nfunction notePath(alias: string, note: EnsureNote): string {\n  return note.path ? `${alias}.${note.path}` : alias;\n}\n\nfunction describeWarnings(results: EnsureResult[]): string {\n  return results\n    .flatMap((result) =>\n      (result.warnings ?? []).map(\n        (warning) => `  - ${result.alias}${warning.path ? `.${warning.path}` : ''}: ${warning.code}${warning.message ? ` — ${warning.message}` : ''}`,\n      ),\n    )\n    .join('\\n');\n}\n\nexport function createBootstrap(config: BootstrapConfig) {\n  const { call, collections, environment, logger } = config;\n  let pending: Promise<EnsureState> | null = null;\n  let lastRebuild = Number.NEGATIVE_INFINITY;\n\n  async function requestEnsure(items: CompiledCollection[]) {\n    // ensure is App-level work: it never carries the employee data subject.\n    return call<{ appId?: string; results: EnsureResult[] }>('appCollectionsEnsure', { collections: items });\n  }\n\n  async function insertSeedChunk(collectionId: string, chunk: number, documents: { id?: string; data: Record<string, unknown> }[]) {\n    for (let attempt = 1; ; attempt += 1) {\n      try {\n        await call('recordInsertMany', {\n          collectionId,\n          documents,\n          ordered: true,\n          atomic: true,\n          idempotencyKey: seedChunkKey(collectionId, chunk),\n        });\n        return;\n      } catch (error) {\n        // The chunk key is stable, so replaying is safe even when the outcome is unknown: a chunk\n        // that did commit replays its receipt. Wait first, so a write still running can finish.\n        if (!(error instanceof DataError) || !(error.outcomeUnknown || error.retry.safe) || attempt >= SEED_ATTEMPTS) throw error;\n        await new Promise((resolve) => setTimeout(resolve, SEED_RETRY_MS * attempt));\n      }\n    }\n  }\n\n  async function writeSeeds(results: EnsureResult[]) {\n    for (const result of results) {\n      if (result.status !== 'created') continue;\n      const definition = collections.find((candidate) => candidate.alias.toLowerCase() === result.alias.toLowerCase());\n      const seed = definition?.seed;\n      if (!definition || !seed || seed.length === 0) continue;\n      try {\n        const documents = seed.map((document) => {\n          const { id, data } = validateDocument(definition, document as Record<string, unknown>);\n          return { id, data };\n        });\n        for (let start = 0; start < documents.length; start += MAX_ATOMIC_ITEMS) {\n          await insertSeedChunk(result.collectionId, start / MAX_ATOMIC_ITEMS, documents.slice(start, start + MAX_ATOMIC_ITEMS));\n        }\n        logger.info(`[data] seeded ${documents.length} record(s) into \"${result.alias}\"`);\n      } catch (error) {\n        // The collection exists now; a later ensure reports \"unchanged\" and\n        // never re-seeds, so the failure must be visible in the server log.\n        logger.error(`[data] seed for new collection \"${result.alias}\" failed; it keeps the chunks written so far:`, error);\n      }\n    }\n  }\n\n  async function run(payload: CompiledCollection[]): Promise<EnsureState> {\n    const conflicts: EnsureConflict[] = [];\n    let remaining = payload;\n    let response: { appId?: string; results: EnsureResult[] } = { results: [] };\n    while (remaining.length > 0) {\n      try {\n        response = await requestEnsure(remaining);\n        break;\n      } catch (error) {\n        if (!(error instanceof DataError) || error.code !== 'SCHEMA_CONFLICT') throw error;\n        const reported = Array.isArray(error.details.conflicts) ? (error.details.conflicts as EnsureConflict[]) : [];\n        const summary = describeConflicts(reported);\n        if (environment === 'preview') {\n          throw new DataError({\n            message:\n              `The collection declarations conflict with the stored collection schemas; nothing was changed:\\n${summary}`,\n            status: 409,\n            code: 'SCHEMA_CONFLICT',\n            upstreamStatus: error.upstreamStatus,\n            requestId: error.requestId,\n            execution: error.execution,\n            attempts: error.attempts,\n            details: error.details,\n          });\n        }\n        // A deployment keeps serving: drop the conflicting declarations (the\n        // whole batch was rejected) and ensure the rest again.\n        const conflicting = new Set(reported.map((conflict) => conflict.alias.toLowerCase()));\n        const next = remaining.filter((item) => !conflicting.has(item.alias.toLowerCase()));\n        if (next.length === remaining.length) throw error;\n        logger.error(`[data] ensure: declarations conflict with stored schemas; serving them unchanged:\\n${summary}`);\n        conflicts.push(...reported);\n        remaining = next;\n      }\n    }\n\n    const results = response.results ?? [];\n    const collectionIds = new Map<string, string>();\n    for (const conflict of conflicts) {\n      if (conflict.collectionId) collectionIds.set(conflict.alias.toLowerCase(), conflict.collectionId);\n    }\n    for (const result of results) {\n      collectionIds.set(result.alias.toLowerCase(), result.collectionId);\n      const notes = result.ignored ?? [];\n      const annotations = notes.filter((note) => note.reason === 'ANNOTATION_NOT_APPLIED');\n      const wider = notes.filter((note) => note.reason !== 'ANNOTATION_NOT_APPLIED');\n      if (wider.length > 0) {\n        logger.info(\n          `[data] \"${result.alias}\" storage is wider than this declaration (or has retired parts); ignored: ` +\n            wider.map((note) => `${note.path || '(root)'} ${note.reason ?? ''}`.trim()).join(', '),\n        );\n      }\n      if (annotations.length > 0) {\n        // A hint, not an error: storage keeps its annotations and serves as before.\n        logger.warn(\n          `[data] ensure does not change stored titles/descriptions; not applied: ${annotations.map((note) => notePath(result.alias, note)).join(', ')}. ` +\n            `Apply them with schema:replace via the tier0 MCP, using compileCollection(...) of the declaration as the body.`,\n        );\n      }\n    }\n\n    await writeSeeds(results);\n\n    const warnings = describeWarnings(results);\n    if (warnings) {\n      if (environment === 'preview') {\n        throw new DataError({\n          message:\n            `Collections were ensured with warnings:\\n${warnings}\\n` +\n            'REQUIRED_NOT_ENFORCED: make the field optional again or narrow explicitly with schema:replace via the tier0 MCP. ' +\n            'INDEX_BUILD_FAILED: fix the duplicate or invalid data, then the next ensure retries the index.',\n          status: 500,\n          code: 'SCHEMA_WARNINGS',\n          // ensure did apply; only the warnings fail the Preview request.\n          execution: 'committed',\n          details: { results },\n        });\n      }\n      logger.warn(`[data] ensure warnings:\\n${warnings}`);\n    }\n\n    return { appId: response.appId, results, collectionIds, conflicts };\n  }\n\n  /** Ensures every declaration once per client; a failure is forgotten so the next call retries. */\n  function ensure(): Promise<EnsureState> {\n    pending ??= Promise.resolve()\n      .then(() => run(collections.map(compileCollection)))\n      .catch((error) => {\n        pending = null;\n        throw error;\n      });\n    return pending;\n  }\n\n  /**\n   * Re-ensures after `before` turned out stale. Joins a rebuild already in\n   * flight; otherwise rebuilds at most once per REBUILD_INTERVAL_MS. Resolves\n   * whether any collection ID changed; ensure errors (APP_GRANT_REVOKED, …)\n   * propagate.\n   */\n  async function rebuild(before: EnsureState, cause: DataError): Promise<boolean> {\n    const current = ensure();\n    const latest = await current;\n    if (latest !== before) return !sameCollectionIds(before, latest);\n    if (pending !== current) return !sameCollectionIds(before, await ensure());\n    const now = Date.now();\n    if (now - lastRebuild < REBUILD_INTERVAL_MS) return false;\n    lastRebuild = now;\n    logger.warn(`[data] a collection ID is no longer usable (${cause.code}: ${cause.message}); ensuring collections again`);\n    pending = null;\n    return !sameCollectionIds(before, await ensure());\n  }\n\n  /**\n   * Runs one data call; when it fails on a stale collection ID, rebuilds and\n   * runs it once more if an ID changed. `retry: false` (calls continuing a\n   * cursor or resumeAfter token of the old collection) only rebuilds.\n   */\n  async function recover<R>(fn: () => Promise<R>, options: { retry?: boolean } = {}): Promise<R> {\n    const before = await ensure();\n    try {\n      return await fn();\n    } catch (error) {\n      if (!isStaleCollectionError(error)) throw error;\n      const changed = await rebuild(before, error as DataError);\n      if (!changed || options.retry === false) throw error;\n      return fn();\n    }\n  }\n\n  async function resolve(definition: CollectionDefinition): Promise<string> {\n    const state = await ensure();\n    const id = state.collectionIds.get(definition.alias.toLowerCase());\n    if (!id) {\n      throw new DataError({\n        message: `Collection \"${definition.alias}\" is unavailable: ensure did not return it (see the server log).`,\n        status: 503,\n        code: 'COLLECTION_UNAVAILABLE',\n      });\n    }\n    return id;\n  }\n\n  return { ensure, resolve, recover, rebuild };\n}\n"]}

package/dist/esm/data/call.d.ts

@@ -0,0 +1,33 @@
+import { type ClientConfig } from '../openapi/client.js';
+import { UnsV2Error, type UnsV2RecordSubscribeRequest, type UnsV2SubscriptionEvent } from '../uns-v2/client.js';
+import { type UnsV2OperationName } from '../uns-v2/generated.js';
+/** Whole call, from its start. The gateway gives UNS at most 20 s, so a data call ends within 25 s. */
+export declare const DEFAULT_DATA_TIMEOUT_MS = 25000;
+/** Data requests in flight per process, across every data client. */
+export declare const MAX_CONCURRENT_CALLS = 6;
+/** Resends of one call after its first attempt. */
+export declare const MAX_RETRIES = 2;
+/** A retry waits at most this long; a longer `retry.afterMs` surfaces the error instead. */
+export declare const MAX_RETRY_WAIT_MS = 5000;
+export interface CallOptions {
+    /** Employee assertion forwarded from the current business request. */
+    dataSubject?: string;
+    /** Abort of the current business request: a queued call leaves the queue, an in-flight one is cancelled. */
+    signal?: AbortSignal;
+}
+/** Sends one operation and resolves with the envelope's `data`. */
+export type DataCall = <T>(operation: UnsV2OperationName, request: Record<string, unknown>, options?: CallOptions) => Promise<T>;
+/**
+ * Opens one `records:subscribe` stream (outside the concurrency gate: it is
+ * long-lived and holds no UNS connection while it waits). Failures are DataErrors.
+ */
+export type DataOpenStream = (request: UnsV2RecordSubscribeRequest, options: CallOptions & {
+    lastEventId?: string;
+    signal: AbortSignal;
+}) => AsyncGenerator<UnsV2SubscriptionEvent>;
+/** Wait before resend `attempt` (1-based), or undefined when the error must surface. */
+export declare function retryDelay(error: UnsV2Error, attempt: number): number | undefined;
+export declare function createDataTransport(config: ClientConfig): {
+    call: DataCall;
+    openStream: DataOpenStream;
+};

package/dist/esm/data/call.js

@@ -0,0 +1,211 @@
+/**
+ * One UNS call of the data layer. The SDK's UNS client resolves host and key,
+ * sends the request and checks the envelope; this adds the App runtime policy
+ * around it and turns every failure into a `DataError`:
+ *
+ * - binds the employee data subject and the abort signal of the current call;
+ * - gives every write that takes an idempotency key a fresh UUID unless the
+ *   caller set one, and keeps it for the retries of that call;
+ * - sends at most MAX_CONCURRENT_CALLS requests per process at a time; the
+ *   rest wait in line;
+ * - resends a failed request (same body, same key) at most MAX_RETRIES times,
+ *   only when its `retry.safe` says so, after `retry.afterMs` or a jittered
+ *   exponential backoff. UNS sets `retry.safe` (429 overload, 503 temporary
+ *   failure, a rolled-back write …); for failures without a UNS answer the
+ *   client sets it for reads only (timeout, network, ingress 502/503/504), so
+ *   a write whose outcome is unknown is never resent here;
+ * - bounds the whole call, queueing, attempts and waits included, by one
+ *   deadline from its start. A call that runs out of time or is aborted
+ *   while it waits in line leaves the queue and is never sent
+ *   (`DATA_OVERLOADED` / `DATA_ABORTED`, `execution: notStarted`).
+ *
+ * `openStream` opens one `records:subscribe` event stream for `data.subscribe`,
+ * which owns reconnects.
+ */
+import { randomUUID } from 'node:crypto';
+import { HttpClient } from '../openapi/client.js';
+import { UnsV2ClientCore, UnsV2Error, } from '../uns-v2/client.js';
+import { UNS_V2_OPERATIONS } from '../uns-v2/generated.js';
+import { DataError, toDataError } from './error.js';
+/** Whole call, from its start. The gateway gives UNS at most 20 s, so a data call ends within 25 s. */
+export const DEFAULT_DATA_TIMEOUT_MS = 25_000;
+/** Data requests in flight per process, across every data client. */
+export const MAX_CONCURRENT_CALLS = 6;
+/** Resends of one call after its first attempt. */
+export const MAX_RETRIES = 2;
+/** A retry waits at most this long; a longer `retry.afterMs` surfaces the error instead. */
+export const MAX_RETRY_WAIT_MS = 5_000;
+const BACKOFF_BASE_MS = 250;
+/** Why a waiter left the queue without a slot. */
+class Abandoned extends Error {
+}
+/** FIFO counting semaphore whose waiters can leave the line. */
+class Gate {
+    limit;
+    active = 0;
+    waiting = [];
+    constructor(limit) {
+        this.limit = limit;
+    }
+    /** Runs `fn` with a slot; rejects with Abandoned if `signal` aborts while still waiting. */
+    async run(fn, signal) {
+        if (this.active < this.limit) {
+            this.active += 1;
+        }
+        else {
+            await new Promise((resolve, reject) => {
+                const waiter = {
+                    grant: () => {
+                        signal.removeEventListener('abort', leave);
+                        resolve();
+                    },
+                };
+                const leave = () => {
+                    const index = this.waiting.indexOf(waiter);
+                    if (index >= 0)
+                        this.waiting.splice(index, 1);
+                    reject(new Abandoned());
+                };
+                if (signal.aborted)
+                    return leave();
+                signal.addEventListener('abort', leave, { once: true });
+                this.waiting.push(waiter);
+            });
+        }
+        try {
+            return await fn();
+        }
+        finally {
+            // Hand the slot straight to the next waiter, so the count never dips below the queue.
+            const next = this.waiting.shift();
+            if (next)
+                next.grant();
+            else
+                this.active -= 1;
+        }
+    }
+}
+// One gate per process, shared across data clients and dev-server module reloads.
+const GATE_KEY = Symbol.for('tier0.sdk-v2.data.call-gate/2');
+const globalGate = globalThis;
+const gate = (globalGate[GATE_KEY] ??= new Gate(MAX_CONCURRENT_CALLS));
+/** Wait before resend `attempt` (1-based), or undefined when the error must surface. */
+export function retryDelay(error, attempt) {
+    if (!error.retry.safe || attempt > MAX_RETRIES)
+        return undefined;
+    if (error.retry.afterMs !== undefined)
+        return error.retry.afterMs <= MAX_RETRY_WAIT_MS ? error.retry.afterMs : undefined;
+    const ceiling = Math.min(MAX_RETRY_WAIT_MS, BACKOFF_BASE_MS * 2 ** (attempt - 1));
+    return ceiling / 2 + Math.random() * (ceiling / 2);
+}
+/** Resolves after `ms`, or early (false) when `signal` aborts. */
+function pause(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal.aborted)
+            return resolve(false);
+        const done = () => {
+            clearTimeout(timer);
+            signal.removeEventListener('abort', done);
+            resolve(!signal.aborted);
+        };
+        const timer = setTimeout(done, ms);
+        signal.addEventListener('abort', done, { once: true });
+    });
+}
+export function createDataTransport(config) {
+    const http = new HttpClient(config);
+    const resolve = () => http;
+    const timeoutMs = config.transportTimeoutMs ?? DEFAULT_DATA_TIMEOUT_MS;
+    const transport = { transportTimeoutMs: timeoutMs };
+    const app = new UnsV2ClientCore(resolve, transport);
+    function assertConfigured() {
+        let problem;
+        try {
+            http.getBaseURL();
+            if (!http.getApiKey()?.trim())
+                problem = 'TIER0_API_KEY is not set';
+        }
+        catch (error) {
+            problem = error instanceof Error ? error.message : String(error);
+        }
+        if (problem) {
+            throw new DataError({
+                message: `${problem}. The platform injects TIER0_API_HOST and TIER0_API_KEY in Preview and deployments; for local development set them before starting the App.`,
+                status: 503,
+                code: 'DATA_NOT_CONFIGURED',
+            });
+        }
+    }
+    // The SDK binds a data subject to one client; App-level calls use the shared one without it.
+    const coreFor = (dataSubject) => dataSubject ? new UnsV2ClientCore(resolve, { ...transport, unsV2AppDataSubject: dataSubject }) : app;
+    async function call(operation, request, options = {}) {
+        assertConfigured();
+        const key = UNS_V2_OPERATIONS[operation].idempotencyKey
+            ? (typeof request.idempotencyKey === 'string' ? request.idempotencyKey : randomUUID())
+            : undefined;
+        const body = key === undefined || request.idempotencyKey !== undefined ? request : { ...request, idempotencyKey: key };
+        const deadline = Date.now() + timeoutMs;
+        // Aborts when the call runs out of time or its business request is aborted.
+        const stop = new AbortController();
+        const expire = setTimeout(() => stop.abort(), timeoutMs);
+        const relay = () => stop.abort();
+        options.signal?.addEventListener('abort', relay, { once: true });
+        if (options.signal?.aborted)
+            stop.abort();
+        const notSent = (attempts) => new DataError({
+            ...(options.signal?.aborted
+                ? { message: `The data call ${operation} was aborted before it was sent.`, status: 499, code: 'DATA_ABORTED' }
+                : {
+                    message: `The data call ${operation} waited ${timeoutMs} ms for one of the ${MAX_CONCURRENT_CALLS} request slots of this process and was not sent.`,
+                    status: 503,
+                    code: 'DATA_OVERLOADED',
+                }),
+            execution: 'notStarted',
+            retry: { safe: !options.signal?.aborted },
+            attempts,
+            idempotencyKey: key,
+        });
+        try {
+            for (let attempt = 1;; attempt += 1) {
+                try {
+                    const response = await gate.run(() => {
+                        // Each attempt gets the time left of the call as its transport deadline.
+                        const remaining = Math.max(1, deadline - Date.now());
+                        const core = new UnsV2ClientCore(resolve, {
+                            transportTimeoutMs: remaining,
+                            ...(options.dataSubject ? { unsV2AppDataSubject: options.dataSubject } : {}),
+                        });
+                        // In flight, only the business request's abort cancels; the transport deadline covers the time.
+                        return core.call(operation, body, { signal: options.signal });
+                    }, stop.signal);
+                    return response.data;
+                }
+                catch (error) {
+                    if (error instanceof Abandoned)
+                        throw notSent(attempt - 1);
+                    if (!(error instanceof UnsV2Error))
+                        throw error;
+                    const delay = retryDelay(error, attempt);
+                    if (delay === undefined || Date.now() + delay >= deadline || !(await pause(delay, stop.signal))) {
+                        throw toDataError(error, attempt, key);
+                    }
+                }
+            }
+        }
+        finally {
+            clearTimeout(expire);
+            options.signal?.removeEventListener('abort', relay);
+        }
+    }
+    async function* openStream(request, options) {
+        assertConfigured();
+        try {
+            yield* coreFor(options.dataSubject).subscribeRecords(request, options);
+        }
+        catch (error) {
+            throw error instanceof UnsV2Error ? toDataError(error) : error;
+        }
+    }
+    return { call, openStream };
+}
+//# sourceMappingURL=call.js.map

package/dist/esm/data/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../../../src/data/call.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAqB,MAAM,sBAAsB,CAAC;AACrE,OAAO,EACL,eAAe,EACf,UAAU,GAGX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAA8C,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEpD,uGAAuG;AACvG,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,mDAAmD;AACnD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,4FAA4F;AAC5F,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC,MAAM,eAAe,GAAG,GAAG,CAAC;AAqB5B,kDAAkD;AAClD,MAAM,SAAU,SAAQ,KAAK;CAAG;AAEhC,gEAAgE;AAChE,MAAM,IAAI;IAIqB;IAHrB,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAA4B,EAAE,CAAC;IAEvD,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE9C,4FAA4F;IAC5F,KAAK,CAAC,GAAG,CAAI,EAAoB,EAAE,MAAmB;QACpD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,MAAM,GAAG;oBACb,KAAK,EAAE,GAAG,EAAE;wBACV,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAC3C,OAAO,EAAE,CAAC;oBACZ,CAAC;iBACF,CAAC;gBACF,MAAM,KAAK,GAAG,GAAG,EAAE;oBACjB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,KAAK,IAAI,CAAC;wBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9C,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;gBAC1B,CAAC,CAAC;gBACF,IAAI,MAAM,CAAC,OAAO;oBAAE,OAAO,KAAK,EAAE,CAAC;gBACnC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,sFAAsF;YACtF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;;gBAClB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,UAAuD,CAAC;AAC3E,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAEvE,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,OAAe;IAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,GAAG,WAAW;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,eAAe,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,kEAAkE;AAClE,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;IAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IACvE,MAAM,SAAS,GAAG,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEpD,SAAS,gBAAgB;QACvB,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE;gBAAE,OAAO,GAAG,0BAA0B,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC;gBAClB,OAAO,EAAE,GAAG,OAAO,6IAA6I;gBAChK,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,qBAAqB;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,MAAM,OAAO,GAAG,CAAC,WAA+B,EAAE,EAAE,CAClD,WAAW,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAEvG,KAAK,UAAU,IAAI,CAAI,SAA6B,EAAE,OAAgC,EAAE,UAAuB,EAAE;QAC/G,gBAAgB,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,cAAc;YACrD,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;YACtF,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QACvH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,4EAA4E;QAC5E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO;gBACzB,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,SAAS,kCAAkC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;gBAC9G,CAAC,CAAC;oBACA,OAAO,EAAE,iBAAiB,SAAS,WAAW,SAAS,sBAAsB,oBAAoB,kDAAkD;oBACnJ,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,iBAAiB;iBACxB,CAAC;YACJ,SAAS,EAAE,YAAY;YACvB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YACzC,QAAQ;YACR,cAAc,EAAE,GAAG;SACpB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;wBACnC,yEAAyE;wBACzE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;wBACrD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE;4BACxC,kBAAkB,EAAE,SAAS;4BAC7B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC7E,CAAC,CAAC;wBACH,gGAAgG;wBAChG,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAsC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAClG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBAChB,OAAO,QAAQ,CAAC,IAAS,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,SAAS;wBAAE,MAAM,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC3D,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACzC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;wBAChG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,SAAS,CAAC,CAAC,UAAU,CACxB,OAAoC,EACpC,OAAoE;QAEpE,gBAAgB,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC","sourcesContent":["/**\n * One UNS call of the data layer. The SDK's UNS client resolves host and key,\n * sends the request and checks the envelope; this adds the App runtime policy\n * around it and turns every failure into a `DataError`:\n *\n * - binds the employee data subject and the abort signal of the current call;\n * - gives every write that takes an idempotency key a fresh UUID unless the\n *   caller set one, and keeps it for the retries of that call;\n * - sends at most MAX_CONCURRENT_CALLS requests per process at a time; the\n *   rest wait in line;\n * - resends a failed request (same body, same key) at most MAX_RETRIES times,\n *   only when its `retry.safe` says so, after `retry.afterMs` or a jittered\n *   exponential backoff. UNS sets `retry.safe` (429 overload, 503 temporary\n *   failure, a rolled-back write …); for failures without a UNS answer the\n *   client sets it for reads only (timeout, network, ingress 502/503/504), so\n *   a write whose outcome is unknown is never resent here;\n * - bounds the whole call, queueing, attempts and waits included, by one\n *   deadline from its start. A call that runs out of time or is aborted\n *   while it waits in line leaves the queue and is never sent\n *   (`DATA_OVERLOADED` / `DATA_ABORTED`, `execution: notStarted`).\n *\n * `openStream` opens one `records:subscribe` event stream for `data.subscribe`,\n * which owns reconnects.\n */\nimport { randomUUID } from 'node:crypto';\nimport { HttpClient, type ClientConfig } from '../openapi/client.js';\nimport {\n  UnsV2ClientCore,\n  UnsV2Error,\n  type UnsV2RecordSubscribeRequest,\n  type UnsV2SubscriptionEvent,\n} from '../uns-v2/client.js';\nimport { UNS_V2_OPERATIONS, type UnsV2OperationName, type UnsV2Request } from '../uns-v2/generated.js';\nimport { DataError, toDataError } from './error.js';\n\n/** Whole call, from its start. The gateway gives UNS at most 20 s, so a data call ends within 25 s. */\nexport const DEFAULT_DATA_TIMEOUT_MS = 25_000;\n/** Data requests in flight per process, across every data client. */\nexport const MAX_CONCURRENT_CALLS = 6;\n/** Resends of one call after its first attempt. */\nexport const MAX_RETRIES = 2;\n/** A retry waits at most this long; a longer `retry.afterMs` surfaces the error instead. */\nexport const MAX_RETRY_WAIT_MS = 5_000;\nconst BACKOFF_BASE_MS = 250;\n\nexport interface CallOptions {\n  /** Employee assertion forwarded from the current business request. */\n  dataSubject?: string;\n  /** Abort of the current business request: a queued call leaves the queue, an in-flight one is cancelled. */\n  signal?: AbortSignal;\n}\n\n/** Sends one operation and resolves with the envelope's `data`. */\nexport type DataCall = <T>(operation: UnsV2OperationName, request: Record<string, unknown>, options?: CallOptions) => Promise<T>;\n\n/**\n * Opens one `records:subscribe` stream (outside the concurrency gate: it is\n * long-lived and holds no UNS connection while it waits). Failures are DataErrors.\n */\nexport type DataOpenStream = (\n  request: UnsV2RecordSubscribeRequest,\n  options: CallOptions & { lastEventId?: string; signal: AbortSignal },\n) => AsyncGenerator<UnsV2SubscriptionEvent>;\n\n/** Why a waiter left the queue without a slot. */\nclass Abandoned extends Error {}\n\n/** FIFO counting semaphore whose waiters can leave the line. */\nclass Gate {\n  private active = 0;\n  private readonly waiting: { grant: () => void }[] = [];\n\n  constructor(private readonly limit: number) {}\n\n  /** Runs `fn` with a slot; rejects with Abandoned if `signal` aborts while still waiting. */\n  async run<T>(fn: () => Promise<T>, signal: AbortSignal): Promise<T> {\n    if (this.active < this.limit) {\n      this.active += 1;\n    } else {\n      await new Promise<void>((resolve, reject) => {\n        const waiter = {\n          grant: () => {\n            signal.removeEventListener('abort', leave);\n            resolve();\n          },\n        };\n        const leave = () => {\n          const index = this.waiting.indexOf(waiter);\n          if (index >= 0) this.waiting.splice(index, 1);\n          reject(new Abandoned());\n        };\n        if (signal.aborted) return leave();\n        signal.addEventListener('abort', leave, { once: true });\n        this.waiting.push(waiter);\n      });\n    }\n    try {\n      return await fn();\n    } finally {\n      // Hand the slot straight to the next waiter, so the count never dips below the queue.\n      const next = this.waiting.shift();\n      if (next) next.grant();\n      else this.active -= 1;\n    }\n  }\n}\n\n// One gate per process, shared across data clients and dev-server module reloads.\nconst GATE_KEY = Symbol.for('tier0.sdk-v2.data.call-gate/2');\nconst globalGate = globalThis as typeof globalThis & { [GATE_KEY]?: Gate };\nconst gate = (globalGate[GATE_KEY] ??= new Gate(MAX_CONCURRENT_CALLS));\n\n/** Wait before resend `attempt` (1-based), or undefined when the error must surface. */\nexport function retryDelay(error: UnsV2Error, attempt: number): number | undefined {\n  if (!error.retry.safe || attempt > MAX_RETRIES) return undefined;\n  if (error.retry.afterMs !== undefined) return error.retry.afterMs <= MAX_RETRY_WAIT_MS ? error.retry.afterMs : undefined;\n  const ceiling = Math.min(MAX_RETRY_WAIT_MS, BACKOFF_BASE_MS * 2 ** (attempt - 1));\n  return ceiling / 2 + Math.random() * (ceiling / 2);\n}\n\n/** Resolves after `ms`, or early (false) when `signal` aborts. */\nfunction pause(ms: number, signal: AbortSignal): Promise<boolean> {\n  return new Promise((resolve) => {\n    if (signal.aborted) return resolve(false);\n    const done = () => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', done);\n      resolve(!signal.aborted);\n    };\n    const timer = setTimeout(done, ms);\n    signal.addEventListener('abort', done, { once: true });\n  });\n}\n\nexport function createDataTransport(config: ClientConfig): { call: DataCall; openStream: DataOpenStream } {\n  const http = new HttpClient(config);\n  const resolve = () => http;\n  const timeoutMs = config.transportTimeoutMs ?? DEFAULT_DATA_TIMEOUT_MS;\n  const transport = { transportTimeoutMs: timeoutMs };\n  const app = new UnsV2ClientCore(resolve, transport);\n\n  function assertConfigured() {\n    let problem: string | undefined;\n    try {\n      http.getBaseURL();\n      if (!http.getApiKey()?.trim()) problem = 'TIER0_API_KEY is not set';\n    } catch (error) {\n      problem = error instanceof Error ? error.message : String(error);\n    }\n    if (problem) {\n      throw new DataError({\n        message: `${problem}. The platform injects TIER0_API_HOST and TIER0_API_KEY in Preview and deployments; for local development set them before starting the App.`,\n        status: 503,\n        code: 'DATA_NOT_CONFIGURED',\n      });\n    }\n  }\n\n  // The SDK binds a data subject to one client; App-level calls use the shared one without it.\n  const coreFor = (dataSubject: string | undefined) =>\n    dataSubject ? new UnsV2ClientCore(resolve, { ...transport, unsV2AppDataSubject: dataSubject }) : app;\n\n  async function call<T>(operation: UnsV2OperationName, request: Record<string, unknown>, options: CallOptions = {}): Promise<T> {\n    assertConfigured();\n    const key = UNS_V2_OPERATIONS[operation].idempotencyKey\n      ? (typeof request.idempotencyKey === 'string' ? request.idempotencyKey : randomUUID())\n      : undefined;\n    const body = key === undefined || request.idempotencyKey !== undefined ? request : { ...request, idempotencyKey: key };\n    const deadline = Date.now() + timeoutMs;\n    // Aborts when the call runs out of time or its business request is aborted.\n    const stop = new AbortController();\n    const expire = setTimeout(() => stop.abort(), timeoutMs);\n    const relay = () => stop.abort();\n    options.signal?.addEventListener('abort', relay, { once: true });\n    if (options.signal?.aborted) stop.abort();\n    const notSent = (attempts: number) => new DataError({\n      ...(options.signal?.aborted\n        ? { message: `The data call ${operation} was aborted before it was sent.`, status: 499, code: 'DATA_ABORTED' }\n        : {\n          message: `The data call ${operation} waited ${timeoutMs} ms for one of the ${MAX_CONCURRENT_CALLS} request slots of this process and was not sent.`,\n          status: 503,\n          code: 'DATA_OVERLOADED',\n        }),\n      execution: 'notStarted',\n      retry: { safe: !options.signal?.aborted },\n      attempts,\n      idempotencyKey: key,\n    });\n    try {\n      for (let attempt = 1; ; attempt += 1) {\n        try {\n          const response = await gate.run(() => {\n            // Each attempt gets the time left of the call as its transport deadline.\n            const remaining = Math.max(1, deadline - Date.now());\n            const core = new UnsV2ClientCore(resolve, {\n              transportTimeoutMs: remaining,\n              ...(options.dataSubject ? { unsV2AppDataSubject: options.dataSubject } : {}),\n            });\n            // In flight, only the business request's abort cancels; the transport deadline covers the time.\n            return core.call(operation, body as UnsV2Request<typeof operation>, { signal: options.signal });\n          }, stop.signal);\n          return response.data as T;\n        } catch (error) {\n          if (error instanceof Abandoned) throw notSent(attempt - 1);\n          if (!(error instanceof UnsV2Error)) throw error;\n          const delay = retryDelay(error, attempt);\n          if (delay === undefined || Date.now() + delay >= deadline || !(await pause(delay, stop.signal))) {\n            throw toDataError(error, attempt, key);\n          }\n        }\n      }\n    } finally {\n      clearTimeout(expire);\n      options.signal?.removeEventListener('abort', relay);\n    }\n  }\n\n  async function* openStream(\n    request: UnsV2RecordSubscribeRequest,\n    options: CallOptions & { lastEventId?: string; signal: AbortSignal },\n  ): AsyncGenerator<UnsV2SubscriptionEvent> {\n    assertConfigured();\n    try {\n      yield* coreFor(options.dataSubject).subscribeRecords(request, options);\n    } catch (error) {\n      throw error instanceof UnsV2Error ? toDataError(error) : error;\n    }\n  }\n\n  return { call, openStream };\n}\n"]}

package/dist/esm/data/client.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Data client factory: collection handles, cross-collection transactions and
+ * the shared bootstrap. An App builds one client per process from its
+ * collection declarations; tests build their own with a mock `fetch`.
+ */
+import type { z } from 'zod';
+import type { ClientConfig } from '../openapi/client.js';
+import { type DataEnvironment, type EnsureState, type Logger } from './bootstrap.js';
+import { Collection, type BatchQuery, type WithMeta } from './collection.js';
+import { type CollectionDefinition } from './define.js';
+import { type SubscribeOptions, type SubscriptionEvent } from './subscribe.js';
+import { DataError } from './error.js';
+import { type Filter, type Sort } from './sort.js';
+export type TransactAction = 'record.create' | 'record.check' | 'record.read' | 'record.update' | 'record.modify' | 'record.replace' | 'record.delete' | 'record.query';
+/** One `recordTransactionExecute` item; `collection` is a declaration or alias instead of a collection ID. */
+export interface TransactStep {
+    opId: string;
+    action: TransactAction;
+    collection: CollectionDefinition | string;
+    id?: string | {
+        ref: string;
+    };
+    filter?: Filter;
+    data?: Record<string, unknown>;
+    update?: Record<string, unknown>;
+    upsert?: boolean;
+    expectedRevision?: number;
+    dependsOn?: string[];
+    bindings?: {
+        path: string;
+        ref: string;
+        resultPath: string;
+    }[];
+    selection?: 'exactOne' | 'first';
+    sort?: Sort;
+    returnDocument?: 'before' | 'after';
+    exists?: boolean;
+    operations?: Record<string, unknown>[];
+    conditions?: Filter[];
+    /** `record.query`: rows to bind from; `expectCount` asserts the match count before `limit`. */
+    query?: {
+        filter?: Filter;
+        sort?: Sort;
+        limit?: number;
+        expectCount?: {
+            min?: number;
+            max?: number;
+        };
+    };
+    arrayFilters?: Record<string, unknown>[];
+}
+export interface TransactResultItem {
+    opId: string;
+    action: string;
+    id: string;
+    status: string;
+    collectionId?: string;
+    revision?: number;
+    /** Before/after snapshot when requested, as a flat document. */
+    document?: WithMeta<Record<string, unknown>>;
+    data?: unknown;
+    query?: unknown;
+    error?: unknown;
+}
+export interface TransactResult {
+    status: string;
+    results: TransactResultItem[];
+}
+/** Named reads for `data.queryBatch`: 1–20 entries, names matching `[A-Za-z0-9_.-]{1,64}`. */
+export type BatchQueries = Record<string, BatchQuery<unknown>>;
+export type BatchResults<Q extends BatchQueries> = {
+    [K in keyof Q]: Q[K] extends BatchQuery<infer R> ? R : never;
+};
+export type SettledBatchResults<Q extends BatchQueries> = {
+    [K in keyof Q]: Q[K] extends BatchQuery<infer R> ? {
+        ok: true;
+        value: R;
+    } | {
+        ok: false;
+        error: DataError;
+    } : never;
+};
+/** Contract limit of `records:queryBatch`. */
+export declare const MAX_BATCH_QUERIES = 20;
+/** Credentials as for `createClient`; `transportTimeoutMs` (per attempt) defaults to 25 s here, see DEFAULT_DATA_TIMEOUT_MS. */
+export interface DataClientConfig extends ClientConfig {
+    collections: readonly CollectionDefinition[];
+    /** Defaults to "deployed" when NODE_ENV is production, otherwise "preview". */
+    environment?: DataEnvironment;
+    logger?: Logger;
+}
+export interface DataClient {
+    /** Typed handle for a declaration listed in `collections`. */
+    collection<C extends CollectionDefinition>(definition: C): Collection<z.output<C['schema']>, z.input<C['schema']>>;
+    /** Handle by alias, typed by the caller. */
+    collection<T extends object = Record<string, unknown>>(alias: string): Collection<T>;
+    /**
+     * Atomic multi-record, multi-collection write (`recordTransactionExecute`, sync),
+     * at most 200 steps. Steps can depend on each other (`dependsOn`) and bind
+     * earlier results (`bindings`). This is not a Mongo session: everything is
+     * sent at once.
+     */
+    transact(steps: readonly TransactStep[], options?: {
+        dryRun?: boolean;
+        idempotencyKey?: string;
+    }): Promise<TransactResult>;
+    /**
+     * Committed record changes of declared collections (all by default), as
+     * one async iterable that reconnects and resumes by itself; see
+     * `SubscribeOptions`. Events carry identities only; changes in collections
+     * with employee data rules arrive as collection-level notices unless
+     * `restricted: "record"` is asked for. Open it inside a request to watch as
+     * that employee, or in `runAsApp` for one App-wide stream a server fans out.
+     */
+    subscribe(options?: SubscribeOptions): AsyncIterable<SubscriptionEvent>;
+    /**
+     * Up to 20 reads of declared collections in one request, answered from one
+     * snapshot: what a page shows (a list page with its total, counters, a
+     * lookup by ID) in one round trip. Build each read with
+     * `collection.query.*`; results come back under the same names.
+     *
+     * A read UNS refuses on its own (invalid filter, no grant) rejects the
+     * whole call with its DataError; with `{ settle: true }` every result is
+     * `{ ok, value }` or `{ ok: false, error }` instead. A statement timeout or
+     * a batch over 2000 rows / 8 MiB always fails the whole call.
+     */
+    queryBatch<Q extends BatchQueries>(queries: Q): Promise<BatchResults<Q>>;
+    queryBatch<Q extends BatchQueries>(queries: Q, options: {
+        settle: true;
+    }): Promise<SettledBatchResults<Q>>;
+    /** Ensures every declaration now (normally lazy on first access). */
+    ensure(): Promise<EnsureState>;
+}
+export declare function createDataClient(config: DataClientConfig): DataClient;