better-ship 0.17.0 → 0.19.0

package/dist/cloudflare/queue.js

@@ -1,5 +1,5 @@
-import { a as createLogger, d as classifyBoundaryError, f as classifyFailure, l as exponentialEqualJitterMs, p as retryAfterSecondsOf, rt as AppError, u as spreadJitterMs, x as shouldRetryFailure } from "../core-ClSP5-V9.js";
-import { o as MessageAlreadyProcessedError } from "../application-Cf9SER-i.js";
+import { b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, f as retryAfterSecondsOf, l as spreadJitterMs, nt as AppError, r as createLogger, u as classifyBoundaryError } from "../core-BT1dSEQI.js";
+import { o as MessageAlreadyProcessedError } from "../application-Dg1jIKPe.js";
 import { Result } from "better-result";
 
 //#region src/infrastructure/cloudflare/queue/queue-limits.ts
@@ -338,10 +338,10 @@ var QueueConsumer = class {
 		try {
 			const body = await this.parseMessage(message);
 			if (body === null) {
-				logger$1.error("invalid_message_format", { details: {
+				logger$1.error("invalid_message_format", {
 					attempt: message.attempts,
 					queueMessageId: message.id
-				} });
+				});
 				await this.parkPoison(message);
 				return;
 			}
@@ -350,7 +350,7 @@ var QueueConsumer = class {
 				await this.bus.handle(body);
 			});
 			message.ack();
-			logger$1.debug(`queue_message_processed:${body.name}`, { name: body.name });
+			logger$1.debug("queue_message_processed", { name: body.name });
 		} catch (cause) {
 			this.handleFailure(message, parsed, cause);
 		}
@@ -387,12 +387,10 @@ var QueueConsumer = class {
 		if (decision.action === "ack") {
 			logger$1.error("message_discarded", {
 				error: cause,
-				details: {
-					name: parsed?.name,
-					messageId: parsed?.id,
-					queueMessageId: message.id,
-					attempt: message.attempts
-				}
+				name: parsed?.name,
+				messageId: parsed?.id,
+				queueMessageId: message.id,
+				attempt: message.attempts
 			});
 			message.ack();
 			return;
@@ -407,7 +405,7 @@ var QueueConsumer = class {
 		};
 		if (decision.classification === "unknown" && message.attempts === 1) logger$1.error("queue_unknown_failure", {
 			error: cause,
-			details: context
+			...context
 		});
 		else logger$1.debug("redelivery_requested", context);
 		message.retry({ delaySeconds: decision.delaySeconds });

package/dist/cloudflare/queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue.js","names":["logger","logger"],"sources":["../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"sourcesContent":["import type { QueueMessage } from './queue-message.ts'\n\n/**\n * The Cloudflare Queues producer limits with metadata headroom, checked before each send so a\n * violation never reaches the binding. The dead letter has the same per-message limit.\n * https://developers.cloudflare.com/queues/platform/limits/\n */\nexport const QUEUE_LIMITS = {\n  messageBytes: 127_000,\n  batchBytes: 250_000,\n  batchCount: 100,\n} as const\n\n/** The size the binding measures: the JSON encoding of the body, in UTF-8 bytes. */\nexport function messageByteLength(message: QueueMessage): number {\n  return new TextEncoder().encode(JSON.stringify(message)).length\n}\n\n/** A message with its measured size. */\nexport type SizedMessage<TMessage> = { readonly message: TMessage; readonly bytes: number }\n\n/** Measure every message once. */\nexport function sizeMessages<TMessage extends QueueMessage>(\n  messages: ReadonlyArray<TMessage>,\n): SizedMessage<TMessage>[] {\n  return messages.map((message) => ({ message, bytes: messageByteLength(message) }))\n}\n\n/** Whether one message is over the per-message limit. */\nexport function isOversized(sized: SizedMessage<QueueMessage>): boolean {\n  return sized.bytes > QUEUE_LIMITS.messageBytes\n}\n\n/** Split a batch at the message-count and byte limits, keeping the order. */\nexport function chunkByLimits<TMessage>(\n  sized: ReadonlyArray<SizedMessage<TMessage>>,\n): TMessage[][] {\n  const chunks: TMessage[][] = []\n  let current: TMessage[] = []\n  let bytes = 0\n  for (const item of sized) {\n    const full =\n      current.length >= QUEUE_LIMITS.batchCount || bytes + item.bytes > QUEUE_LIMITS.batchBytes\n    if (current.length > 0 && full) {\n      chunks.push(current)\n      current = []\n      bytes = 0\n    }\n    current.push(item.message)\n    bytes += item.bytes\n  }\n  if (current.length > 0) chunks.push(current)\n  return chunks\n}\n","import { AppError, classifyBoundaryError, type FailureClassification } from '@/core'\n\n/** The Queue binding calls the client makes. Each is safe to repeat. */\nexport type QueueOperation = 'send' | 'send_batch' | 'send_dlq'\n\nconst QUEUE_OPERATION_MESSAGES = {\n  send: 'Failed to send queue message',\n  send_batch: 'Failed to send queue batch',\n  send_dlq: 'Failed to send DLQ message',\n} satisfies Readonly<Record<QueueOperation, string>>\n\n/**\n * Cloudflare Queues error codes, by whether a repeat could change the answer. The reference\n * marks only 10201 and 10250 for retry; 10251 waits for processing, 15000 is nobody's call.\n * https://developers.cloudflare.com/queues/reference/error-codes/\n */\nconst QUEUE_ERROR_CLASSIFICATIONS = new Map<number, FailureClassification>([\n  [10104, 'terminal'], // QueueNotFound\n  [10106, 'terminal'], // Unauthorized\n  [10107, 'terminal'], // QueueIDMalformed\n  [10201, 'transient'], // ClientDisconnected\n  [10202, 'terminal'], // BatchDelayInvalid\n  [10203, 'terminal'], // MessageMetadataInvalid\n  [10204, 'terminal'], // MessageSizeOutOfBounds\n  [10205, 'terminal'], // BatchSizeOutOfBounds\n  [10206, 'terminal'], // BatchCountOutOfBounds\n  [10207, 'terminal'], // JSONRequestBodyInvalid\n  [10208, 'terminal'], // JSONRequestBodyMalformed\n  [10250, 'transient'], // QueueOverloaded\n  [10251, 'transient'], // QueueStorageLimitExceeded\n  [10252, 'terminal'], // QueueDisabled\n  [10253, 'terminal'], // FreeTierLimitExceeded\n  [15000, 'unknown'], // UnknownInternalError\n])\n\nfunction extractQueueErrorCode(cause: unknown): number | undefined {\n  if (!(cause instanceof Error)) return undefined\n  const match = /(\\d{5})\\)?\\s*$/.exec(cause.message)\n  return match?.[1] === undefined ? undefined : Number(match[1])\n}\n\nfunction classifyQueueBoundaryError(cause: unknown): FailureClassification | undefined {\n  const code = extractQueueErrorCode(cause)\n  return code === undefined ? undefined : QUEUE_ERROR_CLASSIFICATIONS.get(code)\n}\n\n/** Classify a raw Queue binding failure: the code table first, then Cloudflare's signals, then transport. */\nexport function classifyQueueError(cause: unknown): FailureClassification {\n  return classifyBoundaryError({\n    cause,\n    classifyBoundary: classifyQueueBoundaryError,\n    includeCloudflare: true,\n  })\n}\n\n/** A send through a Queue binding failed. The classification says whether an immediate retry may help. */\nexport class QueueSendError extends AppError {\n  readonly _tag = 'QueueSendError'\n  readonly classification: FailureClassification\n  readonly operation: QueueOperation\n\n  constructor(args: { readonly operation: QueueOperation; readonly cause: unknown }) {\n    super(QUEUE_OPERATION_MESSAGES[args.operation], { cause: args.cause })\n    this.classification = classifyQueueError(args.cause)\n    this.operation = args.operation\n  }\n}\n\n/**\n * A message over the per-message cap can never be sent on any queue; the dead letter has the\n * same cap. The client detects it before the send, so it never comes from a platform error.\n */\nexport class OversizedMessageError extends AppError {\n  readonly _tag = 'OversizedMessageError'\n  readonly classification = 'terminal'\n  readonly messageName: string\n  readonly bytes: number\n  readonly limit: number\n\n  constructor(args: {\n    readonly messageName: string\n    readonly bytes: number\n    readonly limit: number\n  }) {\n    super(\n      `Queue message \"${args.messageName}\" is ${String(args.bytes)} bytes, over the ${String(args.limit)} limit`,\n    )\n    this.messageName = args.messageName\n    this.bytes = args.bytes\n    this.limit = args.limit\n  }\n}\n\n/**\n * The dead letter did not accept an unparseable message. Always transient, whatever the send\n * failure was, so the source delivery retries instead of acknowledging and losing the body.\n */\nexport class DeadLetterUnavailableError extends AppError {\n  readonly _tag = 'DeadLetterUnavailableError'\n  readonly classification = 'transient'\n\n  constructor(cause: unknown) {\n    super('The dead letter did not accept the message', { cause })\n  }\n}\n","import { Result } from 'better-result'\n\nimport { createLogger, shouldRetryFailure } from '@/core'\n\nimport {\n  chunkByLimits,\n  isOversized,\n  messageByteLength,\n  QUEUE_LIMITS,\n  sizeMessages,\n  type SizedMessage,\n} from './queue-limits.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { OversizedMessageError, QueueSendError, type QueueOperation } from './queue.errors.ts'\n\n/** Cloudflare's delivery delay, in seconds. */\nexport type QueueSendOptions = { readonly delaySeconds: number }\n\n/** The two calls the client makes on a queue binding. */\nexport type QueueBinding<Body> = Pick<Queue<Body>, 'send' | 'sendBatch'>\n\n/**\n * The lanes and the dead letter of one application. A lane is a queue with its own consumer\n * settings; `laneOf` is the product's routing rule, written once at the composition root.\n */\nexport type QueueClientOptions<TMessage extends QueueMessage, Lane extends string> = {\n  readonly queues: Readonly<Record<Lane, QueueBinding<TMessage>>>\n  /** Where the consumer parks poison bodies. Cloudflare also routes exhausted retries here. */\n  readonly deadLetter: Pick<Queue, 'send'>\n  readonly laneOf: (message: TMessage) => Lane\n}\n\n/** The port an entrypoint, a relay, or a consumer sends through. */\nexport interface IQueueClient<TMessage extends QueueMessage> {\n  send(message: TMessage, options?: QueueSendOptions): Promise<void>\n  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>\n  /** Sends every message within the limits and returns the oversized ones. */\n  sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>>\n  /** Parks a delivered message's body as it arrived. */\n  sendToDlq(message: Message): Promise<void>\n}\n\nconst logger = createLogger('queue-client')\n\n/** Immediate retries of one binding call: three attempts, 250 ms then 500 ms, with jitter. */\nconst RETRY_TIMES = 2\nconst RETRY_BASE_DELAY_MS = 250\n\n/** Every send is safe to repeat, so a transient failure gets an immediate retry; terminal and unknown stop. */\nfunction shouldRetrySend(error: QueueSendError): boolean {\n  return shouldRetryFailure({\n    classification: error.classification,\n    repeatSafe: true,\n    owner: 'immediate',\n  })\n}\n\nfunction oversizedError(sized: SizedMessage<QueueMessage>): OversizedMessageError {\n  return new OversizedMessageError({\n    messageName: sized.message.name,\n    bytes: sized.bytes,\n    limit: QUEUE_LIMITS.messageBytes,\n  })\n}\n\n/**\n * Sends messages to the application's queues. Checks the size limits before a send, retries a\n * transient binding failure a bounded number of times, and converts the final failure to `QueueSendError`.\n */\nexport class QueueClient<\n  TMessage extends QueueMessage,\n  Lane extends string,\n> implements IQueueClient<TMessage> {\n  constructor(private readonly options: QueueClientOptions<TMessage, Lane>) {}\n\n  /** @throws OversizedMessageError before the send. @throws QueueSendError after the retries. */\n  async send(message: TMessage, options?: QueueSendOptions): Promise<void> {\n    const sized = { message, bytes: messageByteLength(message) }\n    if (isOversized(sized)) {\n      logger.warn('queue_message_oversized', {\n        name: message.name,\n        type: message.type,\n        bytes: sized.bytes,\n      })\n      throw oversizedError(sized)\n    }\n\n    const queue = this.queueFor(message)\n    logger.debug('sending_message', {\n      name: message.name,\n      type: message.type,\n      delaySeconds: options?.delaySeconds,\n    })\n\n    await this.callQueue('send', async () => {\n      if (options) {\n        await queue.send(message, options)\n      } else {\n        await queue.send(message)\n      }\n    })\n  }\n\n  /** Rejects the whole batch before any send when one message is oversized. */\n  async sendBatch(messages: ReadonlyArray<TMessage>): Promise<void> {\n    const sized = sizeMessages(messages)\n    const oversized = sized.find(isOversized)\n    if (oversized) throw oversizedError(oversized)\n    await this.sendSizedBatch(sized)\n  }\n\n  async sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>> {\n    const sized = sizeMessages(messages)\n    await this.sendSizedBatch(sized.filter((item) => !isOversized(item)))\n    return sized.filter(isOversized).map((item) => item.message)\n  }\n\n  async sendToDlq(message: Message): Promise<void> {\n    logger.debug('sending_to_dlq', { queueMessageId: message.id })\n    await this.callQueue('send_dlq', async () => {\n      await this.options.deadLetter.send(message.body)\n    })\n  }\n\n  /** Each lane's chunks retry on their own, so one failed chunk does not resend the others. */\n  private async sendSizedBatch(sized: ReadonlyArray<SizedMessage<TMessage>>): Promise<void> {\n    const byLane = new Map<Lane, SizedMessage<TMessage>[]>()\n    for (const item of sized) {\n      const lane = this.options.laneOf(item.message)\n      const items = byLane.get(lane) ?? []\n      items.push(item)\n      byLane.set(lane, items)\n    }\n\n    logger.debug('sending_batch', {\n      count: sized.length,\n      lanes: [...byLane].map(([lane, items]) => ({ lane, count: items.length })),\n    })\n\n    const sends: Promise<void>[] = []\n    for (const [lane, items] of byLane) {\n      const queue = this.options.queues[lane]\n      for (const group of chunkByLimits(items)) {\n        sends.push(\n          this.callQueue('send_batch', async () => {\n            await queue.sendBatch(group.map((body) => ({ body })))\n          }),\n        )\n      }\n    }\n    await Promise.all(sends)\n  }\n\n  private queueFor(message: TMessage): QueueBinding<TMessage> {\n    return this.options.queues[this.options.laneOf(message)]\n  }\n\n  private async callQueue<T>(operation: QueueOperation, call: () => Promise<T>): Promise<T> {\n    const result = await Result.tryPromise(\n      {\n        try: call,\n        catch: (cause) => new QueueSendError({ operation, cause }),\n      },\n      {\n        retry: {\n          times: RETRY_TIMES,\n          delayMs: RETRY_BASE_DELAY_MS,\n          backoff: 'exponential',\n          jitter: true,\n          shouldRetry: shouldRetrySend,\n        },\n      },\n    )\n    if (result.isErr()) throw result.error\n    return result.value\n  }\n}\n","import {\n  classifyFailure,\n  exponentialEqualJitterMs,\n  retryAfterSecondsOf,\n  shouldRetryFailure,\n  spreadJitterMs,\n  type FailureClassification,\n} from '@/core'\n\nconst BASE_RETRY_DELAY_MS = 5_000\nconst MAX_RETRY_DELAY_MS = 120_000\nconst RETRY_AFTER_SPREAD_MS = 5_000\n/** Cloudflare Queues accept a redelivery delay of at most one day. */\nconst MAX_QUEUE_DELAY_SECONDS = 24 * 60 * 60\n\n/** How the consumer settles one failed message: acknowledge it, or have Cloudflare redeliver it after a delay. */\nexport type RedeliveryDecision =\n  | { readonly action: 'ack'; readonly classification: 'terminal' }\n  | {\n      readonly action: 'retry'\n      readonly classification: Exclude<FailureClassification, 'terminal'>\n      readonly delaySeconds: number\n    }\n\n/**\n * Decide whether the consumer acknowledges a failed message or asks Cloudflare to redeliver it.\n * A terminal failure acknowledges. Transient and unknown failures redeliver: after the advertised\n * wait plus a spread when the error carries one, else with exponential equal-jitter backoff.\n * An `AggregateError` from event delivery redelivers when any member does, after the longest wait.\n */\nexport function decideRedelivery(cause: unknown, attempt: number): RedeliveryDecision {\n  if (cause instanceof AggregateError && cause.errors.length > 0) {\n    const decisions = cause.errors.map((member) => decideRedelivery(member, attempt))\n    const retries = decisions.filter((decision) => decision.action === 'retry')\n    if (retries.length === 0) return { action: 'ack', classification: 'terminal' }\n\n    // Redelivery must respect every failed subscriber's required wait.\n    return {\n      action: 'retry',\n      classification: retries.some((decision) => decision.classification === 'unknown')\n        ? 'unknown'\n        : 'transient',\n      delaySeconds: Math.max(...retries.map((decision) => decision.delaySeconds)),\n    }\n  }\n\n  const classification = classifyFailure(cause)\n  if (classification === 'terminal') return { action: 'ack', classification }\n\n  const canRetry = shouldRetryFailure({ classification, repeatSafe: true, owner: 'durable' })\n  if (!canRetry) return { action: 'ack', classification: 'terminal' }\n\n  const retryAfterSeconds = retryAfterSecondsOf(cause)\n  const delayMs =\n    retryAfterSeconds === null\n      ? exponentialEqualJitterMs(BASE_RETRY_DELAY_MS, MAX_RETRY_DELAY_MS, attempt)\n      : retryAfterSeconds * 1_000 + spreadJitterMs(RETRY_AFTER_SPREAD_MS)\n\n  return {\n    action: 'retry',\n    classification,\n    delaySeconds: Math.min(MAX_QUEUE_DELAY_SECONDS, Math.max(1, Math.ceil(delayMs / 1_000))),\n  }\n}\n","import type { z } from 'zod'\n\nimport { MessageAlreadyProcessedError } from '@/application'\nimport { createLogger } from '@/core'\n\nimport type { IQueueClient } from './queue-client.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { DeadLetterUnavailableError } from './queue.errors.ts'\nimport { decideRedelivery } from './redelivery-policy.ts'\n\nconst logger = createLogger('queue-consumer')\n\n/** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */\nexport type DispatchWrapper<TMessage extends QueueMessage> = (\n  message: TMessage,\n  attempt: number,\n  run: () => Promise<void>,\n) => Promise<void>\n\n/** The one call the consumer makes on the bus. */\nexport type DispatchBus<TMessage extends QueueMessage> = {\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- the bus resolves to each handler's own value; the consumer discards it.\n  handle(message: TMessage): Promise<unknown>\n}\n\n/**\n * Parses and dispatches each queue message, then selects acknowledgement or retry.\n * Cloudflare owns the retry limit and sends exhausted messages to the configured dead letter.\n * The consumer logs each failure once; handlers do not.\n */\nexport class QueueConsumer<TMessage extends QueueMessage> {\n  /**\n   * @param bus - Where a parsed message goes.\n   * @param queueClient - Parks an unparseable body in the dead letter.\n   * @param schema - What a body may be: the application's `messages.queueSchema`.\n   * @param wrapDispatch - Wraps one dispatch in the application's context. Default: run it as is.\n   */\n  constructor(\n    private readonly bus: DispatchBus<TMessage>,\n    private readonly queueClient: Pick<IQueueClient<TMessage>, 'sendToDlq'>,\n    private readonly schema: z.ZodType<TMessage>,\n    private readonly wrapDispatch: DispatchWrapper<TMessage> = (_message, _attempt, run) => run(),\n  ) {}\n\n  /** Every message settles on its own. A settlement that throws rejects the batch after its siblings settle. */\n  async processBatch(batch: MessageBatch): Promise<void> {\n    logger.debug('queue_batch_received', { count: batch.messages.length })\n    const results = await Promise.allSettled(\n      batch.messages.map((message) => this.processMessage(message)),\n    )\n    const rejected = results\n      .filter((result) => result.status === 'rejected')\n      .map((result) => result.reason)\n\n    if (rejected.length > 0) {\n      throw new AggregateError(rejected, 'Queue message settlement failed')\n    }\n  }\n\n  private async processMessage(message: Message): Promise<void> {\n    let parsed: TMessage | null = null\n\n    try {\n      const body = await this.parseMessage(message)\n      if (body === null) {\n        // An unparseable body cannot succeed on retry, so park it for inspection.\n        logger.error('invalid_message_format', {\n          details: { attempt: message.attempts, queueMessageId: message.id },\n        })\n        await this.parkPoison(message)\n        return\n      }\n      parsed = body\n\n      await this.wrapDispatch(body, message.attempts, async () => {\n        await this.bus.handle(body)\n      })\n      message.ack()\n      logger.debug(`queue_message_processed:${body.name}`, { name: body.name })\n    } catch (cause) {\n      this.handleFailure(message, parsed, cause)\n    }\n  }\n\n  /** Returns null on failure; the caller owns the single log point. */\n  private async parseMessage(message: Message): Promise<TMessage | null> {\n    const result = await this.schema.safeParseAsync(message.body)\n    return result.success ? result.data : null\n  }\n\n  /** Park an unparseable message in the dead letter, then acknowledge its source delivery. */\n  private async parkPoison(message: Message): Promise<void> {\n    try {\n      await this.queueClient.sendToDlq(message)\n      message.ack()\n    } catch (cause) {\n      throw new DeadLetterUnavailableError(cause)\n    }\n  }\n\n  /**\n   * Retry declared transient and unknown failures so Cloudflare can enforce the attempt ceiling.\n   * Acknowledge only declared terminal failures.\n   */\n  private handleFailure(message: Message, parsed: TMessage | null, cause: unknown): void {\n    if (cause instanceof MessageAlreadyProcessedError) {\n      logger.debug('duplicate_skipped', {\n        name: parsed?.name,\n        messageId: cause.messageId,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const decision = decideRedelivery(cause, message.attempts)\n    if (decision.action === 'ack') {\n      logger.error('message_discarded', {\n        error: cause,\n        details: {\n          name: parsed?.name,\n          messageId: parsed?.id,\n          queueMessageId: message.id,\n          attempt: message.attempts,\n        },\n      })\n      message.ack()\n      return\n    }\n\n    const context = {\n      name: parsed?.name,\n      messageId: parsed?.id,\n      queueMessageId: message.id,\n      attempt: message.attempts,\n      classification: decision.classification,\n      delaySeconds: decision.delaySeconds,\n    }\n    if (decision.classification === 'unknown' && message.attempts === 1) {\n      logger.error('queue_unknown_failure', { error: cause, details: context })\n    } else {\n      logger.debug('redelivery_requested', context)\n    }\n    message.retry({ delaySeconds: decision.delaySeconds })\n  }\n}\n","import type { IOutboxRelay, OutboxRelay } from '@/application'\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('outbox-wake')\n\n/** Register delivery after commit; log a failed drain once and leave recovery to the scheduled sweep. */\nexport function waitUntilWake(\n  context: Pick<ExecutionContext, 'waitUntil'>,\n  relay: Pick<OutboxRelay, 'drain'>,\n): IOutboxRelay {\n  return {\n    wake: () =>\n      context.waitUntil(\n        relay.drain().catch((cause: unknown) => {\n          logger.error('outbox_wake_failed', { error: cause })\n        }),\n      ),\n  }\n}\n"],"mappings":";;;;;;;;;;AAOA,MAAa,eAAe;CAC1B,cAAc;CACd,YAAY;CACZ,YAAY;AACd;;AAGA,SAAgB,kBAAkB,SAA+B;CAC/D,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC;AAC3D;;AAMA,SAAgB,aACd,UAC0B;CAC1B,OAAO,SAAS,KAAK,aAAa;EAAE;EAAS,OAAO,kBAAkB,OAAO;CAAE,EAAE;AACnF;;AAGA,SAAgB,YAAY,OAA4C;CACtE,OAAO,MAAM,QAAQ,aAAa;AACpC;;AAGA,SAAgB,cACd,OACc;CACd,MAAM,SAAuB,CAAC;CAC9B,IAAI,UAAsB,CAAC;CAC3B,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OACJ,QAAQ,UAAU,aAAa,cAAc,QAAQ,KAAK,QAAQ,aAAa;EACjF,IAAI,QAAQ,SAAS,KAAK,MAAM;GAC9B,OAAO,KAAK,OAAO;GACnB,UAAU,CAAC;GACX,QAAQ;EACV;EACA,QAAQ,KAAK,KAAK,OAAO;EACzB,SAAS,KAAK;CAChB;CACA,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAK,OAAO;CAC3C,OAAO;AACT;;;;AChDA,MAAM,2BAA2B;CAC/B,MAAM;CACN,YAAY;CACZ,UAAU;AACZ;;;;;;AAOA,MAAM,8CAA8B,IAAI,IAAmC;CACzE,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,MAAO,SAAS;AACnB,CAAC;AAED,SAAS,sBAAsB,OAAoC;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,QAAQ,iBAAiB,KAAK,MAAM,OAAO;CACjD,OAAO,QAAQ,OAAO,SAAY,SAAY,OAAO,MAAM,EAAE;AAC/D;AAEA,SAAS,2BAA2B,OAAmD;CACrF,MAAM,OAAO,sBAAsB,KAAK;CACxC,OAAO,SAAS,SAAY,SAAY,4BAA4B,IAAI,IAAI;AAC9E;;AAGA,SAAgB,mBAAmB,OAAuC;CACxE,OAAO,sBAAsB;EAC3B;EACA,kBAAkB;EAClB,mBAAmB;CACrB,CAAC;AACH;;AAGA,IAAa,iBAAb,cAAoC,SAAS;CAC3C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YAAY,MAAuE;EACjF,MAAM,yBAAyB,KAAK,YAAY,EAAE,OAAO,KAAK,MAAM,CAAC;EACrE,KAAK,iBAAiB,mBAAmB,KAAK,KAAK;EACnD,KAAK,YAAY,KAAK;CACxB;AACF;;;;;AAMA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAIT;EACD,MACE,kBAAkB,KAAK,YAAY,OAAO,OAAO,KAAK,KAAK,EAAE,mBAAmB,OAAO,KAAK,KAAK,EAAE,OACrG;EACA,KAAK,cAAc,KAAK;EACxB,KAAK,QAAQ,KAAK;EAClB,KAAK,QAAQ,KAAK;CACpB;AACF;;;;;AAMA,IAAa,6BAAb,cAAgD,SAAS;CACvD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,OAAgB;EAC1B,MAAM,8CAA8C,EAAE,MAAM,CAAC;CAC/D;AACF;;;;AC5DA,MAAMA,WAAS,aAAa,cAAc;;AAG1C,MAAM,cAAc;AACpB,MAAM,sBAAsB;;AAG5B,SAAS,gBAAgB,OAAgC;CACvD,OAAO,mBAAmB;EACxB,gBAAgB,MAAM;EACtB,YAAY;EACZ,OAAO;CACT,CAAC;AACH;AAEA,SAAS,eAAe,OAA0D;CAChF,OAAO,IAAI,sBAAsB;EAC/B,aAAa,MAAM,QAAQ;EAC3B,OAAO,MAAM;EACb,OAAO,aAAa;CACtB,CAAC;AACH;;;;;AAMA,IAAa,cAAb,MAGoC;CACL;CAA7B,YAAY,AAAiB,SAA6C;EAA7C;CAA8C;;CAG3E,MAAM,KAAK,SAAmB,SAA2C;EACvE,MAAM,QAAQ;GAAE;GAAS,OAAO,kBAAkB,OAAO;EAAE;EAC3D,IAAI,YAAY,KAAK,GAAG;GACtB,SAAO,KAAK,2BAA2B;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,OAAO,MAAM;GACf,CAAC;GACD,MAAM,eAAe,KAAK;EAC5B;EAEA,MAAM,QAAQ,KAAK,SAAS,OAAO;EACnC,SAAO,MAAM,mBAAmB;GAC9B,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,cAAc,SAAS;EACzB,CAAC;EAED,MAAM,KAAK,UAAU,QAAQ,YAAY;GACvC,IAAI,SACF,MAAM,MAAM,KAAK,SAAS,OAAO;QAEjC,MAAM,MAAM,KAAK,OAAO;EAE5B,CAAC;CACH;;CAGA,MAAM,UAAU,UAAkD;EAChE,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI,WAAW,MAAM,eAAe,SAAS;EAC7C,MAAM,KAAK,eAAe,KAAK;CACjC;CAEA,MAAM,iBACJ,UAC8B;EAC9B,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,KAAK,eAAe,MAAM,QAAQ,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;EACpE,OAAO,MAAM,OAAO,WAAW,CAAC,CAAC,KAAK,SAAS,KAAK,OAAO;CAC7D;CAEA,MAAM,UAAU,SAAiC;EAC/C,SAAO,MAAM,kBAAkB,EAAE,gBAAgB,QAAQ,GAAG,CAAC;EAC7D,MAAM,KAAK,UAAU,YAAY,YAAY;GAC3C,MAAM,KAAK,QAAQ,WAAW,KAAK,QAAQ,IAAI;EACjD,CAAC;CACH;;CAGA,MAAc,eAAe,OAA6D;EACxF,MAAM,yBAAS,IAAI,IAAoC;EACvD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,QAAQ,OAAO,KAAK,OAAO;GAC7C,MAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,CAAC;GACnC,MAAM,KAAK,IAAI;GACf,OAAO,IAAI,MAAM,KAAK;EACxB;EAEA,SAAO,MAAM,iBAAiB;GAC5B,OAAO,MAAM;GACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;IAAE;IAAM,OAAO,MAAM;GAAO,EAAE;EAC3E,CAAC;EAED,MAAM,QAAyB,CAAC;EAChC,KAAK,MAAM,CAAC,MAAM,UAAU,QAAQ;GAClC,MAAM,QAAQ,KAAK,QAAQ,OAAO;GAClC,KAAK,MAAM,SAAS,cAAc,KAAK,GACrC,MAAM,KACJ,KAAK,UAAU,cAAc,YAAY;IACvC,MAAM,MAAM,UAAU,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,CAAC;GACvD,CAAC,CACH;EAEJ;EACA,MAAM,QAAQ,IAAI,KAAK;CACzB;CAEA,AAAQ,SAAS,SAA2C;EAC1D,OAAO,KAAK,QAAQ,OAAO,KAAK,QAAQ,OAAO,OAAO;CACxD;CAEA,MAAc,UAAa,WAA2B,MAAoC;EACxF,MAAM,SAAS,MAAM,OAAO,WAC1B;GACE,KAAK;GACL,QAAQ,UAAU,IAAI,eAAe;IAAE;IAAW;GAAM,CAAC;EAC3D,GACA,EACE,OAAO;GACL,OAAO;GACP,SAAS;GACT,SAAS;GACT,QAAQ;GACR,aAAa;EACf,EACF,CACF;EACA,IAAI,OAAO,MAAM,GAAG,MAAM,OAAO;EACjC,OAAO,OAAO;CAChB;AACF;;;;AC3KA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;;AAE9B,MAAM,0BAA0B;;;;;;;AAiBhC,SAAgB,iBAAiB,OAAgB,SAAqC;CACpF,IAAI,iBAAiB,kBAAkB,MAAM,OAAO,SAAS,GAAG;EAE9D,MAAM,UADY,MAAM,OAAO,KAAK,WAAW,iBAAiB,QAAQ,OAAO,CACvD,CAAC,CAAC,QAAQ,aAAa,SAAS,WAAW,OAAO;EAC1E,IAAI,QAAQ,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAO,gBAAgB;EAAW;EAG7E,OAAO;GACL,QAAQ;GACR,gBAAgB,QAAQ,MAAM,aAAa,SAAS,mBAAmB,SAAS,IAC5E,YACA;GACJ,cAAc,KAAK,IAAI,GAAG,QAAQ,KAAK,aAAa,SAAS,YAAY,CAAC;EAC5E;CACF;CAEA,MAAM,iBAAiB,gBAAgB,KAAK;CAC5C,IAAI,mBAAmB,YAAY,OAAO;EAAE,QAAQ;EAAO;CAAe;CAG1E,IAAI,CADa,mBAAmB;EAAE;EAAgB,YAAY;EAAM,OAAO;CAAU,CAC7E,GAAG,OAAO;EAAE,QAAQ;EAAO,gBAAgB;CAAW;CAElE,MAAM,oBAAoB,oBAAoB,KAAK;CACnD,MAAM,UACJ,sBAAsB,OAClB,yBAAyB,qBAAqB,oBAAoB,OAAO,IACzE,oBAAoB,MAAQ,eAAe,qBAAqB;CAEtE,OAAO;EACL,QAAQ;EACR;EACA,cAAc,KAAK,IAAI,yBAAyB,KAAK,IAAI,GAAG,KAAK,KAAK,UAAU,GAAK,CAAC,CAAC;CACzF;AACF;;;;ACrDA,MAAMC,WAAS,aAAa,gBAAgB;;;;;;AAoB5C,IAAa,gBAAb,MAA0D;CAQrC;CACA;CACA;CACA;;;;;;;CAJnB,YACE,AAAiB,KACjB,AAAiB,aACjB,AAAiB,QACjB,AAAiB,gBAA2C,UAAU,UAAU,QAAQ,IAAI,GAC5F;EAJiB;EACA;EACA;EACA;CAChB;;CAGH,MAAM,aAAa,OAAoC;EACrD,SAAO,MAAM,wBAAwB,EAAE,OAAO,MAAM,SAAS,OAAO,CAAC;EAIrE,MAAM,YAAW,MAHK,QAAQ,WAC5B,MAAM,SAAS,KAAK,YAAY,KAAK,eAAe,OAAO,CAAC,CAC9D,EACwB,CACrB,QAAQ,WAAW,OAAO,WAAW,UAAU,CAAC,CAChD,KAAK,WAAW,OAAO,MAAM;EAEhC,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,iCAAiC;CAExE;CAEA,MAAc,eAAe,SAAiC;EAC5D,IAAI,SAA0B;EAE9B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO;GAC5C,IAAI,SAAS,MAAM;IAEjB,SAAO,MAAM,0BAA0B,EACrC,SAAS;KAAE,SAAS,QAAQ;KAAU,gBAAgB,QAAQ;IAAG,EACnE,CAAC;IACD,MAAM,KAAK,WAAW,OAAO;IAC7B;GACF;GACA,SAAS;GAET,MAAM,KAAK,aAAa,MAAM,QAAQ,UAAU,YAAY;IAC1D,MAAM,KAAK,IAAI,OAAO,IAAI;GAC5B,CAAC;GACD,QAAQ,IAAI;GACZ,SAAO,MAAM,2BAA2B,KAAK,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC;EAC1E,SAAS,OAAO;GACd,KAAK,cAAc,SAAS,QAAQ,KAAK;EAC3C;CACF;;CAGA,MAAc,aAAa,SAA4C;EACrE,MAAM,SAAS,MAAM,KAAK,OAAO,eAAe,QAAQ,IAAI;EAC5D,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;;CAGA,MAAc,WAAW,SAAiC;EACxD,IAAI;GACF,MAAM,KAAK,YAAY,UAAU,OAAO;GACxC,QAAQ,IAAI;EACd,SAAS,OAAO;GACd,MAAM,IAAI,2BAA2B,KAAK;EAC5C;CACF;;;;;CAMA,AAAQ,cAAc,SAAkB,QAAyB,OAAsB;EACrF,IAAI,iBAAiB,8BAA8B;GACjD,SAAO,MAAM,qBAAqB;IAChC,MAAM,QAAQ;IACd,WAAW,MAAM;IACjB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,WAAW,iBAAiB,OAAO,QAAQ,QAAQ;EACzD,IAAI,SAAS,WAAW,OAAO;GAC7B,SAAO,MAAM,qBAAqB;IAChC,OAAO;IACP,SAAS;KACP,MAAM,QAAQ;KACd,WAAW,QAAQ;KACnB,gBAAgB,QAAQ;KACxB,SAAS,QAAQ;IACnB;GACF,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,UAAU;GACd,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,SAAS,QAAQ;GACjB,gBAAgB,SAAS;GACzB,cAAc,SAAS;EACzB;EACA,IAAI,SAAS,mBAAmB,aAAa,QAAQ,aAAa,GAChE,SAAO,MAAM,yBAAyB;GAAE,OAAO;GAAO,SAAS;EAAQ,CAAC;OAExE,SAAO,MAAM,wBAAwB,OAAO;EAE9C,QAAQ,MAAM,EAAE,cAAc,SAAS,aAAa,CAAC;CACvD;AACF;;;;AC9IA,MAAM,SAAS,aAAa,aAAa;;AAGzC,SAAgB,cACd,SACA,OACc;CACd,OAAO,EACL,YACE,QAAQ,UACN,MAAM,MAAM,CAAC,CAAC,OAAO,UAAmB;EACtC,OAAO,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;CACrD,CAAC,CACH,EACJ;AACF"}
+{"version":3,"file":"queue.js","names":["logger","logger"],"sources":["../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/wait-until-wake.ts"],"sourcesContent":["import type { QueueMessage } from './queue-message.ts'\n\n/**\n * The Cloudflare Queues producer limits with metadata headroom, checked before each send so a\n * violation never reaches the binding. The dead letter has the same per-message limit.\n * https://developers.cloudflare.com/queues/platform/limits/\n */\nexport const QUEUE_LIMITS = {\n  messageBytes: 127_000,\n  batchBytes: 250_000,\n  batchCount: 100,\n} as const\n\n/** The size the binding measures: the JSON encoding of the body, in UTF-8 bytes. */\nexport function messageByteLength(message: QueueMessage): number {\n  return new TextEncoder().encode(JSON.stringify(message)).length\n}\n\n/** A message with its measured size. */\nexport type SizedMessage<TMessage> = { readonly message: TMessage; readonly bytes: number }\n\n/** Measure every message once. */\nexport function sizeMessages<TMessage extends QueueMessage>(\n  messages: ReadonlyArray<TMessage>,\n): SizedMessage<TMessage>[] {\n  return messages.map((message) => ({ message, bytes: messageByteLength(message) }))\n}\n\n/** Whether one message is over the per-message limit. */\nexport function isOversized(sized: SizedMessage<QueueMessage>): boolean {\n  return sized.bytes > QUEUE_LIMITS.messageBytes\n}\n\n/** Split a batch at the message-count and byte limits, keeping the order. */\nexport function chunkByLimits<TMessage>(\n  sized: ReadonlyArray<SizedMessage<TMessage>>,\n): TMessage[][] {\n  const chunks: TMessage[][] = []\n  let current: TMessage[] = []\n  let bytes = 0\n  for (const item of sized) {\n    const full =\n      current.length >= QUEUE_LIMITS.batchCount || bytes + item.bytes > QUEUE_LIMITS.batchBytes\n    if (current.length > 0 && full) {\n      chunks.push(current)\n      current = []\n      bytes = 0\n    }\n    current.push(item.message)\n    bytes += item.bytes\n  }\n  if (current.length > 0) chunks.push(current)\n  return chunks\n}\n","import { AppError, classifyBoundaryError, type FailureClassification } from '@/core'\n\n/** The Queue binding calls the client makes. Each is safe to repeat. */\nexport type QueueOperation = 'send' | 'send_batch' | 'send_dlq'\n\nconst QUEUE_OPERATION_MESSAGES = {\n  send: 'Failed to send queue message',\n  send_batch: 'Failed to send queue batch',\n  send_dlq: 'Failed to send DLQ message',\n} satisfies Readonly<Record<QueueOperation, string>>\n\n/**\n * Cloudflare Queues error codes, by whether a repeat could change the answer. The reference\n * marks only 10201 and 10250 for retry; 10251 waits for processing, 15000 is nobody's call.\n * https://developers.cloudflare.com/queues/reference/error-codes/\n */\nconst QUEUE_ERROR_CLASSIFICATIONS = new Map<number, FailureClassification>([\n  [10104, 'terminal'], // QueueNotFound\n  [10106, 'terminal'], // Unauthorized\n  [10107, 'terminal'], // QueueIDMalformed\n  [10201, 'transient'], // ClientDisconnected\n  [10202, 'terminal'], // BatchDelayInvalid\n  [10203, 'terminal'], // MessageMetadataInvalid\n  [10204, 'terminal'], // MessageSizeOutOfBounds\n  [10205, 'terminal'], // BatchSizeOutOfBounds\n  [10206, 'terminal'], // BatchCountOutOfBounds\n  [10207, 'terminal'], // JSONRequestBodyInvalid\n  [10208, 'terminal'], // JSONRequestBodyMalformed\n  [10250, 'transient'], // QueueOverloaded\n  [10251, 'transient'], // QueueStorageLimitExceeded\n  [10252, 'terminal'], // QueueDisabled\n  [10253, 'terminal'], // FreeTierLimitExceeded\n  [15000, 'unknown'], // UnknownInternalError\n])\n\nfunction extractQueueErrorCode(cause: unknown): number | undefined {\n  if (!(cause instanceof Error)) return undefined\n  const match = /(\\d{5})\\)?\\s*$/.exec(cause.message)\n  return match?.[1] === undefined ? undefined : Number(match[1])\n}\n\nfunction classifyQueueBoundaryError(cause: unknown): FailureClassification | undefined {\n  const code = extractQueueErrorCode(cause)\n  return code === undefined ? undefined : QUEUE_ERROR_CLASSIFICATIONS.get(code)\n}\n\n/** Classify a raw Queue binding failure: the code table first, then Cloudflare's signals, then transport. */\nexport function classifyQueueError(cause: unknown): FailureClassification {\n  return classifyBoundaryError({\n    cause,\n    classifyBoundary: classifyQueueBoundaryError,\n    includeCloudflare: true,\n  })\n}\n\n/** A send through a Queue binding failed. The classification says whether an immediate retry may help. */\nexport class QueueSendError extends AppError {\n  readonly _tag = 'QueueSendError'\n  readonly classification: FailureClassification\n  readonly operation: QueueOperation\n\n  constructor(args: { readonly operation: QueueOperation; readonly cause: unknown }) {\n    super(QUEUE_OPERATION_MESSAGES[args.operation], { cause: args.cause })\n    this.classification = classifyQueueError(args.cause)\n    this.operation = args.operation\n  }\n}\n\n/**\n * A message over the per-message cap can never be sent on any queue; the dead letter has the\n * same cap. The client detects it before the send, so it never comes from a platform error.\n */\nexport class OversizedMessageError extends AppError {\n  readonly _tag = 'OversizedMessageError'\n  readonly classification = 'terminal'\n  readonly messageName: string\n  readonly bytes: number\n  readonly limit: number\n\n  constructor(args: {\n    readonly messageName: string\n    readonly bytes: number\n    readonly limit: number\n  }) {\n    super(\n      `Queue message \"${args.messageName}\" is ${String(args.bytes)} bytes, over the ${String(args.limit)} limit`,\n    )\n    this.messageName = args.messageName\n    this.bytes = args.bytes\n    this.limit = args.limit\n  }\n}\n\n/**\n * The dead letter did not accept an unparseable message. Always transient, whatever the send\n * failure was, so the source delivery retries instead of acknowledging and losing the body.\n */\nexport class DeadLetterUnavailableError extends AppError {\n  readonly _tag = 'DeadLetterUnavailableError'\n  readonly classification = 'transient'\n\n  constructor(cause: unknown) {\n    super('The dead letter did not accept the message', { cause })\n  }\n}\n","import { Result } from 'better-result'\n\nimport { createLogger, shouldRetryFailure } from '@/core'\n\nimport {\n  chunkByLimits,\n  isOversized,\n  messageByteLength,\n  QUEUE_LIMITS,\n  sizeMessages,\n  type SizedMessage,\n} from './queue-limits.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { OversizedMessageError, QueueSendError, type QueueOperation } from './queue.errors.ts'\n\n/** Cloudflare's delivery delay, in seconds. */\nexport type QueueSendOptions = { readonly delaySeconds: number }\n\n/** The two calls the client makes on a queue binding. */\nexport type QueueBinding<Body> = Pick<Queue<Body>, 'send' | 'sendBatch'>\n\n/**\n * The lanes and the dead letter of one application. A lane is a queue with its own consumer\n * settings; `laneOf` is the product's routing rule, written once at the composition root.\n */\nexport type QueueClientOptions<TMessage extends QueueMessage, Lane extends string> = {\n  readonly queues: Readonly<Record<Lane, QueueBinding<TMessage>>>\n  /** Where the consumer parks poison bodies. Cloudflare also routes exhausted retries here. */\n  readonly deadLetter: Pick<Queue, 'send'>\n  readonly laneOf: (message: TMessage) => Lane\n}\n\n/** The port an entrypoint, a relay, or a consumer sends through. */\nexport interface IQueueClient<TMessage extends QueueMessage> {\n  send(message: TMessage, options?: QueueSendOptions): Promise<void>\n  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>\n  /** Sends every message within the limits and returns the oversized ones. */\n  sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>>\n  /** Parks a delivered message's body as it arrived. */\n  sendToDlq(message: Message): Promise<void>\n}\n\nconst logger = createLogger('queue-client')\n\n/** Immediate retries of one binding call: three attempts, 250 ms then 500 ms, with jitter. */\nconst RETRY_TIMES = 2\nconst RETRY_BASE_DELAY_MS = 250\n\n/** Every send is safe to repeat, so a transient failure gets an immediate retry; terminal and unknown stop. */\nfunction shouldRetrySend(error: QueueSendError): boolean {\n  return shouldRetryFailure({\n    classification: error.classification,\n    repeatSafe: true,\n    owner: 'immediate',\n  })\n}\n\nfunction oversizedError(sized: SizedMessage<QueueMessage>): OversizedMessageError {\n  return new OversizedMessageError({\n    messageName: sized.message.name,\n    bytes: sized.bytes,\n    limit: QUEUE_LIMITS.messageBytes,\n  })\n}\n\n/**\n * Sends messages to the application's queues. Checks the size limits before a send, retries a\n * transient binding failure a bounded number of times, and converts the final failure to `QueueSendError`.\n */\nexport class QueueClient<\n  TMessage extends QueueMessage,\n  Lane extends string,\n> implements IQueueClient<TMessage> {\n  constructor(private readonly options: QueueClientOptions<TMessage, Lane>) {}\n\n  /** @throws OversizedMessageError before the send. @throws QueueSendError after the retries. */\n  async send(message: TMessage, options?: QueueSendOptions): Promise<void> {\n    const sized = { message, bytes: messageByteLength(message) }\n    if (isOversized(sized)) {\n      logger.warn('queue_message_oversized', {\n        name: message.name,\n        type: message.type,\n        bytes: sized.bytes,\n      })\n      throw oversizedError(sized)\n    }\n\n    const queue = this.queueFor(message)\n    logger.debug('sending_message', {\n      name: message.name,\n      type: message.type,\n      delaySeconds: options?.delaySeconds,\n    })\n\n    await this.callQueue('send', async () => {\n      if (options) {\n        await queue.send(message, options)\n      } else {\n        await queue.send(message)\n      }\n    })\n  }\n\n  /** Rejects the whole batch before any send when one message is oversized. */\n  async sendBatch(messages: ReadonlyArray<TMessage>): Promise<void> {\n    const sized = sizeMessages(messages)\n    const oversized = sized.find(isOversized)\n    if (oversized) throw oversizedError(oversized)\n    await this.sendSizedBatch(sized)\n  }\n\n  async sendBatchPartial<Sent extends TMessage>(\n    messages: ReadonlyArray<Sent>,\n  ): Promise<ReadonlyArray<Sent>> {\n    const sized = sizeMessages(messages)\n    await this.sendSizedBatch(sized.filter((item) => !isOversized(item)))\n    return sized.filter(isOversized).map((item) => item.message)\n  }\n\n  async sendToDlq(message: Message): Promise<void> {\n    logger.debug('sending_to_dlq', { queueMessageId: message.id })\n    await this.callQueue('send_dlq', async () => {\n      await this.options.deadLetter.send(message.body)\n    })\n  }\n\n  /** Each lane's chunks retry on their own, so one failed chunk does not resend the others. */\n  private async sendSizedBatch(sized: ReadonlyArray<SizedMessage<TMessage>>): Promise<void> {\n    const byLane = new Map<Lane, SizedMessage<TMessage>[]>()\n    for (const item of sized) {\n      const lane = this.options.laneOf(item.message)\n      const items = byLane.get(lane) ?? []\n      items.push(item)\n      byLane.set(lane, items)\n    }\n\n    logger.debug('sending_batch', {\n      count: sized.length,\n      lanes: [...byLane].map(([lane, items]) => ({ lane, count: items.length })),\n    })\n\n    const sends: Promise<void>[] = []\n    for (const [lane, items] of byLane) {\n      const queue = this.options.queues[lane]\n      for (const group of chunkByLimits(items)) {\n        sends.push(\n          this.callQueue('send_batch', async () => {\n            await queue.sendBatch(group.map((body) => ({ body })))\n          }),\n        )\n      }\n    }\n    await Promise.all(sends)\n  }\n\n  private queueFor(message: TMessage): QueueBinding<TMessage> {\n    return this.options.queues[this.options.laneOf(message)]\n  }\n\n  private async callQueue<T>(operation: QueueOperation, call: () => Promise<T>): Promise<T> {\n    const result = await Result.tryPromise(\n      {\n        try: call,\n        catch: (cause) => new QueueSendError({ operation, cause }),\n      },\n      {\n        retry: {\n          times: RETRY_TIMES,\n          delayMs: RETRY_BASE_DELAY_MS,\n          backoff: 'exponential',\n          jitter: true,\n          shouldRetry: shouldRetrySend,\n        },\n      },\n    )\n    if (result.isErr()) throw result.error\n    return result.value\n  }\n}\n","import {\n  classifyFailure,\n  exponentialEqualJitterMs,\n  retryAfterSecondsOf,\n  shouldRetryFailure,\n  spreadJitterMs,\n  type FailureClassification,\n} from '@/core'\n\nconst BASE_RETRY_DELAY_MS = 5_000\nconst MAX_RETRY_DELAY_MS = 120_000\nconst RETRY_AFTER_SPREAD_MS = 5_000\n/** Cloudflare Queues accept a redelivery delay of at most one day. */\nconst MAX_QUEUE_DELAY_SECONDS = 24 * 60 * 60\n\n/** How the consumer settles one failed message: acknowledge it, or have Cloudflare redeliver it after a delay. */\nexport type RedeliveryDecision =\n  | { readonly action: 'ack'; readonly classification: 'terminal' }\n  | {\n      readonly action: 'retry'\n      readonly classification: Exclude<FailureClassification, 'terminal'>\n      readonly delaySeconds: number\n    }\n\n/**\n * Decide whether the consumer acknowledges a failed message or asks Cloudflare to redeliver it.\n * A terminal failure acknowledges. Transient and unknown failures redeliver: after the advertised\n * wait plus a spread when the error carries one, else with exponential equal-jitter backoff.\n * An `AggregateError` from event delivery redelivers when any member does, after the longest wait.\n */\nexport function decideRedelivery(cause: unknown, attempt: number): RedeliveryDecision {\n  if (cause instanceof AggregateError && cause.errors.length > 0) {\n    const decisions = cause.errors.map((member) => decideRedelivery(member, attempt))\n    const retries = decisions.filter((decision) => decision.action === 'retry')\n    if (retries.length === 0) return { action: 'ack', classification: 'terminal' }\n\n    // Redelivery must respect every failed subscriber's required wait.\n    return {\n      action: 'retry',\n      classification: retries.some((decision) => decision.classification === 'unknown')\n        ? 'unknown'\n        : 'transient',\n      delaySeconds: Math.max(...retries.map((decision) => decision.delaySeconds)),\n    }\n  }\n\n  const classification = classifyFailure(cause)\n  if (classification === 'terminal') return { action: 'ack', classification }\n\n  const canRetry = shouldRetryFailure({ classification, repeatSafe: true, owner: 'durable' })\n  if (!canRetry) return { action: 'ack', classification: 'terminal' }\n\n  const retryAfterSeconds = retryAfterSecondsOf(cause)\n  const delayMs =\n    retryAfterSeconds === null\n      ? exponentialEqualJitterMs(BASE_RETRY_DELAY_MS, MAX_RETRY_DELAY_MS, attempt)\n      : retryAfterSeconds * 1_000 + spreadJitterMs(RETRY_AFTER_SPREAD_MS)\n\n  return {\n    action: 'retry',\n    classification,\n    delaySeconds: Math.min(MAX_QUEUE_DELAY_SECONDS, Math.max(1, Math.ceil(delayMs / 1_000))),\n  }\n}\n","import type { z } from 'zod'\n\nimport { MessageAlreadyProcessedError } from '@/application'\nimport { createLogger } from '@/core'\n\nimport type { IQueueClient } from './queue-client.ts'\nimport type { QueueMessage } from './queue-message.ts'\nimport { DeadLetterUnavailableError } from './queue.errors.ts'\nimport { decideRedelivery } from './redelivery-policy.ts'\n\nconst logger = createLogger('queue-consumer')\n\n/** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */\nexport type DispatchWrapper<TMessage extends QueueMessage> = (\n  message: TMessage,\n  attempt: number,\n  run: () => Promise<void>,\n) => Promise<void>\n\n/** The one call the consumer makes on the bus. */\nexport type DispatchBus<TMessage extends QueueMessage> = {\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- the bus resolves to each handler's own value; the consumer discards it.\n  handle(message: TMessage): Promise<unknown>\n}\n\n/**\n * Parses and dispatches each queue message, then selects acknowledgement or retry.\n * Cloudflare owns the retry limit and sends exhausted messages to the configured dead letter.\n * The consumer logs each failure once; handlers do not.\n */\nexport class QueueConsumer<TMessage extends QueueMessage> {\n  /**\n   * @param bus - Where a parsed message goes.\n   * @param queueClient - Parks an unparseable body in the dead letter.\n   * @param schema - What a body may be: the application's `messages.queueSchema`.\n   * @param wrapDispatch - Wraps one dispatch in the application's context. Default: run it as is.\n   */\n  constructor(\n    private readonly bus: DispatchBus<TMessage>,\n    private readonly queueClient: Pick<IQueueClient<TMessage>, 'sendToDlq'>,\n    private readonly schema: z.ZodType<TMessage>,\n    private readonly wrapDispatch: DispatchWrapper<TMessage> = (_message, _attempt, run) => run(),\n  ) {}\n\n  /** Every message settles on its own. A settlement that throws rejects the batch after its siblings settle. */\n  async processBatch(batch: MessageBatch): Promise<void> {\n    logger.debug('queue_batch_received', { count: batch.messages.length })\n    const results = await Promise.allSettled(\n      batch.messages.map((message) => this.processMessage(message)),\n    )\n    const rejected = results\n      .filter((result) => result.status === 'rejected')\n      .map((result) => result.reason)\n\n    if (rejected.length > 0) {\n      throw new AggregateError(rejected, 'Queue message settlement failed')\n    }\n  }\n\n  private async processMessage(message: Message): Promise<void> {\n    let parsed: TMessage | null = null\n\n    try {\n      const body = await this.parseMessage(message)\n      if (body === null) {\n        // An unparseable body cannot succeed on retry, so park it for inspection.\n        logger.error('invalid_message_format', {\n          attempt: message.attempts,\n          queueMessageId: message.id,\n        })\n        await this.parkPoison(message)\n        return\n      }\n      parsed = body\n\n      await this.wrapDispatch(body, message.attempts, async () => {\n        await this.bus.handle(body)\n      })\n      message.ack()\n      logger.debug('queue_message_processed', { name: body.name })\n    } catch (cause) {\n      this.handleFailure(message, parsed, cause)\n    }\n  }\n\n  /** Returns null on failure; the caller owns the single log point. */\n  private async parseMessage(message: Message): Promise<TMessage | null> {\n    const result = await this.schema.safeParseAsync(message.body)\n    return result.success ? result.data : null\n  }\n\n  /** Park an unparseable message in the dead letter, then acknowledge its source delivery. */\n  private async parkPoison(message: Message): Promise<void> {\n    try {\n      await this.queueClient.sendToDlq(message)\n      message.ack()\n    } catch (cause) {\n      throw new DeadLetterUnavailableError(cause)\n    }\n  }\n\n  /**\n   * Retry declared transient and unknown failures so Cloudflare can enforce the attempt ceiling.\n   * Acknowledge only declared terminal failures.\n   */\n  private handleFailure(message: Message, parsed: TMessage | null, cause: unknown): void {\n    if (cause instanceof MessageAlreadyProcessedError) {\n      logger.debug('duplicate_skipped', {\n        name: parsed?.name,\n        messageId: cause.messageId,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const decision = decideRedelivery(cause, message.attempts)\n    if (decision.action === 'ack') {\n      logger.error('message_discarded', {\n        error: cause,\n        name: parsed?.name,\n        messageId: parsed?.id,\n        queueMessageId: message.id,\n        attempt: message.attempts,\n      })\n      message.ack()\n      return\n    }\n\n    const context = {\n      name: parsed?.name,\n      messageId: parsed?.id,\n      queueMessageId: message.id,\n      attempt: message.attempts,\n      classification: decision.classification,\n      delaySeconds: decision.delaySeconds,\n    }\n    if (decision.classification === 'unknown' && message.attempts === 1) {\n      logger.error('queue_unknown_failure', { error: cause, ...context })\n    } else {\n      logger.debug('redelivery_requested', context)\n    }\n    message.retry({ delaySeconds: decision.delaySeconds })\n  }\n}\n","import type { IOutboxRelay, OutboxRelay } from '@/application'\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('outbox-wake')\n\n/** Register delivery after commit; log a failed drain once and leave recovery to the scheduled sweep. */\nexport function waitUntilWake(\n  context: Pick<ExecutionContext, 'waitUntil'>,\n  relay: Pick<OutboxRelay, 'drain'>,\n): IOutboxRelay {\n  return {\n    wake: () =>\n      context.waitUntil(\n        relay.drain().catch((cause: unknown) => {\n          logger.error('outbox_wake_failed', { error: cause })\n        }),\n      ),\n  }\n}\n"],"mappings":";;;;;;;;;;AAOA,MAAa,eAAe;CAC1B,cAAc;CACd,YAAY;CACZ,YAAY;AACd;;AAGA,SAAgB,kBAAkB,SAA+B;CAC/D,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC;AAC3D;;AAMA,SAAgB,aACd,UAC0B;CAC1B,OAAO,SAAS,KAAK,aAAa;EAAE;EAAS,OAAO,kBAAkB,OAAO;CAAE,EAAE;AACnF;;AAGA,SAAgB,YAAY,OAA4C;CACtE,OAAO,MAAM,QAAQ,aAAa;AACpC;;AAGA,SAAgB,cACd,OACc;CACd,MAAM,SAAuB,CAAC;CAC9B,IAAI,UAAsB,CAAC;CAC3B,IAAI,QAAQ;CACZ,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,OACJ,QAAQ,UAAU,aAAa,cAAc,QAAQ,KAAK,QAAQ,aAAa;EACjF,IAAI,QAAQ,SAAS,KAAK,MAAM;GAC9B,OAAO,KAAK,OAAO;GACnB,UAAU,CAAC;GACX,QAAQ;EACV;EACA,QAAQ,KAAK,KAAK,OAAO;EACzB,SAAS,KAAK;CAChB;CACA,IAAI,QAAQ,SAAS,GAAG,OAAO,KAAK,OAAO;CAC3C,OAAO;AACT;;;;AChDA,MAAM,2BAA2B;CAC/B,MAAM;CACN,YAAY;CACZ,UAAU;AACZ;;;;;;AAOA,MAAM,8CAA8B,IAAI,IAAmC;CACzE,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,MAAO,SAAS;AACnB,CAAC;AAED,SAAS,sBAAsB,OAAoC;CACjE,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,QAAQ,iBAAiB,KAAK,MAAM,OAAO;CACjD,OAAO,QAAQ,OAAO,SAAY,SAAY,OAAO,MAAM,EAAE;AAC/D;AAEA,SAAS,2BAA2B,OAAmD;CACrF,MAAM,OAAO,sBAAsB,KAAK;CACxC,OAAO,SAAS,SAAY,SAAY,4BAA4B,IAAI,IAAI;AAC9E;;AAGA,SAAgB,mBAAmB,OAAuC;CACxE,OAAO,sBAAsB;EAC3B;EACA,kBAAkB;EAClB,mBAAmB;CACrB,CAAC;AACH;;AAGA,IAAa,iBAAb,cAAoC,SAAS;CAC3C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YAAY,MAAuE;EACjF,MAAM,yBAAyB,KAAK,YAAY,EAAE,OAAO,KAAK,MAAM,CAAC;EACrE,KAAK,iBAAiB,mBAAmB,KAAK,KAAK;EACnD,KAAK,YAAY,KAAK;CACxB;AACF;;;;;AAMA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAIT;EACD,MACE,kBAAkB,KAAK,YAAY,OAAO,OAAO,KAAK,KAAK,EAAE,mBAAmB,OAAO,KAAK,KAAK,EAAE,OACrG;EACA,KAAK,cAAc,KAAK;EACxB,KAAK,QAAQ,KAAK;EAClB,KAAK,QAAQ,KAAK;CACpB;AACF;;;;;AAMA,IAAa,6BAAb,cAAgD,SAAS;CACvD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,OAAgB;EAC1B,MAAM,8CAA8C,EAAE,MAAM,CAAC;CAC/D;AACF;;;;AC5DA,MAAMA,WAAS,aAAa,cAAc;;AAG1C,MAAM,cAAc;AACpB,MAAM,sBAAsB;;AAG5B,SAAS,gBAAgB,OAAgC;CACvD,OAAO,mBAAmB;EACxB,gBAAgB,MAAM;EACtB,YAAY;EACZ,OAAO;CACT,CAAC;AACH;AAEA,SAAS,eAAe,OAA0D;CAChF,OAAO,IAAI,sBAAsB;EAC/B,aAAa,MAAM,QAAQ;EAC3B,OAAO,MAAM;EACb,OAAO,aAAa;CACtB,CAAC;AACH;;;;;AAMA,IAAa,cAAb,MAGoC;CACL;CAA7B,YAAY,AAAiB,SAA6C;EAA7C;CAA8C;;CAG3E,MAAM,KAAK,SAAmB,SAA2C;EACvE,MAAM,QAAQ;GAAE;GAAS,OAAO,kBAAkB,OAAO;EAAE;EAC3D,IAAI,YAAY,KAAK,GAAG;GACtB,SAAO,KAAK,2BAA2B;IACrC,MAAM,QAAQ;IACd,MAAM,QAAQ;IACd,OAAO,MAAM;GACf,CAAC;GACD,MAAM,eAAe,KAAK;EAC5B;EAEA,MAAM,QAAQ,KAAK,SAAS,OAAO;EACnC,SAAO,MAAM,mBAAmB;GAC9B,MAAM,QAAQ;GACd,MAAM,QAAQ;GACd,cAAc,SAAS;EACzB,CAAC;EAED,MAAM,KAAK,UAAU,QAAQ,YAAY;GACvC,IAAI,SACF,MAAM,MAAM,KAAK,SAAS,OAAO;QAEjC,MAAM,MAAM,KAAK,OAAO;EAE5B,CAAC;CACH;;CAGA,MAAM,UAAU,UAAkD;EAChE,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,YAAY,MAAM,KAAK,WAAW;EACxC,IAAI,WAAW,MAAM,eAAe,SAAS;EAC7C,MAAM,KAAK,eAAe,KAAK;CACjC;CAEA,MAAM,iBACJ,UAC8B;EAC9B,MAAM,QAAQ,aAAa,QAAQ;EACnC,MAAM,KAAK,eAAe,MAAM,QAAQ,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC;EACpE,OAAO,MAAM,OAAO,WAAW,CAAC,CAAC,KAAK,SAAS,KAAK,OAAO;CAC7D;CAEA,MAAM,UAAU,SAAiC;EAC/C,SAAO,MAAM,kBAAkB,EAAE,gBAAgB,QAAQ,GAAG,CAAC;EAC7D,MAAM,KAAK,UAAU,YAAY,YAAY;GAC3C,MAAM,KAAK,QAAQ,WAAW,KAAK,QAAQ,IAAI;EACjD,CAAC;CACH;;CAGA,MAAc,eAAe,OAA6D;EACxF,MAAM,yBAAS,IAAI,IAAoC;EACvD,KAAK,MAAM,QAAQ,OAAO;GACxB,MAAM,OAAO,KAAK,QAAQ,OAAO,KAAK,OAAO;GAC7C,MAAM,QAAQ,OAAO,IAAI,IAAI,KAAK,CAAC;GACnC,MAAM,KAAK,IAAI;GACf,OAAO,IAAI,MAAM,KAAK;EACxB;EAEA,SAAO,MAAM,iBAAiB;GAC5B,OAAO,MAAM;GACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,YAAY;IAAE;IAAM,OAAO,MAAM;GAAO,EAAE;EAC3E,CAAC;EAED,MAAM,QAAyB,CAAC;EAChC,KAAK,MAAM,CAAC,MAAM,UAAU,QAAQ;GAClC,MAAM,QAAQ,KAAK,QAAQ,OAAO;GAClC,KAAK,MAAM,SAAS,cAAc,KAAK,GACrC,MAAM,KACJ,KAAK,UAAU,cAAc,YAAY;IACvC,MAAM,MAAM,UAAU,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,CAAC;GACvD,CAAC,CACH;EAEJ;EACA,MAAM,QAAQ,IAAI,KAAK;CACzB;CAEA,AAAQ,SAAS,SAA2C;EAC1D,OAAO,KAAK,QAAQ,OAAO,KAAK,QAAQ,OAAO,OAAO;CACxD;CAEA,MAAc,UAAa,WAA2B,MAAoC;EACxF,MAAM,SAAS,MAAM,OAAO,WAC1B;GACE,KAAK;GACL,QAAQ,UAAU,IAAI,eAAe;IAAE;IAAW;GAAM,CAAC;EAC3D,GACA,EACE,OAAO;GACL,OAAO;GACP,SAAS;GACT,SAAS;GACT,QAAQ;GACR,aAAa;EACf,EACF,CACF;EACA,IAAI,OAAO,MAAM,GAAG,MAAM,OAAO;EACjC,OAAO,OAAO;CAChB;AACF;;;;AC3KA,MAAM,sBAAsB;AAC5B,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;;AAE9B,MAAM,0BAA0B;;;;;;;AAiBhC,SAAgB,iBAAiB,OAAgB,SAAqC;CACpF,IAAI,iBAAiB,kBAAkB,MAAM,OAAO,SAAS,GAAG;EAE9D,MAAM,UADY,MAAM,OAAO,KAAK,WAAW,iBAAiB,QAAQ,OAAO,CACvD,CAAC,CAAC,QAAQ,aAAa,SAAS,WAAW,OAAO;EAC1E,IAAI,QAAQ,WAAW,GAAG,OAAO;GAAE,QAAQ;GAAO,gBAAgB;EAAW;EAG7E,OAAO;GACL,QAAQ;GACR,gBAAgB,QAAQ,MAAM,aAAa,SAAS,mBAAmB,SAAS,IAC5E,YACA;GACJ,cAAc,KAAK,IAAI,GAAG,QAAQ,KAAK,aAAa,SAAS,YAAY,CAAC;EAC5E;CACF;CAEA,MAAM,iBAAiB,gBAAgB,KAAK;CAC5C,IAAI,mBAAmB,YAAY,OAAO;EAAE,QAAQ;EAAO;CAAe;CAG1E,IAAI,CADa,mBAAmB;EAAE;EAAgB,YAAY;EAAM,OAAO;CAAU,CAC7E,GAAG,OAAO;EAAE,QAAQ;EAAO,gBAAgB;CAAW;CAElE,MAAM,oBAAoB,oBAAoB,KAAK;CACnD,MAAM,UACJ,sBAAsB,OAClB,yBAAyB,qBAAqB,oBAAoB,OAAO,IACzE,oBAAoB,MAAQ,eAAe,qBAAqB;CAEtE,OAAO;EACL,QAAQ;EACR;EACA,cAAc,KAAK,IAAI,yBAAyB,KAAK,IAAI,GAAG,KAAK,KAAK,UAAU,GAAK,CAAC,CAAC;CACzF;AACF;;;;ACrDA,MAAMC,WAAS,aAAa,gBAAgB;;;;;;AAoB5C,IAAa,gBAAb,MAA0D;CAQrC;CACA;CACA;CACA;;;;;;;CAJnB,YACE,AAAiB,KACjB,AAAiB,aACjB,AAAiB,QACjB,AAAiB,gBAA2C,UAAU,UAAU,QAAQ,IAAI,GAC5F;EAJiB;EACA;EACA;EACA;CAChB;;CAGH,MAAM,aAAa,OAAoC;EACrD,SAAO,MAAM,wBAAwB,EAAE,OAAO,MAAM,SAAS,OAAO,CAAC;EAIrE,MAAM,YAAW,MAHK,QAAQ,WAC5B,MAAM,SAAS,KAAK,YAAY,KAAK,eAAe,OAAO,CAAC,CAC9D,EACwB,CACrB,QAAQ,WAAW,OAAO,WAAW,UAAU,CAAC,CAChD,KAAK,WAAW,OAAO,MAAM;EAEhC,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,iCAAiC;CAExE;CAEA,MAAc,eAAe,SAAiC;EAC5D,IAAI,SAA0B;EAE9B,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,aAAa,OAAO;GAC5C,IAAI,SAAS,MAAM;IAEjB,SAAO,MAAM,0BAA0B;KACrC,SAAS,QAAQ;KACjB,gBAAgB,QAAQ;IAC1B,CAAC;IACD,MAAM,KAAK,WAAW,OAAO;IAC7B;GACF;GACA,SAAS;GAET,MAAM,KAAK,aAAa,MAAM,QAAQ,UAAU,YAAY;IAC1D,MAAM,KAAK,IAAI,OAAO,IAAI;GAC5B,CAAC;GACD,QAAQ,IAAI;GACZ,SAAO,MAAM,2BAA2B,EAAE,MAAM,KAAK,KAAK,CAAC;EAC7D,SAAS,OAAO;GACd,KAAK,cAAc,SAAS,QAAQ,KAAK;EAC3C;CACF;;CAGA,MAAc,aAAa,SAA4C;EACrE,MAAM,SAAS,MAAM,KAAK,OAAO,eAAe,QAAQ,IAAI;EAC5D,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;;CAGA,MAAc,WAAW,SAAiC;EACxD,IAAI;GACF,MAAM,KAAK,YAAY,UAAU,OAAO;GACxC,QAAQ,IAAI;EACd,SAAS,OAAO;GACd,MAAM,IAAI,2BAA2B,KAAK;EAC5C;CACF;;;;;CAMA,AAAQ,cAAc,SAAkB,QAAyB,OAAsB;EACrF,IAAI,iBAAiB,8BAA8B;GACjD,SAAO,MAAM,qBAAqB;IAChC,MAAM,QAAQ;IACd,WAAW,MAAM;IACjB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,WAAW,iBAAiB,OAAO,QAAQ,QAAQ;EACzD,IAAI,SAAS,WAAW,OAAO;GAC7B,SAAO,MAAM,qBAAqB;IAChC,OAAO;IACP,MAAM,QAAQ;IACd,WAAW,QAAQ;IACnB,gBAAgB,QAAQ;IACxB,SAAS,QAAQ;GACnB,CAAC;GACD,QAAQ,IAAI;GACZ;EACF;EAEA,MAAM,UAAU;GACd,MAAM,QAAQ;GACd,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,SAAS,QAAQ;GACjB,gBAAgB,SAAS;GACzB,cAAc,SAAS;EACzB;EACA,IAAI,SAAS,mBAAmB,aAAa,QAAQ,aAAa,GAChE,SAAO,MAAM,yBAAyB;GAAE,OAAO;GAAO,GAAG;EAAQ,CAAC;OAElE,SAAO,MAAM,wBAAwB,OAAO;EAE9C,QAAQ,MAAM,EAAE,cAAc,SAAS,aAAa,CAAC;CACvD;AACF;;;;AC7IA,MAAM,SAAS,aAAa,aAAa;;AAGzC,SAAgB,cACd,SACA,OACc;CACd,OAAO,EACL,YACE,QAAQ,UACN,MAAM,MAAM,CAAC,CAAC,OAAO,UAAmB;EACtC,OAAO,MAAM,sBAAsB,EAAE,OAAO,MAAM,CAAC;CACrD,CAAC,CACH,EACJ;AACF"}

package/dist/cloudflare/r2-client.d.ts

@@ -0,0 +1,70 @@
+//#region src/infrastructure/cloudflare/r2-client.d.ts
+/** Values accepted by the R2 binding. */
+export type R2Value = Parameters<R2Bucket['put']>[1];
+/** Missing objects, failed conditions, and returned bodies are distinct outcomes. */
+export type R2GetResult = {
+  status: 'missing';
+} | {
+  status: 'precondition-failed';
+  object: R2Object;
+} | {
+  status: 'found';
+  object: R2ObjectBody;
+};
+/** A failed condition does not establish whether an earlier attempt committed. */
+export type R2PutResult = {
+  status: 'precondition-failed';
+} | {
+  status: 'stored';
+  object: R2Object;
+};
+/** Untrusted JSON data, with absence separate from a stored null. The application supplies its schema. */
+export type R2JsonResult = {
+  status: 'missing';
+} | {
+  status: 'found';
+  value: unknown;
+};
+/**
+ * R2 access with one attempt per operation and typed failures. Inject the bucket at the composition root.
+ * Callers own retries, stream replay, and recovery. The client does not log or buffer streamed uploads.
+ */
+export declare class R2Client {
+  private readonly bucket;
+  constructor(bucket: R2Bucket);
+  /** Read native metadata, or return null when the object does not exist. */
+  head(key: string): Promise<R2Object | null>;
+  /** Return a native body without consuming it. The consumer owns later body-read failures. */
+  get(key: string, options?: R2GetOptions): Promise<R2GetResult>;
+  /** Buffer one stored JSON body. Read failures throw R2Error; invalid JSON throws R2JsonError. */
+  getJson(key: string): Promise<R2JsonResult>;
+  /** Write once, including conditional writes. Pass streams directly to the binding. */
+  put(key: string, body: R2Value, options?: R2PutOptions): Promise<R2PutResult>;
+  /** Serialize once and default the content type to application/json without changing caller options. */
+  putJson(key: string, value: unknown, options?: R2PutOptions): Promise<R2PutResult>;
+  /** Delete keys in one binding call. Missing keys succeed; R2 enforces its batch limit. */
+  delete(keys: string | string[]): Promise<void>;
+  /** Return one native page with the requested metadata, cursor, and delimiter results. */
+  list(options?: R2ListOptions): Promise<R2Objects>;
+  /** Create once. A failed response can leave an upload whose ID the caller never received. */
+  createMultipartUpload(key: string, options?: R2MultipartOptions): Promise<R2MultipartClient>;
+  /** Construct a handle without I/O. Each subsequent operation checks whether the upload exists. */
+  resumeMultipartUpload(key: string, uploadId: string): R2MultipartClient;
+}
+/** An upload handle that binds its key and ID once. Every operation makes one attempt. */
+export declare class R2MultipartClient {
+  private readonly upload;
+  constructor(upload: R2MultipartUpload);
+  /** The destination object key. */
+  get key(): string;
+  /** The provider ID to persist when the application needs to resume this upload. */
+  get uploadId(): string;
+  /** Upload one part without buffering or replaying its body. */
+  uploadPart(partNumber: number, body: Exclude<R2Value, null>, options?: R2UploadPartOptions): Promise<R2UploadedPart>;
+  /** Sort a copy of the parts and return native metadata after completion. Callers own uncertain outcomes. */
+  complete(parts: ReadonlyArray<R2UploadedPart>): Promise<R2Object>;
+  /** Ensure no active upload remains. NoSuchUpload succeeds; a completed object remains intact. */
+  abort(): Promise<void>;
+}
+//#endregion
+//# sourceMappingURL=r2-client.d.ts.map

package/dist/cloudflare/r2-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-client.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/r2-client.ts"],"mappings":";;YAKY,UAAU,WAAW;;YAGrB;EACN;;EACA;EAA+B,QAAQ;;EACvC;EAAiB,QAAQ;;;YAGnB;EAAgB;;EAAoC;EAAkB,QAAQ;;;YAG9E;EAAiB;;EAAwB;EAAiB;;;;;;qBAMzD;mBACkB;EAA7B,YAA6B,QAAQ;;EAGrC,KAAK,cAAc,QAAQ;;EAKrB,IAAI,aAAa,UAAU,eAAe,QAAQ;;EAQlD,QAAQ,cAAc,QAAQ;;EAc9B,IAAI,aAAa,MAAM,SAAS,UAAU,eAAe,QAAQ;;EAMjE,QACJ,aAEA,gBACA,UAAU,eACT,QAAQ;;EAYX,OAAO,0BAA0B;;EAKjC,KAAK,UAAU,gBAAgB,QAAQ;;EAKjC,sBACJ,aACA,UAAU,qBACT,QAAQ;;EAQX,sBAAsB,aAAa,mBAAmB;;;qBAM3C;mBACkB;EAA7B,YAA6B,QAAQ;;MAGjC;;MAKA;;EAKJ,WACE,oBACA,MAAM,QAAQ,gBACd,UAAU,sBACT,QAAQ;;EAKX,SAAS,OAAO,cAAc,kBAAkB,QAAQ;;EAOlD,SAAS"}

package/dist/cloudflare/r2-client.js

@@ -0,0 +1,153 @@
+import { nt as AppError, v as isAbortError } from "../core-BT1dSEQI.js";
+import { R2Error, R2JsonError } from "./r2-errors.js";
+
+//#region src/infrastructure/cloudflare/r2-client.ts
+/**
+* R2 access with one attempt per operation and typed failures. Inject the bucket at the composition root.
+* Callers own retries, stream replay, and recovery. The client does not log or buffer streamed uploads.
+*/
+var R2Client = class {
+	bucket;
+	constructor(bucket) {
+		this.bucket = bucket;
+	}
+	/** Read native metadata, or return null when the object does not exist. */
+	head(key) {
+		return callR2("head", () => this.bucket.head(key));
+	}
+	/** Return a native body without consuming it. The consumer owns later body-read failures. */
+	async get(key, options) {
+		const object = await callR2("get", () => this.bucket.get(key, options));
+		if (object === null) return { status: "missing" };
+		if (!("body" in object)) return {
+			status: "precondition-failed",
+			object
+		};
+		return {
+			status: "found",
+			object
+		};
+	}
+	/** Buffer one stored JSON body. Read failures throw R2Error; invalid JSON throws R2JsonError. */
+	async getJson(key) {
+		const text = await callR2("getJson", async () => {
+			const object = await this.bucket.get(key);
+			return object === null ? null : await object.text();
+		});
+		if (text === null) return { status: "missing" };
+		try {
+			return {
+				status: "found",
+				value: JSON.parse(text)
+			};
+		} catch (cause) {
+			throw new R2JsonError({
+				operation: "decode",
+				cause
+			});
+		}
+	}
+	/** Write once, including conditional writes. Pass streams directly to the binding. */
+	async put(key, body, options) {
+		const object = await callR2("put", () => this.bucket.put(key, body, options));
+		return object === null ? { status: "precondition-failed" } : {
+			status: "stored",
+			object
+		};
+	}
+	/** Serialize once and default the content type to application/json without changing caller options. */
+	async putJson(key, value, options) {
+		let text;
+		try {
+			text = JSON.stringify(value);
+		} catch (cause) {
+			throw new R2JsonError({
+				operation: "encode",
+				cause
+			});
+		}
+		if (text === void 0) throw new R2JsonError({
+			operation: "encode",
+			cause: void 0
+		});
+		return this.put(key, text, {
+			...options,
+			httpMetadata: jsonMetadata(options?.httpMetadata)
+		});
+	}
+	/** Delete keys in one binding call. Missing keys succeed; R2 enforces its batch limit. */
+	delete(keys) {
+		return callR2("delete", () => this.bucket.delete(keys));
+	}
+	/** Return one native page with the requested metadata, cursor, and delimiter results. */
+	list(options) {
+		return callR2("list", () => this.bucket.list(options));
+	}
+	/** Create once. A failed response can leave an upload whose ID the caller never received. */
+	async createMultipartUpload(key, options) {
+		const upload = await callR2("createMultipartUpload", () => this.bucket.createMultipartUpload(key, options));
+		return new R2MultipartClient(upload);
+	}
+	/** Construct a handle without I/O. Each subsequent operation checks whether the upload exists. */
+	resumeMultipartUpload(key, uploadId) {
+		return new R2MultipartClient(this.bucket.resumeMultipartUpload(key, uploadId));
+	}
+};
+/** An upload handle that binds its key and ID once. Every operation makes one attempt. */
+var R2MultipartClient = class {
+	upload;
+	constructor(upload) {
+		this.upload = upload;
+	}
+	/** The destination object key. */
+	get key() {
+		return this.upload.key;
+	}
+	/** The provider ID to persist when the application needs to resume this upload. */
+	get uploadId() {
+		return this.upload.uploadId;
+	}
+	/** Upload one part without buffering or replaying its body. */
+	uploadPart(partNumber, body, options) {
+		return callR2("uploadPart", () => this.upload.uploadPart(partNumber, body, options));
+	}
+	/** Sort a copy of the parts and return native metadata after completion. Callers own uncertain outcomes. */
+	complete(parts) {
+		return callR2("complete", () => this.upload.complete([...parts].sort((a, b) => a.partNumber - b.partNumber)));
+	}
+	/** Ensure no active upload remains. NoSuchUpload succeeds; a completed object remains intact. */
+	async abort() {
+		try {
+			await callR2("abort", () => this.upload.abort());
+		} catch (cause) {
+			if (cause instanceof R2Error && cause.operation === "abort" && cause.r2?.code === 10024) return;
+			throw cause;
+		}
+	}
+};
+async function callR2(operation, work) {
+	try {
+		return await work();
+	} catch (cause) {
+		if (isAbortError(cause) || cause instanceof AppError) throw cause;
+		throw new R2Error({
+			operation,
+			cause
+		});
+	}
+}
+function jsonMetadata(metadata) {
+	if (metadata instanceof Headers) {
+		const headers = new Headers(metadata);
+		if (!headers.has("content-type")) headers.set("content-type", "application/json");
+		return headers;
+	}
+	return {
+		...metadata,
+		contentType: metadata?.contentType ?? "application/json"
+	};
+}
+
+//#endregion
+export { R2Client, R2MultipartClient };
+//# sourceMappingURL=r2-client.js.map

package/dist/cloudflare/r2-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-client.js","names":[],"sources":["../../src/infrastructure/cloudflare/r2-client.ts"],"sourcesContent":["import { AppError, isAbortError } from '@/core'\n\nimport { R2Error, R2JsonError, type R2Operation } from './r2-errors.ts'\n\n/** Values accepted by the R2 binding. */\nexport type R2Value = Parameters<R2Bucket['put']>[1]\n\n/** Missing objects, failed conditions, and returned bodies are distinct outcomes. */\nexport type R2GetResult =\n  | { status: 'missing' }\n  | { status: 'precondition-failed'; object: R2Object }\n  | { status: 'found'; object: R2ObjectBody }\n\n/** A failed condition does not establish whether an earlier attempt committed. */\nexport type R2PutResult = { status: 'precondition-failed' } | { status: 'stored'; object: R2Object }\n\n/** Untrusted JSON data, with absence separate from a stored null. The application supplies its schema. */\nexport type R2JsonResult = { status: 'missing' } | { status: 'found'; value: unknown }\n\n/**\n * R2 access with one attempt per operation and typed failures. Inject the bucket at the composition root.\n * Callers own retries, stream replay, and recovery. The client does not log or buffer streamed uploads.\n */\nexport class R2Client {\n  constructor(private readonly bucket: R2Bucket) {}\n\n  /** Read native metadata, or return null when the object does not exist. */\n  head(key: string): Promise<R2Object | null> {\n    return callR2('head', () => this.bucket.head(key))\n  }\n\n  /** Return a native body without consuming it. The consumer owns later body-read failures. */\n  async get(key: string, options?: R2GetOptions): Promise<R2GetResult> {\n    const object = await callR2('get', () => this.bucket.get(key, options))\n    if (object === null) return { status: 'missing' }\n    if (!('body' in object)) return { status: 'precondition-failed', object }\n    return { status: 'found', object }\n  }\n\n  /** Buffer one stored JSON body. Read failures throw R2Error; invalid JSON throws R2JsonError. */\n  async getJson(key: string): Promise<R2JsonResult> {\n    const text = await callR2('getJson', async () => {\n      const object = await this.bucket.get(key)\n      return object === null ? null : await object.text()\n    })\n    if (text === null) return { status: 'missing' }\n    try {\n      return { status: 'found', value: JSON.parse(text) }\n    } catch (cause) {\n      throw new R2JsonError({ operation: 'decode', cause })\n    }\n  }\n\n  /** Write once, including conditional writes. Pass streams directly to the binding. */\n  async put(key: string, body: R2Value, options?: R2PutOptions): Promise<R2PutResult> {\n    const object = await callR2('put', () => this.bucket.put(key, body, options))\n    return object === null ? { status: 'precondition-failed' } : { status: 'stored', object }\n  }\n\n  /** Serialize once and default the content type to application/json without changing caller options. */\n  async putJson(\n    key: string,\n    // oxlint-disable-next-line anti-slop/no-unknown-parameters -- This serialization boundary accepts any value and rejects values without a JSON representation.\n    value: unknown,\n    options?: R2PutOptions,\n  ): Promise<R2PutResult> {\n    let text: string | undefined\n    try {\n      text = JSON.stringify(value)\n    } catch (cause) {\n      throw new R2JsonError({ operation: 'encode', cause })\n    }\n    if (text === undefined) throw new R2JsonError({ operation: 'encode', cause: undefined })\n    return this.put(key, text, { ...options, httpMetadata: jsonMetadata(options?.httpMetadata) })\n  }\n\n  /** Delete keys in one binding call. Missing keys succeed; R2 enforces its batch limit. */\n  delete(keys: string | string[]): Promise<void> {\n    return callR2('delete', () => this.bucket.delete(keys))\n  }\n\n  /** Return one native page with the requested metadata, cursor, and delimiter results. */\n  list(options?: R2ListOptions): Promise<R2Objects> {\n    return callR2('list', () => this.bucket.list(options))\n  }\n\n  /** Create once. A failed response can leave an upload whose ID the caller never received. */\n  async createMultipartUpload(\n    key: string,\n    options?: R2MultipartOptions,\n  ): Promise<R2MultipartClient> {\n    const upload = await callR2('createMultipartUpload', () =>\n      this.bucket.createMultipartUpload(key, options),\n    )\n    return new R2MultipartClient(upload)\n  }\n\n  /** Construct a handle without I/O. Each subsequent operation checks whether the upload exists. */\n  resumeMultipartUpload(key: string, uploadId: string): R2MultipartClient {\n    return new R2MultipartClient(this.bucket.resumeMultipartUpload(key, uploadId))\n  }\n}\n\n/** An upload handle that binds its key and ID once. Every operation makes one attempt. */\nexport class R2MultipartClient {\n  constructor(private readonly upload: R2MultipartUpload) {}\n\n  /** The destination object key. */\n  get key(): string {\n    return this.upload.key\n  }\n\n  /** The provider ID to persist when the application needs to resume this upload. */\n  get uploadId(): string {\n    return this.upload.uploadId\n  }\n\n  /** Upload one part without buffering or replaying its body. */\n  uploadPart(\n    partNumber: number,\n    body: Exclude<R2Value, null>,\n    options?: R2UploadPartOptions,\n  ): Promise<R2UploadedPart> {\n    return callR2('uploadPart', () => this.upload.uploadPart(partNumber, body, options))\n  }\n\n  /** Sort a copy of the parts and return native metadata after completion. Callers own uncertain outcomes. */\n  complete(parts: ReadonlyArray<R2UploadedPart>): Promise<R2Object> {\n    return callR2('complete', () =>\n      this.upload.complete([...parts].sort((a, b) => a.partNumber - b.partNumber)),\n    )\n  }\n\n  /** Ensure no active upload remains. NoSuchUpload succeeds; a completed object remains intact. */\n  async abort(): Promise<void> {\n    try {\n      await callR2('abort', () => this.upload.abort())\n    } catch (cause) {\n      if (cause instanceof R2Error && cause.operation === 'abort' && cause.r2?.code === 10024)\n        return\n      throw cause\n    }\n  }\n}\n\nasync function callR2<T>(operation: R2Operation, work: () => Promise<T>): Promise<T> {\n  try {\n    return await work()\n  } catch (cause) {\n    if (isAbortError(cause) || cause instanceof AppError) throw cause\n    throw new R2Error({ operation, cause })\n  }\n}\n\nfunction jsonMetadata(metadata: R2HTTPMetadata | Headers | undefined): R2HTTPMetadata | Headers {\n  if (metadata instanceof Headers) {\n    const headers = new Headers(metadata)\n    if (!headers.has('content-type')) headers.set('content-type', 'application/json')\n    return headers\n  }\n  return { ...metadata, contentType: metadata?.contentType ?? 'application/json' }\n}\n"],"mappings":";;;;;;;;AAuBA,IAAa,WAAb,MAAsB;CACS;CAA7B,YAAY,AAAiB,QAAkB;EAAlB;CAAmB;;CAGhD,KAAK,KAAuC;EAC1C,OAAO,OAAO,cAAc,KAAK,OAAO,KAAK,GAAG,CAAC;CACnD;;CAGA,MAAM,IAAI,KAAa,SAA8C;EACnE,MAAM,SAAS,MAAM,OAAO,aAAa,KAAK,OAAO,IAAI,KAAK,OAAO,CAAC;EACtE,IAAI,WAAW,MAAM,OAAO,EAAE,QAAQ,UAAU;EAChD,IAAI,EAAE,UAAU,SAAS,OAAO;GAAE,QAAQ;GAAuB;EAAO;EACxE,OAAO;GAAE,QAAQ;GAAS;EAAO;CACnC;;CAGA,MAAM,QAAQ,KAAoC;EAChD,MAAM,OAAO,MAAM,OAAO,WAAW,YAAY;GAC/C,MAAM,SAAS,MAAM,KAAK,OAAO,IAAI,GAAG;GACxC,OAAO,WAAW,OAAO,OAAO,MAAM,OAAO,KAAK;EACpD,CAAC;EACD,IAAI,SAAS,MAAM,OAAO,EAAE,QAAQ,UAAU;EAC9C,IAAI;GACF,OAAO;IAAE,QAAQ;IAAS,OAAO,KAAK,MAAM,IAAI;GAAE;EACpD,SAAS,OAAO;GACd,MAAM,IAAI,YAAY;IAAE,WAAW;IAAU;GAAM,CAAC;EACtD;CACF;;CAGA,MAAM,IAAI,KAAa,MAAe,SAA8C;EAClF,MAAM,SAAS,MAAM,OAAO,aAAa,KAAK,OAAO,IAAI,KAAK,MAAM,OAAO,CAAC;EAC5E,OAAO,WAAW,OAAO,EAAE,QAAQ,sBAAsB,IAAI;GAAE,QAAQ;GAAU;EAAO;CAC1F;;CAGA,MAAM,QACJ,KAEA,OACA,SACsB;EACtB,IAAI;EACJ,IAAI;GACF,OAAO,KAAK,UAAU,KAAK;EAC7B,SAAS,OAAO;GACd,MAAM,IAAI,YAAY;IAAE,WAAW;IAAU;GAAM,CAAC;EACtD;EACA,IAAI,SAAS,QAAW,MAAM,IAAI,YAAY;GAAE,WAAW;GAAU,OAAO;EAAU,CAAC;EACvF,OAAO,KAAK,IAAI,KAAK,MAAM;GAAE,GAAG;GAAS,cAAc,aAAa,SAAS,YAAY;EAAE,CAAC;CAC9F;;CAGA,OAAO,MAAwC;EAC7C,OAAO,OAAO,gBAAgB,KAAK,OAAO,OAAO,IAAI,CAAC;CACxD;;CAGA,KAAK,SAA6C;EAChD,OAAO,OAAO,cAAc,KAAK,OAAO,KAAK,OAAO,CAAC;CACvD;;CAGA,MAAM,sBACJ,KACA,SAC4B;EAC5B,MAAM,SAAS,MAAM,OAAO,+BAC1B,KAAK,OAAO,sBAAsB,KAAK,OAAO,CAChD;EACA,OAAO,IAAI,kBAAkB,MAAM;CACrC;;CAGA,sBAAsB,KAAa,UAAqC;EACtE,OAAO,IAAI,kBAAkB,KAAK,OAAO,sBAAsB,KAAK,QAAQ,CAAC;CAC/E;AACF;;AAGA,IAAa,oBAAb,MAA+B;CACA;CAA7B,YAAY,AAAiB,QAA2B;EAA3B;CAA4B;;CAGzD,IAAI,MAAc;EAChB,OAAO,KAAK,OAAO;CACrB;;CAGA,IAAI,WAAmB;EACrB,OAAO,KAAK,OAAO;CACrB;;CAGA,WACE,YACA,MACA,SACyB;EACzB,OAAO,OAAO,oBAAoB,KAAK,OAAO,WAAW,YAAY,MAAM,OAAO,CAAC;CACrF;;CAGA,SAAS,OAAyD;EAChE,OAAO,OAAO,kBACZ,KAAK,OAAO,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAC7E;CACF;;CAGA,MAAM,QAAuB;EAC3B,IAAI;GACF,MAAM,OAAO,eAAe,KAAK,OAAO,MAAM,CAAC;EACjD,SAAS,OAAO;GACd,IAAI,iBAAiB,WAAW,MAAM,cAAc,WAAW,MAAM,IAAI,SAAS,OAChF;GACF,MAAM;EACR;CACF;AACF;AAEA,eAAe,OAAU,WAAwB,MAAoC;CACnF,IAAI;EACF,OAAO,MAAM,KAAK;CACpB,SAAS,OAAO;EACd,IAAI,aAAa,KAAK,KAAK,iBAAiB,UAAU,MAAM;EAC5D,MAAM,IAAI,QAAQ;GAAE;GAAW;EAAM,CAAC;CACxC;AACF;AAEA,SAAS,aAAa,UAA0E;CAC9F,IAAI,oBAAoB,SAAS;EAC/B,MAAM,UAAU,IAAI,QAAQ,QAAQ;EACpC,IAAI,CAAC,QAAQ,IAAI,cAAc,GAAG,QAAQ,IAAI,gBAAgB,kBAAkB;EAChF,OAAO;CACT;CACA,OAAO;EAAE,GAAG;EAAU,aAAa,UAAU,eAAe;CAAmB;AACjF"}

package/dist/cloudflare/r2-errors.d.ts

@@ -0,0 +1,34 @@
+import { Xt as AppError, Zt as FailureClassification } from "../index-DUFS0SJ_.js";
+//#region src/infrastructure/cloudflare/r2-errors.d.ts
+/** The storage operation that failed. */
+export type R2Operation = 'head' | 'get' | 'getJson' | 'put' | 'delete' | 'list' | 'createMultipartUpload' | 'uploadPart' | 'complete' | 'abort';
+/** Provider diagnostics from the outer failure, without request bodies or credentials. */
+export type R2Failure = {
+  readonly code: number;
+  readonly action?: string | undefined;
+};
+/** A raw binding failure after one attempt. Classification does not establish whether a mutation committed. */
+export declare class R2Error extends AppError {
+  readonly _tag = "R2Error";
+  readonly classification: FailureClassification;
+  readonly operation: R2Operation;
+  readonly r2?: R2Failure | undefined;
+  readonly cause: unknown;
+  constructor(input: {
+    operation: R2Operation;
+    cause: unknown;
+  });
+}
+/** JSON serialization or syntax failed. Binding and body-read failures use R2Error. */
+export declare class R2JsonError extends AppError {
+  readonly _tag = "R2JsonError";
+  readonly classification = "terminal";
+  readonly operation: 'encode' | 'decode';
+  readonly cause: unknown;
+  constructor(input: {
+    operation: 'encode' | 'decode';
+    cause: unknown;
+  });
+}
+//#endregion
+//# sourceMappingURL=r2-errors.d.ts.map

package/dist/cloudflare/r2-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-errors.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/r2-errors.ts"],"mappings":";;;YAKY;;YAaA;WACD;WACA;;;qBA8DE,gBAAgB;WAClB;WACA,gBAAgB;WAChB,WAAW;WACX,KAAK;WACI;EAElB,YAAY;IAAS,WAAW;IAAa;;;;qBAUlC,oBAAoB;WACtB;WACA;WACA;WACS;EAElB,YAAY;IAAS;IAAgC"}

package/dist/cloudflare/r2-errors.js

@@ -0,0 +1,90 @@
+import { nt as AppError, u as classifyBoundaryError, v as isAbortError } from "../core-BT1dSEQI.js";
+import { z } from "zod";
+
+//#region src/infrastructure/cloudflare/r2-errors.ts
+const R2FailureSchema = z.object({
+	code: z.number().int().positive(),
+	action: z.string().optional()
+});
+const classifications = /* @__PURE__ */ new Map([
+	[10001, "transient"],
+	[10043, "transient"],
+	[10054, "transient"],
+	[10058, "transient"],
+	[10013, "transient"],
+	[10002, "terminal"],
+	[10003, "terminal"],
+	[10018, "terminal"],
+	[10035, "terminal"],
+	[10042, "terminal"],
+	[10005, "terminal"],
+	[10006, "terminal"],
+	[10008, "terminal"],
+	[10009, "terminal"],
+	[10073, "terminal"],
+	[10007, "terminal"],
+	[10020, "terminal"],
+	[100100, "terminal"],
+	[10012, "terminal"],
+	[10069, "terminal"],
+	[10033, "terminal"],
+	[10014, "terminal"],
+	[10037, "terminal"],
+	[10039, "terminal"],
+	[10031, "terminal"],
+	[10011, "terminal"],
+	[10024, "terminal"],
+	[10025, "terminal"],
+	[10048, "terminal"]
+]);
+function extractR2Failure(cause) {
+	if (!(cause instanceof Error)) return void 0;
+	const parsed = R2FailureSchema.safeParse(cause);
+	if (parsed.success) return parsed.data;
+	const match = /\((\d{5,6})\)\s*$/.exec(cause.message);
+	return match?.[1] === void 0 ? void 0 : { code: Number(match[1]) };
+}
+function classifyR2Code(cause) {
+	const failure = extractR2Failure(cause);
+	return failure === void 0 ? void 0 : classifications.get(failure.code) ?? "unknown";
+}
+function classifyR2Error(cause) {
+	if (isAbortError(cause)) return "terminal";
+	if (cause instanceof AppError) return cause.classification;
+	return classifyBoundaryError({
+		cause,
+		classifyBoundary: classifyR2Code,
+		includeCloudflare: true
+	});
+}
+/** A raw binding failure after one attempt. Classification does not establish whether a mutation committed. */
+var R2Error = class extends AppError {
+	_tag = "R2Error";
+	classification;
+	operation;
+	r2;
+	cause;
+	constructor(input) {
+		super(`R2 ${input.operation} failed`, { cause: input.cause });
+		this.operation = input.operation;
+		this.cause = input.cause;
+		this.r2 = extractR2Failure(input.cause);
+		this.classification = classifyR2Error(input.cause);
+	}
+};
+/** JSON serialization or syntax failed. Binding and body-read failures use R2Error. */
+var R2JsonError = class extends AppError {
+	_tag = "R2JsonError";
+	classification = "terminal";
+	operation;
+	cause;
+	constructor(input) {
+		super(`R2 JSON ${input.operation} failed`, { cause: input.cause });
+		this.operation = input.operation;
+		this.cause = input.cause;
+	}
+};
+
+//#endregion
+export { R2Error, R2JsonError };
+//# sourceMappingURL=r2-errors.js.map

package/dist/cloudflare/r2-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-errors.js","names":[],"sources":["../../src/infrastructure/cloudflare/r2-errors.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { AppError, classifyBoundaryError, isAbortError, type FailureClassification } from '@/core'\n\n/** The storage operation that failed. */\nexport type R2Operation =\n  | 'head'\n  | 'get'\n  | 'getJson'\n  | 'put'\n  | 'delete'\n  | 'list'\n  | 'createMultipartUpload'\n  | 'uploadPart'\n  | 'complete'\n  | 'abort'\n\n/** Provider diagnostics from the outer failure, without request bodies or credentials. */\nexport type R2Failure = {\n  readonly code: number\n  readonly action?: string | undefined\n}\n\nconst R2FailureSchema = z.object({\n  code: z.number().int().positive(),\n  action: z.string().optional(),\n})\n\n// R2 codes describe failures; the caller owns retry decisions and repeat safety.\nconst classifications: ReadonlyMap<number, FailureClassification> = new Map([\n  [10001, 'transient'],\n  [10043, 'transient'],\n  [10054, 'transient'],\n  [10058, 'transient'],\n  [10013, 'transient'],\n  [10002, 'terminal'],\n  [10003, 'terminal'],\n  [10018, 'terminal'],\n  [10035, 'terminal'],\n  [10042, 'terminal'],\n  [10005, 'terminal'],\n  [10006, 'terminal'],\n  [10008, 'terminal'],\n  [10009, 'terminal'],\n  [10073, 'terminal'],\n  [10007, 'terminal'],\n  [10020, 'terminal'],\n  [100100, 'terminal'],\n  [10012, 'terminal'],\n  [10069, 'terminal'],\n  [10033, 'terminal'],\n  [10014, 'terminal'],\n  [10037, 'terminal'],\n  [10039, 'terminal'],\n  [10031, 'terminal'],\n  [10011, 'terminal'],\n  [10024, 'terminal'],\n  [10025, 'terminal'],\n  [10048, 'terminal'],\n])\n\nfunction extractR2Failure(cause: unknown): R2Failure | undefined {\n  if (!(cause instanceof Error)) return undefined\n  const parsed = R2FailureSchema.safeParse(cause)\n  if (parsed.success) return parsed.data\n  // Cloudflare documents the numeric suffix for bindings that omit structured fields.\n  const match = /\\((\\d{5,6})\\)\\s*$/.exec(cause.message)\n  return match?.[1] === undefined ? undefined : { code: Number(match[1]) }\n}\n\nfunction classifyR2Code(cause: unknown): FailureClassification | undefined {\n  const failure = extractR2Failure(cause)\n  return failure === undefined ? undefined : (classifications.get(failure.code) ?? 'unknown')\n}\n\nfunction classifyR2Error(cause: unknown): FailureClassification {\n  if (isAbortError(cause)) return 'terminal'\n  if (cause instanceof AppError) return cause.classification\n  return classifyBoundaryError({ cause, classifyBoundary: classifyR2Code, includeCloudflare: true })\n}\n\n/** A raw binding failure after one attempt. Classification does not establish whether a mutation committed. */\nexport class R2Error extends AppError {\n  readonly _tag = 'R2Error'\n  readonly classification: FailureClassification\n  readonly operation: R2Operation\n  readonly r2?: R2Failure | undefined\n  override readonly cause: unknown\n\n  constructor(input: { operation: R2Operation; cause: unknown }) {\n    super(`R2 ${input.operation} failed`, { cause: input.cause })\n    this.operation = input.operation\n    this.cause = input.cause\n    this.r2 = extractR2Failure(input.cause)\n    this.classification = classifyR2Error(input.cause)\n  }\n}\n\n/** JSON serialization or syntax failed. Binding and body-read failures use R2Error. */\nexport class R2JsonError extends AppError {\n  readonly _tag = 'R2JsonError'\n  readonly classification = 'terminal'\n  readonly operation: 'encode' | 'decode'\n  override readonly cause: unknown\n\n  constructor(input: { operation: 'encode' | 'decode'; cause: unknown }) {\n    super(`R2 JSON ${input.operation} failed`, { cause: input.cause })\n    this.operation = input.operation\n    this.cause = input.cause\n  }\n}\n"],"mappings":";;;;AAuBA,MAAM,kBAAkB,EAAE,OAAO;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAChC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAGD,MAAM,kCAA8D,IAAI,IAAI;CAC1E,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,WAAW;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,QAAQ,UAAU;CACnB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;CAClB,CAAC,OAAO,UAAU;AACpB,CAAC;AAED,SAAS,iBAAiB,OAAuC;CAC/D,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,gBAAgB,UAAU,KAAK;CAC9C,IAAI,OAAO,SAAS,OAAO,OAAO;CAElC,MAAM,QAAQ,oBAAoB,KAAK,MAAM,OAAO;CACpD,OAAO,QAAQ,OAAO,SAAY,SAAY,EAAE,MAAM,OAAO,MAAM,EAAE,EAAE;AACzE;AAEA,SAAS,eAAe,OAAmD;CACzE,MAAM,UAAU,iBAAiB,KAAK;CACtC,OAAO,YAAY,SAAY,SAAa,gBAAgB,IAAI,QAAQ,IAAI,KAAK;AACnF;AAEA,SAAS,gBAAgB,OAAuC;CAC9D,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,iBAAiB,UAAU,OAAO,MAAM;CAC5C,OAAO,sBAAsB;EAAE;EAAO,kBAAkB;EAAgB,mBAAmB;CAAK,CAAC;AACnG;;AAGA,IAAa,UAAb,cAA6B,SAAS;CACpC,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAkB;CAElB,YAAY,OAAmD;EAC7D,MAAM,MAAM,MAAM,UAAU,UAAU,EAAE,OAAO,MAAM,MAAM,CAAC;EAC5D,KAAK,YAAY,MAAM;EACvB,KAAK,QAAQ,MAAM;EACnB,KAAK,KAAK,iBAAiB,MAAM,KAAK;EACtC,KAAK,iBAAiB,gBAAgB,MAAM,KAAK;CACnD;AACF;;AAGA,IAAa,cAAb,cAAiC,SAAS;CACxC,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS;CACT,AAAkB;CAElB,YAAY,OAA2D;EACrE,MAAM,WAAW,MAAM,UAAU,UAAU,EAAE,OAAO,MAAM,MAAM,CAAC;EACjE,KAAK,YAAY,MAAM;EACvB,KAAK,QAAQ,MAAM;CACrB;AACF"}

package/dist/cloudflare/scheduled.d.ts

@@ -1,4 +1,4 @@
-import { X as MessageId } from "../index-DvJUcSW1.js";
+import { q as MessageId } from "../index-DUFS0SJ_.js";
 import { z } from "zod";
 //#region src/infrastructure/cloudflare/scheduled/scheduled-handler.d.ts
 /** The work one schedule runs. Nothing returns to the platform, so each run reports its own outcome. */

package/dist/cloudflare/scheduled.js

@@ -1,4 +1,4 @@
-import { a as createLogger } from "../core-ClSP5-V9.js";
+import { r as createLogger } from "../core-BT1dSEQI.js";
 import { z } from "zod";
 
 //#region src/infrastructure/cloudflare/scheduled/scheduled-handler.ts
@@ -17,7 +17,7 @@ function defineSchedules(schedules) {
 		handler: (runs) => async (controller, deps) => {
 			const { cron } = controller;
 			if (!schema.validate(cron)) {
-				logger.error("scheduled_unknown_cron", { details: { cron } });
+				logger.error("scheduled_unknown_cron", { cron });
 				return;
 			}
 			await runs[cron](deps, new Date(controller.scheduledTime));

package/dist/cloudflare/scheduled.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduled.js","names":[],"sources":["../../src/infrastructure/cloudflare/scheduled/scheduled-handler.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { createLogger, type MessageId } from '@/core'\n\nconst logger = createLogger('scheduled')\n\n/** The work one schedule runs. Nothing returns to the platform, so each run reports its own outcome. */\nexport type ScheduledRun<Deps> = (deps: Deps, at: Date) => Promise<void>\n\n/** The cron expressions of a schedule map, as literal types. */\nexport type ScheduleExpression<Schedules extends Readonly<Record<string, string>>> =\n  Schedules[keyof Schedules]\n\n/** The Cloudflare `scheduled` export, with the application's dependencies as its second argument. */\nexport type ScheduledHandler<Deps> = (controller: ScheduledController, deps: Deps) => Promise<void>\n\n/** What `defineSchedules` returns: the map, its parser, and the handler factory. */\nexport type AppSchedules<Schedules extends Readonly<Record<string, string>>> = {\n  readonly schedules: Schedules\n  /** Parses `controller.cron`, a bare string from the platform, into a known expression. */\n  readonly schema: z.ZodType<ScheduleExpression<Schedules>>\n  /**\n   * Route each schedule to its work. One run per expression, so a schedule added without\n   * work fails to compile. An expression Wrangler fires that the map does not know is logged\n   * once and ignored. A run that throws rejects, so Cloudflare marks the invocation failed.\n   */\n  handler<Deps>(\n    runs: Readonly<Record<ScheduleExpression<Schedules>, ScheduledRun<Deps>>>,\n  ): ScheduledHandler<Deps>\n}\n\n/**\n * Define the application's schedules once: `EVERY_MINUTE: '* * * * *'`. Keys name the time,\n * not the work, because one schedule may drive several commands. Wrangler's `triggers.crons`\n * must hold exactly these expressions. Cron does not retry: a run that sweeps many items\n * catches each item's failure itself.\n */\nexport function defineSchedules<const Schedules extends Readonly<Record<string, string>>>(\n  schedules: Schedules,\n): AppSchedules<Schedules> {\n  const schema = z.enum(schedules)\n  return {\n    schedules,\n    schema,\n    handler: (runs) => async (controller, deps) => {\n      const { cron } = controller\n      if (!schema.validate(cron)) {\n        logger.error('scheduled_unknown_cron', { details: { cron } })\n        return\n      }\n      await runs[cron](deps, new Date(controller.scheduledTime))\n    },\n  }\n}\n\n/**\n * The id of a command a schedule issues: `cron:<Name>:<scheduledTime>`. A doubled trigger for\n * the same time is then a duplicate by construction, and the unit of work skips it.\n */\nexport function scheduledMessageId(name: string, at: Date): MessageId {\n  return `cron:${name}:${String(at.getTime())}`\n}\n"],"mappings":";;;;AAIA,MAAM,SAAS,aAAa,WAAW;;;;;;;AAiCvC,SAAgB,gBACd,WACyB;CACzB,MAAM,SAAS,EAAE,KAAK,SAAS;CAC/B,OAAO;EACL;EACA;EACA,UAAU,SAAS,OAAO,YAAY,SAAS;GAC7C,MAAM,EAAE,SAAS;GACjB,IAAI,CAAC,OAAO,SAAS,IAAI,GAAG;IAC1B,OAAO,MAAM,0BAA0B,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5D;GACF;GACA,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,WAAW,aAAa,CAAC;EAC3D;CACF;AACF;;;;;AAMA,SAAgB,mBAAmB,MAAc,IAAqB;CACpE,OAAO,QAAQ,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC5C"}
+{"version":3,"file":"scheduled.js","names":[],"sources":["../../src/infrastructure/cloudflare/scheduled/scheduled-handler.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { createLogger, type MessageId } from '@/core'\n\nconst logger = createLogger('scheduled')\n\n/** The work one schedule runs. Nothing returns to the platform, so each run reports its own outcome. */\nexport type ScheduledRun<Deps> = (deps: Deps, at: Date) => Promise<void>\n\n/** The cron expressions of a schedule map, as literal types. */\nexport type ScheduleExpression<Schedules extends Readonly<Record<string, string>>> =\n  Schedules[keyof Schedules]\n\n/** The Cloudflare `scheduled` export, with the application's dependencies as its second argument. */\nexport type ScheduledHandler<Deps> = (controller: ScheduledController, deps: Deps) => Promise<void>\n\n/** What `defineSchedules` returns: the map, its parser, and the handler factory. */\nexport type AppSchedules<Schedules extends Readonly<Record<string, string>>> = {\n  readonly schedules: Schedules\n  /** Parses `controller.cron`, a bare string from the platform, into a known expression. */\n  readonly schema: z.ZodType<ScheduleExpression<Schedules>>\n  /**\n   * Route each schedule to its work. One run per expression, so a schedule added without\n   * work fails to compile. An expression Wrangler fires that the map does not know is logged\n   * once and ignored. A run that throws rejects, so Cloudflare marks the invocation failed.\n   */\n  handler<Deps>(\n    runs: Readonly<Record<ScheduleExpression<Schedules>, ScheduledRun<Deps>>>,\n  ): ScheduledHandler<Deps>\n}\n\n/**\n * Define the application's schedules once: `EVERY_MINUTE: '* * * * *'`. Keys name the time,\n * not the work, because one schedule may drive several commands. Wrangler's `triggers.crons`\n * must hold exactly these expressions. Cron does not retry: a run that sweeps many items\n * catches each item's failure itself.\n */\nexport function defineSchedules<const Schedules extends Readonly<Record<string, string>>>(\n  schedules: Schedules,\n): AppSchedules<Schedules> {\n  const schema = z.enum(schedules)\n  return {\n    schedules,\n    schema,\n    handler: (runs) => async (controller, deps) => {\n      const { cron } = controller\n      if (!schema.validate(cron)) {\n        logger.error('scheduled_unknown_cron', { cron })\n        return\n      }\n      await runs[cron](deps, new Date(controller.scheduledTime))\n    },\n  }\n}\n\n/**\n * The id of a command a schedule issues: `cron:<Name>:<scheduledTime>`. A doubled trigger for\n * the same time is then a duplicate by construction, and the unit of work skips it.\n */\nexport function scheduledMessageId(name: string, at: Date): MessageId {\n  return `cron:${name}:${String(at.getTime())}`\n}\n"],"mappings":";;;;AAIA,MAAM,SAAS,aAAa,WAAW;;;;;;;AAiCvC,SAAgB,gBACd,WACyB;CACzB,MAAM,SAAS,EAAE,KAAK,SAAS;CAC/B,OAAO;EACL;EACA;EACA,UAAU,SAAS,OAAO,YAAY,SAAS;GAC7C,MAAM,EAAE,SAAS;GACjB,IAAI,CAAC,OAAO,SAAS,IAAI,GAAG;IAC1B,OAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC;IAC/C;GACF;GACA,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,WAAW,aAAa,CAAC;EAC3D;CACF;AACF;;;;;AAMA,SAAgB,mBAAmB,MAAc,IAAqB;CACpE,OAAO,QAAQ,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC5C"}