@voyantjs/distribution 0.20.0 → 0.21.0

package/dist/channel-push/subscriber.js

@@ -0,0 +1,174 @@
+/**
+ * Channel-push EventBus subscribers.
+ *
+ * The `booking.confirmed` subscriber writes durable intent rows to
+ * `channel_booking_links` and returns immediately — per §4.5 the
+ * subscriber MUST NOT do HTTP work because the EventBus is in-process
+ * and sequential. The intent rows are drained by `processBookingPush`
+ * (called inline in v1, or by the durable workflow in production).
+ *
+ * Per docs/architecture/channel-push-architecture.md §4.1.
+ */
+import { processAvailabilityPushIntents, resolveAllotmentTargetsForSlot, upsertAvailabilityIntent, } from "./availability-push.js";
+import { processBookingPush, resolveBookingPushTargets, upsertPendingBookingLinks, } from "./booking-push.js";
+import { processContentPushIntents, resolveContentPushTargets, upsertContentIntent, } from "./content-push.js";
+import { defaultLogger, getChannelPushDeps, getChannelPushDepsOrThrow, } from "./types.js";
+function coerceBookingConfirmed(envelope) {
+    const data = envelope.data;
+    if (data == null || typeof data !== "object")
+        return null;
+    const maybe = data;
+    if (typeof maybe.bookingId !== "string")
+        return null;
+    return maybe;
+}
+function coerceSlotChanged(envelope) {
+    const data = envelope.data;
+    if (data == null || typeof data !== "object")
+        return null;
+    const maybe = data;
+    if (typeof maybe.slotId !== "string" || typeof maybe.productId !== "string")
+        return null;
+    return maybe;
+}
+function coerceContentChanged(envelope) {
+    const data = envelope.data;
+    if (data == null || typeof data !== "object")
+        return null;
+    const maybe = data;
+    if (typeof maybe.id !== "string")
+        return null;
+    return maybe;
+}
+/**
+ * Construct the channel-push subscriber bundle. Templates pass these to
+ * `registerPlugins({ subscribers })` or attach them to an EventBus
+ * directly via `eventBus.subscribe`.
+ */
+export function createChannelPushSubscribers(options = {}) {
+    const drainInline = options.drainInline ?? true;
+    const handler = async (envelope) => {
+        const payload = coerceBookingConfirmed(envelope);
+        if (!payload)
+            return;
+        const deps = options.deps ?? getChannelPushDeps();
+        if (!deps) {
+            // Templates haven't wired channel-push — silent no-op so the rest
+            // of the booking flow isn't impacted by missing wiring.
+            return;
+        }
+        const logger = deps.logger ?? defaultLogger;
+        try {
+            const targets = await resolveBookingPushTargets(deps.db, payload.bookingId);
+            if (targets.length === 0)
+                return;
+            await upsertPendingBookingLinks(deps.db, payload.bookingId, targets);
+            if (drainInline) {
+                // Inline drain — simple deployments without the workflow runtime
+                // wired (dev templates, demo mode). Production uses the workflow
+                // and skips this branch.
+                await processBookingPush({ bookingId: payload.bookingId }, deps);
+            }
+        }
+        catch (err) {
+            logger.error("[channel-push] booking.confirmed subscriber failed", {
+                bookingId: payload.bookingId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    const slotHandler = async (envelope) => {
+        const payload = coerceSlotChanged(envelope);
+        if (!payload)
+            return;
+        const deps = options.deps ?? getChannelPushDeps();
+        if (!deps)
+            return;
+        const logger = deps.logger ?? defaultLogger;
+        try {
+            const targets = await resolveAllotmentTargetsForSlot(deps.db, {
+                slotId: payload.slotId,
+                productId: payload.productId,
+                optionId: payload.optionId,
+            });
+            if (targets.length === 0)
+                return;
+            const startsAt = payload.startsAt instanceof Date ? payload.startsAt : new Date(payload.startsAt);
+            // One intent per (channel, slot) pair — supersession collapses
+            // concurrent events.
+            for (const target of targets) {
+                await upsertAvailabilityIntent(deps.db, {
+                    channelId: target.channelId,
+                    sourceConnectionId: target.sourceConnectionId,
+                    slotId: payload.slotId,
+                    productId: payload.productId,
+                    optionId: payload.optionId,
+                    startsAt,
+                });
+            }
+            if (drainInline) {
+                // Drain only this channel's intents to keep latency bounded.
+                // (v1 dev behavior; production runs the scheduled workflow.)
+                for (const target of targets) {
+                    await processAvailabilityPushIntents({ channelId: target.channelId, limit: 50 }, deps);
+                }
+            }
+        }
+        catch (err) {
+            logger.error("[channel-push] availability.slot.changed subscriber failed", {
+                slotId: payload.slotId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    const contentHandler = async (envelope) => {
+        const payload = coerceContentChanged(envelope);
+        if (!payload)
+            return;
+        const deps = options.deps ?? getChannelPushDeps();
+        if (!deps)
+            return;
+        const logger = deps.logger ?? defaultLogger;
+        try {
+            const targets = await resolveContentPushTargets(deps.db, payload.id);
+            if (targets.length === 0)
+                return;
+            for (const target of targets) {
+                await upsertContentIntent(deps.db, {
+                    channelId: target.channelId,
+                    sourceConnectionId: target.sourceConnectionId,
+                    productId: payload.id,
+                });
+            }
+            if (drainInline) {
+                for (const target of targets) {
+                    await processContentPushIntents({ channelId: target.channelId, limit: 50 }, deps);
+                }
+            }
+        }
+        catch (err) {
+            logger.error("[channel-push] product.content.changed subscriber failed", {
+                productId: payload.id,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    return [
+        { event: "booking.confirmed", handler },
+        { event: "availability.slot.changed", handler: slotHandler },
+        { event: "product.content.changed", handler: contentHandler },
+    ];
+}
+/**
+ * Trigger the booking-push pipeline for an arbitrary booking id —
+ * useful for the operator dashboard's "retry sync" button and for the
+ * reconciler (Phase G).
+ */
+export async function triggerBookingPushForBooking(bookingId) {
+    const deps = getChannelPushDepsOrThrow();
+    const targets = await resolveBookingPushTargets(deps.db, bookingId);
+    if (targets.length === 0)
+        return;
+    await upsertPendingBookingLinks(deps.db, bookingId, targets);
+    await processBookingPush({ bookingId }, deps);
+}

package/dist/channel-push/types.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Shared types for the channel-push pipeline.
+ *
+ * Per docs/architecture/channel-push-architecture.md §4-§6.
+ */
+import type { SourceAdapterRegistry } from "@voyantjs/catalog/booking-engine";
+import type { AnyDrizzleDb } from "@voyantjs/db";
+/**
+ * Process-local dependencies the channel-push workers and subscribers
+ * need. Templates wire this once at startup via `setChannelPushDeps`;
+ * callers retrieve via `getChannelPushDeps`.
+ *
+ * The runtime indirection lets workflows (which can't take closures in
+ * their durable input) and EventBus subscribers (which run in the
+ * emitter's process) share the same wiring without each consumer
+ * re-resolving services. Per §4.5 — subscribers stay write-only and
+ * delegate HTTP work to the workflow, which reaches into these deps.
+ */
+export interface ChannelPushDeps {
+    db: AnyDrizzleDb;
+    registry: SourceAdapterRegistry;
+    /**
+     * Optional logger. Defaults to a console fallback. Subscribers and
+     * workers log to this when they swallow errors per the EventBus
+     * fire-and-forget contract.
+     */
+    logger?: ChannelPushLogger;
+}
+export interface ChannelPushLogger {
+    info?: (message: string, meta?: Record<string, unknown>) => void;
+    warn?: (message: string, meta?: Record<string, unknown>) => void;
+    error: (message: string, meta?: Record<string, unknown>) => void;
+}
+/** Wire the channel-push pipeline at process start. Idempotent. */
+export declare function setChannelPushDeps(deps: ChannelPushDeps): void;
+/** Retrieve the wired deps, throwing if templates haven't wired them. */
+export declare function getChannelPushDepsOrThrow(): ChannelPushDeps;
+/** Retrieve the wired deps, returning undefined when none are wired. */
+export declare function getChannelPushDeps(): ChannelPushDeps | undefined;
+/** Reset (test helper). */
+export declare function clearChannelPushDeps(): void;
+export declare const defaultLogger: ChannelPushLogger;
+//# sourceMappingURL=types.d.ts.map

package/dist/channel-push/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/channel-push/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,YAAY,CAAA;IAChB,QAAQ,EAAE,qBAAqB,CAAA;IAC/B;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAChE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IAChE,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CACjE;AAUD,mEAAmE;AACnE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAE9D;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,IAAI,eAAe,CAQ3D;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,SAAS,CAEhE;AAED,2BAA2B;AAC3B,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,eAAO,MAAM,aAAa,EAAE,iBAI3B,CAAA"}

package/dist/channel-push/types.js

@@ -0,0 +1,32 @@
+/**
+ * Shared types for the channel-push pipeline.
+ *
+ * Per docs/architecture/channel-push-architecture.md §4-§6.
+ */
+const DEPS_KEY = Symbol.for("voyant.distribution.channel-push.deps");
+const globalRef = globalThis;
+/** Wire the channel-push pipeline at process start. Idempotent. */
+export function setChannelPushDeps(deps) {
+    globalRef[DEPS_KEY] = deps;
+}
+/** Retrieve the wired deps, throwing if templates haven't wired them. */
+export function getChannelPushDepsOrThrow() {
+    const deps = globalRef[DEPS_KEY];
+    if (!deps) {
+        throw new Error("channel-push deps not wired — call setChannelPushDeps({ db, registry }) at process start");
+    }
+    return deps;
+}
+/** Retrieve the wired deps, returning undefined when none are wired. */
+export function getChannelPushDeps() {
+    return globalRef[DEPS_KEY];
+}
+/** Reset (test helper). */
+export function clearChannelPushDeps() {
+    delete globalRef[DEPS_KEY];
+}
+export const defaultLogger = {
+    info: (message, meta) => console.log(`[channel-push] ${message}`, meta ?? ""),
+    warn: (message, meta) => console.warn(`[channel-push] ${message}`, meta ?? ""),
+    error: (message, meta) => console.error(`[channel-push] ${message}`, meta ?? ""),
+};

package/dist/channel-push/workflows.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Durable channel-push workflows.
+ *
+ * Wraps the inline-callable processors (`processBookingPush`,
+ * `processAvailabilityPushIntents`, `processContentPushIntents`) in
+ * `@voyantjs/workflows` definitions so retries, sleeps, and resumption
+ * survive worker restarts. Importing this module registers the
+ * workflows in the global registry — Voyant Cloud orchestrator picks
+ * them up automatically.
+ *
+ * The workflow bodies look up `ChannelPushDeps` from the process-local
+ * holder set via `setChannelPushDeps`. Hosts wire deps at bootstrap;
+ * the orchestrator's Node container reads from the same global since
+ * it runs in the same isolate that loaded the user bundle.
+ *
+ * Dev / single-process deployments (e.g. the operator template's
+ * inline drain) don't need to register these — the subscriber calls the
+ * processors directly. Production deployments with the Voyant Cloud
+ * orchestrator wired import this module to opt into durability.
+ *
+ * Per docs/architecture/channel-push-architecture.md §4.2 + §12.
+ */
+import { type ProcessAvailabilityPushInput, type ProcessAvailabilityPushResult } from "./availability-push.js";
+import { type ProcessBookingPushInput, type ProcessBookingPushResult } from "./booking-push.js";
+import { type ProcessContentPushInput, type ProcessContentPushResult } from "./content-push.js";
+/**
+ * Per-booking saga workflow with compensation support.
+ *
+ * Concurrency is keyed by `bookingId` so two confirms of the same
+ * booking serialize (which can't actually happen given the booking
+ * state machine, but the perKey lock is cheap insurance). Retries on
+ * exponential backoff up to 5 attempts; the per-link compensation pass
+ * inside `processBookingPush` handles strict-atomic policy when
+ * `channel_contracts.policy.compensation = "strict-atomic"`.
+ *
+ * Per §4.2 + §12.1.
+ */
+export declare const channelBookingPushWorkflow: import("@voyantjs/workflows").WorkflowDefinition<ProcessBookingPushInput, ProcessBookingPushResult>;
+/**
+ * Scheduled batch worker for availability push. Runs every 30 seconds
+ * (tunable per channel via policy in a future iteration); each tick
+ * drains up to 100 pending intents, capped at one concurrent run per
+ * channel. Idempotency is upstream-side via `(slot_id, remaining_pax)`.
+ *
+ * Per §5.3 + §12.2.
+ */
+export declare const channelAvailabilityPushWorkflow: import("@voyantjs/workflows").WorkflowDefinition<ProcessAvailabilityPushInput, ProcessAvailabilityPushResult>;
+/**
+ * Scheduled batch worker for content push. Longer cadence (5m) since
+ * content drift is rarely time-critical; idempotency via the upstream's
+ * acknowledged-hash skip in `processContentPushIntents`.
+ *
+ * Per §6 + §12.3.
+ */
+export declare const channelContentPushWorkflow: import("@voyantjs/workflows").WorkflowDefinition<ProcessContentPushInput, ProcessContentPushResult>;
+//# sourceMappingURL=workflows.d.ts.map

package/dist/channel-push/workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/channel-push/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,EAEL,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAEnC,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE9B,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAE9B,MAAM,mBAAmB,CAAA;AAE1B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,qGAiBrC,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,+GAkB1C,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,qGAkBrC,CAAA"}

package/dist/channel-push/workflows.js

@@ -0,0 +1,100 @@
+/**
+ * Durable channel-push workflows.
+ *
+ * Wraps the inline-callable processors (`processBookingPush`,
+ * `processAvailabilityPushIntents`, `processContentPushIntents`) in
+ * `@voyantjs/workflows` definitions so retries, sleeps, and resumption
+ * survive worker restarts. Importing this module registers the
+ * workflows in the global registry — Voyant Cloud orchestrator picks
+ * them up automatically.
+ *
+ * The workflow bodies look up `ChannelPushDeps` from the process-local
+ * holder set via `setChannelPushDeps`. Hosts wire deps at bootstrap;
+ * the orchestrator's Node container reads from the same global since
+ * it runs in the same isolate that loaded the user bundle.
+ *
+ * Dev / single-process deployments (e.g. the operator template's
+ * inline drain) don't need to register these — the subscriber calls the
+ * processors directly. Production deployments with the Voyant Cloud
+ * orchestrator wired import this module to opt into durability.
+ *
+ * Per docs/architecture/channel-push-architecture.md §4.2 + §12.
+ */
+import { workflow } from "@voyantjs/workflows";
+import { CHANNEL_AVAILABILITY_PUSH_WORKFLOW_ID, processAvailabilityPushIntents, } from "./availability-push.js";
+import { CHANNEL_BOOKING_PUSH_WORKFLOW_ID, processBookingPush, } from "./booking-push.js";
+import { CHANNEL_CONTENT_PUSH_WORKFLOW_ID, processContentPushIntents, } from "./content-push.js";
+/**
+ * Per-booking saga workflow with compensation support.
+ *
+ * Concurrency is keyed by `bookingId` so two confirms of the same
+ * booking serialize (which can't actually happen given the booking
+ * state machine, but the perKey lock is cheap insurance). Retries on
+ * exponential backoff up to 5 attempts; the per-link compensation pass
+ * inside `processBookingPush` handles strict-atomic policy when
+ * `channel_contracts.policy.compensation = "strict-atomic"`.
+ *
+ * Per §4.2 + §12.1.
+ */
+export const channelBookingPushWorkflow = workflow({
+    id: CHANNEL_BOOKING_PUSH_WORKFLOW_ID,
+    description: "Drain pending channel_booking_links and push to upstream channels",
+    retry: { backoff: "exponential", max: 5, initial: "5s", maxDelay: "5m" },
+    timeout: "1h",
+    concurrency: {
+        key: (input) => input.bookingId,
+        limit: 1,
+        strategy: "queue",
+    },
+    tags: ["channel-push", "booking"],
+    async run(input, ctx) {
+        return await ctx.step("process-booking-push", () => processBookingPush(input));
+    },
+});
+/**
+ * Scheduled batch worker for availability push. Runs every 30 seconds
+ * (tunable per channel via policy in a future iteration); each tick
+ * drains up to 100 pending intents, capped at one concurrent run per
+ * channel. Idempotency is upstream-side via `(slot_id, remaining_pax)`.
+ *
+ * Per §5.3 + §12.2.
+ */
+export const channelAvailabilityPushWorkflow = workflow({
+    id: CHANNEL_AVAILABILITY_PUSH_WORKFLOW_ID,
+    description: "Drain channel_availability_push_intents per channel",
+    schedule: { every: "30s" },
+    retry: { backoff: "exponential", max: 3, initial: "10s" },
+    timeout: "5m",
+    concurrency: {
+        key: (input) => input.channelId ?? "all",
+        limit: 1,
+        strategy: "queue",
+    },
+    tags: ["channel-push", "availability"],
+    async run(input, ctx) {
+        return await ctx.step("process-availability-push", () => processAvailabilityPushIntents(input));
+    },
+});
+/**
+ * Scheduled batch worker for content push. Longer cadence (5m) since
+ * content drift is rarely time-critical; idempotency via the upstream's
+ * acknowledged-hash skip in `processContentPushIntents`.
+ *
+ * Per §6 + §12.3.
+ */
+export const channelContentPushWorkflow = workflow({
+    id: CHANNEL_CONTENT_PUSH_WORKFLOW_ID,
+    description: "Drain channel_content_push_intents per channel",
+    schedule: { every: "5m" },
+    retry: { backoff: "exponential", max: 3, initial: "30s" },
+    timeout: "5m",
+    concurrency: {
+        key: (input) => input.channelId ?? "all",
+        limit: 1,
+        strategy: "queue",
+    },
+    tags: ["channel-push", "content"],
+    async run(input, ctx) {
+        return await ctx.step("process-content-push", () => processContentPushIntents(input));
+    },
+});

package/dist/index.d.ts

@@ -5,8 +5,12 @@ export type { DistributionRoutes } from "./routes.js";
 export declare const distributionModule: Module;
 export declare const distributionHonoModule: HonoModule;
 export { distributionBookingExtension } from "./booking-extension.js";
+export { type AcquireTokenAcquired, type AcquireTokenDenied, type AcquireTokenResult, acquireToken, type ChannelPushPriority, channelScopeKey, DEFAULT_PRIORITY_GATES, drainBucket, type RateLimitConfig, } from "./rate-limit.js";
 export type { Channel, ChannelBookingLink, ChannelCommissionRule, ChannelContactProjection, ChannelContract, ChannelInventoryAllotment, ChannelInventoryAllotmentTarget, ChannelInventoryReleaseExecution, ChannelInventoryReleaseRule, ChannelProductMapping, ChannelReconciliationItem, ChannelReconciliationPolicy, ChannelReconciliationRun, ChannelReleaseSchedule, ChannelRemittanceException, ChannelSettlementApproval, ChannelSettlementItem, ChannelSettlementPolicy, ChannelSettlementRun, ChannelWebhookEvent, NewChannel, NewChannelBookingLink, NewChannelCommissionRule, NewChannelContactProjection, NewChannelContract, NewChannelInventoryAllotment, NewChannelInventoryAllotmentTarget, NewChannelInventoryReleaseExecution, NewChannelInventoryReleaseRule, NewChannelProductMapping, NewChannelReconciliationItem, NewChannelReconciliationPolicy, NewChannelReconciliationRun, NewChannelReleaseSchedule, NewChannelRemittanceException, NewChannelSettlementApproval, NewChannelSettlementItem, NewChannelSettlementPolicy, NewChannelSettlementRun, NewChannelWebhookEvent, } from "./schema.js";
 export { channelBookingLinks, channelCommissionRules, channelContactProjections, channelContracts, channelInventoryAllotments, channelInventoryAllotmentTargets, channelInventoryReleaseExecutions, channelInventoryReleaseRules, channelProductMappings, channelReconciliationItems, channelReconciliationPolicies, channelReconciliationPolicyFrequencyEnum, channelReconciliationRuns, channelReleaseScheduleKindEnum, channelReleaseSchedules, channelRemittanceExceptionStatusEnum, channelRemittanceExceptions, channelSettlementApprovalStatusEnum, channelSettlementApprovals, channelSettlementItems, channelSettlementPolicies, channelSettlementPolicyFrequencyEnum, channelSettlementRuns, channels, channelWebhookEvents, } from "./schema.js";
+export type { ChannelAvailabilityPushIntent, ChannelContentPushIntent, NewChannelAvailabilityPushIntent, NewChannelContentPushIntent, } from "./schema-push-intents.js";
+export { channelAvailabilityPushIntents, channelContentPushIntents, } from "./schema-push-intents.js";
 export { channelBookingLinkListQuerySchema, channelCommissionRuleListQuerySchema, channelContractListQuerySchema, channelInventoryAllotmentListQuerySchema, channelInventoryAllotmentTargetListQuerySchema, channelInventoryReleaseExecutionListQuerySchema, channelInventoryReleaseRuleListQuerySchema, channelListQuerySchema, channelProductMappingListQuerySchema, channelReconciliationItemListQuerySchema, channelReconciliationPolicyFrequencySchema, channelReconciliationPolicyListQuerySchema, channelReconciliationRunListQuerySchema, channelReleaseScheduleKindSchema, channelReleaseScheduleListQuerySchema, channelRemittanceExceptionListQuerySchema, channelRemittanceExceptionStatusSchema, channelSettlementApprovalListQuerySchema, channelSettlementApprovalStatusSchema, channelSettlementItemListQuerySchema, channelSettlementPolicyFrequencySchema, channelSettlementPolicyListQuerySchema, channelSettlementRunListQuerySchema, channelWebhookEventListQuerySchema, insertChannelBookingLinkSchema, insertChannelCommissionRuleSchema, insertChannelContractSchema, insertChannelInventoryAllotmentSchema, insertChannelInventoryAllotmentTargetSchema, insertChannelInventoryReleaseExecutionSchema, insertChannelInventoryReleaseRuleSchema, insertChannelProductMappingSchema, insertChannelReconciliationItemSchema, insertChannelReconciliationPolicySchema, insertChannelReconciliationRunSchema, insertChannelReleaseScheduleSchema, insertChannelRemittanceExceptionSchema, insertChannelSchema, insertChannelSettlementApprovalSchema, insertChannelSettlementItemSchema, insertChannelSettlementPolicySchema, insertChannelSettlementRunSchema, insertChannelWebhookEventSchema, updateChannelBookingLinkSchema, updateChannelCommissionRuleSchema, updateChannelContractSchema, updateChannelInventoryAllotmentSchema, updateChannelInventoryAllotmentTargetSchema, updateChannelInventoryReleaseExecutionSchema, updateChannelInventoryReleaseRuleSchema, updateChannelProductMappingSchema, updateChannelReconciliationItemSchema, updateChannelReconciliationPolicySchema, updateChannelReconciliationRunSchema, updateChannelReleaseScheduleSchema, updateChannelRemittanceExceptionSchema, updateChannelSchema, updateChannelSettlementApprovalSchema, updateChannelSettlementItemSchema, updateChannelSettlementPolicySchema, updateChannelSettlementRunSchema, updateChannelWebhookEventSchema, } from "./validation.js";
+export { type OutboundEnvelopeInput, type OutboundEnvelopeResultInput, type PreparedEnvelope, prepareOutboundEnvelope, redactBodyPii, redactHeaders, redactStringPii, } from "./webhook-deliveries.js";
 export { distributionService };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAGvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,eAAO,MAAM,kBAAkB,EAAE,MAEhC,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,UAGpC,CAAA;AAED,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AACrE,YAAY,EACV,OAAO,EACP,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,oCAAoC,EACpC,2BAA2B,EAC3B,mCAAmC,EACnC,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,oCAAoC,EACpC,qBAAqB,EACrB,QAAQ,EACR,oBAAoB,GACrB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,iCAAiC,EACjC,oCAAoC,EACpC,8BAA8B,EAC9B,wCAAwC,EACxC,8CAA8C,EAC9C,+CAA+C,EAC/C,0CAA0C,EAC1C,sBAAsB,EACtB,oCAAoC,EACpC,wCAAwC,EACxC,0CAA0C,EAC1C,0CAA0C,EAC1C,uCAAuC,EACvC,gCAAgC,EAChC,qCAAqC,EACrC,yCAAyC,EACzC,sCAAsC,EACtC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,sCAAsC,EACtC,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,EAC5C,uCAAuC,EACvC,iCAAiC,EACjC,qCAAqC,EACrC,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,sCAAsC,EACtC,mBAAmB,EACnB,qCAAqC,EACrC,iCAAiC,EACjC,mCAAmC,EACnC,gCAAgC,EAChC,+BAA+B,EAC/B,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,EAC5C,uCAAuC,EACvC,iCAAiC,EACjC,qCAAqC,EACrC,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,sCAAsC,EACtC,mBAAmB,EACnB,qCAAqC,EACrC,iCAAiC,EACjC,mCAAmC,EACnC,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,mBAAmB,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAGvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,eAAO,MAAM,kBAAkB,EAAE,MAEhC,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,UAGpC,CAAA;AAED,OAAO,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AACrE,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,YAAY,EACZ,KAAK,mBAAmB,EACxB,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAA;AACxB,YAAY,EACV,OAAO,EACP,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,+BAA+B,EAC/B,gCAAgC,EAChC,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,4BAA4B,EAC5B,kCAAkC,EAClC,mCAAmC,EACnC,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,gBAAgB,EAChB,0BAA0B,EAC1B,gCAAgC,EAChC,iCAAiC,EACjC,4BAA4B,EAC5B,sBAAsB,EACtB,0BAA0B,EAC1B,6BAA6B,EAC7B,wCAAwC,EACxC,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,oCAAoC,EACpC,2BAA2B,EAC3B,mCAAmC,EACnC,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,oCAAoC,EACpC,qBAAqB,EACrB,QAAQ,EACR,oBAAoB,GACrB,MAAM,aAAa,CAAA;AACpB,YAAY,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,GAC5B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,iCAAiC,EACjC,oCAAoC,EACpC,8BAA8B,EAC9B,wCAAwC,EACxC,8CAA8C,EAC9C,+CAA+C,EAC/C,0CAA0C,EAC1C,sBAAsB,EACtB,oCAAoC,EACpC,wCAAwC,EACxC,0CAA0C,EAC1C,0CAA0C,EAC1C,uCAAuC,EACvC,gCAAgC,EAChC,qCAAqC,EACrC,yCAAyC,EACzC,sCAAsC,EACtC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,sCAAsC,EACtC,mCAAmC,EACnC,kCAAkC,EAClC,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,EAC5C,uCAAuC,EACvC,iCAAiC,EACjC,qCAAqC,EACrC,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,sCAAsC,EACtC,mBAAmB,EACnB,qCAAqC,EACrC,iCAAiC,EACjC,mCAAmC,EACnC,gCAAgC,EAChC,+BAA+B,EAC/B,8BAA8B,EAC9B,iCAAiC,EACjC,2BAA2B,EAC3B,qCAAqC,EACrC,2CAA2C,EAC3C,4CAA4C,EAC5C,uCAAuC,EACvC,iCAAiC,EACjC,qCAAqC,EACrC,uCAAuC,EACvC,oCAAoC,EACpC,kCAAkC,EAClC,sCAAsC,EACtC,mBAAmB,EACnB,qCAAqC,EACrC,iCAAiC,EACjC,mCAAmC,EACnC,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,uBAAuB,EACvB,aAAa,EACb,aAAa,EACb,eAAe,GAChB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,CAAA"}

package/dist/index.js

@@ -8,6 +8,9 @@ export const distributionHonoModule = {
     routes: distributionRoutes,
 };
 export { distributionBookingExtension } from "./booking-extension.js";
+export { acquireToken, channelScopeKey, DEFAULT_PRIORITY_GATES, drainBucket, } from "./rate-limit.js";
 export { channelBookingLinks, channelCommissionRules, channelContactProjections, channelContracts, channelInventoryAllotments, channelInventoryAllotmentTargets, channelInventoryReleaseExecutions, channelInventoryReleaseRules, channelProductMappings, channelReconciliationItems, channelReconciliationPolicies, channelReconciliationPolicyFrequencyEnum, channelReconciliationRuns, channelReleaseScheduleKindEnum, channelReleaseSchedules, channelRemittanceExceptionStatusEnum, channelRemittanceExceptions, channelSettlementApprovalStatusEnum, channelSettlementApprovals, channelSettlementItems, channelSettlementPolicies, channelSettlementPolicyFrequencyEnum, channelSettlementRuns, channels, channelWebhookEvents, } from "./schema.js";
+export { channelAvailabilityPushIntents, channelContentPushIntents, } from "./schema-push-intents.js";
 export { channelBookingLinkListQuerySchema, channelCommissionRuleListQuerySchema, channelContractListQuerySchema, channelInventoryAllotmentListQuerySchema, channelInventoryAllotmentTargetListQuerySchema, channelInventoryReleaseExecutionListQuerySchema, channelInventoryReleaseRuleListQuerySchema, channelListQuerySchema, channelProductMappingListQuerySchema, channelReconciliationItemListQuerySchema, channelReconciliationPolicyFrequencySchema, channelReconciliationPolicyListQuerySchema, channelReconciliationRunListQuerySchema, channelReleaseScheduleKindSchema, channelReleaseScheduleListQuerySchema, channelRemittanceExceptionListQuerySchema, channelRemittanceExceptionStatusSchema, channelSettlementApprovalListQuerySchema, channelSettlementApprovalStatusSchema, channelSettlementItemListQuerySchema, channelSettlementPolicyFrequencySchema, channelSettlementPolicyListQuerySchema, channelSettlementRunListQuerySchema, channelWebhookEventListQuerySchema, insertChannelBookingLinkSchema, insertChannelCommissionRuleSchema, insertChannelContractSchema, insertChannelInventoryAllotmentSchema, insertChannelInventoryAllotmentTargetSchema, insertChannelInventoryReleaseExecutionSchema, insertChannelInventoryReleaseRuleSchema, insertChannelProductMappingSchema, insertChannelReconciliationItemSchema, insertChannelReconciliationPolicySchema, insertChannelReconciliationRunSchema, insertChannelReleaseScheduleSchema, insertChannelRemittanceExceptionSchema, insertChannelSchema, insertChannelSettlementApprovalSchema, insertChannelSettlementItemSchema, insertChannelSettlementPolicySchema, insertChannelSettlementRunSchema, insertChannelWebhookEventSchema, updateChannelBookingLinkSchema, updateChannelCommissionRuleSchema, updateChannelContractSchema, updateChannelInventoryAllotmentSchema, updateChannelInventoryAllotmentTargetSchema, updateChannelInventoryReleaseExecutionSchema, updateChannelInventoryReleaseRuleSchema, updateChannelProductMappingSchema, updateChannelReconciliationItemSchema, updateChannelReconciliationPolicySchema, updateChannelReconciliationRunSchema, updateChannelReleaseScheduleSchema, updateChannelRemittanceExceptionSchema, updateChannelSchema, updateChannelSettlementApprovalSchema, updateChannelSettlementItemSchema, updateChannelSettlementPolicySchema, updateChannelSettlementRunSchema, updateChannelWebhookEventSchema, } from "./validation.js";
+export { prepareOutboundEnvelope, redactBodyPii, redactHeaders, redactStringPii, } from "./webhook-deliveries.js";
 export { distributionService };

package/dist/rate-limit.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Per-channel rate limiting (token bucket on Postgres).
+ *
+ * `acquireToken` is the canonical channel-push wrapper around the
+ * generic `infra.rate_limit_buckets` primitive. Each call:
+ *
+ *   1. Atomically refills the bucket based on `(now - last_refill_at) *
+ *      refill_rate`, capped at capacity.
+ *   2. Checks the priority gate: tokens_available >= gate * capacity
+ *      AND tokens_available >= 1.
+ *   3. On success, decrements by 1 and returns `{ acquired: true }`.
+ *   4. On denial, returns `{ acquired: false, retryAfterMs }` computed
+ *      from how long until enough tokens refill to clear the gate.
+ *
+ * Whole thing is one round-trip (an UPSERT with conditional UPDATE).
+ *
+ * Per docs/architecture/channel-push-architecture.md §14.2 and §14.3.
+ */
+import type { AnyDrizzleDb } from "@voyantjs/db";
+export type ChannelPushPriority = "booking" | "availability" | "content";
+export interface RateLimitConfig {
+    /** Sustained refill rate (tokens per second). */
+    rps: number;
+    /** Burst capacity (max tokens in the bucket). */
+    burst: number;
+    /**
+     * Per-priority reserve thresholds. Defaults to:
+     *   { booking: 0, availability: 0.3, content: 0.7 }
+     * Read as: bookings dispatch with any tokens; availability when
+     * bucket ≥ 30% full; content when ≥ 70% full.
+     */
+    priorityGates?: Partial<Record<ChannelPushPriority, number>>;
+}
+export declare const DEFAULT_PRIORITY_GATES: Record<ChannelPushPriority, number>;
+export interface AcquireTokenAcquired {
+    acquired: true;
+    /** Tokens left in the bucket after this call. */
+    tokensRemaining: number;
+}
+export interface AcquireTokenDenied {
+    acquired: false;
+    /** Suggested wait time in milliseconds before retrying. */
+    retryAfterMs: number;
+    /** Tokens currently in the bucket (post-refill). */
+    tokensAvailable: number;
+}
+export type AcquireTokenResult = AcquireTokenAcquired | AcquireTokenDenied;
+/**
+ * Build the channel-push scope key from a (channel, connection) pair.
+ * Same shape used by the workflow + reconciler so all paths address the
+ * same bucket.
+ */
+export declare function channelScopeKey(channelId: string, connectionId: string): string;
+/**
+ * Acquire one token from the bucket at `scope`, applying the priority
+ * gate for `priority`. Creates the bucket on first call (UPSERT with
+ * full capacity).
+ */
+export declare function acquireToken(db: AnyDrizzleDb, scope: string, config: RateLimitConfig, priority: ChannelPushPriority): Promise<AcquireTokenResult>;
+/**
+ * Drain the bucket to zero and freeze it for `cooldownMs`.
+ *
+ * Called when an upstream returns 429 with a `Retry-After` hint —
+ * prevents subsequent dispatchers from immediately retrying through
+ * the same bucket and lets our outbound estimate converge with the
+ * channel's authoritative state. Per §14.4.
+ */
+export declare function drainBucket(db: AnyDrizzleDb, scope: string, cooldownMs: number): Promise<void>;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAIhD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,cAAc,GAAG,SAAS,CAAA;AAExE,MAAM,WAAW,eAAe;IAC9B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAA;IACX,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAA;IACb;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,CAAA;CAC7D;AAED,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAItE,CAAA;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,IAAI,CAAA;IACd,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,KAAK,CAAA;IACf,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAA;IACpB,oDAAoD;IACpD,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,kBAAkB,CAAA;AAE1E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAkF7B;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAUf"}