better-ship 0.16.0 → 0.18.0

package/dist/cloudflare/kv-client.js

@@ -0,0 +1,62 @@
+import { l as spreadJitterMs, s as exponentialDelayCapMs } from "../core-UUW2unJd.js";
+import { KVError, decideKVRetry, isKVPutRateLimitError } from "./kv-errors.js";
+import { Result } from "better-result";
+
+//#region src/infrastructure/cloudflare/kv-client.ts
+/** KV access with Typist's automatic transient retries and final KVError conversion. */
+var KVClient = class {
+	kv;
+	constructor(kv) {
+		this.kv = kv;
+	}
+	/** Read text, or return null when the key does not exist. */
+	async get(key) {
+		return await this.run("get", key, async () => this.kv.get(key));
+	}
+	/** Read JSON without schema validation; the caller supplies its stored type. */
+	async getJson(key) {
+		return await this.run("get", key, async () => this.kv.get(key, "json"));
+	}
+	/** Write text; positive TTL values pass to KV in seconds, and other TTL values omit expiration. */
+	async put(key, value, options) {
+		const kvOptions = {};
+		if (options?.ttl !== void 0 && options.ttl > 0) kvOptions.expirationTtl = options.ttl;
+		await this.run("put", key, async () => this.kv.put(key, value, kvOptions));
+	}
+	/** Serialize once before writing; serialization failures retain their original error. */
+	async putJson(key, value, options) {
+		await this.put(key, JSON.stringify(value), options);
+	}
+	/** Delete a key; a missing key succeeds, and transient failures retry automatically. */
+	async delete(key) {
+		await this.run("delete", key, async () => this.kv.delete(key));
+	}
+	/** Expose Typist's three-method secondary storage bridge without changing KV semantics. */
+	asSecondaryStorage() {
+		return {
+			get: (key) => this.get(key),
+			set: (key, value, ttl) => this.put(key, value, { ttl }),
+			delete: (key) => this.delete(key)
+		};
+	}
+	async run(operation, key, work) {
+		const result = await Result.tryPromise({
+			try: work,
+			catch: (cause) => cause
+		}, { retry: {
+			times: 2,
+			shouldRetry: (cause) => decideKVRetry(cause).retry,
+			delayMs: (cause, { attempt }) => (isKVPutRateLimitError(cause) ? 1e3 : 0) + spreadJitterMs(exponentialDelayCapMs(25, 3e3, attempt))
+		} });
+		if (result.isOk()) return result.value;
+		throw new KVError({
+			operation,
+			key,
+			cause: result.error
+		});
+	}
+};
+
+//#endregion
+export { KVClient };
+//# sourceMappingURL=kv-client.js.map

package/dist/cloudflare/kv-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-client.js","names":[],"sources":["../../src/infrastructure/cloudflare/kv-client.ts"],"sourcesContent":["import { Result } from 'better-result'\n\nimport { exponentialDelayCapMs, spreadJitterMs } from '@/core'\n\nimport { decideKVRetry, isKVPutRateLimitError, KVError } from './kv-errors.ts'\n\n/** Text storage bridge with the same TTL behavior as KVClient. */\nexport type KVSecondaryStorage = {\n  get: (key: string) => Promise<string | null>\n  set: (key: string, value: string, ttl?: number) => Promise<void>\n  delete: (key: string) => Promise<void>\n}\n\ntype KVOperation = 'get' | 'put' | 'delete'\n\n/** KV access with Typist's automatic transient retries and final KVError conversion. */\nexport class KVClient {\n  constructor(private readonly kv: KVNamespace) {}\n\n  /** Read text, or return null when the key does not exist. */\n  async get(key: string): Promise<string | null> {\n    return await this.run('get', key, async () => this.kv.get(key))\n  }\n\n  /** Read JSON without schema validation; the caller supplies its stored type. */\n  async getJson<T>(key: string): Promise<T | null> {\n    return await this.run('get', key, async () => this.kv.get<T>(key, 'json'))\n  }\n\n  /** Write text; positive TTL values pass to KV in seconds, and other TTL values omit expiration. */\n  async put(key: string, value: string, options?: { ttl?: number | undefined }): Promise<void> {\n    const kvOptions: KVNamespacePutOptions = {}\n    if (options?.ttl !== undefined && options.ttl > 0) {\n      kvOptions.expirationTtl = options.ttl\n    }\n    await this.run('put', key, async () => this.kv.put(key, value, kvOptions))\n  }\n\n  /** Serialize once before writing; serialization failures retain their original error. */\n  async putJson(\n    key: string,\n    // oxlint-disable-next-line anti-slop/no-unknown-parameters -- Preserve the approved JSON serialization boundary and Typist's public signature.\n    value: unknown,\n    options?: { ttl?: number | undefined },\n  ): Promise<void> {\n    await this.put(key, JSON.stringify(value), options)\n  }\n\n  /** Delete a key; a missing key succeeds, and transient failures retry automatically. */\n  async delete(key: string): Promise<void> {\n    await this.run('delete', key, async () => this.kv.delete(key))\n  }\n\n  /** Expose Typist's three-method secondary storage bridge without changing KV semantics. */\n  asSecondaryStorage(): KVSecondaryStorage {\n    return {\n      get: (key) => this.get(key),\n      set: (key, value, ttl) => this.put(key, value, { ttl }),\n      delete: (key) => this.delete(key),\n    }\n  }\n\n  private async run<T>(operation: KVOperation, key: string, work: () => Promise<T>): Promise<T> {\n    const result = await Result.tryPromise(\n      { try: work, catch: (cause) => cause },\n      {\n        retry: {\n          times: 2,\n          shouldRetry: (cause) => decideKVRetry(cause).retry,\n          delayMs: (cause, { attempt }) =>\n            (isKVPutRateLimitError(cause) ? 1_000 : 0) +\n            spreadJitterMs(exponentialDelayCapMs(25, 3_000, attempt)),\n        },\n      },\n    )\n    if (result.isOk()) return result.value\n    throw new KVError({ operation, key, cause: result.error })\n  }\n}\n"],"mappings":";;;;;;AAgBA,IAAa,WAAb,MAAsB;CACS;CAA7B,YAAY,AAAiB,IAAiB;EAAjB;CAAkB;;CAG/C,MAAM,IAAI,KAAqC;EAC7C,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,YAAY,KAAK,GAAG,IAAI,GAAG,CAAC;CAChE;;CAGA,MAAM,QAAW,KAAgC;EAC/C,OAAO,MAAM,KAAK,IAAI,OAAO,KAAK,YAAY,KAAK,GAAG,IAAO,KAAK,MAAM,CAAC;CAC3E;;CAGA,MAAM,IAAI,KAAa,OAAe,SAAuD;EAC3F,MAAM,YAAmC,CAAC;EAC1C,IAAI,SAAS,QAAQ,UAAa,QAAQ,MAAM,GAC9C,UAAU,gBAAgB,QAAQ;EAEpC,MAAM,KAAK,IAAI,OAAO,KAAK,YAAY,KAAK,GAAG,IAAI,KAAK,OAAO,SAAS,CAAC;CAC3E;;CAGA,MAAM,QACJ,KAEA,OACA,SACe;EACf,MAAM,KAAK,IAAI,KAAK,KAAK,UAAU,KAAK,GAAG,OAAO;CACpD;;CAGA,MAAM,OAAO,KAA4B;EACvC,MAAM,KAAK,IAAI,UAAU,KAAK,YAAY,KAAK,GAAG,OAAO,GAAG,CAAC;CAC/D;;CAGA,qBAAyC;EACvC,OAAO;GACL,MAAM,QAAQ,KAAK,IAAI,GAAG;GAC1B,MAAM,KAAK,OAAO,QAAQ,KAAK,IAAI,KAAK,OAAO,EAAE,IAAI,CAAC;GACtD,SAAS,QAAQ,KAAK,OAAO,GAAG;EAClC;CACF;CAEA,MAAc,IAAO,WAAwB,KAAa,MAAoC;EAC5F,MAAM,SAAS,MAAM,OAAO,WAC1B;GAAE,KAAK;GAAM,QAAQ,UAAU;EAAM,GACrC,EACE,OAAO;GACL,OAAO;GACP,cAAc,UAAU,cAAc,KAAK,CAAC,CAAC;GAC7C,UAAU,OAAO,EAAE,eAChB,sBAAsB,KAAK,IAAI,MAAQ,KACxC,eAAe,sBAAsB,IAAI,KAAO,OAAO,CAAC;EAC5D,EACF,CACF;EACA,IAAI,OAAO,KAAK,GAAG,OAAO,OAAO;EACjC,MAAM,IAAI,QAAQ;GAAE;GAAW;GAAK,OAAO,OAAO;EAAM,CAAC;CAC3D;AACF"}

package/dist/cloudflare/kv-errors.d.ts

@@ -0,0 +1,52 @@
+import { Xt as AppError, Zt as FailureClassification } from "../index-DUFS0SJ_.js";
+//#region src/infrastructure/cloudflare/kv-errors.d.ts
+/** KV operations recognized in binding error messages. */
+export type KVOperation = 'get' | 'put' | 'delete' | 'list';
+/** KV failure kinds retained from Typist's binding tests. */
+export type KVErrorKind = 'invalid_key' | 'key_too_large' | 'invalid_expiration_ttl' | 'invalid_expiration' | 'invalid_cache_ttl' | 'invalid_list_limit' | 'value_too_large' | 'client_error' | 'rate_limited' | 'server_error';
+/** Evidence extracted from a KV error and its causes. */
+export interface KVErrorMeta {
+  kind: KVErrorKind;
+  message: string;
+  status?: number | undefined;
+  operation?: Uppercase<KVOperation> | undefined;
+}
+/** Extract Typist's verified KV message formats, including nested causes. */
+export declare function extractKVMeta(cause: unknown): KVErrorMeta | undefined;
+/** Identify recognized KV failures that another attempt cannot resolve. */
+export declare function isTerminalKVError(cause: unknown): boolean;
+/** Identify a PUT rate limit that requires at least one second before retrying. */
+export declare function isKVPutRateLimitError(cause: unknown): boolean;
+/** Identify PUT rate limits, server failures, and request timeouts. */
+export declare function isTransientKVError(cause: unknown): boolean;
+/** Apply Typist's KV, overload, platform, and transport checks in their original order. */
+export declare function isRetryableKVError(cause: unknown): boolean;
+/** Return the existing retry decision and minimum delay in milliseconds. */
+export declare function decideKVRetry(cause: unknown): {
+  retry: false;
+} | {
+  retry: true;
+  retryAfterMs: number;
+};
+/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */
+export declare class KVError extends AppError {
+  readonly _tag = "KVError";
+  readonly classification: FailureClassification;
+  retryable: boolean;
+  readonly operation: KVOperation;
+  readonly key?: string | undefined;
+  readonly cause: unknown;
+  readonly kv?: KVErrorMeta | undefined;
+  readonly context: {
+    operation: KVOperation;
+    key?: string | undefined;
+    kv?: KVErrorMeta | undefined;
+  };
+  constructor(args: {
+    operation: KVOperation;
+    key?: string | undefined;
+    cause: unknown;
+  });
+}
+//#endregion
+//# sourceMappingURL=kv-errors.d.ts.map

package/dist/cloudflare/kv-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-errors.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/kv-errors.ts"],"mappings":";;;YASY;;YAGA;;iBAaK;EACf,MAAM;EACN;EACA;EACA,YAAY,UAAU;;;wBAIR,cAAc,iBAAiB;;wBAwC/B,kBAAkB;;wBASlB,sBAAsB;;wBAMtB,mBAAmB;;wBAOnB,mBAAmB;;wBAQnB,cACd;EACG;;EAAmB;EAAa;;;qBAMxB,gBAAgB;WAClB;WACA,gBAAgB;EACzB;WACS,WAAW;WACX;WACS;WACT,KAAK;WACL;IACP,WAAW;IACX;IACA,KAAK;;EAGP,YAAY;IAAQ,WAAW;IAAa;IAA0B"}

package/dist/cloudflare/kv-errors.js

@@ -0,0 +1,144 @@
+import { g as isCloudflareRetryableError, h as isCloudflareOverloadedError, nt as AppError, y as isTransientTransportError } from "../core-UUW2unJd.js";
+
+//#region src/infrastructure/cloudflare/kv-errors.ts
+/** Extract Typist's verified KV message formats, including nested causes. */
+function extractKVMeta(cause) {
+	const message = getDeepErrorMessage(cause);
+	if (!message) return void 0;
+	const statusMatch = message.match(/\bKV\s+(GET|PUT|DELETE|LIST)\s+failed:\s+(\d{3})\b/);
+	const operation = statusMatch?.[1];
+	const status = statusMatch ? Number(statusMatch[2]) : void 0;
+	if (/Key name cannot be empty/i.test(message)) return {
+		kind: "invalid_key",
+		message,
+		status,
+		operation
+	};
+	if (/exceeds key length limit/i.test(message)) return {
+		kind: "key_too_large",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration_ttl/i.test(message)) return {
+		kind: "invalid_expiration_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration of/i.test(message)) return {
+		kind: "invalid_expiration",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid cache_ttl/i.test(message)) return {
+		kind: "invalid_cache_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid key_count_limit/i.test(message)) return {
+		kind: "invalid_list_limit",
+		message,
+		status,
+		operation
+	};
+	if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) return {
+		kind: "value_too_large",
+		message,
+		status,
+		operation
+	};
+	if (status === 429) return {
+		kind: "rate_limited",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 500) return {
+		kind: "server_error",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 400) return {
+		kind: "client_error",
+		message,
+		status,
+		operation
+	};
+}
+/** Identify recognized KV failures that another attempt cannot resolve. */
+function isTerminalKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	if (meta.kind === "rate_limited" || meta.kind === "server_error") return false;
+	if (meta.status === 408) return false;
+	return true;
+}
+/** Identify a PUT rate limit that requires at least one second before retrying. */
+function isKVPutRateLimitError(cause) {
+	const meta = extractKVMeta(cause);
+	return meta?.operation === "PUT" && meta.kind === "rate_limited";
+}
+/** Identify PUT rate limits, server failures, and request timeouts. */
+function isTransientKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	return isKVPutRateLimitError(cause) || meta.kind === "server_error" || meta.status === 408;
+}
+/** Apply Typist's KV, overload, platform, and transport checks in their original order. */
+function isRetryableKVError(cause) {
+	if (isTerminalKVError(cause)) return false;
+	if (isTransientKVError(cause)) return true;
+	if (isCloudflareOverloadedError(cause)) return false;
+	return isCloudflareRetryableError(cause) || isTransientTransportError(cause);
+}
+/** Return the existing retry decision and minimum delay in milliseconds. */
+function decideKVRetry(cause) {
+	if (!isRetryableKVError(cause)) return { retry: false };
+	return {
+		retry: true,
+		retryAfterMs: isKVPutRateLimitError(cause) ? 1e3 : 0
+	};
+}
+/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */
+var KVError = class extends AppError {
+	_tag = "KVError";
+	classification;
+	retryable;
+	operation;
+	key;
+	cause;
+	kv;
+	context;
+	constructor(args) {
+		const kv = extractKVMeta(args.cause);
+		const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause);
+		const keyContext = args.key === void 0 ? "" : ` for key "${args.key}"`;
+		super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause });
+		this.operation = args.operation;
+		this.key = args.key;
+		this.cause = args.cause;
+		this.kv = kv;
+		this.context = {
+			operation: args.operation,
+			key: args.key,
+			kv
+		};
+		this.retryable = isRetryableKVError(args.cause);
+		this.classification = isTerminalKVError(args.cause) ? "terminal" : this.retryable ? "transient" : "unknown";
+	}
+};
+function getDeepErrorMessage(cause) {
+	if (typeof cause === "string") return cause;
+	if (cause === null || cause === void 0) return "";
+	if (typeof cause === "number" || typeof cause === "boolean" || typeof cause === "bigint") return String(cause);
+	if (typeof cause !== "object") return "";
+	return `${"message" in cause && typeof cause.message === "string" ? cause.message : ""} ${"cause" in cause ? getDeepErrorMessage(cause.cause) : ""}`.trim();
+}
+
+//#endregion
+export { KVError, decideKVRetry, extractKVMeta, isKVPutRateLimitError, isRetryableKVError, isTerminalKVError, isTransientKVError };
+//# sourceMappingURL=kv-errors.js.map

package/dist/cloudflare/kv-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-errors.js","names":[],"sources":["../../src/infrastructure/cloudflare/kv-errors.ts"],"sourcesContent":["import {\n  AppError,\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientTransportError,\n  type FailureClassification,\n} from '@/core'\n\n/** KV operations recognized in binding error messages. */\nexport type KVOperation = 'get' | 'put' | 'delete' | 'list'\n\n/** KV failure kinds retained from Typist's binding tests. */\nexport type KVErrorKind =\n  | 'invalid_key'\n  | 'key_too_large'\n  | 'invalid_expiration_ttl'\n  | 'invalid_expiration'\n  | 'invalid_cache_ttl'\n  | 'invalid_list_limit'\n  | 'value_too_large'\n  | 'client_error'\n  | 'rate_limited'\n  | 'server_error'\n\n/** Evidence extracted from a KV error and its causes. */\nexport interface KVErrorMeta {\n  kind: KVErrorKind\n  message: string\n  status?: number | undefined\n  operation?: Uppercase<KVOperation> | undefined\n}\n\n/** Extract Typist's verified KV message formats, including nested causes. */\nexport function extractKVMeta(cause: unknown): KVErrorMeta | undefined {\n  const message = getDeepErrorMessage(cause)\n  if (!message) return undefined\n  const statusMatch = message.match(/\\bKV\\s+(GET|PUT|DELETE|LIST)\\s+failed:\\s+(\\d{3})\\b/)\n  // SAFETY: The regular expression permits only uppercase KV operation names in this capture.\n  const operation = statusMatch?.[1] as Uppercase<KVOperation> | undefined\n  const status = statusMatch ? Number(statusMatch[2]) : undefined\n\n  if (/Key name cannot be empty/i.test(message)) {\n    return { kind: 'invalid_key', message, status, operation }\n  }\n  if (/exceeds key length limit/i.test(message)) {\n    return { kind: 'key_too_large', message, status, operation }\n  }\n  if (/Invalid expiration_ttl/i.test(message)) {\n    return { kind: 'invalid_expiration_ttl', message, status, operation }\n  }\n  if (/Invalid expiration of/i.test(message)) {\n    return { kind: 'invalid_expiration', message, status, operation }\n  }\n  if (/Invalid cache_ttl/i.test(message)) {\n    return { kind: 'invalid_cache_ttl', message, status, operation }\n  }\n  if (/Invalid key_count_limit/i.test(message)) {\n    return { kind: 'invalid_list_limit', message, status, operation }\n  }\n  if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) {\n    return { kind: 'value_too_large', message, status, operation }\n  }\n  if (status === 429) return { kind: 'rate_limited', message, status, operation }\n  if (status !== undefined && status >= 500) {\n    return { kind: 'server_error', message, status, operation }\n  }\n  if (status !== undefined && status >= 400) {\n    return { kind: 'client_error', message, status, operation }\n  }\n  return undefined\n}\n\n/** Identify recognized KV failures that another attempt cannot resolve. */\nexport function isTerminalKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  if (meta.kind === 'rate_limited' || meta.kind === 'server_error') return false\n  if (meta.status === 408) return false\n  return true\n}\n\n/** Identify a PUT rate limit that requires at least one second before retrying. */\nexport function isKVPutRateLimitError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  return meta?.operation === 'PUT' && meta.kind === 'rate_limited'\n}\n\n/** Identify PUT rate limits, server failures, and request timeouts. */\nexport function isTransientKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  return isKVPutRateLimitError(cause) || meta.kind === 'server_error' || meta.status === 408\n}\n\n/** Apply Typist's KV, overload, platform, and transport checks in their original order. */\nexport function isRetryableKVError(cause: unknown): boolean {\n  if (isTerminalKVError(cause)) return false\n  if (isTransientKVError(cause)) return true\n  if (isCloudflareOverloadedError(cause)) return false\n  return isCloudflareRetryableError(cause) || isTransientTransportError(cause)\n}\n\n/** Return the existing retry decision and minimum delay in milliseconds. */\nexport function decideKVRetry(\n  cause: unknown,\n): { retry: false } | { retry: true; retryAfterMs: number } {\n  if (!isRetryableKVError(cause)) return { retry: false }\n  return { retry: true, retryAfterMs: isKVPutRateLimitError(cause) ? 1_000 : 0 }\n}\n\n/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */\nexport class KVError extends AppError {\n  readonly _tag = 'KVError'\n  readonly classification: FailureClassification\n  retryable: boolean\n  readonly operation: KVOperation\n  readonly key?: string | undefined\n  override readonly cause: unknown\n  readonly kv?: KVErrorMeta | undefined\n  readonly context: {\n    operation: KVOperation\n    key?: string | undefined\n    kv?: KVErrorMeta | undefined\n  }\n\n  constructor(args: { operation: KVOperation; key?: string | undefined; cause: unknown }) {\n    const kv = extractKVMeta(args.cause)\n    const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause)\n    const keyContext = args.key === undefined ? '' : ` for key \"${args.key}\"`\n    super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause })\n    this.operation = args.operation\n    this.key = args.key\n    this.cause = args.cause\n    this.kv = kv\n    this.context = { operation: args.operation, key: args.key, kv }\n    this.retryable = isRetryableKVError(args.cause)\n    this.classification = isTerminalKVError(args.cause)\n      ? 'terminal'\n      : this.retryable\n        ? 'transient'\n        : 'unknown'\n  }\n}\n\n// oxlint-disable anti-slop/no-runtime-typeof -- Preserve Typist's primitive messages and nested causes at the raw binding boundary.\nfunction getDeepErrorMessage(cause: unknown): string {\n  if (typeof cause === 'string') return cause\n  if (cause === null || cause === undefined) return ''\n  if (typeof cause === 'number' || typeof cause === 'boolean' || typeof cause === 'bigint') {\n    return String(cause)\n  }\n  if (typeof cause !== 'object') return ''\n  const message = 'message' in cause && typeof cause.message === 'string' ? cause.message : ''\n  const causeMessage = 'cause' in cause ? getDeepErrorMessage(cause.cause) : ''\n  return `${message} ${causeMessage}`.trim()\n}\n// oxlint-enable anti-slop/no-runtime-typeof\n"],"mappings":";;;;AAiCA,SAAgB,cAAc,OAAyC;CACrE,MAAM,UAAU,oBAAoB,KAAK;CACzC,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,cAAc,QAAQ,MAAM,oDAAoD;CAEtF,MAAM,YAAY,cAAc;CAChC,MAAM,SAAS,cAAc,OAAO,YAAY,EAAE,IAAI;CAEtD,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAe;EAAS;EAAQ;CAAU;CAE3D,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAiB;EAAS;EAAQ;CAAU;CAE7D,IAAI,0BAA0B,KAAK,OAAO,GACxC,OAAO;EAAE,MAAM;EAA0B;EAAS;EAAQ;CAAU;CAEtE,IAAI,yBAAyB,KAAK,OAAO,GACvC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,qBAAqB,KAAK,OAAO,GACnC,OAAO;EAAE,MAAM;EAAqB;EAAS;EAAQ;CAAU;CAEjE,IAAI,2BAA2B,KAAK,OAAO,GACzC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,6CAA6C,KAAK,OAAO,GAC3D,OAAO;EAAE,MAAM;EAAmB;EAAS;EAAQ;CAAU;CAE/D,IAAI,WAAW,KAAK,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAC9E,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAE5D,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;AAG9D;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,gBAAgB,OAAO;CACzE,IAAI,KAAK,WAAW,KAAK,OAAO;CAChC,OAAO;AACT;;AAGA,SAAgB,sBAAsB,OAAyB;CAC7D,MAAM,OAAO,cAAc,KAAK;CAChC,OAAO,MAAM,cAAc,SAAS,KAAK,SAAS;AACpD;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,OAAO,sBAAsB,KAAK,KAAK,KAAK,SAAS,kBAAkB,KAAK,WAAW;AACzF;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,IAAI,kBAAkB,KAAK,GAAG,OAAO;CACrC,IAAI,mBAAmB,KAAK,GAAG,OAAO;CACtC,IAAI,4BAA4B,KAAK,GAAG,OAAO;CAC/C,OAAO,2BAA2B,KAAK,KAAK,0BAA0B,KAAK;AAC7E;;AAGA,SAAgB,cACd,OAC0D;CAC1D,IAAI,CAAC,mBAAmB,KAAK,GAAG,OAAO,EAAE,OAAO,MAAM;CACtD,OAAO;EAAE,OAAO;EAAM,cAAc,sBAAsB,KAAK,IAAI,MAAQ;CAAE;AAC/E;;AAGA,IAAa,UAAb,cAA6B,SAAS;CACpC,AAAS,OAAO;CAChB,AAAS;CACT;CACA,AAAS;CACT,AAAS;CACT,AAAkB;CAClB,AAAS;CACT,AAAS;CAMT,YAAY,MAA4E;EACtF,MAAM,KAAK,cAAc,KAAK,KAAK;EACnC,MAAM,eAAe,oBAAoB,KAAK,KAAK,KAAK,OAAO,KAAK,KAAK;EACzE,MAAM,aAAa,KAAK,QAAQ,SAAY,KAAK,aAAa,KAAK,IAAI;EACvE,MAAM,MAAM,KAAK,UAAU,SAAS,WAAW,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,CAAC;EACxF,KAAK,YAAY,KAAK;EACtB,KAAK,MAAM,KAAK;EAChB,KAAK,QAAQ,KAAK;EAClB,KAAK,KAAK;EACV,KAAK,UAAU;GAAE,WAAW,KAAK;GAAW,KAAK,KAAK;GAAK;EAAG;EAC9D,KAAK,YAAY,mBAAmB,KAAK,KAAK;EAC9C,KAAK,iBAAiB,kBAAkB,KAAK,KAAK,IAC9C,aACA,KAAK,YACH,cACA;CACR;AACF;AAGA,SAAS,oBAAoB,OAAwB;CACnD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,UAAU,QAAQ,UAAU,QAAW,OAAO;CAClD,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,aAAa,OAAO,UAAU,UAC9E,OAAO,OAAO,KAAK;CAErB,IAAI,OAAO,UAAU,UAAU,OAAO;CAGtC,OAAO,GAFS,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,GAExE,GADG,WAAW,QAAQ,oBAAoB,MAAM,KAAK,IAAI,KACvC,KAAK;AAC3C"}

package/dist/cloudflare/queue.d.ts

@@ -1,5 +1,5 @@
-import { $t as AppError, K as DomainCommand, en as FailureClassification, q as DomainEvent } from "../index-DvJUcSW1.js";
-import { D as OutboxRelay, E as IOutboxRelay } from "../index-Cchdg2aQ.js";
+import { U as DomainCommand, W as DomainEvent, Xt as AppError, Zt as FailureClassification } from "../index-DUFS0SJ_.js";
+import { D as OutboxRelay, E as IOutboxRelay } from "../index-CYHXOH08.js";
 import { z } from "zod";
 //#region src/infrastructure/cloudflare/queue/queue-message.d.ts
 /** A message a queue carries: a command from outside the request, or an event from the outbox. */

package/dist/cloudflare/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/queue/queue-message.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"mappings":";;;;;KAGY,eAAe,gBAAgB;;;;KCa/B;WAA8B;;;KAG9B,aAAa,QAAQ,KAAK,MAAM;;;;;KAMhC,mBAAmB,iBAAiB,cAAc;WACnD,QAAQ,SAAS,OAAO,MAAM,aAAa;;WAE3C,YAAY,KAAK;WACjB,SAAS,SAAS,aAAa;;;UAIzB,aAAa,iBAAiB;EAC7C,KAAK,SAAS,UAAU,UAAU,mBAAmB;EACrD,UAAU,UAAU,cAAc,YAAY;;EAE9C,iBAAiB,aAAa,UAC5B,UAAU,cAAc,QACvB,QAAQ,cAAc;;EAEzB,UAAU,SAAS,UAAU;;;;;;qBA8BlB,YACX,iBAAiB,cACjB,gCACW,aAAa;mBACK;EAA7B,YAA6B,SAAS,mBAAmB,UAAU;;EAG7D,KAAK,SAAS,UAAU,UAAU,mBAAmB;;EA4BrD,UAAU,UAAU,cAAc,YAAY;EAO9C,iBAAiB,aAAa,UAClC,UAAU,cAAc,QACvB,QAAQ,cAAc;EAMnB,UAAU,SAAS,UAAU;;UAQrB;UA4BN;UAIM;;;;;KCpJJ,gBAAgB,iBAAiB,iBAC3C,SAAS,UACT,iBACA,WAAW,kBACR;;KAGO,YAAY,iBAAiB;EAEvC,OAAO,SAAS,WAAW;;;;;;;qBAQhB,cAAc,iBAAiB;mBAQvB;mBACA;mBACA;mBACA;;;;;;;EAJnB,YACmB,KAAK,YAAY,WACjB,aAAa,KAAK,aAAa,yBAC/B,QAAQ,EAAE,QAAQ,WAClB,eAAc,gBAAgB;;EAI3C,aAAa,OAAO,eAAe;UAc3B;;UA0BA;;UAMA;;;;;UAaN;;;;;;;;;qBCjGG;WACX;WACA;WACA;;;wBAIc,kBAAkB,SAAS;;KAK/B,aAAa;WAAuB,SAAS;WAAmB;;;wBAG5D,aAAa,iBAAiB,cAC5C,UAAU,cAAc,YACvB,aAAa;;wBAKA,YAAY,OAAO,aAAa;;wBAKhC,cAAc,UAC5B,OAAO,cAAc,aAAa,aACjC;;;;KCjCS;;wBA4CI,mBAAmB,iBAAiB;;qBASvC,uBAAuB;WACzB;WACA,gBAAgB;WAChB,WAAW;EAEpB,YAAY;aAAiB,WAAW;aAAyB;;;;;;;qBAWtD,8BAA8B;WAChC;WACA;WACA;WACA;WACA;EAET,YAAY;aACD;aACA;aACA;;;;;;;qBAeA,mCAAmC;WACrC;WACA;EAET,YAAY;;;;;KCrFF;WACG;WAAwB;;WAExB;WACA,gBAAgB,QAAQ;WACxB;;;;;;;;wBASC,iBAAiB,gBAAgB,kBAAkB;;;;wBCxBnD,cACd,SAAS,KAAK,gCACd,OAAO,KAAK,wBACX"}
+{"version":3,"file":"queue.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/queue/queue-message.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"mappings":";;;;;KAGY,eAAe,gBAAgB;;;;KCa/B;WAA8B;;;KAG9B,aAAa,QAAQ,KAAK,MAAM;;;;;KAMhC,mBAAmB,iBAAiB,cAAc;WACnD,QAAQ,SAAS,OAAO,MAAM,aAAa;;WAE3C,YAAY,KAAK;WACjB,SAAS,SAAS,aAAa;;;UAIzB,aAAa,iBAAiB;EAC7C,KAAK,SAAS,UAAU,UAAU,mBAAmB;EACrD,UAAU,UAAU,cAAc,YAAY;;EAE9C,iBAAiB,aAAa,UAC5B,UAAU,cAAc,QACvB,QAAQ,cAAc;;EAEzB,UAAU,SAAS,UAAU;;;;;;qBA8BlB,YACX,iBAAiB,cACjB,gCACW,aAAa;mBACK;EAA7B,YAA6B,SAAS,mBAAmB,UAAU;;EAG7D,KAAK,SAAS,UAAU,UAAU,mBAAmB;;EA4BrD,UAAU,UAAU,cAAc,YAAY;EAO9C,iBAAiB,aAAa,UAClC,UAAU,cAAc,QACvB,QAAQ,cAAc;EAMnB,UAAU,SAAS,UAAU;;UAQrB;UA4BN;UAIM;;;;;KCpJJ,gBAAgB,iBAAiB,iBAC3C,SAAS,UACT,iBACA,WAAW,kBACR;;KAGO,YAAY,iBAAiB;EAEvC,OAAO,SAAS,WAAW;;;;;;;qBAQhB,cAAc,iBAAiB;mBAQvB;mBACA;mBACA;mBACA;;;;;;;EAJnB,YACmB,KAAK,YAAY,WACjB,aAAa,KAAK,aAAa,yBAC/B,QAAQ,EAAE,QAAQ,WAClB,eAAc,gBAAgB;;EAI3C,aAAa,OAAO,eAAe;UAc3B;;UA2BA;;UAMA;;;;;UAaN;;;;;;;;;qBClGG;WACX;WACA;WACA;;;wBAIc,kBAAkB,SAAS;;KAK/B,aAAa;WAAuB,SAAS;WAAmB;;;wBAG5D,aAAa,iBAAiB,cAC5C,UAAU,cAAc,YACvB,aAAa;;wBAKA,YAAY,OAAO,aAAa;;wBAKhC,cAAc,UAC5B,OAAO,cAAc,aAAa,aACjC;;;;KCjCS;;wBA4CI,mBAAmB,iBAAiB;;qBASvC,uBAAuB;WACzB;WACA,gBAAgB;WAChB,WAAW;EAEpB,YAAY;aAAiB,WAAW;aAAyB;;;;;;;qBAWtD,8BAA8B;WAChC;WACA;WACA;WACA;WACA;EAET,YAAY;aACD;aACA;aACA;;;;;;;qBAeA,mCAAmC;WACrC;WACA;EAET,YAAY;;;;;KCrFF;WACG;WAAwB;;WAExB;WACA,gBAAgB,QAAQ;WACxB;;;;;;;;wBASC,iBAAiB,gBAAgB,kBAAkB;;;;wBCxBnD,cACd,SAAS,KAAK,gCACd,OAAO,KAAK,wBACX"}

package/dist/cloudflare/queue.js

@@ -1,5 +1,5 @@
-import { a as createLogger, d as classifyBoundaryError, f as classifyFailure, l as exponentialEqualJitterMs, p as retryAfterSecondsOf, rt as AppError, u as spreadJitterMs, x as shouldRetryFailure } from "../core-ClSP5-V9.js";
-import { o as MessageAlreadyProcessedError } from "../application-Cf9SER-i.js";
+import { b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, f as retryAfterSecondsOf, l as spreadJitterMs, nt as AppError, r as createLogger, u as classifyBoundaryError } from "../core-UUW2unJd.js";
+import { o as MessageAlreadyProcessedError } from "../application-CNdzHIXk.js";
 import { Result } from "better-result";
 
 //#region src/infrastructure/cloudflare/queue/queue-limits.ts
@@ -338,10 +338,10 @@ var QueueConsumer = class {
 		try {
 			const body = await this.parseMessage(message);
 			if (body === null) {
-				logger$1.error("invalid_message_format", { details: {
+				logger$1.error("invalid_message_format", {
 					attempt: message.attempts,
 					queueMessageId: message.id
-				} });
+				});
 				await this.parkPoison(message);
 				return;
 			}
@@ -350,7 +350,7 @@ var QueueConsumer = class {
 				await this.bus.handle(body);
 			});
 			message.ack();
-			logger$1.debug(`queue_message_processed:${body.name}`, { name: body.name });
+			logger$1.debug("queue_message_processed", { name: body.name });
 		} catch (cause) {
 			this.handleFailure(message, parsed, cause);
 		}
@@ -387,12 +387,10 @@ var QueueConsumer = class {
 		if (decision.action === "ack") {
 			logger$1.error("message_discarded", {
 				error: cause,
-				details: {
-					name: parsed?.name,
-					messageId: parsed?.id,
-					queueMessageId: message.id,
-					attempt: message.attempts
-				}
+				name: parsed?.name,
+				messageId: parsed?.id,
+				queueMessageId: message.id,
+				attempt: message.attempts
 			});
 			message.ack();
 			return;
@@ -407,7 +405,7 @@ var QueueConsumer = class {
 		};
 		if (decision.classification === "unknown" && message.attempts === 1) logger$1.error("queue_unknown_failure", {
 			error: cause,
-			details: context
+			...context
 		});
 		else logger$1.debug("redelivery_requested", context);
 		message.retry({ delaySeconds: decision.delaySeconds });

package/dist/cloudflare/queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue.js","names":["logger","logger"],"sources":["../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"sourcesContent":["import type { QueueMessage } from './queue-message.ts'\n\n/**\n * The Cloudflare Queues producer limits with metadata headroom, checked before each send so a\n * violation never reaches the binding. The dead letter has the same per-message limit.\n * https://developers.cloudflare.com/queues/platform/limits/\n */\nexport const QUEUE_LIMITS = {\n  messageBytes: 127_000,\n  batchBytes: 250_000,\n  batchCount: 100,\n} as const\n\n/** The size the binding measures: the JSON encoding of the body, in UTF-8 bytes. */\nexport function messageByteLength(message: QueueMessage): number {\n  return new TextEncoder().encode(JSON.stringify(message)).length\n}\n\n/** A message with its measured size. */\nexport type SizedMessage<TMessage> = { readonly message: TMessage; readonly bytes: number }\n\n/** Measure every message once. */\nexport function sizeMessages<TMessage extends QueueMessage>(\n  messages: ReadonlyArray<TMessage>,\n): SizedMessage<TMessage>[] {\n  return messages.map((message) => ({ message, bytes: messageByteLength(message) }))\n}\n\n/** Whether one message is over the per-message limit. */\nexport function isOversized(sized: SizedMessage<QueueMessage>): boolean {\n  return sized.bytes > QUEUE_LIMITS.messageBytes\n}\n\n/** Split a batch at the message-count and byte limits, keeping the order. */\nexport function chunkByLimits<TMessage>(\n  sized: ReadonlyArray<SizedMessage<TMessage>>,\n): TMessage[][] {\n  const chunks: TMessage[][] = []\n  let current: TMessage[] = []\n  let bytes = 0\n  for (const item of sized) {\n    const full =\n      current.length >= QUEUE_LIMITS.batchCount || bytes + item.bytes > QUEUE_LIMITS.batchBytes\n    if (current.length > 0 && full) {\n      chunks.push(current)\n      current = []\n      bytes = 0\n    }\n    current.push(item.message)\n    bytes += item.bytes\n  }\n  if (current.length > 0) chunks.push(current)\n  return chunks\n}\n","import { AppError, classifyBoundaryError, type FailureClassification } from '@/core'\n\n/** The Queue binding calls the client makes. Each is safe to repeat. */\nexport type QueueOperation = 'send' | 'send_batch' | 'send_dlq'\n\nconst QUEUE_OPERATION_MESSAGES = {\n  send: 'Failed to send queue message',\n  send_batch: 'Failed to send queue batch',\n  send_dlq: 'Failed to send DLQ message',\n} satisfies Readonly<Record<QueueOperation, string>>\n\n/**\n * Cloudflare Queues error codes, by whether a repeat could change the answer. The reference\n * marks only 10201 and 10250 for retry; 10251 waits for processing, 15000 is nobody's call.\n * https://developers.cloudflare.com/queues/reference/error-codes/\n */\nconst QUEUE_ERROR_CLASSIFICATIONS = new Map<number, FailureClassification>([\n  [10104, 'terminal'], // QueueNotFound\n  [10106, 'terminal'], // Unauthorized\n  [10107, 'terminal'], // QueueIDMalformed\n  [10201, 'transient'], // ClientDisconnected\n  [10202, 'terminal'], // BatchDelayInvalid\n  [10203, 'terminal'], // MessageMetadataInvalid\n  [10204, 'terminal'], // MessageSizeOutOfBounds\n  [10205, 'terminal'], // BatchSizeOutOfBounds\n  [10206, 'terminal'], // BatchCountOutOfBounds\n  [10207, 'terminal'], // JSONRequestBodyInvalid\n  [10208, 'terminal'], // JSONRequestBodyMalformed\n  [10250, 'transient'], // QueueOverloaded\n  [10251, 'transient'], // QueueStorageLimitExceeded\n  [10252, 'terminal'], // QueueDisabled\n  [10253, 'terminal'], // FreeTierLimitExceeded\n  [15000, 'unknown'], // UnknownInternalError\n])\n\nfunction extractQueueErrorCode(cause: unknown): number | undefined {\n  if (!(cause instanceof Error)) return undefined\n  const match = /(\\d{5})\\)?\\s*$/.exec(cause.message)\n  return match?.[1] === undefined ? undefined : Number(match[1])\n}\n\nfunction classifyQueueBoundaryError(cause: unknown): FailureClassification | undefined {\n  const code = extractQueueErrorCode(cause)\n  return code === undefined ? undefined : QUEUE_ERROR_CLASSIFICATIONS.get(code)\n}\n\n/** Classify a raw Queue binding failure: the code table first, then Cloudflare's signals, then transport. */\nexport function classifyQueueError(cause: unknown): FailureClassification {\n  return classifyBoundaryError({\n    cause,\n    classifyBoundary: classifyQueueBoundaryError,\n    includeCloudflare: true,\n  })\n}\n\n/** A send through a Queue binding failed. The classification says whether an immediate retry may help. */\nexport class QueueSendError extends AppError {\n  readonly _tag = 'QueueSendError'\n  readonly classification: FailureClassification\n  readonly operation: QueueOperation\n\n  constructor(args: { readonly operation: QueueOperation; readonly cause: unknown }) {\n    super(QUEUE_OPERATION_MESSAGES[args.operation], { cause: args.cause })\n    this.classification = classifyQueueError(args.cause)\n    this.operation = args.operation\n  }\n}\n\n/**\n * A message over the per-message cap can never be sent on any queue; the dead letter has the\n * same cap. The client detects it before the send, so it never comes from a platform error.\n */\nexport class OversizedMessageError extends AppError {\n  readonly _tag = 'OversizedMessageError'\n  readonly classification = 'terminal'\n  readonly messageName: string\n  readonly bytes: number\n  readonly limit: number\n\n  constructor(args: {\n    readonly messageName: string\n    readonly bytes: number\n    readonly limit: number\n  }) {\n    super(\n      `Queue message \"${args.messageName}\" is ${String(args.bytes)} bytes, over the ${String(args.limit)} limit`,\n    )\n    this.messageName = args.messageName\n    this.bytes = args.bytes\n    this.limit = args.limit\n  }\n}\n\n/**\n * The dead letter did not accept an unparseable message. Always transient, whatever the send\n * failure was, so the source delivery retries instead of acknowledging and losing the body.\n */\nexport class DeadLetterUnavailableError extends AppError {\n  readonly _tag = 'DeadLetterUnavailableError'\n  readonly classification = 'transient'\n\n  constructor(cause: unknown) {\n    super('The dead letter did not accept the message', { cause })\n  }\n}\n","import { Result } from 'better-result'\n\nimport { createLogger, shouldRetryFailure } from '@/core'\n\nimport {\n  chunkByLimits,\n  isOversized,\n  messageByteLength,\n  QUEUE_LIMITS,\n  sizeMessages,\n  type SizedMessage,\n} from './queue-limits.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { OversizedMessageError, QueueSendError, type QueueOperation } from './queue.errors.ts'\n\n/** Cloudflare's delivery delay, in seconds. */\nexport type QueueSendOptions = { readonly delaySeconds: number }\n\n/** The two calls the client makes on a queue binding. */\nexport type QueueBinding<Body> = Pick<Queue<Body>, 'send' | 'sendBatch'>\n\n/**\n * The lanes and the dead letter of one application. A lane is a queue with its own consumer\n * settings; `laneOf` is the product's routing rule, written once at the composition root.\n */\nexport type QueueClientOptions<TMessage extends QueueMessage, Lane extends string> = {\n  readonly queues: Readonly<Record<Lane, QueueBinding<TMessage>>>\n  /** Where the consumer parks poison bodies. Cloudflare also routes exhausted retries here. */\n  readonly deadLetter: Pick<Queue, 'send'>\n  readonly laneOf: (message: TMessage) => Lane\n}\n\n/** The port an entrypoint, a relay, or a consumer sends through. */\nexport interface IQueueClient<TMessage extends QueueMessage> {\n  send(message: TMessage, options?: QueueSendOptions): Promise<void>\n  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>\n  /** Sends every message within the limits and returns the oversized ones. */\n  sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>>\n  /** Parks a delivered message's body as it arrived. */\n  sendToDlq(message: Message): Promise<void>\n}\n\nconst logger = createLogger('queue-client')\n\n/** Immediate retries of one binding call: three attempts, 250 ms then 500 ms, with jitter. */\nconst RETRY_TIMES = 2\nconst RETRY_BASE_DELAY_MS = 250\n\n/** Every send is safe to repeat, so a transient failure gets an immediate retry; terminal and unknown stop. */\nfunction shouldRetrySend(error: QueueSendError): boolean {\n  return shouldRetryFailure({\n    classification: error.classification,\n    repeatSafe: true,\n    owner: 'immediate',\n  })\n}\n\nfunction oversizedError(sized: SizedMessage<QueueMessage>): OversizedMessageError {\n  return new OversizedMessageError({\n    messageName: sized.message.name,\n    bytes: sized.bytes,\n    limit: QUEUE_LIMITS.messageBytes,\n  })\n}\n\n/**\n * Sends messages to the application's queues. Checks the size limits before a send, retries a\n * transient binding failure a bounded number of times, and converts the final failure to `QueueSendError`.\n */\nexport class QueueClient<\n  TMessage extends QueueMessage,\n  Lane extends string,\n> implements IQueueClient<TMessage> {\n  constructor(private readonly options: QueueClientOptions<TMessage, Lane>) {}\n\n  /** @throws OversizedMessageError before the send. @throws QueueSendError after the retries. */\n  async send(message: TMessage, options?: QueueSendOptions): Promise<void> {\n    const sized = { message, bytes: messageByteLength(message) }\n    if (isOversized(sized)) {\n      logger.warn('queue_message_oversized', {\n        name: message.name,\n        type: message.type,\n        bytes: sized.bytes,\n      })\n      throw oversizedError(sized)\n    }\n\n    const queue = this.queueFor(message)\n    logger.debug('sending_message', {\n      name: message.name,\n      type: message.type,\n      delaySeconds: options?.delaySeconds,\n    })\n\n    await this.callQueue('send', async () => {\n      if (options) {\n        await queue.send(message, options)\n      } else {\n        await queue.send(message)\n      }\n    })\n  }\n\n  /** Rejects the whole batch before any send when one message is oversized. */\n  async sendBatch(messages: ReadonlyArray<TMessage>): Promise<void> {\n    const sized = sizeMessages(messages)\n    const oversized = sized.find(isOversized)\n    if (oversized) throw oversizedError(oversized)\n    await this.sendSizedBatch(sized)\n  }\n\n  async sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>> {\n    const sized = sizeMessages(messages)\n    await this.sendSizedBatch(sized.filter((item) => !isOversized(item)))\n    return sized.filter(isOversized).map((item) => item.message)\n  }\n\n  async sendToDlq(message: Message): Promise<void> {\n    logger.debug('sending_to_dlq', { queueMessageId: message.id })\n    await this.callQueue('send_dlq', async () => {\n      await this.options.deadLetter.send(message.body)\n    })\n  }\n\n  /** Each lane's chunks retry on their own, so one failed chunk does not resend the others. */\n  private async sendSizedBatch(sized: ReadonlyArray<SizedMessage<TMessage>>): Promise<void> {\n    const byLane = new Map<Lane, SizedMessage<TMessage>[]>()\n    for (const item of sized) {\n      const lane = this.options.laneOf(item.message)\n      const items = byLane.get(lane) ?? []\n      items.push(item)\n      byLane.set(lane, items)\n    }\n\n    logger.debug('sending_batch', {\n      count: sized.length,\n      lanes: [...byLane].map(([lane, items]) => ({ lane, count: items.length })),\n    })\n\n    const sends: Promise<void>[] = []\n    for (const [lane, items] of byLane) {\n      const queue = this.options.queues[lane]\n      for (const group of chunkByLimits(items)) {\n        sends.push(\n          this.callQueue('send_batch', async () => {\n            await queue.sendBatch(group.map((body) => ({ body })))\n          }),\n        )\n      }\n    }\n    await Promise.all(sends)\n  }\n\n  private queueFor(message: TMessage): QueueBinding<TMessage> {\n    return this.options.queues[this.options.laneOf(message)]\n  }\n\n  private async callQueue<T>(operation: QueueOperation, call: () => Promise<T>): Promise<T> {\n    const result = await Result.tryPromise(\n      {\n        try: call,\n        catch: (cause) => new QueueSendError({ operation, cause }),\n      },\n      {\n        retry: {\n          times: RETRY_TIMES,\n          delayMs: RETRY_BASE_DELAY_MS,\n          backoff: 'exponential',\n          jitter: true,\n          shouldRetry: shouldRetrySend,\n        },\n      },\n    )\n    if (result.isErr()) throw result.error\n    return result.value\n  }\n}\n","import {\n  classifyFailure,\n  exponentialEqualJitterMs,\n  retryAfterSecondsOf,\n  shouldRetryFailure,\n  spreadJitterMs,\n  type FailureClassification,\n} from '@/core'\n\nconst BASE_RETRY_DELAY_MS = 5_000\nconst MAX_RETRY_DELAY_MS = 120_000\nconst RETRY_AFTER_SPREAD_MS = 5_000\n/** Cloudflare Queues accept a redelivery delay of at most one day. */\nconst MAX_QUEUE_DELAY_SECONDS = 24 * 60 * 60\n\n/** How the consumer settles one failed message: acknowledge it, or have Cloudflare redeliver it after a delay. */\nexport type RedeliveryDecision =\n  | { readonly action: 'ack'; readonly classification: 'terminal' }\n  | {\n      readonly action: 'retry'\n      readonly classification: Exclude<FailureClassification, 'terminal'>\n      readonly delaySeconds: number\n    }\n\n/**\n * Decide whether the consumer acknowledges a failed message or asks Cloudflare to redeliver it.\n * A terminal failure acknowledges. Transient and unknown failures redeliver: after the advertised\n * wait plus a spread when the error carries one, else with exponential equal-jitter backoff.\n * An `AggregateError` from event delivery redelivers when any member does, after the longest wait.\n */\nexport function decideRedelivery(cause: unknown, attempt: number): RedeliveryDecision {\n  if (cause instanceof AggregateError && cause.errors.length > 0) {\n    const decisions = cause.errors.map((member) => decideRedelivery(member, attempt))\n    const retries = decisions.filter((decision) => decision.action === 'retry')\n    if (retries.length === 0) return { action: 'ack', classification: 'terminal' }\n\n    // Redelivery must respect every failed subscriber's required wait.\n    return {\n      action: 'retry',\n      classification: retries.some((decision) => decision.classification === 'unknown')\n        ? 'unknown'\n        : 'transient',\n      delaySeconds: Math.max(...retries.map((decision) => decision.delaySeconds)),\n    }\n  }\n\n  const classification = classifyFailure(cause)\n  if (classification === 'terminal') return { action: 'ack', classification }\n\n  const canRetry = shouldRetryFailure({ classification, repeatSafe: true, owner: 'durable' })\n  if (!canRetry) return { action: 'ack', classification: 'terminal' }\n\n  const retryAfterSeconds = retryAfterSecondsOf(cause)\n  const delayMs =\n    retryAfterSeconds === null\n      ? exponentialEqualJitterMs(BASE_RETRY_DELAY_MS, MAX_RETRY_DELAY_MS, attempt)\n      : retryAfterSeconds * 1_000 + spreadJitterMs(RETRY_AFTER_SPREAD_MS)\n\n  return {\n    action: 'retry',\n    classification,\n    delaySeconds: Math.min(MAX_QUEUE_DELAY_SECONDS, Math.max(1, Math.ceil(delayMs / 1_000))),\n  }\n}\n","import type { z } from 'zod'\n\nimport { MessageAlreadyProcessedError } from '@/application'\nimport { createLogger } from '@/core'\n\nimport type { IQueueClient } from './queue-client.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { DeadLetterUnavailableError } from './queue.errors.ts'\nimport { decideRedelivery } from './redelivery-policy.ts'\n\nconst logger = createLogger('queue-consumer')\n\n/** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */\nexport type DispatchWrapper<TMessage extends QueueMessage> = (\n  message: TMessage,\n  attempt: number,\n  run: () => Promise<void>,\n) => Promise<void>\n\n/** The one call the consumer makes on the bus. */\nexport type DispatchBus<TMessage extends QueueMessage> = {\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- the bus resolves to each handler's own value; the consumer discards it.\n  handle(message: TMessage): Promise<unknown>\n}\n\n/**\n * Parses and dispatches each queue message, then selects acknowledgement or retry.\n * Cloudflare owns the retry limit and sends exhausted messages to the configured dead letter.\n * The consumer logs each failure once; handlers do not.\n */\nexport class QueueConsumer<TMessage extends QueueMessage> {\n  /**\n   * @param bus - Where a parsed message goes.\n   * @param queueClient - Parks an unparseable body in the dead letter.\n   * @param schema - What a body may be: the application's `messages.queueSchema`.\n   * @param wrapDispatch - Wraps one dispatch in the application's context. Default: run it as is.\n   */\n  constructor(\n    private readonly bus: DispatchBus<TMessage>,\n    private readonly queueClient: Pick<IQueueClient<TMessage>, 'sendToDlq'>,\n    private readonly schema: z.ZodType<TMessage>,\n    private readonly wrapDispatch: DispatchWrapper<TMessage> = (_message, _attempt, run) => run(),\n  ) {}\n\n  /** Every message settles on its own. A settlement that throws rejects the batch after its siblings settle. */\n  async processBatch(batch: MessageBatch): Promise<void> {\n    logger.debug('queue_batch_received', { count: batch.messages.length })\n    const results = await Promise.allSettled(\n      batch.messages.map((message) => this.processMessage(message)),\n    )\n    const rejected = results\n      .filter((result) => result.status === 'rejected')\n      .map((result) => result.reason)\n\n    if (rejected.length > 0) {\n      throw new AggregateError(rejected, 'Queue message settlement failed')\n    }\n  }\n\n  private async processMessage(message: Message): Promise<void> {\n    let parsed: TMessage | null = null\n\n    try {\n      const body = await this.parseMessage(message)\n      if (body === null) {\n        // An unparseable body cannot succeed on retry, so park it for inspection.\n        logger.error('invalid_message_format', {\n          details: { attempt: message.attempts, queueMessageId: message.id },\n        })\n        await this.parkPoison(message)\n        return\n      }\n      parsed = body\n\n      await this.wrapDispatch(body, message.attempts, async () => {\n        await this.bus.handle(body)\n      })\n      message.ack()\n      logger.debug(`queue_message_processed:${body.name}`, { name: body.name })\n    } catch (cause) {\n      this.handleFailure(message, parsed, cause)\n    }\n  }\n\n  /** Returns null on failure; the caller owns the single log point. */\n  private async parseMessage(message: Message): Promise<TMessage | null> {\n    const result = await this.schema.safeParseAsync(message.body)\n    return result.success ? result.data : null\n  }\n\n  /** Park an unparseable message in the dead letter, then acknowledge its source delivery. */\n  private async parkPoison(message: Message): Promise<void> {\n    try {\n      await this.queueClient.sendToDlq(message)\n      message.ack()\n    } catch (cause) {\n      throw new DeadLetterUnavailableError(cause)\n    }\n  }\n\n  /**\n   * Retry declared transient and unknown failures so Cloudflare can enforce the attempt ceiling.\n   * Acknowledge only declared terminal failures.\n   */\n  private handleFailure(message: Message, parsed: TMessage | null, cause: unknown): void {\n    if (cause instanceof MessageAlreadyProcessedError) {\n      logger.debug('duplicate_skipped', {\n        name: parsed?.name,\n        messageId: cause.messageId,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const decision = decideRedelivery(cause, message.attempts)\n    if (decision.action === 'ack') {\n      logger.error('message_discarded', {\n        error: cause,\n        details: {\n          name: parsed?.name,\n          messageId: parsed?.id,\n          queueMessageId: message.id,\n          attempt: message.attempts,\n        },\n      })\n      message.ack()\n      return\n    }\n\n    const context = {\n      name: parsed?.name,\n      messageId: parsed?.id,\n      queueMessageId: message.id,\n      attempt: message.attempts,\n      classification: decision.classification,\n      delaySeconds: decision.delaySeconds,\n    }\n    if (decision.classification === 'unknown' && message.attempts === 1) {\n      logger.error('queue_unknown_failure', { error: cause, details: context })\n    } else {\n      logger.debug('redelivery_requested', context)\n    }\n    message.retry({ delaySeconds: decision.delaySeconds })\n  }\n}\n","import type { IOutboxRelay, OutboxRelay } from '@/application'\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('outbox-wake')\n\n/** Register delivery after commit; log a failed drain once and leave recovery to the scheduled sweep. */\nexport function waitUntilWake(\n  context: Pick<ExecutionContext, 'waitUntil'>,\n  relay: Pick<OutboxRelay, 'drain'>,\n): IOutboxRelay {\n  return {\n    wake: () =>\n      context.waitUntil(\n        relay.drain().catch((cause: unknown) => {\n          logger.error('outbox_wake_failed', { error: cause })\n        }),\n      ),\n  }\n}\n"],"mappings":";;;;;;;;;;AAOA,MAAa,eAAe;CAC1B,cAAc;CACd,YAAY;CACZ,YAAY;AACd;;AAGA,SAAgB,kBAAkB,SAA+B;CAC/D,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC;AAC3D;;AAMA,SAAgB,aACd,UAC0B;CAC1B,OAAO,SAAS,KAAK,aAAa;EAAE;EAAS,OAAO,kBAAkB,OAAO;CAAE,EAAE;AACnF;;AAGA,SAAgB,YAAY,OAA4C;CACtE,OAAO,MAAM,QAAQ,aAAa;AACpC;;AAGA,SAAgB,cACd,OACc;CACd,MAAM,SAAuB,CAAC;CAC9B,IAAI,UAAsB,CAAC;CAC3B,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OACJ,QAAQ,UAAU,aAAa,cAAc,QAAQ,KAAK,QAAQ,aAAa;EACjF,IAAI,QAAQ,SAAS,KAAK,MAAM;GAC9B,OAAO,KAAK,OAAO;GACnB,UAAU,CAAC;GACX,QAAQ;EACV;EACA,QAAQ,KAAK,KAAK,OAAO;EACzB,SAAS,KAAK;CAChB;CACA,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAK,OAAO;CAC3C,OAAO;AACT;;;;AChDA,MAAM,2BAA2B;CAC/B,MAAM;CACN,YAAY;CACZ,UAAU;AACZ;;;;;;AAOA,MAAM,8CAA8B,IAAI,IAAmC;CACzE,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,MAAO,SAAS;AACnB,CAAC;AAED,SAAS,sBAAsB,OAAoC;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,QAAQ,iBAAiB,KAAK,MAAM,OAAO;CACjD,OAAO,QAAQ,OAAO,SAAY,SAAY,OAAO,MAAM,EAAE;AAC/D;AAEA,SAAS,2BAA2B,OAAmD;CACrF,MAAM,OAAO,sBAAsB,KAAK;CACxC,OAAO,SAAS,SAAY,SAAY,4BAA4B,IAAI,IAAI;AAC9E;;AAGA,SAAgB,mBAAmB,OAAuC;CACxE,OAAO,sBAAsB;EAC3B;EACA,kBAAkB;EAClB,mBAAmB;CACrB,CAAC;AACH;;AAGA,IAAa,iBAAb,cAAoC,SAAS;CAC3C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YAAY,MAAuE;EACjF,MAAM,yBAAyB,KAAK,YAAY,EAAE,OAAO,KAAK,MAAM,CAAC;EACrE,KAAK,iBAAiB,mBAAmB,KAAK,KAAK;EACnD,KAAK,YAAY,KAAK;CACxB;AACF;;;;;AAMA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAIT;EACD,MACE,kBAAkB,KAAK,YAAY,OAAO,OAAO,KAAK,KAAK,EAAE,mBAAmB,OAAO,KAAK,KAAK,EAAE,OACrG;EACA,KAAK,cAAc,KAAK;EACxB,KAAK,QAAQ,KAAK;EAClB,KAAK,QAAQ,KAAK;CACpB;AACF;;;;;AAMA,IAAa,6BAAb,cAAgD,SAAS;CACvD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,OAAgB;EAC1B,MAAM,8CAA8C,EAAE,MAAM,CAAC;CAC/D;AACF;;;;AC5DA,MAAMA,WAAS,aAAa,cAAc;;AAG1C,MAAM,cAAc;AACpB,MAAM,sBAAsB;;AAG5B,SAAS,gBAAgB,OAAgC;CACvD,OAAO,mBAAmB;EACxB,gBAAgB,MAAM;EACtB,YAAY;EACZ,OAAO;CACT,CAAC;AACH;AAEA,SAAS,eAAe,OAA0D;CAChF,OAAO,IAAI,sBAAsB;EAC/B,aAAa,MAAM,QAAQ;EAC3B,OAAO,MAAM;EACb,OAAO,aAAa;CACtB,CAAC;AACH;;;;;AAMA,IAAa,cAAb,MAGoC;CACL;CAA7B,YAAY,AAAiB,SAA6C;EAA7C;CAA8C;;CAG3E,MAAM,KAAK,SAAmB,SAA2C;EACvE,MAAM,QAAQ;GAAE;GAAS,OAAO,kBAAkB,OAAO;EAAE;EAC3D,IAAI,YAAY,KAAK,GAAG;GACtB,SAAO,KAAK,2BAA2B;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,OAAO,MAAM;GACf,CAAC;GACD,MAAM,eAAe,KAAK;EAC5B;EAEA,MAAM,QAAQ,KAAK,SAAS,OAAO;EACnC,SAAO,MAAM,mBAAmB;GAC9B,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,cAAc,SAAS;EACzB,CAAC;EAED,MAAM,KAAK,UAAU,QAAQ,YAAY;GACvC,IAAI,SACF,MAAM,MAAM,KAAK,SAAS,OAAO;QAEjC,MAAM,MAAM,KAAK,OAAO;EAE5B,CAAC;CACH;;CAGA,MAAM,UAAU,UAAkD;EAChE,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI,WAAW,MAAM,eAAe,SAAS;EAC7C,MAAM,KAAK,eAAe,KAAK;CACjC;CAEA,MAAM,iBACJ,UAC8B;EAC9B,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,KAAK,eAAe,MAAM,QAAQ,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;EACpE,OAAO,MAAM,OAAO,WAAW,CAAC,CAAC,KAAK,SAAS,KAAK,OAAO;CAC7D;CAEA,MAAM,UAAU,SAAiC;EAC/C,SAAO,MAAM,kBAAkB,EAAE,gBAAgB,QAAQ,GAAG,CAAC;EAC7D,MAAM,KAAK,UAAU,YAAY,YAAY;GAC3C,MAAM,KAAK,QAAQ,WAAW,KAAK,QAAQ,IAAI;EACjD,CAAC;CACH;;CAGA,MAAc,eAAe,OAA6D;EACxF,MAAM,yBAAS,IAAI,IAAoC;EACvD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,QAAQ,OAAO,KAAK,OAAO;GAC7C,MAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,CAAC;GACnC,MAAM,KAAK,IAAI;GACf,OAAO,IAAI,MAAM,KAAK;EACxB;EAEA,SAAO,MAAM,iBAAiB;GAC5B,OAAO,MAAM;GACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;IAAE;IAAM,OAAO,MAAM;GAAO,EAAE;EAC3E,CAAC;EAED,MAAM,QAAyB,CAAC;EAChC,KAAK,MAAM,CAAC,MAAM,UAAU,QAAQ;GAClC,MAAM,QAAQ,KAAK,QAAQ,OAAO;GAClC,KAAK,MAAM,SAAS,cAAc,KAAK,GACrC,MAAM,KACJ,KAAK,UAAU,cAAc,YAAY;IACvC,MAAM,MAAM,UAAU,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,CAAC;GACvD,CAAC,CACH;EAEJ;EACA,MAAM,QAAQ,IAAI,KAAK;CACzB;CAEA,AAAQ,SAAS,SAA2C;EAC1D,OAAO,KAAK,QAAQ,OAAO,KAAK,QAAQ,OAAO,OAAO;CACxD;CAEA,MAAc,UAAa,WAA2B,MAAoC;EACxF,MAAM,SAAS,MAAM,OAAO,WAC1B;GACE,KAAK;GACL,QAAQ,UAAU,IAAI,eAAe;IAAE;IAAW;GAAM,CAAC;EAC3D,GACA,EACE,OAAO;GACL,OAAO;GACP,SAAS;GACT,SAAS;GACT,QAAQ;GACR,aAAa;EACf,EACF,CACF;EACA,IAAI,OAAO,MAAM,GAAG,MAAM,OAAO;EACjC,OAAO,OAAO;CAChB;AACF;;;;AC3KA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;;AAE9B,MAAM,0BAA0B;;;;;;;AAiBhC,SAAgB,iBAAiB,OAAgB,SAAqC;CACpF,IAAI,iBAAiB,kBAAkB,MAAM,OAAO,SAAS,GAAG;EAE9D,MAAM,UADY,MAAM,OAAO,KAAK,WAAW,iBAAiB,QAAQ,OAAO,CACvD,CAAC,CAAC,QAAQ,aAAa,SAAS,WAAW,OAAO;EAC1E,IAAI,QAAQ,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAO,gBAAgB;EAAW;EAG7E,OAAO;GACL,QAAQ;GACR,gBAAgB,QAAQ,MAAM,aAAa,SAAS,mBAAmB,SAAS,IAC5E,YACA;GACJ,cAAc,KAAK,IAAI,GAAG,QAAQ,KAAK,aAAa,SAAS,YAAY,CAAC;EAC5E;CACF;CAEA,MAAM,iBAAiB,gBAAgB,KAAK;CAC5C,IAAI,mBAAmB,YAAY,OAAO;EAAE,QAAQ;EAAO;CAAe;CAG1E,IAAI,CADa,mBAAmB;EAAE;EAAgB,YAAY;EAAM,OAAO;CAAU,CAC7E,GAAG,OAAO;EAAE,QAAQ;EAAO,gBAAgB;CAAW;CAElE,MAAM,oBAAoB,oBAAoB,KAAK;CACnD,MAAM,UACJ,sBAAsB,OAClB,yBAAyB,qBAAqB,oBAAoB,OAAO,IACzE,oBAAoB,MAAQ,eAAe,qBAAqB;CAEtE,OAAO;EACL,QAAQ;EACR;EACA,cAAc,KAAK,IAAI,yBAAyB,KAAK,IAAI,GAAG,KAAK,KAAK,UAAU,GAAK,CAAC,CAAC;CACzF;AACF;;;;ACrDA,MAAMC,WAAS,aAAa,gBAAgB;;;;;;AAoB5C,IAAa,gBAAb,MAA0D;CAQrC;CACA;CACA;CACA;;;;;;;CAJnB,YACE,AAAiB,KACjB,AAAiB,aACjB,AAAiB,QACjB,AAAiB,gBAA2C,UAAU,UAAU,QAAQ,IAAI,GAC5F;EAJiB;EACA;EACA;EACA;CAChB;;CAGH,MAAM,aAAa,OAAoC;EACrD,SAAO,MAAM,wBAAwB,EAAE,OAAO,MAAM,SAAS,OAAO,CAAC;EAIrE,MAAM,YAAW,MAHK,QAAQ,WAC5B,MAAM,SAAS,KAAK,YAAY,KAAK,eAAe,OAAO,CAAC,CAC9D,EACwB,CACrB,QAAQ,WAAW,OAAO,WAAW,UAAU,CAAC,CAChD,KAAK,WAAW,OAAO,MAAM;EAEhC,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,iCAAiC;CAExE;CAEA,MAAc,eAAe,SAAiC;EAC5D,IAAI,SAA0B;EAE9B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO;GAC5C,IAAI,SAAS,MAAM;IAEjB,SAAO,MAAM,0BAA0B,EACrC,SAAS;KAAE,SAAS,QAAQ;KAAU,gBAAgB,QAAQ;IAAG,EACnE,CAAC;IACD,MAAM,KAAK,WAAW,OAAO;IAC7B;GACF;GACA,SAAS;GAET,MAAM,KAAK,aAAa,MAAM,QAAQ,UAAU,YAAY;IAC1D,MAAM,KAAK,IAAI,OAAO,IAAI;GAC5B,CAAC;GACD,QAAQ,IAAI;GACZ,SAAO,MAAM,2BAA2B,KAAK,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC;EAC1E,SAAS,OAAO;GACd,KAAK,cAAc,SAAS,QAAQ,KAAK;EAC3C;CACF;;CAGA,MAAc,aAAa,SAA4C;EACrE,MAAM,SAAS,MAAM,KAAK,OAAO,eAAe,QAAQ,IAAI;EAC5D,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;;CAGA,MAAc,WAAW,SAAiC;EACxD,IAAI;GACF,MAAM,KAAK,YAAY,UAAU,OAAO;GACxC,QAAQ,IAAI;EACd,SAAS,OAAO;GACd,MAAM,IAAI,2BAA2B,KAAK;EAC5C;CACF;;;;;CAMA,AAAQ,cAAc,SAAkB,QAAyB,OAAsB;EACrF,IAAI,iBAAiB,8BAA8B;GACjD,SAAO,MAAM,qBAAqB;IAChC,MAAM,QAAQ;IACd,WAAW,MAAM;IACjB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,WAAW,iBAAiB,OAAO,QAAQ,QAAQ;EACzD,IAAI,SAAS,WAAW,OAAO;GAC7B,SAAO,MAAM,qBAAqB;IAChC,OAAO;IACP,SAAS;KACP,MAAM,QAAQ;KACd,WAAW,QAAQ;KACnB,gBAAgB,QAAQ;KACxB,SAAS,QAAQ;IACnB;GACF,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,UAAU;GACd,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,SAAS,QAAQ;GACjB,gBAAgB,SAAS;GACzB,cAAc,SAAS;EACzB;EACA,IAAI,SAAS,mBAAmB,aAAa,QAAQ,aAAa,GAChE,SAAO,MAAM,yBAAyB;GAAE,OAAO;GAAO,SAAS;EAAQ,CAAC;OAExE,SAAO,MAAM,wBAAwB,OAAO;EAE9C,QAAQ,MAAM,EAAE,cAAc,SAAS,aAAa,CAAC;CACvD;AACF;;;;AC9IA,MAAM,SAAS,aAAa,aAAa;;AAGzC,SAAgB,cACd,SACA,OACc;CACd,OAAO,EACL,YACE,QAAQ,UACN,MAAM,MAAM,CAAC,CAAC,OAAO,UAAmB;EACtC,OAAO,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;CACrD,CAAC,CACH,EACJ;AACF"}
+{"version":3,"file":"queue.js","names":["logger","logger"],"sources":["../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"sourcesContent":["import type { QueueMessage } from './queue-message.ts'\n\n/**\n * The Cloudflare Queues producer limits with metadata headroom, checked before each send so a\n * violation never reaches the binding. The dead letter has the same per-message limit.\n * https://developers.cloudflare.com/queues/platform/limits/\n */\nexport const QUEUE_LIMITS = {\n  messageBytes: 127_000,\n  batchBytes: 250_000,\n  batchCount: 100,\n} as const\n\n/** The size the binding measures: the JSON encoding of the body, in UTF-8 bytes. */\nexport function messageByteLength(message: QueueMessage): number {\n  return new TextEncoder().encode(JSON.stringify(message)).length\n}\n\n/** A message with its measured size. */\nexport type SizedMessage<TMessage> = { readonly message: TMessage; readonly bytes: number }\n\n/** Measure every message once. */\nexport function sizeMessages<TMessage extends QueueMessage>(\n  messages: ReadonlyArray<TMessage>,\n): SizedMessage<TMessage>[] {\n  return messages.map((message) => ({ message, bytes: messageByteLength(message) }))\n}\n\n/** Whether one message is over the per-message limit. */\nexport function isOversized(sized: SizedMessage<QueueMessage>): boolean {\n  return sized.bytes > QUEUE_LIMITS.messageBytes\n}\n\n/** Split a batch at the message-count and byte limits, keeping the order. */\nexport function chunkByLimits<TMessage>(\n  sized: ReadonlyArray<SizedMessage<TMessage>>,\n): TMessage[][] {\n  const chunks: TMessage[][] = []\n  let current: TMessage[] = []\n  let bytes = 0\n  for (const item of sized) {\n    const full =\n      current.length >= QUEUE_LIMITS.batchCount || bytes + item.bytes > QUEUE_LIMITS.batchBytes\n    if (current.length > 0 && full) {\n      chunks.push(current)\n      current = []\n      bytes = 0\n    }\n    current.push(item.message)\n    bytes += item.bytes\n  }\n  if (current.length > 0) chunks.push(current)\n  return chunks\n}\n","import { AppError, classifyBoundaryError, type FailureClassification } from '@/core'\n\n/** The Queue binding calls the client makes. Each is safe to repeat. */\nexport type QueueOperation = 'send' | 'send_batch' | 'send_dlq'\n\nconst QUEUE_OPERATION_MESSAGES = {\n  send: 'Failed to send queue message',\n  send_batch: 'Failed to send queue batch',\n  send_dlq: 'Failed to send DLQ message',\n} satisfies Readonly<Record<QueueOperation, string>>\n\n/**\n * Cloudflare Queues error codes, by whether a repeat could change the answer. The reference\n * marks only 10201 and 10250 for retry; 10251 waits for processing, 15000 is nobody's call.\n * https://developers.cloudflare.com/queues/reference/error-codes/\n */\nconst QUEUE_ERROR_CLASSIFICATIONS = new Map<number, FailureClassification>([\n  [10104, 'terminal'], // QueueNotFound\n  [10106, 'terminal'], // Unauthorized\n  [10107, 'terminal'], // QueueIDMalformed\n  [10201, 'transient'], // ClientDisconnected\n  [10202, 'terminal'], // BatchDelayInvalid\n  [10203, 'terminal'], // MessageMetadataInvalid\n  [10204, 'terminal'], // MessageSizeOutOfBounds\n  [10205, 'terminal'], // BatchSizeOutOfBounds\n  [10206, 'terminal'], // BatchCountOutOfBounds\n  [10207, 'terminal'], // JSONRequestBodyInvalid\n  [10208, 'terminal'], // JSONRequestBodyMalformed\n  [10250, 'transient'], // QueueOverloaded\n  [10251, 'transient'], // QueueStorageLimitExceeded\n  [10252, 'terminal'], // QueueDisabled\n  [10253, 'terminal'], // FreeTierLimitExceeded\n  [15000, 'unknown'], // UnknownInternalError\n])\n\nfunction extractQueueErrorCode(cause: unknown): number | undefined {\n  if (!(cause instanceof Error)) return undefined\n  const match = /(\\d{5})\\)?\\s*$/.exec(cause.message)\n  return match?.[1] === undefined ? undefined : Number(match[1])\n}\n\nfunction classifyQueueBoundaryError(cause: unknown): FailureClassification | undefined {\n  const code = extractQueueErrorCode(cause)\n  return code === undefined ? undefined : QUEUE_ERROR_CLASSIFICATIONS.get(code)\n}\n\n/** Classify a raw Queue binding failure: the code table first, then Cloudflare's signals, then transport. */\nexport function classifyQueueError(cause: unknown): FailureClassification {\n  return classifyBoundaryError({\n    cause,\n    classifyBoundary: classifyQueueBoundaryError,\n    includeCloudflare: true,\n  })\n}\n\n/** A send through a Queue binding failed. The classification says whether an immediate retry may help. */\nexport class QueueSendError extends AppError {\n  readonly _tag = 'QueueSendError'\n  readonly classification: FailureClassification\n  readonly operation: QueueOperation\n\n  constructor(args: { readonly operation: QueueOperation; readonly cause: unknown }) {\n    super(QUEUE_OPERATION_MESSAGES[args.operation], { cause: args.cause })\n    this.classification = classifyQueueError(args.cause)\n    this.operation = args.operation\n  }\n}\n\n/**\n * A message over the per-message cap can never be sent on any queue; the dead letter has the\n * same cap. The client detects it before the send, so it never comes from a platform error.\n */\nexport class OversizedMessageError extends AppError {\n  readonly _tag = 'OversizedMessageError'\n  readonly classification = 'terminal'\n  readonly messageName: string\n  readonly bytes: number\n  readonly limit: number\n\n  constructor(args: {\n    readonly messageName: string\n    readonly bytes: number\n    readonly limit: number\n  }) {\n    super(\n      `Queue message \"${args.messageName}\" is ${String(args.bytes)} bytes, over the ${String(args.limit)} limit`,\n    )\n    this.messageName = args.messageName\n    this.bytes = args.bytes\n    this.limit = args.limit\n  }\n}\n\n/**\n * The dead letter did not accept an unparseable message. Always transient, whatever the send\n * failure was, so the source delivery retries instead of acknowledging and losing the body.\n */\nexport class DeadLetterUnavailableError extends AppError {\n  readonly _tag = 'DeadLetterUnavailableError'\n  readonly classification = 'transient'\n\n  constructor(cause: unknown) {\n    super('The dead letter did not accept the message', { cause })\n  }\n}\n","import { Result } from 'better-result'\n\nimport { createLogger, shouldRetryFailure } from '@/core'\n\nimport {\n  chunkByLimits,\n  isOversized,\n  messageByteLength,\n  QUEUE_LIMITS,\n  sizeMessages,\n  type SizedMessage,\n} from './queue-limits.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { OversizedMessageError, QueueSendError, type QueueOperation } from './queue.errors.ts'\n\n/** Cloudflare's delivery delay, in seconds. */\nexport type QueueSendOptions = { readonly delaySeconds: number }\n\n/** The two calls the client makes on a queue binding. */\nexport type QueueBinding<Body> = Pick<Queue<Body>, 'send' | 'sendBatch'>\n\n/**\n * The lanes and the dead letter of one application. A lane is a queue with its own consumer\n * settings; `laneOf` is the product's routing rule, written once at the composition root.\n */\nexport type QueueClientOptions<TMessage extends QueueMessage, Lane extends string> = {\n  readonly queues: Readonly<Record<Lane, QueueBinding<TMessage>>>\n  /** Where the consumer parks poison bodies. Cloudflare also routes exhausted retries here. */\n  readonly deadLetter: Pick<Queue, 'send'>\n  readonly laneOf: (message: TMessage) => Lane\n}\n\n/** The port an entrypoint, a relay, or a consumer sends through. */\nexport interface IQueueClient<TMessage extends QueueMessage> {\n  send(message: TMessage, options?: QueueSendOptions): Promise<void>\n  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>\n  /** Sends every message within the limits and returns the oversized ones. */\n  sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>>\n  /** Parks a delivered message's body as it arrived. */\n  sendToDlq(message: Message): Promise<void>\n}\n\nconst logger = createLogger('queue-client')\n\n/** Immediate retries of one binding call: three attempts, 250 ms then 500 ms, with jitter. */\nconst RETRY_TIMES = 2\nconst RETRY_BASE_DELAY_MS = 250\n\n/** Every send is safe to repeat, so a transient failure gets an immediate retry; terminal and unknown stop. */\nfunction shouldRetrySend(error: QueueSendError): boolean {\n  return shouldRetryFailure({\n    classification: error.classification,\n    repeatSafe: true,\n    owner: 'immediate',\n  })\n}\n\nfunction oversizedError(sized: SizedMessage<QueueMessage>): OversizedMessageError {\n  return new OversizedMessageError({\n    messageName: sized.message.name,\n    bytes: sized.bytes,\n    limit: QUEUE_LIMITS.messageBytes,\n  })\n}\n\n/**\n * Sends messages to the application's queues. Checks the size limits before a send, retries a\n * transient binding failure a bounded number of times, and converts the final failure to `QueueSendError`.\n */\nexport class QueueClient<\n  TMessage extends QueueMessage,\n  Lane extends string,\n> implements IQueueClient<TMessage> {\n  constructor(private readonly options: QueueClientOptions<TMessage, Lane>) {}\n\n  /** @throws OversizedMessageError before the send. @throws QueueSendError after the retries. */\n  async send(message: TMessage, options?: QueueSendOptions): Promise<void> {\n    const sized = { message, bytes: messageByteLength(message) }\n    if (isOversized(sized)) {\n      logger.warn('queue_message_oversized', {\n        name: message.name,\n        type: message.type,\n        bytes: sized.bytes,\n      })\n      throw oversizedError(sized)\n    }\n\n    const queue = this.queueFor(message)\n    logger.debug('sending_message', {\n      name: message.name,\n      type: message.type,\n      delaySeconds: options?.delaySeconds,\n    })\n\n    await this.callQueue('send', async () => {\n      if (options) {\n        await queue.send(message, options)\n      } else {\n        await queue.send(message)\n      }\n    })\n  }\n\n  /** Rejects the whole batch before any send when one message is oversized. */\n  async sendBatch(messages: ReadonlyArray<TMessage>): Promise<void> {\n    const sized = sizeMessages(messages)\n    const oversized = sized.find(isOversized)\n    if (oversized) throw oversizedError(oversized)\n    await this.sendSizedBatch(sized)\n  }\n\n  async sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>> {\n    const sized = sizeMessages(messages)\n    await this.sendSizedBatch(sized.filter((item) => !isOversized(item)))\n    return sized.filter(isOversized).map((item) => item.message)\n  }\n\n  async sendToDlq(message: Message): Promise<void> {\n    logger.debug('sending_to_dlq', { queueMessageId: message.id })\n    await this.callQueue('send_dlq', async () => {\n      await this.options.deadLetter.send(message.body)\n    })\n  }\n\n  /** Each lane's chunks retry on their own, so one failed chunk does not resend the others. */\n  private async sendSizedBatch(sized: ReadonlyArray<SizedMessage<TMessage>>): Promise<void> {\n    const byLane = new Map<Lane, SizedMessage<TMessage>[]>()\n    for (const item of sized) {\n      const lane = this.options.laneOf(item.message)\n      const items = byLane.get(lane) ?? []\n      items.push(item)\n      byLane.set(lane, items)\n    }\n\n    logger.debug('sending_batch', {\n      count: sized.length,\n      lanes: [...byLane].map(([lane, items]) => ({ lane, count: items.length })),\n    })\n\n    const sends: Promise<void>[] = []\n    for (const [lane, items] of byLane) {\n      const queue = this.options.queues[lane]\n      for (const group of chunkByLimits(items)) {\n        sends.push(\n          this.callQueue('send_batch', async () => {\n            await queue.sendBatch(group.map((body) => ({ body })))\n          }),\n        )\n      }\n    }\n    await Promise.all(sends)\n  }\n\n  private queueFor(message: TMessage): QueueBinding<TMessage> {\n    return this.options.queues[this.options.laneOf(message)]\n  }\n\n  private async callQueue<T>(operation: QueueOperation, call: () => Promise<T>): Promise<T> {\n    const result = await Result.tryPromise(\n      {\n        try: call,\n        catch: (cause) => new QueueSendError({ operation, cause }),\n      },\n      {\n        retry: {\n          times: RETRY_TIMES,\n          delayMs: RETRY_BASE_DELAY_MS,\n          backoff: 'exponential',\n          jitter: true,\n          shouldRetry: shouldRetrySend,\n        },\n      },\n    )\n    if (result.isErr()) throw result.error\n    return result.value\n  }\n}\n","import {\n  classifyFailure,\n  exponentialEqualJitterMs,\n  retryAfterSecondsOf,\n  shouldRetryFailure,\n  spreadJitterMs,\n  type FailureClassification,\n} from '@/core'\n\nconst BASE_RETRY_DELAY_MS = 5_000\nconst MAX_RETRY_DELAY_MS = 120_000\nconst RETRY_AFTER_SPREAD_MS = 5_000\n/** Cloudflare Queues accept a redelivery delay of at most one day. */\nconst MAX_QUEUE_DELAY_SECONDS = 24 * 60 * 60\n\n/** How the consumer settles one failed message: acknowledge it, or have Cloudflare redeliver it after a delay. */\nexport type RedeliveryDecision =\n  | { readonly action: 'ack'; readonly classification: 'terminal' }\n  | {\n      readonly action: 'retry'\n      readonly classification: Exclude<FailureClassification, 'terminal'>\n      readonly delaySeconds: number\n    }\n\n/**\n * Decide whether the consumer acknowledges a failed message or asks Cloudflare to redeliver it.\n * A terminal failure acknowledges. Transient and unknown failures redeliver: after the advertised\n * wait plus a spread when the error carries one, else with exponential equal-jitter backoff.\n * An `AggregateError` from event delivery redelivers when any member does, after the longest wait.\n */\nexport function decideRedelivery(cause: unknown, attempt: number): RedeliveryDecision {\n  if (cause instanceof AggregateError && cause.errors.length > 0) {\n    const decisions = cause.errors.map((member) => decideRedelivery(member, attempt))\n    const retries = decisions.filter((decision) => decision.action === 'retry')\n    if (retries.length === 0) return { action: 'ack', classification: 'terminal' }\n\n    // Redelivery must respect every failed subscriber's required wait.\n    return {\n      action: 'retry',\n      classification: retries.some((decision) => decision.classification === 'unknown')\n        ? 'unknown'\n        : 'transient',\n      delaySeconds: Math.max(...retries.map((decision) => decision.delaySeconds)),\n    }\n  }\n\n  const classification = classifyFailure(cause)\n  if (classification === 'terminal') return { action: 'ack', classification }\n\n  const canRetry = shouldRetryFailure({ classification, repeatSafe: true, owner: 'durable' })\n  if (!canRetry) return { action: 'ack', classification: 'terminal' }\n\n  const retryAfterSeconds = retryAfterSecondsOf(cause)\n  const delayMs =\n    retryAfterSeconds === null\n      ? exponentialEqualJitterMs(BASE_RETRY_DELAY_MS, MAX_RETRY_DELAY_MS, attempt)\n      : retryAfterSeconds * 1_000 + spreadJitterMs(RETRY_AFTER_SPREAD_MS)\n\n  return {\n    action: 'retry',\n    classification,\n    delaySeconds: Math.min(MAX_QUEUE_DELAY_SECONDS, Math.max(1, Math.ceil(delayMs / 1_000))),\n  }\n}\n","import type { z } from 'zod'\n\nimport { MessageAlreadyProcessedError } from '@/application'\nimport { createLogger } from '@/core'\n\nimport type { IQueueClient } from './queue-client.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { DeadLetterUnavailableError } from './queue.errors.ts'\nimport { decideRedelivery } from './redelivery-policy.ts'\n\nconst logger = createLogger('queue-consumer')\n\n/** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */\nexport type DispatchWrapper<TMessage extends QueueMessage> = (\n  message: TMessage,\n  attempt: number,\n  run: () => Promise<void>,\n) => Promise<void>\n\n/** The one call the consumer makes on the bus. */\nexport type DispatchBus<TMessage extends QueueMessage> = {\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- the bus resolves to each handler's own value; the consumer discards it.\n  handle(message: TMessage): Promise<unknown>\n}\n\n/**\n * Parses and dispatches each queue message, then selects acknowledgement or retry.\n * Cloudflare owns the retry limit and sends exhausted messages to the configured dead letter.\n * The consumer logs each failure once; handlers do not.\n */\nexport class QueueConsumer<TMessage extends QueueMessage> {\n  /**\n   * @param bus - Where a parsed message goes.\n   * @param queueClient - Parks an unparseable body in the dead letter.\n   * @param schema - What a body may be: the application's `messages.queueSchema`.\n   * @param wrapDispatch - Wraps one dispatch in the application's context. Default: run it as is.\n   */\n  constructor(\n    private readonly bus: DispatchBus<TMessage>,\n    private readonly queueClient: Pick<IQueueClient<TMessage>, 'sendToDlq'>,\n    private readonly schema: z.ZodType<TMessage>,\n    private readonly wrapDispatch: DispatchWrapper<TMessage> = (_message, _attempt, run) => run(),\n  ) {}\n\n  /** Every message settles on its own. A settlement that throws rejects the batch after its siblings settle. */\n  async processBatch(batch: MessageBatch): Promise<void> {\n    logger.debug('queue_batch_received', { count: batch.messages.length })\n    const results = await Promise.allSettled(\n      batch.messages.map((message) => this.processMessage(message)),\n    )\n    const rejected = results\n      .filter((result) => result.status === 'rejected')\n      .map((result) => result.reason)\n\n    if (rejected.length > 0) {\n      throw new AggregateError(rejected, 'Queue message settlement failed')\n    }\n  }\n\n  private async processMessage(message: Message): Promise<void> {\n    let parsed: TMessage | null = null\n\n    try {\n      const body = await this.parseMessage(message)\n      if (body === null) {\n        // An unparseable body cannot succeed on retry, so park it for inspection.\n        logger.error('invalid_message_format', {\n          attempt: message.attempts,\n          queueMessageId: message.id,\n        })\n        await this.parkPoison(message)\n        return\n      }\n      parsed = body\n\n      await this.wrapDispatch(body, message.attempts, async () => {\n        await this.bus.handle(body)\n      })\n      message.ack()\n      logger.debug('queue_message_processed', { name: body.name })\n    } catch (cause) {\n      this.handleFailure(message, parsed, cause)\n    }\n  }\n\n  /** Returns null on failure; the caller owns the single log point. */\n  private async parseMessage(message: Message): Promise<TMessage | null> {\n    const result = await this.schema.safeParseAsync(message.body)\n    return result.success ? result.data : null\n  }\n\n  /** Park an unparseable message in the dead letter, then acknowledge its source delivery. */\n  private async parkPoison(message: Message): Promise<void> {\n    try {\n      await this.queueClient.sendToDlq(message)\n      message.ack()\n    } catch (cause) {\n      throw new DeadLetterUnavailableError(cause)\n    }\n  }\n\n  /**\n   * Retry declared transient and unknown failures so Cloudflare can enforce the attempt ceiling.\n   * Acknowledge only declared terminal failures.\n   */\n  private handleFailure(message: Message, parsed: TMessage | null, cause: unknown): void {\n    if (cause instanceof MessageAlreadyProcessedError) {\n      logger.debug('duplicate_skipped', {\n        name: parsed?.name,\n        messageId: cause.messageId,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const decision = decideRedelivery(cause, message.attempts)\n    if (decision.action === 'ack') {\n      logger.error('message_discarded', {\n        error: cause,\n        name: parsed?.name,\n        messageId: parsed?.id,\n        queueMessageId: message.id,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const context = {\n      name: parsed?.name,\n      messageId: parsed?.id,\n      queueMessageId: message.id,\n      attempt: message.attempts,\n      classification: decision.classification,\n      delaySeconds: decision.delaySeconds,\n    }\n    if (decision.classification === 'unknown' && message.attempts === 1) {\n      logger.error('queue_unknown_failure', { error: cause, ...context })\n    } else {\n      logger.debug('redelivery_requested', context)\n    }\n    message.retry({ delaySeconds: decision.delaySeconds })\n  }\n}\n","import type { IOutboxRelay, OutboxRelay } from '@/application'\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('outbox-wake')\n\n/** Register delivery after commit; log a failed drain once and leave recovery to the scheduled sweep. */\nexport function waitUntilWake(\n  context: Pick<ExecutionContext, 'waitUntil'>,\n  relay: Pick<OutboxRelay, 'drain'>,\n): IOutboxRelay {\n  return {\n    wake: () =>\n      context.waitUntil(\n        relay.drain().catch((cause: unknown) => {\n          logger.error('outbox_wake_failed', { error: cause })\n        }),\n      ),\n  }\n}\n"],"mappings":";;;;;;;;;;AAOA,MAAa,eAAe;CAC1B,cAAc;CACd,YAAY;CACZ,YAAY;AACd;;AAGA,SAAgB,kBAAkB,SAA+B;CAC/D,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC;AAC3D;;AAMA,SAAgB,aACd,UAC0B;CAC1B,OAAO,SAAS,KAAK,aAAa;EAAE;EAAS,OAAO,kBAAkB,OAAO;CAAE,EAAE;AACnF;;AAGA,SAAgB,YAAY,OAA4C;CACtE,OAAO,MAAM,QAAQ,aAAa;AACpC;;AAGA,SAAgB,cACd,OACc;CACd,MAAM,SAAuB,CAAC;CAC9B,IAAI,UAAsB,CAAC;CAC3B,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OACJ,QAAQ,UAAU,aAAa,cAAc,QAAQ,KAAK,QAAQ,aAAa;EACjF,IAAI,QAAQ,SAAS,KAAK,MAAM;GAC9B,OAAO,KAAK,OAAO;GACnB,UAAU,CAAC;GACX,QAAQ;EACV;EACA,QAAQ,KAAK,KAAK,OAAO;EACzB,SAAS,KAAK;CAChB;CACA,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAK,OAAO;CAC3C,OAAO;AACT;;;;AChDA,MAAM,2BAA2B;CAC/B,MAAM;CACN,YAAY;CACZ,UAAU;AACZ;;;;;;AAOA,MAAM,8CAA8B,IAAI,IAAmC;CACzE,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,MAAO,SAAS;AACnB,CAAC;AAED,SAAS,sBAAsB,OAAoC;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,QAAQ,iBAAiB,KAAK,MAAM,OAAO;CACjD,OAAO,QAAQ,OAAO,SAAY,SAAY,OAAO,MAAM,EAAE;AAC/D;AAEA,SAAS,2BAA2B,OAAmD;CACrF,MAAM,OAAO,sBAAsB,KAAK;CACxC,OAAO,SAAS,SAAY,SAAY,4BAA4B,IAAI,IAAI;AAC9E;;AAGA,SAAgB,mBAAmB,OAAuC;CACxE,OAAO,sBAAsB;EAC3B;EACA,kBAAkB;EAClB,mBAAmB;CACrB,CAAC;AACH;;AAGA,IAAa,iBAAb,cAAoC,SAAS;CAC3C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YAAY,MAAuE;EACjF,MAAM,yBAAyB,KAAK,YAAY,EAAE,OAAO,KAAK,MAAM,CAAC;EACrE,KAAK,iBAAiB,mBAAmB,KAAK,KAAK;EACnD,KAAK,YAAY,KAAK;CACxB;AACF;;;;;AAMA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAIT;EACD,MACE,kBAAkB,KAAK,YAAY,OAAO,OAAO,KAAK,KAAK,EAAE,mBAAmB,OAAO,KAAK,KAAK,EAAE,OACrG;EACA,KAAK,cAAc,KAAK;EACxB,KAAK,QAAQ,KAAK;EAClB,KAAK,QAAQ,KAAK;CACpB;AACF;;;;;AAMA,IAAa,6BAAb,cAAgD,SAAS;CACvD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,OAAgB;EAC1B,MAAM,8CAA8C,EAAE,MAAM,CAAC;CAC/D;AACF;;;;AC5DA,MAAMA,WAAS,aAAa,cAAc;;AAG1C,MAAM,cAAc;AACpB,MAAM,sBAAsB;;AAG5B,SAAS,gBAAgB,OAAgC;CACvD,OAAO,mBAAmB;EACxB,gBAAgB,MAAM;EACtB,YAAY;EACZ,OAAO;CACT,CAAC;AACH;AAEA,SAAS,eAAe,OAA0D;CAChF,OAAO,IAAI,sBAAsB;EAC/B,aAAa,MAAM,QAAQ;EAC3B,OAAO,MAAM;EACb,OAAO,aAAa;CACtB,CAAC;AACH;;;;;AAMA,IAAa,cAAb,MAGoC;CACL;CAA7B,YAAY,AAAiB,SAA6C;EAA7C;CAA8C;;CAG3E,MAAM,KAAK,SAAmB,SAA2C;EACvE,MAAM,QAAQ;GAAE;GAAS,OAAO,kBAAkB,OAAO;EAAE;EAC3D,IAAI,YAAY,KAAK,GAAG;GACtB,SAAO,KAAK,2BAA2B;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,OAAO,MAAM;GACf,CAAC;GACD,MAAM,eAAe,KAAK;EAC5B;EAEA,MAAM,QAAQ,KAAK,SAAS,OAAO;EACnC,SAAO,MAAM,mBAAmB;GAC9B,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,cAAc,SAAS;EACzB,CAAC;EAED,MAAM,KAAK,UAAU,QAAQ,YAAY;GACvC,IAAI,SACF,MAAM,MAAM,KAAK,SAAS,OAAO;QAEjC,MAAM,MAAM,KAAK,OAAO;EAE5B,CAAC;CACH;;CAGA,MAAM,UAAU,UAAkD;EAChE,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI,WAAW,MAAM,eAAe,SAAS;EAC7C,MAAM,KAAK,eAAe,KAAK;CACjC;CAEA,MAAM,iBACJ,UAC8B;EAC9B,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,KAAK,eAAe,MAAM,QAAQ,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;EACpE,OAAO,MAAM,OAAO,WAAW,CAAC,CAAC,KAAK,SAAS,KAAK,OAAO;CAC7D;CAEA,MAAM,UAAU,SAAiC;EAC/C,SAAO,MAAM,kBAAkB,EAAE,gBAAgB,QAAQ,GAAG,CAAC;EAC7D,MAAM,KAAK,UAAU,YAAY,YAAY;GAC3C,MAAM,KAAK,QAAQ,WAAW,KAAK,QAAQ,IAAI;EACjD,CAAC;CACH;;CAGA,MAAc,eAAe,OAA6D;EACxF,MAAM,yBAAS,IAAI,IAAoC;EACvD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,QAAQ,OAAO,KAAK,OAAO;GAC7C,MAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,CAAC;GACnC,MAAM,KAAK,IAAI;GACf,OAAO,IAAI,MAAM,KAAK;EACxB;EAEA,SAAO,MAAM,iBAAiB;GAC5B,OAAO,MAAM;GACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;IAAE;IAAM,OAAO,MAAM;GAAO,EAAE;EAC3E,CAAC;EAED,MAAM,QAAyB,CAAC;EAChC,KAAK,MAAM,CAAC,MAAM,UAAU,QAAQ;GAClC,MAAM,QAAQ,KAAK,QAAQ,OAAO;GAClC,KAAK,MAAM,SAAS,cAAc,KAAK,GACrC,MAAM,KACJ,KAAK,UAAU,cAAc,YAAY;IACvC,MAAM,MAAM,UAAU,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,CAAC;GACvD,CAAC,CACH;EAEJ;EACA,MAAM,QAAQ,IAAI,KAAK;CACzB;CAEA,AAAQ,SAAS,SAA2C;EAC1D,OAAO,KAAK,QAAQ,OAAO,KAAK,QAAQ,OAAO,OAAO;CACxD;CAEA,MAAc,UAAa,WAA2B,MAAoC;EACxF,MAAM,SAAS,MAAM,OAAO,WAC1B;GACE,KAAK;GACL,QAAQ,UAAU,IAAI,eAAe;IAAE;IAAW;GAAM,CAAC;EAC3D,GACA,EACE,OAAO;GACL,OAAO;GACP,SAAS;GACT,SAAS;GACT,QAAQ;GACR,aAAa;EACf,EACF,CACF;EACA,IAAI,OAAO,MAAM,GAAG,MAAM,OAAO;EACjC,OAAO,OAAO;CAChB;AACF;;;;AC3KA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;;AAE9B,MAAM,0BAA0B;;;;;;;AAiBhC,SAAgB,iBAAiB,OAAgB,SAAqC;CACpF,IAAI,iBAAiB,kBAAkB,MAAM,OAAO,SAAS,GAAG;EAE9D,MAAM,UADY,MAAM,OAAO,KAAK,WAAW,iBAAiB,QAAQ,OAAO,CACvD,CAAC,CAAC,QAAQ,aAAa,SAAS,WAAW,OAAO;EAC1E,IAAI,QAAQ,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAO,gBAAgB;EAAW;EAG7E,OAAO;GACL,QAAQ;GACR,gBAAgB,QAAQ,MAAM,aAAa,SAAS,mBAAmB,SAAS,IAC5E,YACA;GACJ,cAAc,KAAK,IAAI,GAAG,QAAQ,KAAK,aAAa,SAAS,YAAY,CAAC;EAC5E;CACF;CAEA,MAAM,iBAAiB,gBAAgB,KAAK;CAC5C,IAAI,mBAAmB,YAAY,OAAO;EAAE,QAAQ;EAAO;CAAe;CAG1E,IAAI,CADa,mBAAmB;EAAE;EAAgB,YAAY;EAAM,OAAO;CAAU,CAC7E,GAAG,OAAO;EAAE,QAAQ;EAAO,gBAAgB;CAAW;CAElE,MAAM,oBAAoB,oBAAoB,KAAK;CACnD,MAAM,UACJ,sBAAsB,OAClB,yBAAyB,qBAAqB,oBAAoB,OAAO,IACzE,oBAAoB,MAAQ,eAAe,qBAAqB;CAEtE,OAAO;EACL,QAAQ;EACR;EACA,cAAc,KAAK,IAAI,yBAAyB,KAAK,IAAI,GAAG,KAAK,KAAK,UAAU,GAAK,CAAC,CAAC;CACzF;AACF;;;;ACrDA,MAAMC,WAAS,aAAa,gBAAgB;;;;;;AAoB5C,IAAa,gBAAb,MAA0D;CAQrC;CACA;CACA;CACA;;;;;;;CAJnB,YACE,AAAiB,KACjB,AAAiB,aACjB,AAAiB,QACjB,AAAiB,gBAA2C,UAAU,UAAU,QAAQ,IAAI,GAC5F;EAJiB;EACA;EACA;EACA;CAChB;;CAGH,MAAM,aAAa,OAAoC;EACrD,SAAO,MAAM,wBAAwB,EAAE,OAAO,MAAM,SAAS,OAAO,CAAC;EAIrE,MAAM,YAAW,MAHK,QAAQ,WAC5B,MAAM,SAAS,KAAK,YAAY,KAAK,eAAe,OAAO,CAAC,CAC9D,EACwB,CACrB,QAAQ,WAAW,OAAO,WAAW,UAAU,CAAC,CAChD,KAAK,WAAW,OAAO,MAAM;EAEhC,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,iCAAiC;CAExE;CAEA,MAAc,eAAe,SAAiC;EAC5D,IAAI,SAA0B;EAE9B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO;GAC5C,IAAI,SAAS,MAAM;IAEjB,SAAO,MAAM,0BAA0B;KACrC,SAAS,QAAQ;KACjB,gBAAgB,QAAQ;IAC1B,CAAC;IACD,MAAM,KAAK,WAAW,OAAO;IAC7B;GACF;GACA,SAAS;GAET,MAAM,KAAK,aAAa,MAAM,QAAQ,UAAU,YAAY;IAC1D,MAAM,KAAK,IAAI,OAAO,IAAI;GAC5B,CAAC;GACD,QAAQ,IAAI;GACZ,SAAO,MAAM,2BAA2B,EAAE,MAAM,KAAK,KAAK,CAAC;EAC7D,SAAS,OAAO;GACd,KAAK,cAAc,SAAS,QAAQ,KAAK;EAC3C;CACF;;CAGA,MAAc,aAAa,SAA4C;EACrE,MAAM,SAAS,MAAM,KAAK,OAAO,eAAe,QAAQ,IAAI;EAC5D,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;;CAGA,MAAc,WAAW,SAAiC;EACxD,IAAI;GACF,MAAM,KAAK,YAAY,UAAU,OAAO;GACxC,QAAQ,IAAI;EACd,SAAS,OAAO;GACd,MAAM,IAAI,2BAA2B,KAAK;EAC5C;CACF;;;;;CAMA,AAAQ,cAAc,SAAkB,QAAyB,OAAsB;EACrF,IAAI,iBAAiB,8BAA8B;GACjD,SAAO,MAAM,qBAAqB;IAChC,MAAM,QAAQ;IACd,WAAW,MAAM;IACjB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,WAAW,iBAAiB,OAAO,QAAQ,QAAQ;EACzD,IAAI,SAAS,WAAW,OAAO;GAC7B,SAAO,MAAM,qBAAqB;IAChC,OAAO;IACP,MAAM,QAAQ;IACd,WAAW,QAAQ;IACnB,gBAAgB,QAAQ;IACxB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,UAAU;GACd,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,SAAS,QAAQ;GACjB,gBAAgB,SAAS;GACzB,cAAc,SAAS;EACzB;EACA,IAAI,SAAS,mBAAmB,aAAa,QAAQ,aAAa,GAChE,SAAO,MAAM,yBAAyB;GAAE,OAAO;GAAO,GAAG;EAAQ,CAAC;OAElE,SAAO,MAAM,wBAAwB,OAAO;EAE9C,QAAQ,MAAM,EAAE,cAAc,SAAS,aAAa,CAAC;CACvD;AACF;;;;AC7IA,MAAM,SAAS,aAAa,aAAa;;AAGzC,SAAgB,cACd,SACA,OACc;CACd,OAAO,EACL,YACE,QAAQ,UACN,MAAM,MAAM,CAAC,CAAC,OAAO,UAAmB;EACtC,OAAO,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;CACrD,CAAC,CACH,EACJ;AACF"}

package/dist/cloudflare/r2-client.d.ts

@@ -0,0 +1,70 @@
+//#region src/infrastructure/cloudflare/r2-client.d.ts
+/** Values accepted by the R2 binding. */
+export type R2Value = Parameters<R2Bucket['put']>[1];
+/** Missing objects, failed conditions, and returned bodies are distinct outcomes. */
+export type R2GetResult = {
+  status: 'missing';
+} | {
+  status: 'precondition-failed';
+  object: R2Object;
+} | {
+  status: 'found';
+  object: R2ObjectBody;
+};
+/** A failed condition does not establish whether an earlier attempt committed. */
+export type R2PutResult = {
+  status: 'precondition-failed';
+} | {
+  status: 'stored';
+  object: R2Object;
+};
+/** Untrusted JSON data, with absence separate from a stored null. The application supplies its schema. */
+export type R2JsonResult = {
+  status: 'missing';
+} | {
+  status: 'found';
+  value: unknown;
+};
+/**
+ * R2 access with one attempt per operation and typed failures. Inject the bucket at the composition root.
+ * Callers own retries, stream replay, and recovery. The client does not log or buffer streamed uploads.
+ */
+export declare class R2Client {
+  private readonly bucket;
+  constructor(bucket: R2Bucket);
+  /** Read native metadata, or return null when the object does not exist. */
+  head(key: string): Promise<R2Object | null>;
+  /** Return a native body without consuming it. The consumer owns later body-read failures. */
+  get(key: string, options?: R2GetOptions): Promise<R2GetResult>;
+  /** Buffer one stored JSON body. Read failures throw R2Error; invalid JSON throws R2JsonError. */
+  getJson(key: string): Promise<R2JsonResult>;
+  /** Write once, including conditional writes. Pass streams directly to the binding. */
+  put(key: string, body: R2Value, options?: R2PutOptions): Promise<R2PutResult>;
+  /** Serialize once and default the content type to application/json without changing caller options. */
+  putJson(key: string, value: unknown, options?: R2PutOptions): Promise<R2PutResult>;
+  /** Delete keys in one binding call. Missing keys succeed; R2 enforces its batch limit. */
+  delete(keys: string | string[]): Promise<void>;
+  /** Return one native page with the requested metadata, cursor, and delimiter results. */
+  list(options?: R2ListOptions): Promise<R2Objects>;
+  /** Create once. A failed response can leave an upload whose ID the caller never received. */
+  createMultipartUpload(key: string, options?: R2MultipartOptions): Promise<R2MultipartClient>;
+  /** Construct a handle without I/O. Each subsequent operation checks whether the upload exists. */
+  resumeMultipartUpload(key: string, uploadId: string): R2MultipartClient;
+}
+/** An upload handle that binds its key and ID once. Every operation makes one attempt. */
+export declare class R2MultipartClient {
+  private readonly upload;
+  constructor(upload: R2MultipartUpload);
+  /** The destination object key. */
+  get key(): string;
+  /** The provider ID to persist when the application needs to resume this upload. */
+  get uploadId(): string;
+  /** Upload one part without buffering or replaying its body. */
+  uploadPart(partNumber: number, body: Exclude<R2Value, null>, options?: R2UploadPartOptions): Promise<R2UploadedPart>;
+  /** Sort a copy of the parts and return native metadata after completion. Callers own uncertain outcomes. */
+  complete(parts: ReadonlyArray<R2UploadedPart>): Promise<R2Object>;
+  /** Ensure no active upload remains. NoSuchUpload succeeds; a completed object remains intact. */
+  abort(): Promise<void>;
+}
+//#endregion
+//# sourceMappingURL=r2-client.d.ts.map

package/dist/cloudflare/r2-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-client.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/r2-client.ts"],"mappings":";;YAKY,UAAU,WAAW;;YAGrB;EACN;;EACA;EAA+B,QAAQ;;EACvC;EAAiB,QAAQ;;;YAGnB;EAAgB;;EAAoC;EAAkB,QAAQ;;;YAG9E;EAAiB;;EAAwB;EAAiB;;;;;;qBAMzD;mBACkB;EAA7B,YAA6B,QAAQ;;EAGrC,KAAK,cAAc,QAAQ;;EAKrB,IAAI,aAAa,UAAU,eAAe,QAAQ;;EAQlD,QAAQ,cAAc,QAAQ;;EAc9B,IAAI,aAAa,MAAM,SAAS,UAAU,eAAe,QAAQ;;EAMjE,QACJ,aAEA,gBACA,UAAU,eACT,QAAQ;;EAYX,OAAO,0BAA0B;;EAKjC,KAAK,UAAU,gBAAgB,QAAQ;;EAKjC,sBACJ,aACA,UAAU,qBACT,QAAQ;;EAQX,sBAAsB,aAAa,mBAAmB;;;qBAM3C;mBACkB;EAA7B,YAA6B,QAAQ;;MAGjC;;MAKA;;EAKJ,WACE,oBACA,MAAM,QAAQ,gBACd,UAAU,sBACT,QAAQ;;EAKX,SAAS,OAAO,cAAc,kBAAkB,QAAQ;;EAOlD,SAAS"}