alepha 0.22.0 → 0.24.0

package/dist/api/verifications/index.js

@@ -1,4 +1,4 @@
-import { $atom, $inject, $module, $state, t } from "alepha";
+import { $atom, $inject, $module, $state, z } from "alepha";
 import { $action, BadRequestError, NotFoundError } from "alepha/server";
 import { createHash, randomInt } from "node:crypto";
 import { CryptoProvider } from "alepha/crypto";
@@ -6,37 +6,29 @@ import { DateTimeProvider } from "alepha/datetime";
 import { $logger } from "alepha/logger";
 import { $entity, $repository, db } from "alepha/orm";
 import { $scheduler } from "alepha/scheduler";
-//#region ../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts
-const requestVerificationCodeResponseSchema = t.object({
-	token: t.string({ description: "The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method." }),
-	codeExpiration: t.integer({ description: "Time in seconds before your verification token expires." }),
-	verificationCooldown: t.integer({ description: "Cooldown period in seconds before you can request another verification." }),
-	maxVerificationAttempts: t.integer({ description: "Maximum number of verification attempts allowed before the token is locked." })
-});
-//#endregion
 //#region ../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts
-const validateVerificationCodeResponseSchema = t.object({
-	ok: t.boolean({ description: "Indicates whether the verification was successful." }),
-	alreadyVerified: t.optional(t.boolean({ description: "Indicates whether the target was already verified." }))
+const validateVerificationCodeResponseSchema = z.object({
+	ok: z.boolean().describe("Indicates whether the verification was successful."),
+	alreadyVerified: z.boolean().describe("Indicates whether the target was already verified.").optional()
 });
 //#endregion
 //#region ../../src/api/verifications/schemas/verificationTypeEnumSchema.ts
-const verificationTypeEnumSchema = t.enum(["code", "link"]);
+const verificationTypeEnumSchema = z.enum(["code", "link"]);
 //#endregion
 //#region ../../src/api/verifications/entities/verifications.ts
 const verifications = $entity({
 	name: "verification",
-	schema: t.object({
-		id: db.primaryKey(t.bigint()),
+	schema: z.object({
+		id: db.primaryKey(z.bigint()),
 		createdAt: db.createdAt(),
 		updatedAt: db.updatedAt(),
 		version: db.version(),
 		type: verificationTypeEnumSchema,
-		target: t.text({ description: "Can be a phone (E.164 format) or email address" }),
-		purpose: db.default(t.text({ description: "Logical purpose bucket (e.g. 'default', 'password-reset'). Scopes the cooldown and daily-limit checks so unrelated flows that share the same (type, target) — most notably email verification and password reset — don't collide." }), "default"),
-		code: t.text({ description: "Hashed verification token (n-digit code or UUID)" }),
-		verifiedAt: t.optional(t.datetime({ description: "When it was successfully verified" })),
-		attempts: db.default(t.integer({ description: "Number of failed attempts (to prevent brute-force)" }), 0)
+		target: z.text({ description: "Can be a phone (E.164 format) or email address" }),
+		purpose: db.default(z.text({ description: "Logical purpose bucket (e.g. 'default', 'password-reset'). Scopes the cooldown and daily-limit checks so unrelated flows that share the same (type, target) — most notably email verification and password reset — don't collide." }), "default"),
+		code: z.text({ description: "Hashed verification token (n-digit code or UUID)" }),
+		verifiedAt: z.datetime().describe("When it was successfully verified").optional(),
+		attempts: db.default(z.integer().describe("Number of failed attempts (to prevent brute-force)"), 0)
 	}),
 	indexes: ["createdAt", { columns: ["target", "code"] }]
 });
@@ -49,61 +41,21 @@ const verificationEntityInsertSchema = verifications.insertSchema;
 */
 const verificationOptions = $atom({
 	name: "alepha.api.verifications.options",
-	schema: t.object({
-		code: t.object({
-			maxAttempts: t.integer({
-				description: "Maximum number of attempts before locking the verification.",
-				minimum: 1,
-				maximum: 10
-			}),
-			codeLength: t.integer({
-				description: "Length of the verification code.",
-				minimum: 4,
-				maximum: 12
-			}),
-			codeExpiration: t.integer({
-				description: "Time in seconds before the verification code expires.",
-				minimum: 60,
-				maximum: 3600
-			}),
-			verificationCooldown: t.integer({
-				description: "Cooldown period in seconds after a request verification.",
-				minimum: 0,
-				maximum: 3600
-			}),
-			limitPerDay: t.integer({
-				description: "Maximum number of verification requests per day for one entry.",
-				minimum: 1,
-				maximum: 100
-			})
-		}, { description: "Settings specific to code verifications." }),
-		link: t.object({
-			maxAttempts: t.integer({
-				description: "Maximum number of attempts before locking the verification.",
-				minimum: 1,
-				maximum: 10
-			}),
-			codeExpiration: t.integer({
-				description: "Time in seconds before the verification token expires.",
-				minimum: 60,
-				maximum: 7200
-			}),
-			verificationCooldown: t.integer({
-				description: "Cooldown period in seconds after a request verification.",
-				minimum: 0,
-				maximum: 3600
-			}),
-			limitPerDay: t.integer({
-				description: "Maximum number of verification requests per day for one entry.",
-				minimum: 1,
-				maximum: 100
-			})
-		}, { description: "Settings specific to link verifications." }),
-		purgeDays: t.integer({
-			description: "Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.",
-			minimum: 0,
-			maximum: 365
-		})
+	schema: z.object({
+		code: z.object({
+			maxAttempts: z.integer().min(1).max(10).describe("Maximum number of attempts before locking the verification."),
+			codeLength: z.integer().min(4).max(12).describe("Length of the verification code."),
+			codeExpiration: z.integer().min(60).max(3600).describe("Time in seconds before the verification code expires."),
+			verificationCooldown: z.integer().min(0).max(3600).describe("Cooldown period in seconds after a request verification."),
+			limitPerDay: z.integer().min(1).max(100).describe("Maximum number of verification requests per day for one entry.")
+		}).describe("Settings specific to code verifications."),
+		link: z.object({
+			maxAttempts: z.integer().min(1).max(10).describe("Maximum number of attempts before locking the verification."),
+			codeExpiration: z.integer().min(60).max(7200).describe("Time in seconds before the verification token expires."),
+			verificationCooldown: z.integer().min(0).max(3600).describe("Cooldown period in seconds after a request verification."),
+			limitPerDay: z.integer().min(1).max(100).describe("Maximum number of verification requests per day for one entry.")
+		}).describe("Settings specific to link verifications."),
+		purgeDays: z.integer().min(0).max(365).describe("Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.")
 	}),
 	default: {
 		code: {
@@ -248,6 +200,14 @@ var VerificationService = class {
 		const settings = this.verificationParameters.get(entry.type);
 		const verification = await this.findByEntry(entry);
 		if (verification.verifiedAt) {
+			if (verification.code !== this.hashCode(code)) {
+				this.log.warn("Invalid code submitted for already-verified entry", {
+					id: verification.id,
+					type: entry.type,
+					target: entry.target
+				});
+				throw new BadRequestError("Invalid verification code");
+			}
 			this.log.debug("Verification already verified", {
 				id: verification.id,
 				type: entry.type,
@@ -318,31 +278,15 @@ var VerificationController = class {
 	verificationService = $inject(VerificationService);
 	url = "/verifications";
 	group = "verifications";
-	requestVerificationCode = $action({
-		path: `${this.url}/:type`,
-		group: this.group,
-		method: "POST",
-		schema: {
-			params: t.object({ type: verificationTypeEnumSchema }),
-			body: t.object({ target: t.text() }),
-			response: requestVerificationCodeResponseSchema
-		},
-		handler: async ({ body, params }) => {
-			return await this.verificationService.createVerification({
-				type: params.type,
-				target: body.target
-			});
-		}
-	});
 	validateVerificationCode = $action({
 		path: `${this.url}/:type/validate`,
 		group: this.group,
 		method: "POST",
 		schema: {
-			params: t.object({ type: verificationTypeEnumSchema }),
-			body: t.object({
-				target: t.text(),
-				token: t.text({ description: "The verification token (6-digit code for phone, UUID for email)." })
+			params: z.object({ type: verificationTypeEnumSchema }),
+			body: z.object({
+				target: z.text(),
+				token: z.text({ description: "The verification token (6-digit code for phone, UUID for email)." })
 			}),
 			response: validateVerificationCodeResponseSchema
 		},
@@ -373,6 +317,14 @@ var VerificationJobs = class {
 	});
 };
 //#endregion
+//#region ../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts
+const requestVerificationCodeResponseSchema = z.object({
+	token: z.string().describe("The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method."),
+	codeExpiration: z.integer().describe("Time in seconds before your verification token expires."),
+	verificationCooldown: z.integer().describe("Cooldown period in seconds before you can request another verification."),
+	maxVerificationAttempts: z.integer().describe("Maximum number of verification attempts allowed before the token is locked.")
+});
+//#endregion
 //#region ../../src/api/verifications/index.ts
 /**
 * Email and phone verification workflows.

package/dist/api/verifications/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = t.object({\n  token: t.string({\n    description:\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n  }),\n  codeExpiration: t.integer({\n    description: \"Time in seconds before your verification token expires.\",\n  }),\n  verificationCooldown: t.integer({\n    description:\n      \"Cooldown period in seconds before you can request another verification.\",\n  }),\n  maxVerificationAttempts: t.integer({\n    description:\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n  }),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = t.object({\n  ok: t.boolean({\n    description: \"Indicates whether the verification was successful.\",\n  }),\n  alreadyVerified: t.optional(\n    t.boolean({\n      description: \"Indicates whether the target was already verified.\",\n    }),\n  ),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationTypeEnumSchema = t.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: t.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    purpose: db.default(\n      t.text({\n        description:\n          \"Logical purpose bucket (e.g. 'default', 'password-reset'). Scopes the cooldown and daily-limit checks so unrelated flows that share the same (type, target) — most notably email verification and password reset — don't collide.\",\n      }),\n      \"default\",\n    ),\n\n    code: t.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: t.optional(\n      t.datetime({\n        description: \"When it was successfully verified\",\n      }),\n    ),\n\n    attempts: db.default(\n      t.integer({\n        description: \"Number of failed attempts (to prevent brute-force)\",\n      }),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const verificationSettingsSchema = t.object({\n  code: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeLength: t.integer({\n        description: \"Length of the verification code.\",\n        minimum: 4,\n        maximum: 12,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification code expires.\",\n        minimum: 60, // 1 minute\n        maximum: 3600, // 1 hour\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to code verifications.\",\n    },\n  ),\n  link: t.object(\n    {\n      maxAttempts: t.integer({\n        description:\n          \"Maximum number of attempts before locking the verification.\",\n        minimum: 1,\n        maximum: 10,\n      }),\n      codeExpiration: t.integer({\n        description: \"Time in seconds before the verification token expires.\",\n        minimum: 60, // 1 minute\n        maximum: 7200, // 2 hours\n      }),\n      verificationCooldown: t.integer({\n        description: \"Cooldown period in seconds after a request verification.\",\n        minimum: 0,\n        maximum: 3600, // 1 hour\n      }),\n      limitPerDay: t.integer({\n        description:\n          \"Maximum number of verification requests per day for one entry.\",\n        minimum: 1,\n        maximum: 100,\n      }),\n    },\n    {\n      description: \"Settings specific to link verifications.\",\n    },\n  ),\n  purgeDays: t.integer({\n    description:\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    minimum: 0,\n    maximum: 365,\n  }),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        purpose: { eq: entry.purpose ?? \"default\" },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        purpose: { eq: entry.purpose ?? \"default\" },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      purpose: entry.purpose ?? \"default\",\n      code: this.hashCode(token),\n      createdAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return this.crypto.randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n\n  /**\n   * Logical purpose bucket. Cooldown and daily-limit checks are scoped to\n   * `(type, target, purpose)`, so flows that share a `(type, target)` pair\n   * — e.g. email verification and password reset, both `type: \"code\"` on the\n   * same email — get independent rate-limit windows instead of colliding.\n   *\n   * Defaults to `\"default\"` when omitted (back-compatible with callers and\n   * rows that predate this field).\n   */\n  purpose?: string;\n}\n","import { $inject, t } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { requestVerificationCodeResponseSchema } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  public readonly requestVerificationCode = $action({\n    path: `${this.url}/:type`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n      }),\n      response: requestVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return await this.verificationService.createVerification({\n        type: params.type,\n        target: body.target,\n      });\n    },\n  });\n\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: t.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: t.object({\n        target: t.text(),\n        token: t.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    name: \"api:verifications:cleanExpired\",\n    cron: \"0 * * * *\", // Hourly at minute 0\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;;AAGA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EAAE,OAAO,EACd,aACE,oJACJ,CAAC;CACD,gBAAgB,EAAE,QAAQ,EACxB,aAAa,0DACf,CAAC;CACD,sBAAsB,EAAE,QAAQ,EAC9B,aACE,0EACJ,CAAC;CACD,yBAAyB,EAAE,QAAQ,EACjC,aACE,8EACJ,CAAC;AACH,CAAC;;;AChBD,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EAAE,QAAQ,EACZ,aAAa,qDACf,CAAC;CACD,iBAAiB,EAAE,SACjB,EAAE,QAAQ,EACR,aAAa,qDACf,CAAC,CACH;AACF,CAAC;;;ACTD,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;;;ACEjE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,OAAO,CAAC;EAE5B,WAAW,GAAG,UAAU;EAExB,WAAW,GAAG,UAAU;EAExB,SAAS,GAAG,QAAQ;EAEpB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,iDACf,CAAC;EAED,SAAS,GAAG,QACV,EAAE,KAAK,EACL,aACE,oOACJ,CAAC,GACD,SACF;EAEA,MAAM,EAAE,KAAK,EACX,aAAa,mDACf,CAAC;EAED,YAAY,EAAE,SACZ,EAAE,SAAS,EACT,aAAa,oCACf,CAAC,CACH;EAEA,UAAU,GAAG,QACX,EAAE,QAAQ,EACR,aAAa,qDACf,CAAC,GACD,CACF;CACF,CAAC;CACD,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,MAAM,EAC5B,CACF;AACF,CAAC;AAED,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AE7C5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;GACX,CAAC;GACD,YAAY,EAAE,QAAQ;IACpB,aAAa;IACb,SAAS;IACT,SAAS;GACX,CAAC;GACD,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;GACX,CAAC;GACD,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;GACX,CAAC;GACD,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;GACX,CAAC;EACH,GACA,EACE,aAAa,2CACf,CACF;EACA,MAAM,EAAE,OACN;GACE,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;GACX,CAAC;GACD,gBAAgB,EAAE,QAAQ;IACxB,aAAa;IACb,SAAS;IACT,SAAS;GACX,CAAC;GACD,sBAAsB,EAAE,QAAQ;IAC9B,aAAa;IACb,SAAS;IACT,SAAS;GACX,CAAC;GACD,aAAa,EAAE,QAAQ;IACrB,aACE;IACF,SAAS;IACT,SAAS;GACX,CAAC;EACH,GACA,EACE,aAAa,2CACf,CACF;EACA,WAAW,EAAE,QAAQ;GACnB,aACE;GACF,SAAS;GACT,SAAS;EACX,CAAC;CACH,CC5DU;CACR,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;EACf;EACA,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;EACf;EACA,WAAW;CACb;AACF,CAAC;AAYD,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,mBAAmB;CAEvD,IACE,KACyB;EACzB,OAAO,KAAK,QAAQ;CACtB;AACF;;;AClCA,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,QAAQ;CACjC,mBAAsC,QAAQ,gBAAgB;CAC9D,SAA4B,QAAQ,cAAc;CAClD,yBAA4C,QAAQ,sBAAsB;CAC1E,yBAA4C,YAAY,aAAa;CAErE,MAAa,YACX,OAC6B;EAC7B,KAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;GACb;GACA,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,KAAK;IACvB,QAAQ,EAAE,IAAI,MAAM,OAAO;IAC3B,SAAS,EAAE,IAAI,MAAM,WAAW,UAAU;GAC5C;EACF,CAAC;EAED,IAAI,QAAQ,WAAW,GAAG;GACxB,KAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;GAChB,CAAC;GACD,MAAM,IAAI,cAAc,8BAA8B;EACxD;EAEA,KAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,GAAG;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,QAAQ;CACjB;CAEA,mBAA0B,OAA0B;EAClD,KAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;GACb;GACA,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,KAAK;IACvB,QAAQ,EAAE,IAAI,MAAM,OAAO;IAC3B,SAAS,EAAE,IAAI,MAAM,WAAW,UAAU;IAC1C,WAAW,EACT,KAAK,KAAK,iBAAiB,IAAI,EAAE,QAAQ,KAAK,EAAE,YAAY,EAC9D;GACF;EACF,CAAC;CACH;;;;;;CAOA,MAAa,mBACX,OACsC;EACtC,KAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,IAAI;EAE3D,MAAM,UAAU,MAAM,KAAK,mBAAmB,KAAK;EACnD,IAAI,QAAQ,UAAU,SAAS,aAAa;GAC1C,KAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;GACjB,CAAC;GACD,MAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,EACnF;EACF;EAEA,MAAM,uBAAuB,QAAQ;EACrC,IAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,IAAI,EAAE,KAKtB,IAJA,KAAK,iBACvB,GAAG,qBAAqB,SAAS,EACjC,KAEiC;GACpC,IAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,OAClC;IACA,KAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;IACpB,CAAC;IACD,MAAM,IAAI,gBACR,mCAAmC,kBAAkB,SACvD;GACF;EACF;EAEA,MAAM,QAAQ,KAAK,cAAc,MAAM,IAAI;EAE3C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,SAAS,MAAM,WAAW;GAC1B,MAAM,KAAK,SAAS,KAAK;GACzB,WAAW,KAAK,iBAAiB,aAAa;EAChD,CAAC;EAED,KAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;EAC7B,CAAC;EAED,OAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;EACpC;CACF;CAEA,MAAa,WACX,OACA,MAC2C;EAC3C,KAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,IAAI;EAE3D,MAAM,eAAe,MAAM,KAAK,YAAY,KAAK;EACjD,IAAI,aAAa,YAAY;GAC3B,KAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;GAC3B,CAAC;GACD,OAAO;IAAE,IAAI;IAAM,iBAAiB;GAAK;EAC3C;EAKA,MAAM,MAAM,KAAK,iBAAiB,IAAI;EACtC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,SAAS,EACzB,IAAI,SAAS,gBAAgB,SAAS;EAEzC,IAAI,MAAM,gBAAgB;GACxB,KAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,YAAY;GACxC,CAAC;GACD,MAAM,IAAI,gBAAgB,+BAA+B;EAC3D;EAEA,IAAI,aAAa,YAAY,SAAS,aAAa;GACjD,KAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;GACxB,CAAC;GACD,MAAM,IAAI,gBACR,6DACF;EACF;EAEA,IAAI,aAAa,SAAS,KAAK,SAAS,IAAI,GAAG;GAC7C,MAAM,cAAc,aAAa,WAAW;GAC5C,KAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;GACxB,CAAC;GACD,MAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,YACZ,CAAC;GACD,MAAM,IAAI,gBAAgB,2BAA2B;EACvD;EAEA,MAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,aAAa,EACjD,CAAC;EAED,KAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,EAAE,IAAI,KAAK;CACpB;CAEA,SAAgB,MAAsB;EACpC,OAAO,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;CACvD;CAEA,cAAqB,MAAoC;EACvD,IAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM;GACvD,OAAO,UAAU,GAAG,GAAS,EAC1B,SAAS,EACT,SAAS,SAAS,YAAY,GAAG;EACtC,OAAO,IAAI,SAAS,QAClB,OAAO,KAAK,OAAO,WAAW;EAGhC,MAAM,IAAI,gBAAgB,8BAA8B,MAAM;CAChE;AACF;;;AC1PA,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,mBAAmB;CAEpE,MAAsB;CACtB,QAAwB;CAExB,0BAA0C,QAAQ;EAChD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,2BACR,CAAC;GACD,MAAM,EAAE,OAAO,EACb,QAAQ,EAAE,KAAK,EACjB,CAAC;GACD,UAAU;EACZ;EACA,SAAS,OAAO,EAAE,MAAM,aAAa;GACnC,OAAO,MAAM,KAAK,oBAAoB,mBAAmB;IACvD,MAAM,OAAO;IACb,QAAQ,KAAK;GACf,CAAC;EACH;CACF,CAAC;CAED,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,2BACR,CAAC;GACD,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK,EACZ,aACE,mEACJ,CAAC;GACH,CAAC;GACD,UAAU;EACZ;EACA,SAAS,OAAO,EAAE,MAAM,aAAa;GACnC,OAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;GACf,GACA,KAAK,KACP;EACF;CACF,CAAC;AACH;;;ACtDA,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,aAAa;CACrE,yBAA4C,QAAQ,sBAAsB;CAC1E,mBAAsC,QAAQ,gBAAgB;CAE9D,eAA+B,WAAW;EACxC,MAAM;EACN,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,WAAW;GAC7D,IAAI,aAAa,GACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,UAAU,IAAI,aAFxB,OAAU,KAAK;GAI7B,MAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,cAAc,EAAE,YAAY,EAC3D,EACF,CAAC;EACH;CACF,CAAC;AACH;;;;;;;;;;;;;;ACHA,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;CACF;AACF,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/verifications/schemas/validateVerificationCodeResponseSchema.ts","../../../src/api/verifications/schemas/verificationTypeEnumSchema.ts","../../../src/api/verifications/entities/verifications.ts","../../../src/api/verifications/schemas/verificationSettingsSchema.ts","../../../src/api/verifications/parameters/VerificationParameters.ts","../../../src/api/verifications/services/VerificationService.ts","../../../src/api/verifications/controllers/VerificationController.ts","../../../src/api/verifications/jobs/VerificationJobs.ts","../../../src/api/verifications/schemas/requestVerificationCodeResponseSchema.ts","../../../src/api/verifications/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const validateVerificationCodeResponseSchema = z.object({\n  ok: z\n    .boolean()\n    .describe(\"Indicates whether the verification was successful.\"),\n  alreadyVerified: z\n    .boolean()\n    .describe(\"Indicates whether the target was already verified.\")\n    .optional(),\n});\n\nexport type ValidateVerificationCodeResponse = Static<\n  typeof validateVerificationCodeResponseSchema\n>;\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const verificationTypeEnumSchema = z.enum([\"code\", \"link\"]);\nexport type VerificationTypeEnum = Static<typeof verificationTypeEnumSchema>;\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport const verifications = $entity({\n  name: \"verification\",\n  schema: z.object({\n    id: db.primaryKey(z.bigint()),\n\n    createdAt: db.createdAt(),\n\n    updatedAt: db.updatedAt(),\n\n    version: db.version(),\n\n    type: verificationTypeEnumSchema,\n\n    target: z.text({\n      description: \"Can be a phone (E.164 format) or email address\",\n    }),\n\n    purpose: db.default(\n      z.text({\n        description:\n          \"Logical purpose bucket (e.g. 'default', 'password-reset'). Scopes the cooldown and daily-limit checks so unrelated flows that share the same (type, target) — most notably email verification and password reset — don't collide.\",\n      }),\n      \"default\",\n    ),\n\n    code: z.text({\n      description: \"Hashed verification token (n-digit code or UUID)\",\n    }),\n\n    verifiedAt: z\n      .datetime()\n      .describe(\"When it was successfully verified\")\n      .optional(),\n\n    attempts: db.default(\n      z\n        .integer()\n        .describe(\"Number of failed attempts (to prevent brute-force)\"),\n      0,\n    ),\n  }),\n  indexes: [\n    \"createdAt\",\n    {\n      columns: [\"target\", \"code\"],\n    },\n  ],\n});\n\nexport const verificationEntitySchema = verifications.schema;\nexport const verificationEntityInsertSchema = verifications.insertSchema;\nexport type VerificationEntity = Static<typeof verifications.schema>;\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const verificationSettingsSchema = z.object({\n  code: z\n    .object({\n      maxAttempts: z\n        .integer()\n        .min(1)\n        .max(10)\n        .describe(\n          \"Maximum number of attempts before locking the verification.\",\n        ),\n      codeLength: z\n        .integer()\n        .min(4)\n        .max(12)\n        .describe(\"Length of the verification code.\"),\n      codeExpiration: z\n        .integer()\n        .min(60)\n        .max(3600)\n        .describe(\"Time in seconds before the verification code expires.\"),\n      verificationCooldown: z\n        .integer()\n        .min(0)\n        .max(3600)\n        .describe(\"Cooldown period in seconds after a request verification.\"),\n      limitPerDay: z\n        .integer()\n        .min(1)\n        .max(100)\n        .describe(\n          \"Maximum number of verification requests per day for one entry.\",\n        ),\n    })\n    .describe(\"Settings specific to code verifications.\"),\n  link: z\n    .object({\n      maxAttempts: z\n        .integer()\n        .min(1)\n        .max(10)\n        .describe(\n          \"Maximum number of attempts before locking the verification.\",\n        ),\n      codeExpiration: z\n        .integer()\n        .min(60)\n        .max(7200)\n        .describe(\"Time in seconds before the verification token expires.\"),\n      verificationCooldown: z\n        .integer()\n        .min(0)\n        .max(3600)\n        .describe(\"Cooldown period in seconds after a request verification.\"),\n      limitPerDay: z\n        .integer()\n        .min(1)\n        .max(100)\n        .describe(\n          \"Maximum number of verification requests per day for one entry.\",\n        ),\n    })\n    .describe(\"Settings specific to link verifications.\"),\n  purgeDays: z\n    .integer()\n    .min(0)\n    .max(365)\n    .describe(\n      \"Number of days after which expired verifications are automatically deleted. Set to 0 to disable auto-deletion.\",\n    ),\n});\n\nexport type VerificationSettings = Static<typeof verificationSettingsSchema>;\n","import { $atom, $state, type Static } from \"alepha\";\nimport {\n  type VerificationSettings,\n  verificationSettingsSchema,\n} from \"../schemas/verificationSettingsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Verification settings configuration atom\n */\nexport const verificationOptions = $atom({\n  name: \"alepha.api.verifications.options\",\n  schema: verificationSettingsSchema,\n  default: {\n    code: {\n      maxAttempts: 5,\n      codeLength: 6,\n      codeExpiration: 300, // 5 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    link: {\n      maxAttempts: 3, // Lower since UUIDs are harder to guess\n      codeExpiration: 1800, // 30 minutes\n      verificationCooldown: 90,\n      limitPerDay: 10,\n    },\n    purgeDays: 1,\n  },\n});\n\nexport type VerificationOptions = Static<typeof verificationOptions.schema>;\n\ndeclare module \"alepha\" {\n  interface State {\n    [verificationOptions.key]: VerificationOptions;\n  }\n}\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport class VerificationParameters {\n  protected readonly options = $state(verificationOptions);\n\n  public get<K extends keyof VerificationSettings>(\n    key: K,\n  ): VerificationSettings[K] {\n    return this.options[key];\n  }\n}\n","import { createHash, randomInt } from \"node:crypto\";\nimport { $inject } from \"alepha\";\nimport { CryptoProvider } from \"alepha/crypto\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport { BadRequestError, NotFoundError } from \"alepha/server\";\nimport {\n  type VerificationEntity,\n  verifications,\n} from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\nimport type { RequestVerificationResponse } from \"../schemas/requestVerificationCodeResponseSchema.ts\";\nimport type { ValidateVerificationCodeResponse } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport type { VerificationTypeEnum } from \"../schemas/verificationTypeEnumSchema.ts\";\n\nexport class VerificationService {\n  protected readonly log = $logger();\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n  protected readonly crypto = $inject(CryptoProvider);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly verificationRepository = $repository(verifications);\n\n  public async findByEntry(\n    entry: VerificationEntry,\n  ): Promise<VerificationEntity> {\n    this.log.trace(\"Finding verification by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const results = await this.verificationRepository.findMany({\n      limit: 1, // only need the most recent entry\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        purpose: { eq: entry.purpose ?? \"default\" },\n      },\n    });\n\n    if (results.length === 0) {\n      this.log.debug(\"Verification entry not found\", {\n        type: entry.type,\n        target: entry.target,\n      });\n      throw new NotFoundError(\"Verification entry not found\");\n    }\n\n    this.log.debug(\"Verification entry found\", {\n      id: results[0].id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return results[0];\n  }\n\n  public findRecentsByEntry(entry: VerificationEntry) {\n    this.log.trace(\"Finding recent verifications by entry\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return this.verificationRepository.findMany({\n      orderBy: {\n        column: \"createdAt\",\n        direction: \"desc\",\n      },\n      where: {\n        type: { eq: entry.type },\n        target: { eq: entry.target },\n        purpose: { eq: entry.purpose ?? \"default\" },\n        createdAt: {\n          gte: this.dateTimeProvider.now().startOf(\"day\").toISOString(),\n        },\n      },\n    });\n  }\n\n  /**\n   * Creates a verification entry and returns the token.\n   * The caller is responsible for sending notifications with the token.\n   * This allows for context-specific notifications (e.g., password reset vs email verification).\n   */\n  public async createVerification(\n    entry: VerificationEntry,\n  ): Promise<RequestVerificationResponse> {\n    this.log.trace(\"Creating verification\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const recents = await this.findRecentsByEntry(entry);\n    if (recents.length >= settings.limitPerDay) {\n      this.log.warn(\"Daily verification limit reached\", {\n        type: entry.type,\n        target: entry.target,\n        limit: settings.limitPerDay,\n        count: recents.length,\n      });\n      throw new BadRequestError(\n        `Maximum number of verification requests per day reached (${settings.limitPerDay})`,\n      );\n    }\n\n    const existingVerification = recents[0];\n    if (existingVerification) {\n      const nowSec = this.dateTimeProvider.now().unix();\n      const createdAtSec = this.dateTimeProvider\n        .of(existingVerification.createdAt)\n        .unix();\n\n      const diffSec = nowSec - createdAtSec;\n      if (diffSec < settings.verificationCooldown) {\n        const remainingCooldown = Math.floor(\n          settings.verificationCooldown - diffSec,\n        );\n        this.log.debug(\"Verification on cooldown\", {\n          type: entry.type,\n          target: entry.target,\n          remainingSeconds: remainingCooldown,\n        });\n        throw new BadRequestError(\n          `Verification is on cooldown for ${remainingCooldown} seconds`,\n        );\n      }\n    }\n\n    const token = this.generateToken(entry.type);\n\n    const verification = await this.verificationRepository.create({\n      type: entry.type,\n      target: entry.target,\n      purpose: entry.purpose ?? \"default\",\n      code: this.hashCode(token),\n      createdAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification created\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n      expiresInSeconds: settings.codeExpiration,\n    });\n\n    return {\n      token,\n      codeExpiration: settings.codeExpiration,\n      verificationCooldown: settings.verificationCooldown,\n      maxVerificationAttempts: settings.maxAttempts,\n    };\n  }\n\n  public async verifyCode(\n    entry: VerificationEntry,\n    code: string,\n  ): Promise<ValidateVerificationCodeResponse> {\n    this.log.trace(\"Verifying code\", {\n      type: entry.type,\n      target: entry.target,\n    });\n\n    const settings = this.verificationParameters.get(entry.type);\n\n    const verification = await this.findByEntry(entry);\n    if (verification.verifiedAt) {\n      // Already verified — but STILL require the submitted code to match the\n      // record. Short-circuiting on `verifiedAt` alone means any code (or a\n      // blank one) passes once the target has been verified, so any flow\n      // re-using verifyCode as an authz gate would accept an attacker's guess.\n      if (verification.code !== this.hashCode(code)) {\n        this.log.warn(\"Invalid code submitted for already-verified entry\", {\n          id: verification.id,\n          type: entry.type,\n          target: entry.target,\n        });\n        throw new BadRequestError(\"Invalid verification code\");\n      }\n      this.log.debug(\"Verification already verified\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        verifiedAt: verification.verifiedAt,\n      });\n      return { ok: true, alreadyVerified: true };\n    }\n\n    // DO NOT DELETE THE VERIFICATION WHEN IT IS REJECTED,\n    // or we won't be able to cooldown the verification\n\n    const now = this.dateTimeProvider.now();\n    const expirationDate = this.dateTimeProvider\n      .of(verification.createdAt)\n      .add(settings.codeExpiration, \"seconds\");\n\n    if (now > expirationDate) {\n      this.log.warn(\"Verification code expired\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        createdAt: verification.createdAt,\n        expiredAt: expirationDate.toISOString(),\n      });\n      throw new BadRequestError(\"Verification code has expired\");\n    }\n\n    if (verification.attempts >= settings.maxAttempts) {\n      this.log.warn(\"Verification locked due to max attempts\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: verification.attempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      throw new BadRequestError(\n        \"Maximum number of attempts reached - verification is locked\",\n      );\n    }\n\n    if (verification.code !== this.hashCode(code)) {\n      const newAttempts = verification.attempts + 1;\n      this.log.warn(\"Invalid verification code\", {\n        id: verification.id,\n        type: entry.type,\n        target: entry.target,\n        attempts: newAttempts,\n        maxAttempts: settings.maxAttempts,\n      });\n      await this.verificationRepository.updateById(verification.id, {\n        attempts: newAttempts,\n      });\n      throw new BadRequestError(\"Invalid verification code\");\n    }\n\n    await this.verificationRepository.updateById(verification.id, {\n      verifiedAt: this.dateTimeProvider.nowISOString(),\n    });\n\n    this.log.info(\"Verification code verified\", {\n      id: verification.id,\n      type: entry.type,\n      target: entry.target,\n    });\n\n    return { ok: true };\n  }\n\n  public hashCode(code: string): string {\n    return createHash(\"sha256\").update(code).digest(\"hex\");\n  }\n\n  public generateToken(type: VerificationTypeEnum): string {\n    if (type === \"code\") {\n      const settings = this.verificationParameters.get(\"code\");\n      return randomInt(0, 1_000_000)\n        .toString()\n        .padStart(settings.codeLength, \"0\");\n    } else if (type === \"link\") {\n      return this.crypto.randomUUID();\n    }\n\n    throw new BadRequestError(`Invalid verification type: ${type}`);\n  }\n}\n\nexport interface VerificationEntry {\n  type: VerificationTypeEnum;\n  target: string;\n\n  /**\n   * Logical purpose bucket. Cooldown and daily-limit checks are scoped to\n   * `(type, target, purpose)`, so flows that share a `(type, target)` pair\n   * — e.g. email verification and password reset, both `type: \"code\"` on the\n   * same email — get independent rate-limit windows instead of colliding.\n   *\n   * Defaults to `\"default\"` when omitted (back-compatible with callers and\n   * rows that predate this field).\n   */\n  purpose?: string;\n}\n","import { $inject, z } from \"alepha\";\nimport { $action } from \"alepha/server\";\nimport { validateVerificationCodeResponseSchema } from \"../schemas/validateVerificationCodeResponseSchema.ts\";\nimport { verificationTypeEnumSchema } from \"../schemas/verificationTypeEnumSchema.ts\";\nimport { VerificationService } from \"../services/VerificationService.ts\";\n\nexport class VerificationController {\n  protected readonly verificationService = $inject(VerificationService);\n\n  public readonly url = \"/verifications\";\n  public readonly group = \"verifications\";\n\n  // SECURITY: there is deliberately NO public \"request a code\" action here.\n  // `VerificationService.createVerification` returns the raw token so that the\n  // *caller* can deliver it out-of-band (email/SMS). Exposing that over HTTP —\n  // as a previous `requestVerificationCode` action did, with no `$secure` — let\n  // anyone request a code for any target and read it straight from the response,\n  // defeating verification entirely. Verification requests are driven\n  // server-side (RegistrationService / UserService call the service directly and\n  // send the code); only code *submission* is public, below.\n  public readonly validateVerificationCode = $action({\n    path: `${this.url}/:type/validate`,\n    group: this.group,\n    method: \"POST\",\n    schema: {\n      params: z.object({\n        type: verificationTypeEnumSchema,\n      }),\n      body: z.object({\n        target: z.text(),\n        token: z.text({\n          description:\n            \"The verification token (6-digit code for phone, UUID for email).\",\n        }),\n      }),\n      response: validateVerificationCodeResponseSchema,\n    },\n    handler: async ({ body, params }) => {\n      return this.verificationService.verifyCode(\n        {\n          type: params.type,\n          target: body.target,\n        },\n        body.token,\n      );\n    },\n  });\n}\n","import { $inject } from \"alepha\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $repository } from \"alepha/orm\";\nimport { $scheduler } from \"alepha/scheduler\";\nimport { verifications } from \"../entities/verifications.ts\";\nimport { VerificationParameters } from \"../parameters/VerificationParameters.ts\";\n\nexport class VerificationJobs {\n  protected readonly verificationRepository = $repository(verifications);\n  protected readonly verificationParameters = $inject(VerificationParameters);\n  protected readonly dateTimeProvider = $inject(DateTimeProvider);\n\n  public readonly cleanExpired = $scheduler({\n    name: \"api:verifications:cleanExpired\",\n    cron: \"0 * * * *\", // Hourly at minute 0\n    description: \"Clean expired verifications\",\n    handler: async () => {\n      const purgeDays = this.verificationParameters.get(\"purgeDays\");\n      if (purgeDays <= 0) {\n        return; // Auto deletion is disabled\n      }\n\n      const dayMs = 24 * 60 * 60 * 1000;\n      const purgeThreshold =\n        this.dateTimeProvider.nowMillis() - purgeDays * dayMs;\n\n      await this.verificationRepository.deleteMany({\n        createdAt: {\n          lt: this.dateTimeProvider.of(purgeThreshold).toISOString(),\n        },\n      });\n    },\n  });\n}\n","import type { Static } from \"alepha\";\nimport { z } from \"alepha\";\n\nexport const requestVerificationCodeResponseSchema = z.object({\n  token: z\n    .string()\n    .describe(\n      \"The verification token (6-digit code for phone, UUID for email). The caller should send this to the user via their preferred notification method.\",\n    ),\n  codeExpiration: z\n    .integer()\n    .describe(\"Time in seconds before your verification token expires.\"),\n  verificationCooldown: z\n    .integer()\n    .describe(\n      \"Cooldown period in seconds before you can request another verification.\",\n    ),\n  maxVerificationAttempts: z\n    .integer()\n    .describe(\n      \"Maximum number of verification attempts allowed before the token is locked.\",\n    ),\n});\n\nexport type RequestVerificationResponse = Static<\n  typeof requestVerificationCodeResponseSchema\n>;\n","import { $module } from \"alepha\";\nimport { VerificationController } from \"./controllers/VerificationController.ts\";\nimport { VerificationJobs } from \"./jobs/VerificationJobs.ts\";\nimport { VerificationParameters } from \"./parameters/VerificationParameters.ts\";\nimport { VerificationService } from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/VerificationController.ts\";\nexport * from \"./entities/verifications.ts\";\nexport * from \"./jobs/VerificationJobs.ts\";\nexport * from \"./parameters/VerificationParameters.ts\";\nexport * from \"./schemas/requestVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/validateVerificationCodeResponseSchema.ts\";\nexport * from \"./schemas/verificationTypeEnumSchema.ts\";\nexport * from \"./services/VerificationService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Email and phone verification workflows.\n *\n * **Features:**\n * - Verification token generation\n * - Verification code sending\n * - Verification completion tracking\n * - Resend functionality\n *\n * @module alepha.api.verifications\n */\nexport const AlephaApiVerification = $module({\n  name: \"alepha.api.verifications\",\n  services: [\n    VerificationController,\n    VerificationJobs,\n    VerificationService,\n    VerificationParameters,\n  ],\n});\n"],"mappings":";;;;;;;;;AAGA,MAAa,yCAAyC,EAAE,OAAO;CAC7D,IAAI,EACD,QAAQ,CAAC,CACT,SAAS,oDAAoD;CAChE,iBAAiB,EACd,QAAQ,CAAC,CACT,SAAS,oDAAoD,CAAC,CAC9D,SAAS;AACd,CAAC;;;ACRD,MAAa,6BAA6B,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;;;ACEjE,MAAa,gBAAgB,QAAQ;CACnC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,OAAO,CAAC;EAE5B,WAAW,GAAG,UAAU;EAExB,WAAW,GAAG,UAAU;EAExB,SAAS,GAAG,QAAQ;EAEpB,MAAM;EAEN,QAAQ,EAAE,KAAK,EACb,aAAa,iDACf,CAAC;EAED,SAAS,GAAG,QACV,EAAE,KAAK,EACL,aACE,oOACJ,CAAC,GACD,SACF;EAEA,MAAM,EAAE,KAAK,EACX,aAAa,mDACf,CAAC;EAED,YAAY,EACT,SAAS,CAAC,CACV,SAAS,mCAAmC,CAAC,CAC7C,SAAS;EAEZ,UAAU,GAAG,QACX,EACG,QAAQ,CAAC,CACT,SAAS,oDAAoD,GAChE,CACF;CACF,CAAC;CACD,SAAS,CACP,aACA,EACE,SAAS,CAAC,UAAU,MAAM,EAC5B,CACF;AACF,CAAC;AAED,MAAa,2BAA2B,cAAc;AACtD,MAAa,iCAAiC,cAAc;;;;;;AE5C5D,MAAa,sBAAsB,MAAM;CACvC,MAAM;CACN,QDVwC,EAAE,OAAO;EACjD,MAAM,EACH,OAAO;GACN,aAAa,EACV,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,SACC,6DACF;GACF,YAAY,EACT,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,SAAS,kCAAkC;GAC9C,gBAAgB,EACb,QAAQ,CAAC,CACT,IAAI,EAAE,CAAC,CACP,IAAI,IAAI,CAAC,CACT,SAAS,uDAAuD;GACnE,sBAAsB,EACnB,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,IAAI,CAAC,CACT,SAAS,0DAA0D;GACtE,aAAa,EACV,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SACC,gEACF;EACJ,CAAC,CAAC,CACD,SAAS,0CAA0C;EACtD,MAAM,EACH,OAAO;GACN,aAAa,EACV,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,EAAE,CAAC,CACP,SACC,6DACF;GACF,gBAAgB,EACb,QAAQ,CAAC,CACT,IAAI,EAAE,CAAC,CACP,IAAI,IAAI,CAAC,CACT,SAAS,wDAAwD;GACpE,sBAAsB,EACnB,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,IAAI,CAAC,CACT,SAAS,0DAA0D;GACtE,aAAa,EACV,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SACC,gEACF;EACJ,CAAC,CAAC,CACD,SAAS,0CAA0C;EACtD,WAAW,EACR,QAAQ,CAAC,CACT,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,SACC,gHACF;CACJ,CC3DU;CACR,SAAS;EACP,MAAM;GACJ,aAAa;GACb,YAAY;GACZ,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;EACf;EACA,MAAM;GACJ,aAAa;GACb,gBAAgB;GAChB,sBAAsB;GACtB,aAAa;EACf;EACA,WAAW;CACb;AACF,CAAC;AAYD,IAAa,yBAAb,MAAoC;CAClC,UAA6B,OAAO,mBAAmB;CAEvD,IACE,KACyB;EACzB,OAAO,KAAK,QAAQ;CACtB;AACF;;;AClCA,IAAa,sBAAb,MAAiC;CAC/B,MAAyB,QAAQ;CACjC,mBAAsC,QAAQ,gBAAgB;CAC9D,SAA4B,QAAQ,cAAc;CAClD,yBAA4C,QAAQ,sBAAsB;CAC1E,yBAA4C,YAAY,aAAa;CAErE,MAAa,YACX,OAC6B;EAC7B,KAAK,IAAI,MAAM,iCAAiC;GAC9C,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,UAAU,MAAM,KAAK,uBAAuB,SAAS;GACzD,OAAO;GACP,SAAS;IACP,QAAQ;IACR,WAAW;GACb;GACA,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,KAAK;IACvB,QAAQ,EAAE,IAAI,MAAM,OAAO;IAC3B,SAAS,EAAE,IAAI,MAAM,WAAW,UAAU;GAC5C;EACF,CAAC;EAED,IAAI,QAAQ,WAAW,GAAG;GACxB,KAAK,IAAI,MAAM,gCAAgC;IAC7C,MAAM,MAAM;IACZ,QAAQ,MAAM;GAChB,CAAC;GACD,MAAM,IAAI,cAAc,8BAA8B;EACxD;EAEA,KAAK,IAAI,MAAM,4BAA4B;GACzC,IAAI,QAAQ,EAAE,CAAC;GACf,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,QAAQ;CACjB;CAEA,mBAA0B,OAA0B;EAClD,KAAK,IAAI,MAAM,yCAAyC;GACtD,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,KAAK,uBAAuB,SAAS;GAC1C,SAAS;IACP,QAAQ;IACR,WAAW;GACb;GACA,OAAO;IACL,MAAM,EAAE,IAAI,MAAM,KAAK;IACvB,QAAQ,EAAE,IAAI,MAAM,OAAO;IAC3B,SAAS,EAAE,IAAI,MAAM,WAAW,UAAU;IAC1C,WAAW,EACT,KAAK,KAAK,iBAAiB,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,YAAY,EAC9D;GACF;EACF,CAAC;CACH;;;;;;CAOA,MAAa,mBACX,OACsC;EACtC,KAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,IAAI;EAE3D,MAAM,UAAU,MAAM,KAAK,mBAAmB,KAAK;EACnD,IAAI,QAAQ,UAAU,SAAS,aAAa;GAC1C,KAAK,IAAI,KAAK,oCAAoC;IAChD,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,OAAO,SAAS;IAChB,OAAO,QAAQ;GACjB,CAAC;GACD,MAAM,IAAI,gBACR,4DAA4D,SAAS,YAAY,EACnF;EACF;EAEA,MAAM,uBAAuB,QAAQ;EACrC,IAAI,sBAAsB;GAMxB,MAAM,UALS,KAAK,iBAAiB,IAAI,CAAC,CAAC,KAKtB,IAJA,KAAK,iBACvB,GAAG,qBAAqB,SAAS,CAAC,CAClC,KAEiC;GACpC,IAAI,UAAU,SAAS,sBAAsB;IAC3C,MAAM,oBAAoB,KAAK,MAC7B,SAAS,uBAAuB,OAClC;IACA,KAAK,IAAI,MAAM,4BAA4B;KACzC,MAAM,MAAM;KACZ,QAAQ,MAAM;KACd,kBAAkB;IACpB,CAAC;IACD,MAAM,IAAI,gBACR,mCAAmC,kBAAkB,SACvD;GACF;EACF;EAEA,MAAM,QAAQ,KAAK,cAAc,MAAM,IAAI;EAE3C,MAAM,eAAe,MAAM,KAAK,uBAAuB,OAAO;GAC5D,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,SAAS,MAAM,WAAW;GAC1B,MAAM,KAAK,SAAS,KAAK;GACzB,WAAW,KAAK,iBAAiB,aAAa;EAChD,CAAC;EAED,KAAK,IAAI,KAAK,wBAAwB;GACpC,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;GACd,kBAAkB,SAAS;EAC7B,CAAC;EAED,OAAO;GACL;GACA,gBAAgB,SAAS;GACzB,sBAAsB,SAAS;GAC/B,yBAAyB,SAAS;EACpC;CACF;CAEA,MAAa,WACX,OACA,MAC2C;EAC3C,KAAK,IAAI,MAAM,kBAAkB;GAC/B,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM,IAAI;EAE3D,MAAM,eAAe,MAAM,KAAK,YAAY,KAAK;EACjD,IAAI,aAAa,YAAY;GAK3B,IAAI,aAAa,SAAS,KAAK,SAAS,IAAI,GAAG;IAC7C,KAAK,IAAI,KAAK,qDAAqD;KACjE,IAAI,aAAa;KACjB,MAAM,MAAM;KACZ,QAAQ,MAAM;IAChB,CAAC;IACD,MAAM,IAAI,gBAAgB,2BAA2B;GACvD;GACA,KAAK,IAAI,MAAM,iCAAiC;IAC9C,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,YAAY,aAAa;GAC3B,CAAC;GACD,OAAO;IAAE,IAAI;IAAM,iBAAiB;GAAK;EAC3C;EAKA,MAAM,MAAM,KAAK,iBAAiB,IAAI;EACtC,MAAM,iBAAiB,KAAK,iBACzB,GAAG,aAAa,SAAS,CAAC,CAC1B,IAAI,SAAS,gBAAgB,SAAS;EAEzC,IAAI,MAAM,gBAAgB;GACxB,KAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,WAAW,aAAa;IACxB,WAAW,eAAe,YAAY;GACxC,CAAC;GACD,MAAM,IAAI,gBAAgB,+BAA+B;EAC3D;EAEA,IAAI,aAAa,YAAY,SAAS,aAAa;GACjD,KAAK,IAAI,KAAK,2CAA2C;IACvD,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU,aAAa;IACvB,aAAa,SAAS;GACxB,CAAC;GACD,MAAM,IAAI,gBACR,6DACF;EACF;EAEA,IAAI,aAAa,SAAS,KAAK,SAAS,IAAI,GAAG;GAC7C,MAAM,cAAc,aAAa,WAAW;GAC5C,KAAK,IAAI,KAAK,6BAA6B;IACzC,IAAI,aAAa;IACjB,MAAM,MAAM;IACZ,QAAQ,MAAM;IACd,UAAU;IACV,aAAa,SAAS;GACxB,CAAC;GACD,MAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,UAAU,YACZ,CAAC;GACD,MAAM,IAAI,gBAAgB,2BAA2B;EACvD;EAEA,MAAM,KAAK,uBAAuB,WAAW,aAAa,IAAI,EAC5D,YAAY,KAAK,iBAAiB,aAAa,EACjD,CAAC;EAED,KAAK,IAAI,KAAK,8BAA8B;GAC1C,IAAI,aAAa;GACjB,MAAM,MAAM;GACZ,QAAQ,MAAM;EAChB,CAAC;EAED,OAAO,EAAE,IAAI,KAAK;CACpB;CAEA,SAAgB,MAAsB;EACpC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK;CACvD;CAEA,cAAqB,MAAoC;EACvD,IAAI,SAAS,QAAQ;GACnB,MAAM,WAAW,KAAK,uBAAuB,IAAI,MAAM;GACvD,OAAO,UAAU,GAAG,GAAS,CAAC,CAC3B,SAAS,CAAC,CACV,SAAS,SAAS,YAAY,GAAG;EACtC,OAAO,IAAI,SAAS,QAClB,OAAO,KAAK,OAAO,WAAW;EAGhC,MAAM,IAAI,gBAAgB,8BAA8B,MAAM;CAChE;AACF;;;ACvQA,IAAa,yBAAb,MAAoC;CAClC,sBAAyC,QAAQ,mBAAmB;CAEpE,MAAsB;CACtB,QAAwB;CAUxB,2BAA2C,QAAQ;EACjD,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,QAAQ;EACR,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,MAAM,2BACR,CAAC;GACD,MAAM,EAAE,OAAO;IACb,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK,EACZ,aACE,mEACJ,CAAC;GACH,CAAC;GACD,UAAU;EACZ;EACA,SAAS,OAAO,EAAE,MAAM,aAAa;GACnC,OAAO,KAAK,oBAAoB,WAC9B;IACE,MAAM,OAAO;IACb,QAAQ,KAAK;GACf,GACA,KAAK,KACP;EACF;CACF,CAAC;AACH;;;ACxCA,IAAa,mBAAb,MAA8B;CAC5B,yBAA4C,YAAY,aAAa;CACrE,yBAA4C,QAAQ,sBAAsB;CAC1E,mBAAsC,QAAQ,gBAAgB;CAE9D,eAA+B,WAAW;EACxC,MAAM;EACN,MAAM;EACN,aAAa;EACb,SAAS,YAAY;GACnB,MAAM,YAAY,KAAK,uBAAuB,IAAI,WAAW;GAC7D,IAAI,aAAa,GACf;GAIF,MAAM,iBACJ,KAAK,iBAAiB,UAAU,IAAI,aAFxB,OAAU,KAAK;GAI7B,MAAM,KAAK,uBAAuB,WAAW,EAC3C,WAAW,EACT,IAAI,KAAK,iBAAiB,GAAG,cAAc,CAAC,CAAC,YAAY,EAC3D,EACF,CAAC;EACH;CACF,CAAC;AACH;;;AC9BA,MAAa,wCAAwC,EAAE,OAAO;CAC5D,OAAO,EACJ,OAAO,CAAC,CACR,SACC,mJACF;CACF,gBAAgB,EACb,QAAQ,CAAC,CACT,SAAS,yDAAyD;CACrE,sBAAsB,EACnB,QAAQ,CAAC,CACT,SACC,yEACF;CACF,yBAAyB,EACtB,QAAQ,CAAC,CACT,SACC,6EACF;AACJ,CAAC;;;;;;;;;;;;;;ACQD,MAAa,wBAAwB,QAAQ;CAC3C,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;CACF;AACF,CAAC"}

package/dist/background/index.d.ts

@@ -1,5 +1,4 @@
 import { Alepha } from "alepha";
-
 //#region ../../src/background/providers/BackgroundTaskProvider.d.ts
 /**
  * Runs fire-and-forget work that should outlive the request that scheduled it

package/dist/background/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.ts"],"mappings":";;;;;AAmBA;;;;;;;;;;;;;;cAAa,sBAAA;EAAA,mBACQ,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,0BAAG,MAAA;EAGI;EAAA,mBAAP,OAAA,EAAO,GAAA,CAAA,OAAA;EAQS;;;;;;EAA5B,KAAA,CAAM,IAAA,kBAAsB,OAAA;EAiChB;;;AAAM;;EAAN,UAVT,SAAA,CAAU,QAAA,EAAU,OAAA;;ACpChC;;;ED0Ce,KAAA,IAAS,OAAA;EAAA,mBAIH,MAAA,mBAAM,aAAA;AAAA;;;;;AA9C3B;;;;;;;;;;;;;;;cCAa,6BAAA,SAAsC,sBAAsB;EAAA,UACpD,SAAA,CAAU,OAAA,EAAS,OAAA;AAAA;;;;ADDxC;;;;;;;;;;;;;;;;;;;;;;cEca,gBAAA,mBAAgB,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;cAmBa;qBACQ,QAAM;qBACN,6BAAG;;qBAGH,SAAO,IAAA;;;;;;;EAQnB,MAAM,sBAAsB;;;;;;YAuBzB,UAAU,UAAU;;;;;EAMjB,SAAS;qBAIH,yBAAM;;;;;;;;;;;;;;;;;;;;;cC9Cd,sCAAsC;YAC9B,UAAU,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;cCa3B,mCAAgB,yBAAA"}

package/dist/background/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\n\n/**\n * Runs fire-and-forget work that should outlive the request that scheduled it\n * (sending a welcome email, an audit write, a webhook) without blocking the\n * response.\n *\n * On a long-lived runtime (Node, Vercel) the event loop keeps the promise\n * alive, so the only job here is to detach the task from the caller and never\n * leak an unhandled rejection. On serverless/edge runtimes that freeze the\n * isolate once the response is returned (Cloudflare Workers) the\n * {@link WorkerdBackgroundTaskProvider} variant additionally wraps the task in\n * `executionCtx.waitUntil` — call sites stay platform-agnostic and only ever\n * call {@link defer}.\n *\n * In-flight tasks are tracked and awaited on shutdown (`flush`), so graceful\n * stop, `run({ once })`, and unit tests don't silently drop work.\n */\nexport class BackgroundTaskProvider {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n\n  /** In-flight deferred tasks, awaited on stop. */\n  protected readonly pending = new Set<Promise<void>>();\n\n  /**\n   * Schedule `task` to run in the background. Returns immediately — the task is\n   * detached onto a microtask, so the caller (e.g. an HTTP handler) is never\n   * blocked and a synchronous throw inside `task` can't escape into it. Errors\n   * are caught and logged.\n   */\n  public defer(task: () => unknown | Promise<unknown>): void {\n    const promise = Promise.resolve()\n      .then(task)\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          this.log.warn(\"Background task failed\", error as Error);\n        },\n      );\n\n    this.pending.add(promise);\n    void promise.finally(() => {\n      this.pending.delete(promise);\n    });\n\n    this.keepAlive(promise);\n  }\n\n  /**\n   * Hook for platform variants to keep the runtime alive until `promise`\n   * settles. No-op on long-lived runtimes (the event loop already does). The\n   * Cloudflare variant overrides this with `executionCtx.waitUntil`.\n   */\n  protected keepAlive(_promise: Promise<void>): void {}\n\n  /**\n   * Await all in-flight tasks (best-effort). Called on `stop` so shutdown and\n   * tests don't drop deferred work.\n   */\n  public async flush(): Promise<void> {\n    await Promise.allSettled([...this.pending]);\n  }\n\n  protected readonly onStop = $hook({\n    on: \"stop\",\n    handler: () => this.flush(),\n  });\n}\n","import { BackgroundTaskProvider } from \"./BackgroundTaskProvider.ts\";\n\n/**\n * Cloudflare Workers variant of {@link BackgroundTaskProvider}.\n *\n * Cloudflare freezes the isolate once the response is returned, so a plain\n * fire-and-forget promise would be killed mid-flight. The platform exposes a\n * per-request `executionCtx.waitUntil(promise)` that keeps the isolate alive\n * until `promise` settles; the request entry point (generated by the Cloudflare\n * build) stashes it in the Alepha store under `cloudflare.waitUntil`.\n *\n * This is the ONE place that reads that key — call sites use\n * {@link BackgroundTaskProvider.defer} and stay platform-agnostic.\n *\n * `waitUntil` is request-scoped, so `defer()` must be called within the\n * request's async context (which is where background work is scheduled). Outside\n * a request (e.g. a cron tick) the key is absent and we fall back to the base\n * fire-and-track behaviour.\n */\nexport class WorkerdBackgroundTaskProvider extends BackgroundTaskProvider {\n  protected override keepAlive(promise: Promise<void>): void {\n    const waitUntil = this.alepha.store.get(\"cloudflare.waitUntil\") as\n      | ((p: Promise<unknown>) => void)\n      | undefined;\n\n    if (typeof waitUntil !== \"function\") {\n      // No request-scoped execution context (cron / outside a request). The\n      // base tracking + a long-lived isolate keep the promise alive.\n      return;\n    }\n\n    try {\n      waitUntil(promise);\n    } catch (error) {\n      // The runtime rejects waitUntil if called outside a request scope; the\n      // promise still runs, just without the isolate-alive guarantee.\n      this.log.debug(\n        \"waitUntil rejected — falling back to fire-and-track\",\n        error as Error,\n      );\n    }\n  }\n}\n","import { $module } from \"alepha\";\nimport { BackgroundTaskProvider } from \"./providers/BackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/BackgroundTaskProvider.ts\";\nexport * from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Fire-and-forget background work that should outlive the request that\n * scheduled it, without blocking the response.\n *\n * Inject {@link BackgroundTaskProvider} and call `defer(() => …)`:\n *\n * ```ts\n * protected readonly background = $inject(BackgroundTaskProvider);\n *\n * createUser = $action({ handler: async ({ body }) => {\n *   const user = await this.users.create(body);\n *   this.background.defer(() => this.email.send(welcome(user))); // don't block\n *   return user;\n * }});\n * ```\n *\n * On Node/Vercel the event loop keeps the task alive. On Cloudflare Workers the\n * `workerd` build swaps in {@link WorkerdBackgroundTaskProvider}, which wraps\n * the task in `executionCtx.waitUntil` so the isolate isn't frozen at response\n * time — the call site is identical either way.\n *\n * @module alepha.background\n */\nexport const AlephaBackground = $module({\n  name: \"alepha.background\",\n  services: [BackgroundTaskProvider],\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,yBAAb,MAAoC;CAClC,SAA4B,QAAQ,MAAM;CAC1C,MAAyB,QAAQ;;CAGjC,0BAA6B,IAAI,IAAmB;;;;;;;CAQpD,MAAa,MAA8C;EACzD,MAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,IAAI,EACT,WACO,KAAA,IACL,UAAmB;GAClB,KAAK,IAAI,KAAK,0BAA0B,KAAc;EACxD,CACF;EAEF,KAAK,QAAQ,IAAI,OAAO;EACxB,QAAa,cAAc;GACzB,KAAK,QAAQ,OAAO,OAAO;EAC7B,CAAC;EAED,KAAK,UAAU,OAAO;CACxB;;;;;;CAOA,UAAoB,UAA+B,CAAC;;;;;CAMpD,MAAa,QAAuB;EAClC,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;CAC5C;CAEA,SAA4B,MAAM;EAChC,IAAI;EACJ,eAAe,KAAK,MAAM;CAC5B,CAAC;AACH;;;;;;;;;;;;;;;;;;;;AClDA,IAAa,gCAAb,cAAmD,uBAAuB;CACxE,UAA6B,SAA8B;EACzD,MAAM,YAAY,KAAK,OAAO,MAAM,IAAI,sBAAsB;EAI9D,IAAI,OAAO,cAAc,YAGvB;EAGF,IAAI;GACF,UAAU,OAAO;EACnB,SAAS,OAAO;GAGd,KAAK,IAAI,MACP,uDACA,KACF;EACF;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;ACTA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,sBAAsB;AACnC,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\n\n/**\n * Runs fire-and-forget work that should outlive the request that scheduled it\n * (sending a welcome email, an audit write, a webhook) without blocking the\n * response.\n *\n * On a long-lived runtime (Node, Vercel) the event loop keeps the promise\n * alive, so the only job here is to detach the task from the caller and never\n * leak an unhandled rejection. On serverless/edge runtimes that freeze the\n * isolate once the response is returned (Cloudflare Workers) the\n * {@link WorkerdBackgroundTaskProvider} variant additionally wraps the task in\n * `executionCtx.waitUntil` — call sites stay platform-agnostic and only ever\n * call {@link defer}.\n *\n * In-flight tasks are tracked and awaited on shutdown (`flush`), so graceful\n * stop, `run({ once })`, and unit tests don't silently drop work.\n */\nexport class BackgroundTaskProvider {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n\n  /** In-flight deferred tasks, awaited on stop. */\n  protected readonly pending = new Set<Promise<void>>();\n\n  /**\n   * Schedule `task` to run in the background. Returns immediately — the task is\n   * detached onto a microtask, so the caller (e.g. an HTTP handler) is never\n   * blocked and a synchronous throw inside `task` can't escape into it. Errors\n   * are caught and logged.\n   */\n  public defer(task: () => unknown | Promise<unknown>): void {\n    const promise = Promise.resolve()\n      .then(task)\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          this.log.warn(\"Background task failed\", error as Error);\n        },\n      );\n\n    this.pending.add(promise);\n    void promise.finally(() => {\n      this.pending.delete(promise);\n    });\n\n    this.keepAlive(promise);\n  }\n\n  /**\n   * Hook for platform variants to keep the runtime alive until `promise`\n   * settles. No-op on long-lived runtimes (the event loop already does). The\n   * Cloudflare variant overrides this with `executionCtx.waitUntil`.\n   */\n  protected keepAlive(_promise: Promise<void>): void {}\n\n  /**\n   * Await all in-flight tasks (best-effort). Called on `stop` so shutdown and\n   * tests don't drop deferred work.\n   */\n  public async flush(): Promise<void> {\n    await Promise.allSettled([...this.pending]);\n  }\n\n  protected readonly onStop = $hook({\n    on: \"stop\",\n    handler: () => this.flush(),\n  });\n}\n","import { BackgroundTaskProvider } from \"./BackgroundTaskProvider.ts\";\n\n/**\n * Cloudflare Workers variant of {@link BackgroundTaskProvider}.\n *\n * Cloudflare freezes the isolate once the response is returned, so a plain\n * fire-and-forget promise would be killed mid-flight. The platform exposes a\n * per-request `executionCtx.waitUntil(promise)` that keeps the isolate alive\n * until `promise` settles; the request entry point (generated by the Cloudflare\n * build) stashes it in the Alepha store under `cloudflare.waitUntil`.\n *\n * This is the ONE place that reads that key — call sites use\n * {@link BackgroundTaskProvider.defer} and stay platform-agnostic.\n *\n * `waitUntil` is request-scoped, so `defer()` must be called within the\n * request's async context (which is where background work is scheduled). Outside\n * a request (e.g. a cron tick) the key is absent and we fall back to the base\n * fire-and-track behaviour.\n */\nexport class WorkerdBackgroundTaskProvider extends BackgroundTaskProvider {\n  protected override keepAlive(promise: Promise<void>): void {\n    const waitUntil = this.alepha.store.get(\"cloudflare.waitUntil\") as\n      | ((p: Promise<unknown>) => void)\n      | undefined;\n\n    if (typeof waitUntil !== \"function\") {\n      // No request-scoped execution context (cron / outside a request). The\n      // base tracking + a long-lived isolate keep the promise alive.\n      return;\n    }\n\n    try {\n      waitUntil(promise);\n    } catch (error) {\n      // The runtime rejects waitUntil if called outside a request scope; the\n      // promise still runs, just without the isolate-alive guarantee.\n      this.log.debug(\n        \"waitUntil rejected — falling back to fire-and-track\",\n        error as Error,\n      );\n    }\n  }\n}\n","import { $module } from \"alepha\";\nimport { BackgroundTaskProvider } from \"./providers/BackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/BackgroundTaskProvider.ts\";\nexport * from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Fire-and-forget background work that should outlive the request that\n * scheduled it, without blocking the response.\n *\n * Inject {@link BackgroundTaskProvider} and call `defer(() => …)`:\n *\n * ```ts\n * protected readonly background = $inject(BackgroundTaskProvider);\n *\n * createUser = $action({ handler: async ({ body }) => {\n *   const user = await this.users.create(body);\n *   this.background.defer(() => this.email.send(welcome(user))); // don't block\n *   return user;\n * }});\n * ```\n *\n * On Node/Vercel the event loop keeps the task alive. On Cloudflare Workers the\n * `workerd` build swaps in {@link WorkerdBackgroundTaskProvider}, which wraps\n * the task in `executionCtx.waitUntil` so the isolate isn't frozen at response\n * time — the call site is identical either way.\n *\n * @module alepha.background\n */\nexport const AlephaBackground = $module({\n  name: \"alepha.background\",\n  services: [BackgroundTaskProvider],\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,yBAAb,MAAoC;CAClC,SAA4B,QAAQ,MAAM;CAC1C,MAAyB,QAAQ;;CAGjC,0BAA6B,IAAI,IAAmB;;;;;;;CAQpD,MAAa,MAA8C;EACzD,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAC9B,KAAK,IAAI,CAAC,CACV,WACO,KAAA,IACL,UAAmB;GAClB,KAAK,IAAI,KAAK,0BAA0B,KAAc;EACxD,CACF;EAEF,KAAK,QAAQ,IAAI,OAAO;EACxB,QAAa,cAAc;GACzB,KAAK,QAAQ,OAAO,OAAO;EAC7B,CAAC;EAED,KAAK,UAAU,OAAO;CACxB;;;;;;CAOA,UAAoB,UAA+B,CAAC;;;;;CAMpD,MAAa,QAAuB;EAClC,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;CAC5C;CAEA,SAA4B,MAAM;EAChC,IAAI;EACJ,eAAe,KAAK,MAAM;CAC5B,CAAC;AACH;;;;;;;;;;;;;;;;;;;;AClDA,IAAa,gCAAb,cAAmD,uBAAuB;CACxE,UAA6B,SAA8B;EACzD,MAAM,YAAY,KAAK,OAAO,MAAM,IAAI,sBAAsB;EAI9D,IAAI,OAAO,cAAc,YAGvB;EAGF,IAAI;GACF,UAAU,OAAO;EACnB,SAAS,OAAO;GAGd,KAAK,IAAI,MACP,uDACA,KACF;EACF;CACF;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;ACTA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,sBAAsB;AACnC,CAAC"}

package/dist/background/index.workerd.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.workerd.js","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.workerd.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\n\n/**\n * Runs fire-and-forget work that should outlive the request that scheduled it\n * (sending a welcome email, an audit write, a webhook) without blocking the\n * response.\n *\n * On a long-lived runtime (Node, Vercel) the event loop keeps the promise\n * alive, so the only job here is to detach the task from the caller and never\n * leak an unhandled rejection. On serverless/edge runtimes that freeze the\n * isolate once the response is returned (Cloudflare Workers) the\n * {@link WorkerdBackgroundTaskProvider} variant additionally wraps the task in\n * `executionCtx.waitUntil` — call sites stay platform-agnostic and only ever\n * call {@link defer}.\n *\n * In-flight tasks are tracked and awaited on shutdown (`flush`), so graceful\n * stop, `run({ once })`, and unit tests don't silently drop work.\n */\nexport class BackgroundTaskProvider {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n\n  /** In-flight deferred tasks, awaited on stop. */\n  protected readonly pending = new Set<Promise<void>>();\n\n  /**\n   * Schedule `task` to run in the background. Returns immediately — the task is\n   * detached onto a microtask, so the caller (e.g. an HTTP handler) is never\n   * blocked and a synchronous throw inside `task` can't escape into it. Errors\n   * are caught and logged.\n   */\n  public defer(task: () => unknown | Promise<unknown>): void {\n    const promise = Promise.resolve()\n      .then(task)\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          this.log.warn(\"Background task failed\", error as Error);\n        },\n      );\n\n    this.pending.add(promise);\n    void promise.finally(() => {\n      this.pending.delete(promise);\n    });\n\n    this.keepAlive(promise);\n  }\n\n  /**\n   * Hook for platform variants to keep the runtime alive until `promise`\n   * settles. No-op on long-lived runtimes (the event loop already does). The\n   * Cloudflare variant overrides this with `executionCtx.waitUntil`.\n   */\n  protected keepAlive(_promise: Promise<void>): void {}\n\n  /**\n   * Await all in-flight tasks (best-effort). Called on `stop` so shutdown and\n   * tests don't drop deferred work.\n   */\n  public async flush(): Promise<void> {\n    await Promise.allSettled([...this.pending]);\n  }\n\n  protected readonly onStop = $hook({\n    on: \"stop\",\n    handler: () => this.flush(),\n  });\n}\n","import { BackgroundTaskProvider } from \"./BackgroundTaskProvider.ts\";\n\n/**\n * Cloudflare Workers variant of {@link BackgroundTaskProvider}.\n *\n * Cloudflare freezes the isolate once the response is returned, so a plain\n * fire-and-forget promise would be killed mid-flight. The platform exposes a\n * per-request `executionCtx.waitUntil(promise)` that keeps the isolate alive\n * until `promise` settles; the request entry point (generated by the Cloudflare\n * build) stashes it in the Alepha store under `cloudflare.waitUntil`.\n *\n * This is the ONE place that reads that key — call sites use\n * {@link BackgroundTaskProvider.defer} and stay platform-agnostic.\n *\n * `waitUntil` is request-scoped, so `defer()` must be called within the\n * request's async context (which is where background work is scheduled). Outside\n * a request (e.g. a cron tick) the key is absent and we fall back to the base\n * fire-and-track behaviour.\n */\nexport class WorkerdBackgroundTaskProvider extends BackgroundTaskProvider {\n  protected override keepAlive(promise: Promise<void>): void {\n    const waitUntil = this.alepha.store.get(\"cloudflare.waitUntil\") as\n      | ((p: Promise<unknown>) => void)\n      | undefined;\n\n    if (typeof waitUntil !== \"function\") {\n      // No request-scoped execution context (cron / outside a request). The\n      // base tracking + a long-lived isolate keep the promise alive.\n      return;\n    }\n\n    try {\n      waitUntil(promise);\n    } catch (error) {\n      // The runtime rejects waitUntil if called outside a request scope; the\n      // promise still runs, just without the isolate-alive guarantee.\n      this.log.debug(\n        \"waitUntil rejected — falling back to fire-and-track\",\n        error as Error,\n      );\n    }\n  }\n}\n","import { $module } from \"alepha\";\nimport { BackgroundTaskProvider } from \"./providers/BackgroundTaskProvider.ts\";\nimport { WorkerdBackgroundTaskProvider } from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/BackgroundTaskProvider.ts\";\nexport * from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cloudflare Workers build of {@link AlephaBackground}: swaps\n * {@link BackgroundTaskProvider} for {@link WorkerdBackgroundTaskProvider},\n * which keeps the isolate alive past the response via `executionCtx.waitUntil`.\n *\n * @module alepha.background\n */\nexport const AlephaBackground = $module({\n  name: \"alepha.background\",\n  services: [BackgroundTaskProvider],\n  variants: [WorkerdBackgroundTaskProvider],\n  register: (alepha) =>\n    alepha.with({\n      provide: BackgroundTaskProvider,\n      use: WorkerdBackgroundTaskProvider,\n    }),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,yBAAb,MAAoC;CAClC,SAA4B,QAAQ,MAAM;CAC1C,MAAyB,QAAQ;;CAGjC,0BAA6B,IAAI,IAAmB;;;;;;;CAQpD,MAAa,MAA8C;EACzD,MAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,IAAI,EACT,WACO,KAAA,IACL,UAAmB;GAClB,KAAK,IAAI,KAAK,0BAA0B,KAAc;EACxD,CACF;EAEF,KAAK,QAAQ,IAAI,OAAO;EACxB,QAAa,cAAc;GACzB,KAAK,QAAQ,OAAO,OAAO;EAC7B,CAAC;EAED,KAAK,UAAU,OAAO;CACxB;;;;;;CAOA,UAAoB,UAA+B,CAAC;;;;;CAMpD,MAAa,QAAuB;EAClC,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;CAC5C;CAEA,SAA4B,MAAM;EAChC,IAAI;EACJ,eAAe,KAAK,MAAM;CAC5B,CAAC;AACH;;;;;;;;;;;;;;;;;;;;AClDA,IAAa,gCAAb,cAAmD,uBAAuB;CACxE,UAA6B,SAA8B;EACzD,MAAM,YAAY,KAAK,OAAO,MAAM,IAAI,sBAAsB;EAI9D,IAAI,OAAO,cAAc,YAGvB;EAGF,IAAI;GACF,UAAU,OAAO;EACnB,SAAS,OAAO;GAGd,KAAK,IAAI,MACP,uDACA,KACF;EACF;CACF;AACF;;;;;;;;;;ACxBA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,sBAAsB;CACjC,UAAU,CAAC,6BAA6B;CACxC,WAAW,WACT,OAAO,KAAK;EACV,SAAS;EACT,KAAK;CACP,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.workerd.js","names":[],"sources":["../../src/background/providers/BackgroundTaskProvider.ts","../../src/background/providers/WorkerdBackgroundTaskProvider.ts","../../src/background/index.workerd.ts"],"sourcesContent":["import { $hook, $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\n\n/**\n * Runs fire-and-forget work that should outlive the request that scheduled it\n * (sending a welcome email, an audit write, a webhook) without blocking the\n * response.\n *\n * On a long-lived runtime (Node, Vercel) the event loop keeps the promise\n * alive, so the only job here is to detach the task from the caller and never\n * leak an unhandled rejection. On serverless/edge runtimes that freeze the\n * isolate once the response is returned (Cloudflare Workers) the\n * {@link WorkerdBackgroundTaskProvider} variant additionally wraps the task in\n * `executionCtx.waitUntil` — call sites stay platform-agnostic and only ever\n * call {@link defer}.\n *\n * In-flight tasks are tracked and awaited on shutdown (`flush`), so graceful\n * stop, `run({ once })`, and unit tests don't silently drop work.\n */\nexport class BackgroundTaskProvider {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n\n  /** In-flight deferred tasks, awaited on stop. */\n  protected readonly pending = new Set<Promise<void>>();\n\n  /**\n   * Schedule `task` to run in the background. Returns immediately — the task is\n   * detached onto a microtask, so the caller (e.g. an HTTP handler) is never\n   * blocked and a synchronous throw inside `task` can't escape into it. Errors\n   * are caught and logged.\n   */\n  public defer(task: () => unknown | Promise<unknown>): void {\n    const promise = Promise.resolve()\n      .then(task)\n      .then(\n        () => undefined,\n        (error: unknown) => {\n          this.log.warn(\"Background task failed\", error as Error);\n        },\n      );\n\n    this.pending.add(promise);\n    void promise.finally(() => {\n      this.pending.delete(promise);\n    });\n\n    this.keepAlive(promise);\n  }\n\n  /**\n   * Hook for platform variants to keep the runtime alive until `promise`\n   * settles. No-op on long-lived runtimes (the event loop already does). The\n   * Cloudflare variant overrides this with `executionCtx.waitUntil`.\n   */\n  protected keepAlive(_promise: Promise<void>): void {}\n\n  /**\n   * Await all in-flight tasks (best-effort). Called on `stop` so shutdown and\n   * tests don't drop deferred work.\n   */\n  public async flush(): Promise<void> {\n    await Promise.allSettled([...this.pending]);\n  }\n\n  protected readonly onStop = $hook({\n    on: \"stop\",\n    handler: () => this.flush(),\n  });\n}\n","import { BackgroundTaskProvider } from \"./BackgroundTaskProvider.ts\";\n\n/**\n * Cloudflare Workers variant of {@link BackgroundTaskProvider}.\n *\n * Cloudflare freezes the isolate once the response is returned, so a plain\n * fire-and-forget promise would be killed mid-flight. The platform exposes a\n * per-request `executionCtx.waitUntil(promise)` that keeps the isolate alive\n * until `promise` settles; the request entry point (generated by the Cloudflare\n * build) stashes it in the Alepha store under `cloudflare.waitUntil`.\n *\n * This is the ONE place that reads that key — call sites use\n * {@link BackgroundTaskProvider.defer} and stay platform-agnostic.\n *\n * `waitUntil` is request-scoped, so `defer()` must be called within the\n * request's async context (which is where background work is scheduled). Outside\n * a request (e.g. a cron tick) the key is absent and we fall back to the base\n * fire-and-track behaviour.\n */\nexport class WorkerdBackgroundTaskProvider extends BackgroundTaskProvider {\n  protected override keepAlive(promise: Promise<void>): void {\n    const waitUntil = this.alepha.store.get(\"cloudflare.waitUntil\") as\n      | ((p: Promise<unknown>) => void)\n      | undefined;\n\n    if (typeof waitUntil !== \"function\") {\n      // No request-scoped execution context (cron / outside a request). The\n      // base tracking + a long-lived isolate keep the promise alive.\n      return;\n    }\n\n    try {\n      waitUntil(promise);\n    } catch (error) {\n      // The runtime rejects waitUntil if called outside a request scope; the\n      // promise still runs, just without the isolate-alive guarantee.\n      this.log.debug(\n        \"waitUntil rejected — falling back to fire-and-track\",\n        error as Error,\n      );\n    }\n  }\n}\n","import { $module } from \"alepha\";\nimport { BackgroundTaskProvider } from \"./providers/BackgroundTaskProvider.ts\";\nimport { WorkerdBackgroundTaskProvider } from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./providers/BackgroundTaskProvider.ts\";\nexport * from \"./providers/WorkerdBackgroundTaskProvider.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Cloudflare Workers build of {@link AlephaBackground}: swaps\n * {@link BackgroundTaskProvider} for {@link WorkerdBackgroundTaskProvider},\n * which keeps the isolate alive past the response via `executionCtx.waitUntil`.\n *\n * @module alepha.background\n */\nexport const AlephaBackground = $module({\n  name: \"alepha.background\",\n  services: [BackgroundTaskProvider],\n  variants: [WorkerdBackgroundTaskProvider],\n  register: (alepha) =>\n    alepha.with({\n      provide: BackgroundTaskProvider,\n      use: WorkerdBackgroundTaskProvider,\n    }),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmBA,IAAa,yBAAb,MAAoC;CAClC,SAA4B,QAAQ,MAAM;CAC1C,MAAyB,QAAQ;;CAGjC,0BAA6B,IAAI,IAAmB;;;;;;;CAQpD,MAAa,MAA8C;EACzD,MAAM,UAAU,QAAQ,QAAQ,CAAC,CAC9B,KAAK,IAAI,CAAC,CACV,WACO,KAAA,IACL,UAAmB;GAClB,KAAK,IAAI,KAAK,0BAA0B,KAAc;EACxD,CACF;EAEF,KAAK,QAAQ,IAAI,OAAO;EACxB,QAAa,cAAc;GACzB,KAAK,QAAQ,OAAO,OAAO;EAC7B,CAAC;EAED,KAAK,UAAU,OAAO;CACxB;;;;;;CAOA,UAAoB,UAA+B,CAAC;;;;;CAMpD,MAAa,QAAuB;EAClC,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC;CAC5C;CAEA,SAA4B,MAAM;EAChC,IAAI;EACJ,eAAe,KAAK,MAAM;CAC5B,CAAC;AACH;;;;;;;;;;;;;;;;;;;;AClDA,IAAa,gCAAb,cAAmD,uBAAuB;CACxE,UAA6B,SAA8B;EACzD,MAAM,YAAY,KAAK,OAAO,MAAM,IAAI,sBAAsB;EAI9D,IAAI,OAAO,cAAc,YAGvB;EAGF,IAAI;GACF,UAAU,OAAO;EACnB,SAAS,OAAO;GAGd,KAAK,IAAI,MACP,uDACA,KACF;EACF;CACF;AACF;;;;;;;;;;ACxBA,MAAa,mBAAmB,QAAQ;CACtC,MAAM;CACN,UAAU,CAAC,sBAAsB;CACjC,UAAU,CAAC,6BAA6B;CACxC,WAAW,WACT,OAAO,KAAK;EACV,SAAS;EACT,KAAK;CACP,CAAC;AACL,CAAC"}

package/dist/batch/index.d.ts

@@ -2,7 +2,6 @@ import { Alepha, KIND, Primitive, Static, TSchema } from "alepha";
 import { CryptoProvider } from "alepha/crypto";
 import { DateTimeProvider, DurationLike } from "alepha/datetime";
 import { RetryBackoffOptions, RetryPrimitiveOptions, RetryProvider } from "alepha/retry";
-
 //#region ../../src/batch/providers/BatchProvider.d.ts
 interface BatchOptions<TItem, TResponse = any> {
   /**

package/dist/batch/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/batch/providers/BatchProvider.ts","../../src/batch/primitives/$batch.ts","../../src/batch/index.ts"],"mappings":";;;;;;UAQiB,YAAA;;AAAjB;;EAIE,OAAA,GAAU,KAAA,EAAO,KAAA,OAAY,SAAA;EAAZ;;;;;EAOjB,OAAA;EA0DiB;;;;EApDjB,YAAA;EAjBmC;;;;;EAwBnC,WAAA,GAAc,YAAA;EAPd;;;EAYA,WAAA,IAAe,IAAA,EAAM,KAAA;EAAA;;;;;EAOrB,WAAA;EAmBqB;;;EAdrB,KAAA;IA4BiB;;;;;IAtBf,GAAA;IA4BwC;AAAA;AAM5C;;;;IA1BI,OAAA,YAAmB,mBAAA;IA4BN;;;;;IArBb,WAAA,GAAc,YAAA;IA2BR;;;;;IApBN,IAAA,IAAQ,KAAA,EAAO,KAAA;IAuBK;;;;IAjBpB,OAAA,IAAW,KAAA,EAAO,KAAA,EAAO,OAAA;EAAA;AAAA;AAAA,KAMjB,eAAA;AAAA,UAEK,cAAA;EACf,EAAA;EACA,IAAA,EAAM,KAAA;EACN,YAAA;EACA,MAAA,EAAQ,eAAA;EACR,MAAA,GAAS,SAAA;EACT,KAAA,GAAQ,KAAA;EACR,OAAA,GAAU,OAAA,CAAQ,SAAA;EAClB,OAAA,IAAW,KAAA,EAAO,SAAA;EAClB,MAAA,IAAU,KAAA,EAAO,KAAA;AAAA;AAAA,UAGF,cAAA;EACf,OAAA;EACA,OAAA;IAAY,KAAA;EAAA;EACZ,QAAA;AAAA;;;;UAMe,YAAA;EACf,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA;EAC7B,UAAA,EAAY,GAAA,SAAY,cAAA,CAAe,KAAA,EAAO,SAAA;EAC9C,UAAA,EAAY,GAAA,SAAY,cAAA;EACxB,cAAA,EAAgB,oBAAA;EAChB,cAAA;EACA,OAAA;EACA,MAAA,EAAQ,MAAA;AAAA;;;;;cASG,aAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,QAAA,EAAQ,gBAAA;EAAA,mBACR,aAAA,EAAa,aAAA;EAAA,mBACb,MAAA,EAAM,cAAA;EAbjB;;;EAAA,mBAkBW,QAAA,EAAQ,GAAA,CAAA,YAAA;EAzBQ;;;EA8BnC,aAAA,mBACE,MAAA,EAAQ,MAAA,EACR,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,IAC5B,YAAA,CAAa,KAAA,EAAO,SAAA;EAhCM;;;EAAA,mBAiDV,MAAA,mBAAM,aAAA;EAhDc;;;EAAA,UAoE7B,UAAA,mBACR,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA;EApEP;;;EAAA,UA4Ed,cAAA,mBACR,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA;EA1E/B;;;EAAA,UAkFU,cAAA,mBACR,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,IAC5B,YAAA;EAnFW;AAShB;;;;;;EAqFE,IAAA,mBACE,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,IAAA,EAAM,KAAA;EA9EmB;;;;;;EAmLrB,IAAA,mBACJ,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,EAAA,WACC,OAAA,CAAQ,SAAA;EA9KR;;;;;EA4MH,MAAA,mBACE,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,EAAA;IAEI,MAAA;EAAA;IACA,MAAA;IAAqB,MAAA,EAAQ,SAAA;EAAA;IAC7B,MAAA;IAAkB,KAAA,EAAO,KAAA;EAAA;EA5IvB;;;;;;;;EAoKR,cAAA,mBACE,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,MAAA;EA3BiC;;;EA+C7B,KAAA,mBACJ,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,YAAA,YACC,OAAA;EAxBQ;;;EAAA,UAyCK,cAAA,mBACd,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,GAC7B,YAAA,UACA,KAAA,YACC,OAAA;EArBA;;;;EA0IG,SAAA,mBACJ,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,IAC5B,OAAA;EADqB;;;EAYlB,QAAA,mBACJ,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,IAC5B,OAAA;EADqB;;;;;EAAA,UAaR,eAAA,mBACd,OAAA,EAAS,YAAA,CAAa,KAAA,EAAO,SAAA,IAC5B,OAAA;AAAA;;;;;AAnjBL;cCaa,MAAA;EAAA,eAAwB,OAAA,aAAkB,OAAA,EAC5C,qBAAA,CAAsB,KAAA,EAAO,SAAA,IACrC,cAAA,CAAe,KAAA,EAAO,SAAA;EAAA;;UAKR,qBAAA,eAAoC,OAAA;EDS9B;;;ECLrB,MAAA,EAAQ,KAAA;EDmDY;;;EC9CpB,OAAA,GAAU,KAAA,EAAO,MAAA,CAAO,KAAA,QAAa,SAAA;ED7BF;;;ECkCnC,OAAA;ED9B6B;;;;ECoC7B,YAAA;EDXA;;;ECgBA,WAAA,GAAc,YAAA;EDJd;;;ECSA,WAAA,IAAe,IAAA,EAAM,MAAA,CAAO,KAAA;EDY1B;;;ECPF,WAAA;EDcU;;;ECTV,KAAA,GAAQ,IAAA,CAAK,qBAAA,OAA4B,KAAA,CAAM,MAAA,CAAO,KAAA;AAAA;AAAA,cAS3C,cAAA,eACG,OAAA,2BAEN,SAAA,CAAU,qBAAA,CAAsB,KAAA,EAAO,SAAA;EAAA,mBAC5B,aAAA,EAAa,aAAA;EAAA,mBACb,OAAA,EAAS,YAAA,CAAa,MAAA,CAAO,KAAA,GAAQ,SAAA;iBAGnD,IAAA,EAAM,qBAAA,QACA,SAAA,CAAU,qBAAA,CAAsB,KAAA,EAAO,SAAA;EDGzB;AAAA;AAE3B;;;ECee,IAAA,CAAK,IAAA,EAAM,MAAA,CAAO,KAAA,IAAS,OAAA;EDXhC;;;;;;ECuBK,IAAA,CAAK,EAAA,WAAa,OAAA,CAAQ,SAAA;EDlBjB;;;;;EC2Bf,MAAA,CACL,EAAA;IAEI,MAAA;EAAA;IACA,MAAA;IAAqB,MAAA,EAAQ,SAAA;EAAA;IAC7B,MAAA;IAAkB,KAAA,EAAO,KAAA;EAAA;EDlC/B;;;EC0Ca,KAAA,CAAM,YAAA,YAAwB,OAAA;EDzCzB;;;;;;AACI;ECmDf,cAAA,CAAe,MAAA;EAAA,mBAIH,OAAA,mBAAO,aAAA;AAAA;;;;;;;ADnJ5B;;;;;;;cEca,WAAA,mBAAW,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/batch/providers/BatchProvider.ts","../../src/batch/primitives/$batch.ts","../../src/batch/index.ts"],"mappings":";;;;;UAQiB,aAAa,OAAO;;;;EAInC,UAAU,OAAO,YAAY;;;;;;EAO7B;;;;;EAMA;;;;;;EAOA,cAAc;;;;EAKd,eAAe,MAAM;;;;;;EAOrB;;;;EAKA;;;;;;IAME;;;;;;;IAQA,mBAAmB;;;;;;IAOnB,cAAc;;;;;;IAOd,QAAQ,OAAO;;;;;IAMf,WAAW,OAAO,OAAO;;;KAMjB;UAEK,eAAe,OAAO;EACrC;EACA,MAAM;EACN;EACA,QAAQ;EACR,SAAS;EACT,QAAQ;EACR,UAAU,QAAQ;EAClB,WAAW,OAAO;EAClB,UAAU,OAAO;;UAGF;EACf;EACA;IAAY;;EACZ;;;;;UAMe,aAAa,OAAO;EACnC,SAAS,aAAa,OAAO;EAC7B,YAAY,YAAY,eAAe,OAAO;EAC9C,YAAY,YAAY;EACxB,gBAAgB;EAChB;EACA;EACA,QAAQ;;;;;;cASG;qBACQ,6BAAG;qBACH,UAAQ;qBACR,eAAa;qBACb,QAAM;;;;qBAKN,UAAQ,IAAA;;;;EAK3B,cAAc,OAAO,WACnB,QAAQ,QACR,SAAS,aAAa,OAAO,aAC5B,aAAa,OAAO;;;;qBAiBJ,yBAAM;;;;YAoBf,WAAW,OAAO,WAC1B,SAAS,aAAa,OAAO;;;;YAQrB,eAAe,OAAO,WAC9B,SAAS,aAAa,OAAO;;;;YAQrB,eAAe,OAAO,WAC9B,SAAS,aAAa,OAAO,aAC5B;;;;;;;;EAWH,KAAK,OAAO,WACV,SAAS,aAAa,OAAO,YAC7B,MAAM;;;;;;;EAqGF,KAAK,OAAO,WAChB,SAAS,aAAa,OAAO,YAC7B,aACC,QAAQ;;;;;;EA8BX,OAAO,OAAO,WACZ,SAAS,aAAa,OAAO,YAC7B;IAEI;;IACA;IAAqB,QAAQ;;IAC7B;IAAkB,OAAO;;;;;;;;;;EAwB/B,eAAe,OAAO,WACpB,SAAS,aAAa,OAAO,YAC7B;;;;EAoBI,MAAM,OAAO,WACjB,SAAS,aAAa,OAAO,YAC7B,wBACC;;;;YAiBa,eAAe,OAAO,WACpC,SAAS,aAAa,OAAO,YAC7B,sBACA,iBACC;;;;;EAqHG,UAAU,OAAO,WACrB,SAAS,aAAa,OAAO,aAC5B;;;;EAWG,SAAS,OAAO,WACpB,SAAS,aAAa,OAAO,aAC5B;;;;;;YAYa,gBAAgB,OAAO,WACrC,SAAS,aAAa,OAAO,aAC5B;;;;;;;cCtiBQ;GAAU,cAAc,SAAS,WAAS,SAC5C,sBAAsB,OAAO,aACrC,eAAe,OAAO;;;UAKR,sBAAsB,cAAc,SAAS;;;;EAI5D,QAAQ;;;;EAKR,UAAU,OAAO,OAAO,aAAa;;;;EAKrC;;;;;EAMA;;;;EAKA,cAAc;;;;EAKd,eAAe,MAAM,OAAO;;;;EAK5B;;;;EAKA,QAAQ,KAAK,4BAA4B,MAAM,OAAO;;cAS3C,eACX,cAAc,SACd,yBACQ,UAAU,sBAAsB,OAAO;qBAC5B,eAAa;qBACb,SAAS,aAAa,OAAO,QAAQ;EAExD,eACK,MAAM,6BACA,UAAU,sBAAsB,OAAO;;;;;;EAoBrC,KAAK,MAAM,OAAO,SAAS;;;;;;;EAY3B,KAAK,aAAa,QAAQ;;;;;;EAShC,OACL;IAEI;;IACA;IAAqB,QAAQ;;IAC7B;IAAkB,OAAO;;;;;EAQlB,MAAM,wBAAwB;;;;;;;;EAWpC,eAAe;qBAIH,0BAAO;;;;;;;;;;;;;;;cCrIf,8BAAW,yBAAA"}