better-ship 0.18.0 → 0.19.0

package/dist/{core-UUW2unJd.js.map → core-BT1dSEQI.js.map}

@@ -1 +1 @@
-{"version":3,"file":"core-UUW2unJd.js","names":["uuidv7","uuidv7"],"sources":["../src/core/app-error.ts","../src/core/missing-configuration.error.ts","../src/core/analytics-event.ts","../src/core/email-address.ts","../src/core/email-idempotency-key.ts","../src/core/email-service.error.ts","../src/core/email-deliverability.ts","../src/core/record-email-event.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/request.errors.ts","../src/core/problem-details.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/identity.ts","../src/core/define-messages.ts","../src/core/entity.ts","../src/core/failure-classification.ts","../src/core/transport-classification.ts","../src/core/cloudflare-classification.ts","../src/core/classify-failure.ts","../src/core/backoff.ts","../src/core/console-log-sink.ts","../src/core/logger.ts"],"sourcesContent":["import type { FailureClassification } from './failure-classification.ts'\n\n/**\n * The base of every expected failure. A subclass declares its tag and its classification,\n * so no boundary has to guess what kind of failure it holds. A boundary tells our errors from\n * raw throws with `instanceof AppError`; a value that fails it was never judged.\n *\n * A `readonly` field with a literal initializer keeps the literal type, so\n * `readonly _tag = 'StoreUnavailable'` is enough for `Result` unions and `matchError`.\n */\nexport abstract class AppError extends Error {\n  abstract readonly _tag: string\n  abstract readonly classification: FailureClassification\n\n  override get name(): string {\n    return this._tag\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Required configuration is absent. Ported from Porte's configuration.errors.ts. */\nexport class MissingConfigurationError extends AppError {\n  readonly _tag = 'MissingConfigurationError'\n  readonly classification = 'terminal'\n\n  /** Name the missing setting without including its value. */\n  constructor(readonly key: string) {\n    super(`${key} is required`)\n  }\n}\n","import { z } from 'zod'\n\n/** An event name and its application-owned properties, ported from Typist's analytics/types.ts. */\nexport interface AnalyticsEventInput<\n  TName extends string = string,\n  TProperties extends object = object,\n> {\n  readonly name: TName\n  readonly properties: TProperties\n}\n\n/** A value supported by analytics person properties. */\nexport type AnalyticsProperty =\n  | string\n  | number\n  | boolean\n  | null\n  | undefined\n  | readonly AnalyticsProperty[]\n  | AnalyticsProperties\n\n/** Person properties supplied by the application. */\nexport interface AnalyticsProperties {\n  readonly [name: string]: AnalyticsProperty\n}\n\n/** Parse a persisted analytics event UUID; the SDK generates ordinary event UUIDs itself. */\nexport const AnalyticsEventIdSchema = z.uuid().brand<'AnalyticsEventId'>()\n\n/** The identity of one analytics event across repeated application deliveries. */\nexport type AnalyticsEventId = z.infer<typeof AnalyticsEventIdSchema>\n\n/** Supply both original values when replaying one event; never share them across different occurrences. */\nexport interface AnalyticsEventIdentity {\n  readonly uuid: AnalyticsEventId\n  readonly timestamp: Date\n}\n","import { z } from 'zod'\n\n/** A parsed email address for message payloads and webhook recipients. Ported from Typist's `EmailSchema`. */\nexport const EmailAddressSchema = z.email().brand<'EmailAddress'>()\n\n/** An address the schema accepted. */\nexport type EmailAddress = z.infer<typeof EmailAddressSchema>\n","import type { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\n\n/** A key only `emailIdempotencyKey` mints, so every send carries one built by its rules. */\nexport type EmailIdempotencyKey = string & z.core.$brand<'EmailIdempotencyKey'>\n\n// Resend accepts 1 to 256 characters. Source: https://resend.com/docs/dashboard/emails/idempotency-keys\nconst MAX_KEY_LENGTH = 256\n\n/** A key outside 1 to 256 characters. Keys come from stable ids, so this is a defect, not a retry. */\nexport class InvalidEmailIdempotencyKeyError extends AppError {\n  readonly _tag = 'InvalidEmailIdempotencyKeyError'\n  readonly classification = 'terminal'\n\n  constructor(readonly length: number) {\n    super(`Email idempotency key must have 1 to ${MAX_KEY_LENGTH} characters`)\n  }\n}\n\n/**\n * `<scope>/<id>` for one logical send. Resend deduplicates it for 24 hours.\n * Derive `id` from a stable identity: a message id, a job id, a user id with a template name.\n * The same key must map to an identical payload; a changed body is rejected as terminal.\n * A random `id` means every request is a deliberate new send, as a sign-in code resend is.\n * Source: https://resend.com/docs/dashboard/emails/idempotency-keys\n */\nexport function emailIdempotencyKey(scope: string, id: string): EmailIdempotencyKey {\n  const key = `${scope}/${id}`\n  if (scope.length === 0 || id.length === 0 || key.length > MAX_KEY_LENGTH)\n    throw new InvalidEmailIdempotencyKeyError(key.length)\n  // SAFETY: the brand is a compile-time mark; the checks above are the whole rule.\n  return key as EmailIdempotencyKey\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** Why the provider rejected a send. The reason owns the classification, so the two never disagree. */\nexport type EmailSendFailureReason =\n  | 'rate_limited'\n  | 'idempotency_conflict'\n  | 'provider_error'\n  | 'quota_exceeded'\n  | 'invalid_request'\n  | 'configuration'\n\nconst CLASSIFICATION_BY_REASON = {\n  rate_limited: 'transient',\n  idempotency_conflict: 'transient',\n  provider_error: 'transient',\n  quota_exceeded: 'terminal',\n  invalid_request: 'terminal',\n  configuration: 'terminal',\n} satisfies Record<EmailSendFailureReason, FailureClassification>\n\n/**\n * The provider rejected a send. The boundary that awaited the send logs once; the adapter never does.\n * `retryAfter` is the server's delay in seconds when it sent one, so `retryAfterSecondsOf` reads it.\n */\nexport class EmailServiceError extends AppError {\n  readonly _tag = 'EmailServiceError'\n  readonly classification: FailureClassification\n  readonly reason: EmailSendFailureReason\n  readonly provider: string\n  readonly providerCode: string\n  readonly statusCode: number | null\n  readonly retryAfter: number | null\n\n  constructor(args: {\n    readonly reason: EmailSendFailureReason\n    readonly provider: string\n    readonly providerCode: string\n    readonly statusCode: number | null\n    readonly retryAfter: number | null\n    readonly cause: unknown\n  }) {\n    super(`Email send failed: ${args.provider} ${args.providerCode}`, { cause: args.cause })\n    this.reason = args.reason\n    this.classification = CLASSIFICATION_BY_REASON[args.reason]\n    this.provider = args.provider\n    this.providerCode = args.providerCode\n    this.statusCode = args.statusCode\n    this.retryAfter = args.retryAfter\n  }\n}\n","import { z } from 'zod'\n\n/** The bounce classes Resend reports, ported from Typist's comm-eligibility.ts. */\nexport const BounceTypeSchema = z.enum(['Permanent', 'Transient', 'Undetermined'])\n\n/** One bounce class. */\nexport type BounceType = z.infer<typeof BounceTypeSchema>\n\n/** Parse a provider's bounce type. An unknown value is `Undetermined`, which suppresses. */\nexport function parseBounceType(value: string | undefined): BounceType {\n  const parsed = BounceTypeSchema.safeParse(value)\n  return parsed.success ? parsed.data : 'Undetermined'\n}\n\nconst BOUNCE_SEVERITY = {\n  Transient: 1,\n  Undetermined: 2,\n  Permanent: 3,\n} satisfies Record<BounceType, number>\n\n/** Keep the higher severity. Equal severity permits replacement; callers own timestamp ordering. */\nexport function shouldUpdateBounce(incoming: BounceType, current: BounceType | null): boolean {\n  if (current === null) return true\n  return BOUNCE_SEVERITY[incoming] >= BOUNCE_SEVERITY[current]\n}\n\n/** Typist's send policy: no complaint, and either no bounce or a transient one. Delivery is not guaranteed. */\nexport function isEmailDeliverable(bounceType: BounceType | null, complained: boolean): boolean {\n  if (complained) return false\n  return bounceType === null || bounceType === 'Transient'\n}\n","import { z } from 'zod'\n\nimport { EmailAddressSchema } from './email-address.ts'\nimport { BounceTypeSchema } from './email-deliverability.ts'\n\n/**\n * The payload of the command an application registers to record a bounce or a complaint.\n * Register it under a name of the application's choice in `defineMessages`; `recordEmailEvent` handles it.\n */\nexport const RecordEmailEventPayloadSchema = z.object({\n  recipients: z.array(EmailAddressSchema).min(1),\n  event: z.discriminatedUnion('type', [\n    z.object({\n      type: z.literal('bounced'),\n      bounceType: BounceTypeSchema,\n      bounceSubType: z.string().nullable(),\n    }),\n    z.object({ type: z.literal('complained') }),\n  ]),\n})\n\n/** A parsed payload. */\nexport type RecordEmailEventPayload = z.infer<typeof RecordEmailEventPayloadSchema>\n","import { AppError } from './app-error.ts'\n\n/** A protected operation requires a session that the caller did not provide. */\nexport class AuthenticationError extends AppError {\n  readonly _tag = 'AuthenticationError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Authentication required')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** HTTP 429 with a retry delay in seconds. A null delay means the response supplies no valid duration. */\nexport class RateLimitError extends AppError {\n  readonly _tag = 'RateLimitError'\n  readonly classification = 'transient'\n  readonly status = 429\n\n  constructor(readonly retryAfter: number | null) {\n    super('Too many requests')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A presented session cookie no longer resolves; the application owns cleanup and redirect policy. */\nexport class StaleSessionError extends AppError {\n  readonly _tag = 'StaleSessionError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Session is no longer valid. Sign in again.')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** The authenticated caller cannot perform this operation. Ported from Porte's auth.errors.ts. */\nexport class NotAuthorizedError extends AppError {\n  readonly _tag = 'NotAuthorizedError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Not allowed')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Safe public replacement for an unknown failure, ported from Porte's internal.errors.ts. */\nexport class InternalServerError extends AppError {\n  readonly _tag = 'InternalServerError'\n  readonly classification = 'unknown'\n\n  constructor() {\n    super('Something went wrong')\n  }\n}\n\n/** Safe public replacement for a classified transient failure. */\nexport class ServiceUnavailableError extends AppError {\n  readonly _tag = 'ServiceUnavailableError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('Try again shortly')\n  }\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { ValidationProblemError } from './problem-details.ts'\n\n/** One invalid value as a validator reports it: a message and a path of keys. */\nexport type ValidationIssue = {\n  readonly message: string\n  readonly path: readonly PropertyKey[]\n}\n\n/** Invalid user input, one entry per invalid value in the RFC 9457 shape. Technical failures use another error. */\nexport class ValidationError extends AppError {\n  readonly _tag = 'ValidationError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly errors: readonly ValidationProblemError[],\n    message = 'The request was not valid',\n  ) {\n    super(message)\n  }\n\n  /** Convert a Zod error. Each issue path becomes a JSON Pointer. */\n  static fromZod(error: z.ZodError, message?: string): ValidationError {\n    return ValidationError.fromIssues(error.issues, message)\n  }\n\n  /** Convert issues from any validator, such as issues TanStack serialized into an error message. */\n  static fromIssues(issues: readonly ValidationIssue[], message?: string): ValidationError {\n    return new ValidationError(\n      issues.map((issue) => ({ detail: issue.message, pointer: jsonPointer(issue.path) })),\n      message,\n    )\n  }\n}\n\n/** The server cannot parse the request syntax. */\nexport class MalformedRequestError extends AppError {\n  readonly _tag = 'MalformedRequestError'\n  readonly classification = 'terminal'\n\n  constructor(args: { cause: unknown }) {\n    super('The request was malformed', args)\n  }\n}\n\n/** No resource matches the requested HTTP path. */\nexport class ResourceNotFoundError extends AppError {\n  readonly _tag = 'ResourceNotFoundError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Resource not found')\n  }\n}\n\n/** A WebSocket route received a request without an upgrade. */\nexport class UpgradeRequiredError extends AppError {\n  readonly _tag = 'UpgradeRequiredError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('WebSocket upgrade required')\n  }\n}\n\n/** The requested operation did not answer before its deadline. */\nexport class RequestTimeoutError extends AppError {\n  readonly _tag = 'RequestTimeoutError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('The request timed out')\n  }\n}\n\nconst readablePathSchema = z.array(z.union([z.string(), z.number()]))\n\n// A symbol step cannot be shown, so the pointer keeps only the steps a person can read.\nfunction jsonPointer(path: readonly PropertyKey[]): string {\n  const parsed = readablePathSchema.safeParse(path)\n  const steps = parsed.success ? parsed.data : []\n  if (steps.length === 0) return '#'\n  return `#/${steps.map((step) => String(step).replaceAll('~', '~0').replaceAll('/', '~1')).join('/')}`\n}\n","import { z } from 'zod'\n\n/**\n * The standard RFC 9457 body for a failed HTTP response.\n * The HTTP response status remains authoritative; extensions may add problem-specific data.\n * @see https://http.dev/problem-details\n */\nexport const ProblemDetailsSchema = z.looseObject({\n  /**\n   * Stable URI for the problem type; use `about:blank` when the HTTP status is sufficient.\n   * @example \"about:blank\"\n   */\n  type: z.string(),\n  /**\n   * Stable human-readable name for the problem type.\n   * @example \"Service Unavailable\"\n   */\n  title: z.string(),\n  /**\n   * Safe human-readable explanation for this occurrence; clients must not parse it.\n   * @example \"The service is unavailable.\"\n   */\n  detail: z.string().optional(),\n  /**\n   * URI reference for this occurrence; omit it when no correlation resource exists.\n   * @example \"/problems/occurrences/01K5F6Y7\"\n   */\n  instance: z.string().optional(),\n})\n\n/** An RFC 9457 problem body for a failed HTTP response. */\nexport type ProblemDetails = z.infer<typeof ProblemDetailsSchema>\n\n/** One invalid value in a `422` validation problem. */\nexport const ValidationProblemErrorSchema = z.object({\n  /**\n   * Safe explanation of why this value is invalid.\n   * @example \"Must be a positive integer.\"\n   */\n  detail: z.string(),\n  /**\n   * RFC 6901 JSON Pointer fragment for the invalid value.\n   * @example \"#/age\"\n   */\n  pointer: z.string().regex(/^#(?:\\/(?:[^~]|~[01])*)*$/u),\n})\n\n/** One invalid value in a `422` validation problem. */\nexport type ValidationProblemError = z.infer<typeof ValidationProblemErrorSchema>\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport const ValidationProblemDetailsSchema = ProblemDetailsSchema.extend({\n  errors: z.array(ValidationProblemErrorSchema).min(1),\n})\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport type ValidationProblemDetails = z.infer<typeof ValidationProblemDetailsSchema>\n","import { panic } from 'better-result'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport { AuthenticationError } from './authentication.error.ts'\nimport { InternalServerError, ServiceUnavailableError } from './internal.errors.ts'\nimport { NotAuthorizedError } from './not-authorized.error.ts'\nimport { ValidationProblemErrorSchema } from './problem-details.ts'\nimport { RateLimitError } from './rate-limit.error.ts'\nimport {\n  MalformedRequestError,\n  RequestTimeoutError,\n  ResourceNotFoundError,\n  UpgradeRequiredError,\n  ValidationError,\n} from './request.errors.ts'\nimport { StaleSessionError } from './stale-session.error.ts'\n\ntype PublicFields = z.ZodObject\n\n/**\n * One public error: its class, its HTTP status, and the extra properties a client may read.\n * `fields` strips the thrown error on the server and parses the payload in the browser.\n */\nexport type ErrorEntry<Tag extends string, Fields extends PublicFields = PublicFields> = {\n  readonly error: abstract new (...args: never[]) => AppError & { readonly _tag: Tag }\n  readonly status: number\n  readonly fields?: Fields\n}\n\ntype AnyErrorEntry = ErrorEntry<string>\n\n/** Entries keyed by tag. The compiler rejects a key that differs from the class's `_tag`. */\nexport type ErrorEntries<Entries> = {\n  readonly [Tag in keyof Entries & string]: ErrorEntry<Tag>\n}\n\ntype EntryPayload<Tag extends string, Entry> = Entry extends {\n  readonly fields: infer Fields extends z.ZodType\n}\n  ? { readonly _tag: Tag; readonly message: string } & z.output<Fields>\n  : { readonly _tag: Tag; readonly message: string }\n\ntype PayloadOfEntries<Entries> = {\n  [Tag in keyof Entries & string]: EntryPayload<Tag, Entries[Tag]>\n}[keyof Entries & string]\n\n/** The HTTP status and public payload for one resolved failure. */\nexport type ResolvedError<Payload> = {\n  readonly status: number\n  readonly payload: Payload\n}\n\n/**\n * One application's public errors, shared by every transport boundary and the browser.\n * `resolve` and `fallback` serve boundaries. `parse` and `generic` serve screens.\n */\nexport type ErrorTable<Entries> = {\n  readonly entries: Entries\n  /** The discriminated union of every entry's `_tag`, `message`, and fields. */\n  readonly payloadSchema: z.ZodType<PayloadOfEntries<Entries>>\n  /** The `InternalServerError` payload, for screens that must show something. */\n  readonly generic: PayloadOfEntries<Entries>\n  /** Read a rejection value. Null means no known tag, so the request never reached the Worker. */\n  parse(cause: unknown): PayloadOfEntries<Entries> | null\n  /** Narrow a rejection value to one tag's payload, for a caller that acts on that one error. */\n  is<Tag extends keyof Entries & string>(\n    cause: unknown,\n    tag: Tag,\n  ): cause is Extract<PayloadOfEntries<Entries>, { readonly _tag: Tag }>\n  /** Match a local instance or a remote error by tag. Null means the failure is not public. */\n  resolve(cause: unknown): ResolvedError<PayloadOfEntries<Entries>> | null\n  /** The replacement for an unmapped failure: 503 when it declared itself transient, else 500. */\n  fallback(cause: unknown): ResolvedError<PayloadOfEntries<Entries>>\n}\n\n/** The union of payloads a table can produce. */\nexport type ErrorPayloadOf<Table> =\n  Table extends ErrorTable<infer Entries> ? PayloadOfEntries<Entries> : never\n\n/** The union of tags a table contains. */\nexport type ErrorTagOf<Table> =\n  Table extends ErrorTable<infer Entries> ? keyof Entries & string : never\n\nfunction entriesOf<const Entries extends ErrorEntries<Entries>>(entries: Entries): Entries {\n  return entries\n}\n\nconst ValidationFields = z.object({ errors: z.array(ValidationProblemErrorSchema) })\nconst RateLimitFields = z.object({ retryAfter: z.number().nullable() })\n\n/** The errors every application can throw, with their statuses. `defineErrors` includes them. */\nexport const sharedErrors = entriesOf({\n  MalformedRequestError: { error: MalformedRequestError, status: 400 },\n  AuthenticationError: { error: AuthenticationError, status: 401 },\n  StaleSessionError: { error: StaleSessionError, status: 401 },\n  NotAuthorizedError: { error: NotAuthorizedError, status: 403 },\n  ResourceNotFoundError: { error: ResourceNotFoundError, status: 404 },\n  ValidationError: { error: ValidationError, status: 422, fields: ValidationFields },\n  UpgradeRequiredError: { error: UpgradeRequiredError, status: 426 },\n  RateLimitError: { error: RateLimitError, status: 429, fields: RateLimitFields },\n  InternalServerError: { error: InternalServerError, status: 500 },\n  ServiceUnavailableError: { error: ServiceUnavailableError, status: 503 },\n  RequestTimeoutError: { error: RequestTimeoutError, status: 504 },\n})\n\ntype MergedEntries<Entries> = Omit<typeof sharedErrors, keyof Entries> & Entries\n\n// Workers RPC drops the prototype but keeps own properties and marks the error as remote.\nconst RemoteErrorSchema = z.object({\n  _tag: z.string(),\n  message: z.string(),\n  remote: z.literal(true),\n})\n\ntype Match = { readonly tag: string; readonly entry: AnyErrorEntry; readonly error: Error }\n\nfunction match(byTag: ReadonlyMap<string, AnyErrorEntry>, cause: unknown): Match | null {\n  if (cause instanceof AppError) {\n    const entry = byTag.get(cause._tag)\n    if (entry === undefined || !(cause instanceof entry.error)) return null\n    return { tag: cause._tag, entry, error: cause }\n  }\n  if (!(cause instanceof Error)) return null\n  const remote = RemoteErrorSchema.safeParse(cause)\n  if (!remote.success) return null\n  const entry = byTag.get(remote.data._tag)\n  return entry === undefined ? null : { tag: remote.data._tag, entry, error: cause }\n}\n\n/**\n * Build the application's error table. The shared entries are always included;\n * an entry with the same key replaces the shared one.\n */\nexport function defineErrors<const Entries extends ErrorEntries<Entries>>(\n  entries: Entries,\n): ErrorTable<MergedEntries<Entries>> {\n  type Payload = PayloadOfEntries<MergedEntries<Entries>>\n  const merged = { ...sharedErrors, ...entries }\n  const byTag: ReadonlyMap<string, AnyErrorEntry> = new Map(Object.entries<AnyErrorEntry>(merged))\n\n  const resolve = (cause: unknown): ResolvedError<Payload> | null => {\n    const found = match(byTag, cause)\n    if (found === null) return null\n    const fields = found.entry.fields?.safeParse(found.error)\n    if (fields !== undefined && !fields.success) return null\n    // SAFETY: The entry's own `fields` schema produced these properties, so the payload has the shape declared for this tag.\n    const payload = { _tag: found.tag, message: found.error.message, ...fields?.data } as Payload\n    return { status: found.entry.status, payload }\n  }\n\n  const resolveShared = (error: AppError): ResolvedError<Payload> =>\n    resolve(error) ?? panic(`Error table cannot resolve shared error ${error._tag}`)\n  const generic = resolveShared(new InternalServerError())\n  const unavailable = resolveShared(new ServiceUnavailableError())\n\n  const variants = [...byTag].map(([tag, entry]) =>\n    // oxlint-disable-next-line anti-slop/no-shape-in-symbol-names -- Zod names an object schema's property map `shape`.\n    z.strictObject({ _tag: z.literal(tag), message: z.string(), ...entry.fields?.shape }),\n  )\n  const [first, ...rest] = variants\n  if (first === undefined) return panic('Error table has no entries')\n  // Each variant is one entry's `_tag`, `message`, and fields, which is the union `PayloadOfEntries` describes.\n  const payloadSchema = z.discriminatedUnion('_tag', [first, ...rest]).pipe(z.custom<Payload>())\n\n  // No return annotation: TypeScript resolves the deferred payload union differently in that position.\n  const parse = (cause: unknown) => {\n    const parsed = payloadSchema.safeParse(cause)\n    return parsed.success ? parsed.data : null\n  }\n\n  return {\n    entries: merged,\n    payloadSchema,\n    generic: generic.payload,\n    parse,\n    is<Tag extends keyof MergedEntries<Entries> & string>(\n      cause: unknown,\n      tag: Tag,\n    ): cause is Extract<Payload, { readonly _tag: Tag }> {\n      const parsed = parse(cause)\n      return parsed !== null && parsed._tag === tag\n    },\n    resolve,\n    fallback: (cause) =>\n      cause instanceof AppError && cause.classification === 'transient' ? unavailable : generic,\n  }\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** SQLite reports these constraint categories through D1. */\nexport type D1ConstraintKind = 'unique' | 'not_null' | 'foreign_key' | 'check'\n\n/** Database evidence for callers that interpret a specific code or constraint. */\nexport type DatabaseFailure =\n  | {\n      readonly database: 'd1'\n      readonly code: string | undefined\n      readonly kind: D1ConstraintKind | undefined\n      readonly table: string | undefined\n      readonly column: string | undefined\n      readonly constraintName: string | undefined\n    }\n  | {\n      readonly database: 'postgres'\n      readonly code: string | undefined\n      readonly table_name: string | undefined\n      readonly column_name: string | undefined\n      readonly constraint_name: string | undefined\n    }\n\n/** Classification describes the failure; callers must separately establish whether repetition is safe. */\nexport class DatabaseError extends AppError {\n  readonly _tag = 'DatabaseError'\n\n  constructor(\n    readonly operation: string,\n    readonly classification: FailureClassification,\n    readonly details: DatabaseFailure,\n    options: { readonly cause: unknown },\n  ) {\n    super(`Database operation failed: ${operation}`, options)\n  }\n}\n","import { panic } from 'better-result'\n\n/**\n * Mark a line the types say cannot run. A union member without a branch stops compilation here.\n *\n * @throws Panic when a value outside the union arrives at runtime.\n */\nexport function unreachable(value: never): never {\n  return panic(`Unreachable: ${String(value)}`)\n}\n\n/**\n * Mark a body that is not written yet. A defect, not an expected failure.\n *\n * @param what - The behavior the body will provide, such as `invoice export`.\n * @throws Panic always.\n */\nexport function notImplemented(what: string): never {\n  return panic(`Not implemented: ${what}`)\n}\n","import { v7 as uuidv7 } from 'uuid'\nimport { z } from 'zod'\n\n/** A string only `create()` or `schema.parse()` of the same kind can produce. */\nexport type Id<Brand extends string> = string & z.core.$brand<Brand>\n\n/** One id kind the application mints. `schema` parses untrusted input; `create` mints a uuid v7. */\nexport type IdDefinition<Brand extends string> = {\n  readonly schema: z.core.$ZodBranded<z.ZodUUID, Brand>\n  /** Mint a new time-ordered id. No parse: we produced it, so it is valid by construction. */\n  create(): Id<Brand>\n}\n\n/** The id type of a definition: `type CallId = IdOf<typeof CallId>`. */\nexport type IdOf<Definition extends IdDefinition<string>> = z.output<Definition['schema']>\n\n/**\n * Define an id kind the application mints: `export const CallId = defineId('CallId')`.\n * An id another system mints, such as a provider's call id, stays a plain branded schema.\n */\nexport function defineId<const Brand extends string>(brand: Brand): IdDefinition<Brand> {\n  const schema = z.uuidv7({ error: `Invalid ${brand}` })\n  return {\n    // SAFETY: `brand()` is type-only and returns a conditional TypeScript cannot reduce for a generic brand; for every literal it is this branded schema.\n    schema: schema.brand<Brand>() as z.core.$ZodBranded<z.ZodUUID, Brand>,\n    // SAFETY: uuidv7() always yields a valid v7 uuid, and the brand is a compile-time mark only.\n    create: () => uuidv7() as Id<Brand>,\n  }\n}\n","import { panic } from 'better-result'\nimport { v7 as uuidv7 } from 'uuid'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { MessageId } from './messages.ts'\n\n/** Payload schemas keyed by message name. Payloads cannot declare `type`, `name`, or `id`. */\nexport type PayloadSchemas = Readonly<Record<string, z.ZodType<object>>>\n\n/** Optional payload schema maps for one message collection. */\nexport type MessageDefinition = {\n  readonly commands?: PayloadSchemas\n  readonly events?: PayloadSchemas\n  readonly queries?: PayloadSchemas\n}\n\nconst completed = Symbol('MessageCollection')\nconst MessageIdSchema = z.string().min(1)\nconst envelopes = {\n  command: z.object({ type: z.literal('command'), id: MessageIdSchema }),\n  event: z.object({ type: z.literal('event'), id: MessageIdSchema }),\n  query: z.object({ type: z.literal('query') }),\n}\n\ntype MessageKind = keyof typeof envelopes\ntype RoutingField = 'type' | 'name' | 'id'\ntype SchemaMap = Readonly<Record<string, z.ZodType<object>>>\ntype EmptySchemas = Record<never, never>\ntype SchemaMaps = {\n  readonly commandSchemas: SchemaMap\n  readonly eventSchemas: SchemaMap\n  readonly querySchemas: SchemaMap\n}\ntype CompletedMessages = SchemaMaps & { readonly [completed]: true }\ntype SchemaOf<Schemas extends SchemaMap> = Schemas[keyof Schemas & string]\ntype Payload<Message> = Message extends object ? Omit<Message, RoutingField> : never\n\n/** Complete schemas, union schemas, and factories for one message collection. */\nexport type MessageCollection<Maps extends SchemaMaps> = Maps & {\n  readonly [completed]: true\n  readonly commandSchema: z.ZodUnion<SchemaOf<Maps['commandSchemas']>[]>\n  readonly eventSchema: z.ZodUnion<SchemaOf<Maps['eventSchemas']>[]>\n  readonly querySchema: z.ZodUnion<SchemaOf<Maps['querySchemas']>[]>\n  /** Commands and events can cross a queue. Queries cannot. */\n  readonly queueSchema: z.ZodUnion<\n    (SchemaOf<Maps['commandSchemas']> | SchemaOf<Maps['eventSchemas']>)[]\n  >\n  /** Add the command envelope without parsing. The default ID is UUID v7; supplied IDs stay unchanged. */\n  createCommand<Name extends keyof Maps['commandSchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['commandSchemas'][NoInfer<Name>]>>,\n    id?: MessageId,\n  ): z.output<Maps['commandSchemas'][Name]>\n  /** Add the event envelope without parsing. The default ID is UUID v7; supplied IDs stay unchanged. */\n  createEvent<Name extends keyof Maps['eventSchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['eventSchemas'][NoInfer<Name>]>>,\n    id?: MessageId,\n  ): z.output<Maps['eventSchemas'][Name]>\n  /** Add the query envelope without parsing. Queries have no ID. */\n  createQuery<Name extends keyof Maps['querySchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['querySchemas'][NoInfer<Name>]>>,\n  ): z.output<Maps['querySchemas'][Name]>\n}\n\n/** The command union inferred from a collection's complete schemas. */\nexport type CommandOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['commandSchemas']>\n>\n\n/** The event union inferred from a collection's complete schemas. */\nexport type EventOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['eventSchemas']>\n>\n\n/** The query union inferred from a collection's complete schemas. */\nexport type QueryOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['querySchemas']>\n>\n\n/** Every message inferred from a collection's complete schemas. */\nexport type MessageOf<Messages extends CompletedMessages> =\n  | CommandOf<Messages>\n  | EventOf<Messages>\n  | QueryOf<Messages>\n\ntype KeysOfUnion<Value> = Value extends Value ? keyof Value : never\ntype WithoutRoutingFields<Schemas extends PayloadSchemas> = {\n  readonly [Name in keyof Schemas]: KeysOfUnion<z.output<Schemas[Name]>> &\n    RoutingField extends never\n    ? Schemas[Name]\n    : never\n}\n\nfunction messageSchema<\n  Kind extends MessageKind,\n  Name extends string,\n  Schema extends z.ZodType<object>,\n>(kind: Kind, name: Name, payload: Schema) {\n  return z.intersection(envelopes[kind], z.object({ name: z.literal(name) })).and(payload)\n}\n\ntype CompleteSchemas<Kind extends MessageKind, Schemas extends PayloadSchemas> = {\n  readonly [Name in keyof Schemas & string]: ReturnType<\n    typeof messageSchema<Kind, Name, Schemas[Name]>\n  >\n}\n\nfunction completeSchemas<Kind extends MessageKind, Schemas extends PayloadSchemas>(\n  kind: Kind,\n  schemas: Schemas | undefined,\n): CompleteSchemas<Kind, Schemas> {\n  const entries = Object.entries<z.ZodType<object>>(schemas ?? {}).map(([name, payload]) => [\n    name,\n    messageSchema(kind, name, payload),\n  ])\n  // SAFETY: Each entry preserves its name and wraps its payload schema with the selected envelope.\n  return Object.freeze(Object.fromEntries(entries)) as CompleteSchemas<Kind, Schemas>\n}\n\nfunction unionOf<Schemas extends SchemaMap>(schemas: Schemas): z.ZodUnion<SchemaOf<Schemas>[]> {\n  // SAFETY: Object.values contains exactly the complete schemas indexed by this map's keys.\n  return z.union(Object.values(schemas)) as z.ZodUnion<SchemaOf<Schemas>[]>\n}\n\nfunction collection<Maps extends SchemaMaps>(maps: Maps): MessageCollection<Maps> {\n  return Object.freeze<MessageCollection<Maps>>({\n    ...maps,\n    [completed]: true,\n    commandSchema: unionOf<Maps['commandSchemas']>(maps.commandSchemas),\n    eventSchema: unionOf<Maps['eventSchemas']>(maps.eventSchemas),\n    querySchema: unionOf<Maps['querySchemas']>(maps.querySchemas),\n    // SAFETY: The queue union contains the command and event schemas from these maps, without rebuilding them.\n    queueSchema: z.union([\n      ...Object.values(maps.commandSchemas),\n      ...Object.values(maps.eventSchemas),\n    ]) as MessageCollection<Maps>['queueSchema'],\n    createCommand: (name, payload, id = uuidv7()) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; the factory supplies its envelope.\n      return { ...payload, type: 'command', name, id } as z.output<\n        Maps['commandSchemas'][typeof name]\n      >\n    },\n    createEvent: (name, payload, id = uuidv7()) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; the factory supplies its envelope.\n      return { ...payload, type: 'event', name, id } as z.output<Maps['eventSchemas'][typeof name]>\n    },\n    createQuery: (name, payload) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; a query has no ID.\n      return { ...payload, type: 'query', name } as z.output<Maps['querySchemas'][typeof name]>\n    },\n  })\n}\n\n/** Build each complete schema once. Omitted kinds have empty maps and schemas that reject every input. */\nexport function defineMessages<\n  const Commands extends PayloadSchemas = EmptySchemas,\n  const Events extends PayloadSchemas = EmptySchemas,\n  const Queries extends PayloadSchemas = EmptySchemas,\n>(definition: {\n  readonly commands?: Commands & WithoutRoutingFields<Commands>\n  readonly events?: Events & WithoutRoutingFields<Events>\n  readonly queries?: Queries & WithoutRoutingFields<Queries>\n}) {\n  return collection({\n    commandSchemas: completeSchemas<'command', Commands>('command', definition.commands),\n    eventSchemas: completeSchemas<'event', Events>('event', definition.events),\n    querySchemas: completeSchemas<'query', Queries>('query', definition.queries),\n  })\n}\n\n/** Two collections declare the same name within one message kind. */\nexport class DuplicateMessageNameError extends AppError {\n  readonly _tag = 'DuplicateMessageNameError'\n  readonly classification = 'terminal'\n\n  /** Identify the duplicate kind and name so the application can correct its definitions. */\n  constructor(\n    readonly kind: MessageKind,\n    readonly messageName: string,\n  ) {\n    super(`Duplicate ${kind} name: ${messageName}`)\n  }\n}\n\ntype SchemaAtName<Maps, Name extends PropertyKey> =\n  Maps extends Record<Name, infer Schema extends z.ZodType<object>> ? Schema : never\ntype MergedMaps<Collections extends readonly CompletedMessages[]> = {\n  readonly [Key in keyof SchemaMaps]: {\n    readonly [Name in KeysOfUnion<Collections[number][Key]> & string]: SchemaAtName<\n      Collections[number][Key],\n      Name\n    >\n  }\n}\ntype DuplicateNames<Collections extends readonly CompletedMessages[]> =\n  Collections extends readonly [\n    infer First extends CompletedMessages,\n    ...infer Rest extends readonly CompletedMessages[],\n  ]\n    ?\n        | {\n            [Key in keyof SchemaMaps]: keyof First[Key] & KeysOfUnion<Rest[number][Key]>\n          }[keyof SchemaMaps]\n        | DuplicateNames<Rest>\n    : never\n\nfunction mergeSchemas<\n  Collections extends readonly CompletedMessages[],\n  Key extends keyof SchemaMaps,\n>(collections: Collections, key: Key, kind: MessageKind): MergedMaps<Collections>[Key] {\n  const merged = new Map<string, z.ZodType<object>>()\n  for (const messages of collections) {\n    if (!messages?.[completed])\n      return panic('combineMessages requires completed message collections')\n    for (const [name, schema] of Object.entries(messages[key])) {\n      if (merged.has(name)) throw new DuplicateMessageNameError(kind, name)\n      merged.set(name, schema)\n    }\n  }\n  // SAFETY: Every schema comes from the selected complete map, and duplicate names are rejected before insertion.\n  return Object.freeze(Object.fromEntries(merged)) as MergedMaps<Collections>[Key]\n}\n\n/**\n * Merge completed collections without rebuilding complete schemas.\n * @throws DuplicateMessageNameError when two collections declare the same name within one kind.\n */\nexport function combineMessages<const Collections extends readonly CompletedMessages[]>(\n  ...collections: Collections & (DuplicateNames<Collections> extends never ? unknown : never)\n) {\n  return collection({\n    commandSchemas: mergeSchemas(collections, 'commandSchemas', 'command'),\n    eventSchemas: mergeSchemas(collections, 'eventSchemas', 'event'),\n    querySchemas: mergeSchemas(collections, 'querySchemas', 'query'),\n  })\n}\n","import type { DomainEvent } from './messages.ts'\n\n/** What an aggregate's plain data must have: an identity. A branded id keeps its brand. */\nexport type EntityData = { readonly id: string }\n\n/**\n * The base of an aggregate: its identity, the events it raised, and the plain data a repository\n * stores. The subclass keeps its constructor private and declares `static restore(data: Data)`,\n * the one door a repository rebuilds it through. A repository drains the events after `save`.\n */\nexport abstract class Entity<Data extends EntityData, TEvent extends DomainEvent = DomainEvent> {\n  private events: TEvent[] = []\n\n  abstract readonly id: Data['id']\n\n  /** Record one event with the state change that caused it. The unit of work commits both. */\n  protected addEvent(event: TEvent): void {\n    this.events.push(event)\n  }\n\n  /** A copy of the events raised since the last `clearEvents`. */\n  collectEvents(): ReadonlyArray<TEvent> {\n    return [...this.events]\n  }\n\n  /** Forget the raised events once the boundary has taken them. */\n  clearEvents(): void {\n    this.events = []\n  }\n\n  /** Plain data for the repository. The subclass's `restore(data)` accepts exactly this. */\n  abstract toPlainObject(): Data\n}\n","/**\n * What one failure is, before any policy decides what to do about it.\n *\n * `transient`: the world may differ on the next attempt. `terminal`: repeating gives the\n * same answer. `unknown`: nobody judged this error, so it came from outside unwrapped.\n */\nexport type FailureClassification = 'transient' | 'terminal' | 'unknown'\n\n/**\n * Who is asking to repeat the work.\n *\n * An immediate owner holds a caller and a socket open. A durable owner already stored the\n * work, so it can afford to try again on a failure nobody classified.\n */\nexport type RetryOwner = 'immediate' | 'durable'\n\n/** Decide whether one retry owner may repeat a failed operation. */\nexport function shouldRetryFailure(args: {\n  readonly classification: FailureClassification\n  readonly repeatSafe: boolean\n  readonly owner: RetryOwner\n}): boolean {\n  if (!args.repeatSafe) return false\n  if (args.classification === 'transient') return true\n  if (args.classification === 'terminal') return false\n  return args.owner === 'durable'\n}\n","/**\n * Messages that the platform-neutral transports raise for a failure that may pass.\n *\n * A boundary that knows its own runtime adds its own patterns before these.\n */\nconst TRANSIENT_TRANSPORT_PATTERNS = [\n  /network/,\n  /fetch failed/,\n  /timeout/,\n  /timed?\\s*out/,\n  /connection.*(lost|reset|refused|closed|aborted)/,\n  /econnreset/,\n  /econnrefused/,\n  /etimedout/,\n  /eai_again/,\n]\n\n/** Cancellation is a decision, not a failure to repeat. */\nexport function isAbortError(cause: unknown): boolean {\n  return cause instanceof Error && cause.name === 'AbortError'\n}\n\n/** Match known transient transport messages while excluding explicit cancellation. */\nexport function isTransientTransportError(cause: unknown): boolean {\n  if (!(cause instanceof Error) || isAbortError(cause)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_TRANSPORT_PATTERNS.some((pattern) => pattern.test(message))\n}\n","import { z } from 'zod'\n\n/** Stable Cloudflare messages that mean the runtime failed, not our code, and a repeat may pass. */\nexport const CLOUDFLARE_TRANSIENT_ERROR_PATTERNS = {\n  networkConnectionLost: /network connection lost/,\n  objectReset: /caused object to be reset/,\n  codeUpdateReset: /reset because its code was updated/,\n  objectMoved: /object has moved to a different machine/,\n  internalWorkflows: /internal workflows error/,\n} as const\n\nconst TRANSIENT_PLATFORM_PATTERNS = [\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.objectReset,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.codeUpdateReset,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.objectMoved,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.internalWorkflows,\n]\n\n// workerd stamps these flags as own properties on the error it throws across a binding.\nconst RetryableFlagSchema = z.object({ retryable: z.literal(true) })\nconst OverloadedFlagSchema = z.object({ overloaded: z.literal(true) })\nconst ObjectResetFlagSchema = z.object({ durableObjectReset: z.literal(true) })\n\n/** workerd stamps `retryable` on a failure it judged safe to repeat. */\nexport function isCloudflareRetryableError(cause: unknown): boolean {\n  return RetryableFlagSchema.validate(cause)\n}\n\n/** workerd stamps `overloaded` when the target could not take the call. */\nexport function isCloudflareOverloadedError(cause: unknown): boolean {\n  return OverloadedFlagSchema.validate(cause)\n}\n\n/** workerd stamps `durableObjectReset` when the object restarted during the call. */\nexport function isCloudflareObjectResetError(cause: unknown): boolean {\n  return ObjectResetFlagSchema.validate(cause)\n}\n\n/** Match transient Cloudflare runtime evidence without the general transport patterns. */\nexport function isTransientCloudflareRuntimeError(cause: unknown): boolean {\n  if (isCloudflareObjectResetError(cause)) return true\n  if (!(cause instanceof Error)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_PLATFORM_PATTERNS.some((pattern) => pattern.test(message))\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport {\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientCloudflareRuntimeError,\n} from './cloudflare-classification.ts'\nimport type { FailureClassification } from './failure-classification.ts'\nimport { isAbortError, isTransientTransportError } from './transport-classification.ts'\n\n/** A boundary's own rule for its raw errors. `undefined` means the boundary has no opinion. */\nexport type BoundaryErrorClassifier = (cause: unknown) => FailureClassification | undefined\n\n/**\n * Classify one raw external error: the boundary's own rule first, then Cloudflare's signals,\n * then the transport patterns. Cancellation is terminal even when Cloudflare marks it retryable.\n */\nexport function classifyBoundaryError(args: {\n  readonly cause: unknown\n  readonly classifyBoundary: BoundaryErrorClassifier\n  readonly includeCloudflare: boolean\n}): FailureClassification {\n  const boundary = args.classifyBoundary(args.cause)\n  if (boundary !== undefined) return boundary\n\n  if (isAbortError(args.cause)) return 'terminal'\n\n  if (\n    args.includeCloudflare &&\n    (isCloudflareOverloadedError(args.cause) ||\n      isCloudflareRetryableError(args.cause) ||\n      isTransientCloudflareRuntimeError(args.cause))\n  ) {\n    return 'transient'\n  }\n\n  if (isTransientTransportError(args.cause)) return 'transient'\n\n  return 'unknown'\n}\n\n/**\n * Judge a final failure for its durable retry owner. An `AppError` carries its own answer.\n * A raw throw nobody judged is unknown, so an immediate owner stops and a durable one may repeat.\n */\nexport function classifyFailure(cause: unknown): FailureClassification {\n  if (cause instanceof AppError) return cause.classification\n  if (isAbortError(cause)) return 'terminal'\n  if (isTransientCloudflareRuntimeError(cause)) return 'transient'\n  return 'unknown'\n}\n\nconst RetryAfterSchema = z.object({ retryAfter: z.number().positive() })\n\n/** Read a positive server-advertised retry delay in seconds, such as `RateLimitError.retryAfter`. */\nexport function retryAfterSecondsOf(cause: unknown): number | null {\n  const result = RetryAfterSchema.safeParse(cause)\n  return result.success ? result.data.retryAfter : null\n}\n","import { panic } from 'better-result'\n\n/** Uniform jitter within one fixed window. */\nexport function spreadJitterMs(spreadMs: number): number {\n  if (!Number.isFinite(spreadMs) || spreadMs < 0) {\n    return panic('spreadMs must be a non-negative number')\n  }\n  return Math.floor(Math.random() * spreadMs)\n}\n\n/**\n * Half the capped exponential delay, plus jitter over the other half. Decorrelates concurrent\n * repeats like full jitter, but keeps a floor: use it when few attempts remain before work is dropped.\n */\nexport function exponentialEqualJitterMs(\n  baseDelayMs: number,\n  maxDelayMs: number,\n  attempt: number,\n): number {\n  const halfCapMs = exponentialDelayCapMs(baseDelayMs, maxDelayMs, attempt) / 2\n  return Math.floor(halfCapMs) + spreadJitterMs(halfCapMs)\n}\n\n/** Capped exponential delay for a durable retry recorded in storage. */\nexport function exponentialDelayCapMs(\n  baseDelayMs: number,\n  maxDelayMs: number,\n  attempt: number,\n): number {\n  if (!Number.isSafeInteger(attempt) || attempt < 1) {\n    return panic('attempt must be a positive integer')\n  }\n  return Math.min(baseDelayMs * 2 ** (attempt - 1), maxDelayMs)\n}\n","import type { LogEntry, LogFields, LogFormat, LogLevel, LogSink } from './logger.ts'\n\nconst METHOD = {\n  DEBUG: 'debug',\n  INFO: 'info',\n  WARN: 'warn',\n  ERROR: 'error',\n} as const satisfies Record<LogLevel, 'debug' | 'info' | 'warn' | 'error'>\n\nconst ESC = String.fromCharCode(27)\nconst RESET = `${ESC}[0m`\nconst LEVEL_COLOR = {\n  DEBUG: `${ESC}[2;36m`,\n  INFO: `${ESC}[34m`,\n  WARN: `${ESC}[33m`,\n  ERROR: `${ESC}[1;31m`,\n} satisfies Record<LogLevel, string>\n\nlet format: LogFormat = 'json'\n\nexport function setConsoleLogFormat(value: LogFormat): void {\n  format = value\n}\n\nfunction contextOf(entry: LogEntry): LogFields | undefined {\n  const context = { ...entry.attributes }\n  if (entry.userId !== undefined) context.userId = entry.userId\n  return Object.keys(context).length === 0 ? undefined : context\n}\n\nfunction jsonEntry(entry: LogEntry): LogEntry {\n  if (!(entry.error instanceof Error)) return entry\n  const error = { name: entry.error.name, message: entry.error.message, stack: entry.error.stack }\n  return { ...entry, error }\n}\n\n/** Write one structured record or one readable development entry to `console`. */\nexport const consoleSink: LogSink = (entry) => {\n  const write = console[METHOD[entry.level]]\n  if (format === 'json') {\n    write(jsonEntry(entry))\n    return\n  }\n\n  const context = contextOf(entry)\n  const values = context === undefined ? [] : [context]\n  const errors = entry.error === undefined ? [] : [entry.error]\n  if (format === 'pretty-browser') {\n    write(\n      `%c${entry.timestamp}%c [${entry.level}] %c[${entry.module}]%c ${entry.event}`,\n      'color: #737373',\n      '',\n      'color: #2563eb',\n      '',\n      ...values,\n      ...errors,\n    )\n    return\n  }\n  write(\n    `${ESC}[90m${entry.timestamp}${RESET} ${LEVEL_COLOR[entry.level]}[${entry.level}]${RESET} ${ESC}[34m[${entry.module}]${RESET} ${entry.event}`,\n    ...values,\n    ...errors,\n  )\n}\n","import { consoleSink, setConsoleLogFormat } from './console-log-sink.ts'\n\n/** One JSON-compatible value in a normal log field. */\nexport type LogValue =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly LogValue[]\n  | { readonly [key: string]: LogValue }\n\n/** Flat fields for one log call. Only `error` can contain an arbitrary value. */\n// oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- A logger accepts caller-owned fields at its public boundary.\nexport type LogFields = Readonly<Record<string, unknown>>\n\n/** Supported log levels in ascending order. */\nexport const LogLevel = {\n  DEBUG: 'DEBUG',\n  INFO: 'INFO',\n  WARN: 'WARN',\n  ERROR: 'ERROR',\n} as const\nexport type LogLevel = (typeof LogLevel)[keyof typeof LogLevel]\n\n/** The minimum emitted level, or `OFF` for no console output. */\nexport type LogThreshold = LogLevel | 'OFF'\n\n/** Explicit output formats for production, browser development, and terminal development. */\nexport type LogFormat = 'json' | 'pretty-browser' | 'pretty-terminal'\n\n/** Process-wide logger settings supplied at startup. */\nexport interface LoggerSettings {\n  readonly level?: LogThreshold\n  readonly format?: LogFormat\n}\n\n/** One structured record sent to a log sink. */\nexport type LogEntry = {\n  readonly timestamp: string\n  readonly level: LogLevel\n  readonly module: string\n  readonly event: string\n  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- The entry keeps caller-owned fields for its sink.\n  readonly attributes: LogFields\n  readonly userId?: string\n  readonly error?: unknown\n}\n\n/** The original error and fields sent to an error service. */\nexport interface ErrorCaptureEntry {\n  readonly error: unknown\n  readonly userId: string | undefined\n  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- Sentry accepts the caller-owned fields as extra context.\n  readonly attributes: LogFields\n}\n\n/** A function that forwards one error to an error service. */\nexport type LoggerErrorHook = (entry: ErrorCaptureEntry) => void\n\n/** A destination for structured log records. */\nexport type LogSink = (entry: LogEntry) => void\n\n/** The common flat logger API for all levels. */\nexport interface Logger {\n  debug(event: string, fields?: LogFields): void\n  info(event: string, fields?: LogFields): void\n  warn(event: string, fields?: LogFields): void\n  error(event: string, fields?: LogFields): void\n}\n\nconst LEVELS = Object.values(LogLevel)\nlet threshold: LogThreshold = LogLevel.INFO\nlet logSink: LogSink = consoleSink\nlet errorHook: LoggerErrorHook | null = null\n\n/** Set the process-wide level and output format. Omitted fields restore production defaults. */\nexport function configureLogger(settings: LoggerSettings): void {\n  threshold = settings.level ?? LogLevel.INFO\n  setConsoleLogFormat(settings.format ?? 'json')\n}\n\n/** Set the process-wide log destination. */\nexport function setLogSink(sink: LogSink): void {\n  logSink = sink\n}\n\n/** Set or clear the process-wide error service hook. */\nexport function setLoggerErrorHook(hook: LoggerErrorHook | null): void {\n  errorHook = hook\n}\n\n/* oxlint-disable anti-slop/no-runtime-typeof -- The logger validates its reserved userId field. */\nfunction splitFields(fields: LogFields): ErrorCaptureEntry {\n  const { error, userId, ...attributes } = fields\n  return { error, userId: typeof userId === 'string' ? userId : undefined, attributes }\n}\n/* oxlint-enable anti-slop/no-runtime-typeof */\n\nfunction writeLog(module: string, level: LogLevel, event: string, fields: LogFields): void {\n  if (threshold === 'OFF' || LEVELS.indexOf(level) < LEVELS.indexOf(threshold)) return\n\n  const { error, userId, attributes } = splitFields(fields)\n  let entry: LogEntry = { timestamp: new Date().toISOString(), level, module, event, attributes }\n  if (userId !== undefined) entry = { ...entry, userId }\n  if (error !== undefined) entry = { ...entry, error }\n  try {\n    logSink(entry)\n  } catch {\n    // A diagnostic failure must not change application control flow.\n  }\n}\n\n/** Create a logger for one module. */\nexport function createLogger(module: string): Logger {\n  return {\n    debug: (event, fields = {}) => writeLog(module, LogLevel.DEBUG, event, fields),\n    info: (event, fields = {}) => writeLog(module, LogLevel.INFO, event, fields),\n    warn: (event, fields = {}) => writeLog(module, LogLevel.WARN, event, fields),\n    error: (event, fields = {}) => {\n      writeLog(module, LogLevel.ERROR, event, fields)\n      const capture = splitFields(fields)\n      if (errorHook === null || capture.error === undefined) return\n      try {\n        errorHook(capture)\n      } catch {\n        // An error service failure must not change application control flow.\n      }\n    },\n  }\n}\n\nexport { consoleSink }\n"],"mappings":";;;;;;;;;;;;;AAUA,IAAsB,WAAtB,cAAuC,MAAM;CAI3C,IAAa,OAAe;EAC1B,OAAO,KAAK;CACd;AACF;;;;;ACdA,IAAa,4BAAb,cAA+C,SAAS;CAKjC;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YAAY,AAAS,KAAa;EAChC,MAAM,GAAG,IAAI,aAAa;EADP;CAErB;AACF;;;;;ACgBA,MAAa,yBAAyB,EAAE,KAAK,CAAC,CAAC,MAA0B;;;;;ACxBzE,MAAa,qBAAqB,EAAE,MAAM,CAAC,CAAC,MAAsB;;;;ACKlE,MAAM,iBAAiB;;AAGvB,IAAa,kCAAb,cAAqD,SAAS;CAIvC;CAHrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,AAAS,QAAgB;EACnC,MAAM,wCAAwC,eAAe,YAAY;EADtD;CAErB;AACF;;;;;;;;AASA,SAAgB,oBAAoB,OAAe,IAAiC;CAClF,MAAM,MAAM,GAAG,MAAM,GAAG;CACxB,IAAI,MAAM,WAAW,KAAK,GAAG,WAAW,KAAK,IAAI,SAAS,gBACxD,MAAM,IAAI,gCAAgC,IAAI,MAAM;CAEtD,OAAO;AACT;;;;ACrBA,MAAM,2BAA2B;CAC/B,cAAc;CACd,sBAAsB;CACtB,gBAAgB;CAChB,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;AACjB;;;;;AAMA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAOT;EACD,MAAM,sBAAsB,KAAK,SAAS,GAAG,KAAK,gBAAgB,EAAE,OAAO,KAAK,MAAM,CAAC;EACvF,KAAK,SAAS,KAAK;EACnB,KAAK,iBAAiB,yBAAyB,KAAK;EACpD,KAAK,WAAW,KAAK;EACrB,KAAK,eAAe,KAAK;EACzB,KAAK,aAAa,KAAK;EACvB,KAAK,aAAa,KAAK;CACzB;AACF;;;;;AC/CA,MAAa,mBAAmB,EAAE,KAAK;CAAC;CAAa;CAAa;AAAc,CAAC;;AAMjF,SAAgB,gBAAgB,OAAuC;CACrE,MAAM,SAAS,iBAAiB,UAAU,KAAK;CAC/C,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,MAAM,kBAAkB;CACtB,WAAW;CACX,cAAc;CACd,WAAW;AACb;;AAGA,SAAgB,mBAAmB,UAAsB,SAAqC;CAC5F,IAAI,YAAY,MAAM,OAAO;CAC7B,OAAO,gBAAgB,aAAa,gBAAgB;AACtD;;AAGA,SAAgB,mBAAmB,YAA+B,YAA8B;CAC9F,IAAI,YAAY,OAAO;CACvB,OAAO,eAAe,QAAQ,eAAe;AAC/C;;;;;;;;ACrBA,MAAa,gCAAgC,EAAE,OAAO;CACpD,YAAY,EAAE,MAAM,kBAAkB,CAAC,CAAC,IAAI,CAAC;CAC7C,OAAO,EAAE,mBAAmB,QAAQ,CAClC,EAAE,OAAO;EACP,MAAM,EAAE,QAAQ,SAAS;EACzB,YAAY;EACZ,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,CAAC,GACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAC5C,CAAC;AACH,CAAC;;;;;AChBD,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,yBAAyB;CACjC;AACF;;;;;ACPA,IAAa,iBAAb,cAAoC,SAAS;CAKtB;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS,SAAS;CAElB,YAAY,AAAS,YAA2B;EAC9C,MAAM,mBAAmB;EADN;CAErB;AACF;;;;;ACRA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4CAA4C;CACpD;AACF;;;;;ACPA,IAAa,qBAAb,cAAwC,SAAS;CAC/C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,aAAa;CACrB;AACF;;;;;ACPA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,sBAAsB;CAC9B;AACF;;AAGA,IAAa,0BAAb,cAA6C,SAAS;CACpD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,mBAAmB;CAC3B;AACF;;;;;ACRA,IAAa,kBAAb,MAAa,wBAAwB,SAAS;CAKjC;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,QACT,UAAU,6BACV;EACA,MAAM,OAAO;EAHJ;CAIX;;CAGA,OAAO,QAAQ,OAAmB,SAAmC;EACnE,OAAO,gBAAgB,WAAW,MAAM,QAAQ,OAAO;CACzD;;CAGA,OAAO,WAAW,QAAoC,SAAmC;EACvF,OAAO,IAAI,gBACT,OAAO,KAAK,WAAW;GAAE,QAAQ,MAAM;GAAS,SAAS,YAAY,MAAM,IAAI;EAAE,EAAE,GACnF,OACF;CACF;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,MAA0B;EACpC,MAAM,6BAA6B,IAAI;CACzC;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,oBAAoB;CAC5B;AACF;;AAGA,IAAa,uBAAb,cAA0C,SAAS;CACjD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4BAA4B;CACpC;AACF;;AAGA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,uBAAuB;CAC/B;AACF;AAEA,MAAM,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAGpE,SAAS,YAAY,MAAsC;CACzD,MAAM,SAAS,mBAAmB,UAAU,IAAI;CAChD,MAAM,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;CAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;AACpG;;;;;;;;;AC9EA,MAAa,uBAAuB,EAAE,YAAY;;;;;CAKhD,MAAM,EAAE,OAAO;;;;;CAKf,OAAO,EAAE,OAAO;;;;;CAKhB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;;;;;CAK5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;AAChC,CAAC;;AAMD,MAAa,+BAA+B,EAAE,OAAO;;;;;CAKnD,QAAQ,EAAE,OAAO;;;;;CAKjB,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4BAA4B;AACxD,CAAC;;AAMD,MAAa,iCAAiC,qBAAqB,OAAO,EACxE,QAAQ,EAAE,MAAM,4BAA4B,CAAC,CAAC,IAAI,CAAC,EACrD,CAAC;;;;AC+BD,SAAS,UAAuD,SAA2B;CACzF,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,EAAE,CAAC;AACnF,MAAM,kBAAkB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGtE,MAAa,eAAe,UAAU;CACpC,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,mBAAmB;EAAE,OAAO;EAAmB,QAAQ;CAAI;CAC3D,oBAAoB;EAAE,OAAO;EAAoB,QAAQ;CAAI;CAC7D,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,iBAAiB;EAAE,OAAO;EAAiB,QAAQ;EAAK,QAAQ;CAAiB;CACjF,sBAAsB;EAAE,OAAO;EAAsB,QAAQ;CAAI;CACjE,gBAAgB;EAAE,OAAO;EAAgB,QAAQ;EAAK,QAAQ;CAAgB;CAC9E,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,yBAAyB;EAAE,OAAO;EAAyB,QAAQ;CAAI;CACvE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;AACjE,CAAC;AAKD,MAAM,oBAAoB,EAAE,OAAO;CACjC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAID,SAAS,MAAM,OAA2C,OAA8B;CACtF,IAAI,iBAAiB,UAAU;EAC7B,MAAM,QAAQ,MAAM,IAAI,MAAM,IAAI;EAClC,IAAI,UAAU,UAAa,EAAE,iBAAiB,MAAM,QAAQ,OAAO;EACnE,OAAO;GAAE,KAAK,MAAM;GAAM;GAAO,OAAO;EAAM;CAChD;CACA,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kBAAkB,UAAU,KAAK;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,IAAI;CACxC,OAAO,UAAU,SAAY,OAAO;EAAE,KAAK,OAAO,KAAK;EAAM;EAAO,OAAO;CAAM;AACnF;;;;;AAMA,SAAgB,aACd,SACoC;CAEpC,MAAM,SAAS;EAAE,GAAG;EAAc,GAAG;CAAQ;CAC7C,MAAM,QAA4C,IAAI,IAAI,OAAO,QAAuB,MAAM,CAAC;CAE/F,MAAM,WAAW,UAAkD;EACjE,MAAM,QAAQ,MAAM,OAAO,KAAK;EAChC,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,SAAS,MAAM,MAAM,QAAQ,UAAU,MAAM,KAAK;EACxD,IAAI,WAAW,UAAa,CAAC,OAAO,SAAS,OAAO;EAEpD,MAAM,UAAU;GAAE,MAAM,MAAM;GAAK,SAAS,MAAM,MAAM;GAAS,GAAG,QAAQ;EAAK;EACjF,OAAO;GAAE,QAAQ,MAAM,MAAM;GAAQ;EAAQ;CAC/C;CAEA,MAAM,iBAAiB,UACrB,QAAQ,KAAK,KAAK,MAAM,2CAA2C,MAAM,MAAM;CACjF,MAAM,UAAU,cAAc,IAAI,oBAAoB,CAAC;CACvD,MAAM,cAAc,cAAc,IAAI,wBAAwB,CAAC;CAM/D,MAAM,CAAC,OAAO,GAAG,QAJA,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,WAErC,EAAE,aAAa;EAAE,MAAM,EAAE,QAAQ,GAAG;EAAG,SAAS,EAAE,OAAO;EAAG,GAAG,MAAM,QAAQ;CAAM,CAAC,CAEtD;CAChC,IAAI,UAAU,QAAW,OAAO,MAAM,4BAA4B;CAElE,MAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAgB,CAAC;CAG7F,MAAM,SAAS,UAAmB;EAChC,MAAM,SAAS,cAAc,UAAU,KAAK;EAC5C,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;CAEA,OAAO;EACL,SAAS;EACT;EACA,SAAS,QAAQ;EACjB;EACA,GACE,OACA,KACmD;GACnD,MAAM,SAAS,MAAM,KAAK;GAC1B,OAAO,WAAW,QAAQ,OAAO,SAAS;EAC5C;EACA;EACA,WAAW,UACT,iBAAiB,YAAY,MAAM,mBAAmB,cAAc,cAAc;CACtF;AACF;;;;;AClKA,IAAa,gBAAb,cAAmC,SAAS;CAI/B;CACA;CACA;CALX,AAAS,OAAO;CAEhB,YACE,AAAS,WACT,AAAS,gBACT,AAAS,SACT,SACA;EACA,MAAM,8BAA8B,aAAa,OAAO;EAL/C;EACA;EACA;CAIX;AACF;;;;;;;;;AC7BA,SAAgB,YAAY,OAAqB;CAC/C,OAAO,MAAM,gBAAgB,OAAO,KAAK,GAAG;AAC9C;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CAClD,OAAO,MAAM,oBAAoB,MAAM;AACzC;;;;;;;;ACCA,SAAgB,SAAqC,OAAmC;CAEtF,OAAO;EAEL,QAHa,EAAE,OAAO,EAAE,OAAO,WAAW,QAAQ,CAGrC,CAAC,CAAC,MAAa;EAE5B,cAAcA,GAAO;CACvB;AACF;;;;ACXA,MAAM,YAAY,OAAO,mBAAmB;AAC5C,MAAM,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AACxC,MAAM,YAAY;CAChB,SAAS,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,SAAS;EAAG,IAAI;CAAgB,CAAC;CACrE,OAAO,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,OAAO;EAAG,IAAI;CAAgB,CAAC;CACjE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;AAC9C;AA4EA,SAAS,cAIP,MAAY,MAAY,SAAiB;CACzC,OAAO,EAAE,aAAa,UAAU,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO;AACzF;AAQA,SAAS,gBACP,MACA,SACgC;CAChC,MAAM,UAAU,OAAO,QAA2B,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CACxF,MACA,cAAc,MAAM,MAAM,OAAO,CACnC,CAAC;CAED,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,CAAC;AAClD;AAEA,SAAS,QAAmC,SAAmD;CAE7F,OAAO,EAAE,MAAM,OAAO,OAAO,OAAO,CAAC;AACvC;AAEA,SAAS,WAAoC,MAAqC;CAChF,OAAO,OAAO,OAAgC;EAC5C,GAAG;GACF,YAAY;EACb,eAAe,QAAgC,KAAK,cAAc;EAClE,aAAa,QAA8B,KAAK,YAAY;EAC5D,aAAa,QAA8B,KAAK,YAAY;EAE5D,aAAa,EAAE,MAAM,CACnB,GAAG,OAAO,OAAO,KAAK,cAAc,GACpC,GAAG,OAAO,OAAO,KAAK,YAAY,CACpC,CAAC;EACD,gBAAgB,MAAM,SAAS,KAAKC,GAAO,MAAM;GAE/C,OAAO;IAAE,GAAG;IAAS,MAAM;IAAW;IAAM;GAAG;EAGjD;EACA,cAAc,MAAM,SAAS,KAAKA,GAAO,MAAM;GAE7C,OAAO;IAAE,GAAG;IAAS,MAAM;IAAS;IAAM;GAAG;EAC/C;EACA,cAAc,MAAM,YAAY;GAE9B,OAAO;IAAE,GAAG;IAAS,MAAM;IAAS;GAAK;EAC3C;CACF,CAAC;AACH;;AAGA,SAAgB,eAId,YAIC;CACD,OAAO,WAAW;EAChB,gBAAgB,gBAAqC,WAAW,WAAW,QAAQ;EACnF,cAAc,gBAAiC,SAAS,WAAW,MAAM;EACzE,cAAc,gBAAkC,SAAS,WAAW,OAAO;CAC7E,CAAC;AACH;;AAGA,IAAa,4BAAb,cAA+C,SAAS;CAM3C;CACA;CANX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,MACT,AAAS,aACT;EACA,MAAM,aAAa,KAAK,SAAS,aAAa;EAHrC;EACA;CAGX;AACF;AAwBA,SAAS,aAGP,aAA0B,KAAU,MAAiD;CACrF,MAAM,yBAAS,IAAI,IAA+B;CAClD,KAAK,MAAM,YAAY,aAAa;EAClC,IAAI,CAAC,WAAW,YACd,OAAO,MAAM,wDAAwD;EACvE,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,SAAS,IAAI,GAAG;GAC1D,IAAI,OAAO,IAAI,IAAI,GAAG,MAAM,IAAI,0BAA0B,MAAM,IAAI;GACpE,OAAO,IAAI,MAAM,MAAM;EACzB;CACF;CAEA,OAAO,OAAO,OAAO,OAAO,YAAY,MAAM,CAAC;AACjD;;;;;AAMA,SAAgB,gBACd,GAAG,aACH;CACA,OAAO,WAAW;EAChB,gBAAgB,aAAa,aAAa,kBAAkB,SAAS;EACrE,cAAc,aAAa,aAAa,gBAAgB,OAAO;EAC/D,cAAc,aAAa,aAAa,gBAAgB,OAAO;CACjE,CAAC;AACH;;;;;;;;;ACvOA,IAAsB,SAAtB,MAAgG;CAC9F,AAAQ,SAAmB,CAAC;;CAK5B,AAAU,SAAS,OAAqB;EACtC,KAAK,OAAO,KAAK,KAAK;CACxB;;CAGA,gBAAuC;EACrC,OAAO,CAAC,GAAG,KAAK,MAAM;CACxB;;CAGA,cAAoB;EAClB,KAAK,SAAS,CAAC;CACjB;AAIF;;;;;ACfA,SAAgB,mBAAmB,MAIvB;CACV,IAAI,CAAC,KAAK,YAAY,OAAO;CAC7B,IAAI,KAAK,mBAAmB,aAAa,OAAO;CAChD,IAAI,KAAK,mBAAmB,YAAY,OAAO;CAC/C,OAAO,KAAK,UAAU;AACxB;;;;;;;;;ACrBA,MAAM,+BAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAgB,aAAa,OAAyB;CACpD,OAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;;AAGA,SAAgB,0BAA0B,OAAyB;CACjE,IAAI,EAAE,iBAAiB,UAAU,aAAa,KAAK,GAAG,OAAO;CAC7D,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,6BAA6B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC7E;;;;;ACxBA,MAAa,sCAAsC;CACjD,uBAAuB;CACvB,aAAa;CACb,iBAAiB;CACjB,aAAa;CACb,mBAAmB;AACrB;AAEA,MAAM,8BAA8B;CAClC,oCAAoC;CACpC,oCAAoC;CACpC,oCAAoC;CACpC,oCAAoC;AACtC;AAGA,MAAM,sBAAsB,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;AACnE,MAAM,uBAAuB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;AACrE,MAAM,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,IAAI,EAAE,CAAC;;AAG9E,SAAgB,2BAA2B,OAAyB;CAClE,OAAO,oBAAoB,SAAS,KAAK;AAC3C;;AAGA,SAAgB,4BAA4B,OAAyB;CACnE,OAAO,qBAAqB,SAAS,KAAK;AAC5C;;AAGA,SAAgB,6BAA6B,OAAyB;CACpE,OAAO,sBAAsB,SAAS,KAAK;AAC7C;;AAGA,SAAgB,kCAAkC,OAAyB;CACzE,IAAI,6BAA6B,KAAK,GAAG,OAAO;CAChD,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,4BAA4B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC5E;;;;;;;;AC1BA,SAAgB,sBAAsB,MAIZ;CACxB,MAAM,WAAW,KAAK,iBAAiB,KAAK,KAAK;CACjD,IAAI,aAAa,QAAW,OAAO;CAEnC,IAAI,aAAa,KAAK,KAAK,GAAG,OAAO;CAErC,IACE,KAAK,sBACJ,4BAA4B,KAAK,KAAK,KACrC,2BAA2B,KAAK,KAAK,KACrC,kCAAkC,KAAK,KAAK,IAE9C,OAAO;CAGT,IAAI,0BAA0B,KAAK,KAAK,GAAG,OAAO;CAElD,OAAO;AACT;;;;;AAMA,SAAgB,gBAAgB,OAAuC;CACrE,IAAI,iBAAiB,UAAU,OAAO,MAAM;CAC5C,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,kCAAkC,KAAK,GAAG,OAAO;CACrD,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGvE,SAAgB,oBAAoB,OAA+B;CACjE,MAAM,SAAS,iBAAiB,UAAU,KAAK;CAC/C,OAAO,OAAO,UAAU,OAAO,KAAK,aAAa;AACnD;;;;;ACxDA,SAAgB,eAAe,UAA0B;CACvD,IAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,WAAW,GAC3C,OAAO,MAAM,wCAAwC;CAEvD,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,QAAQ;AAC5C;;;;;AAMA,SAAgB,yBACd,aACA,YACA,SACQ;CACR,MAAM,YAAY,sBAAsB,aAAa,YAAY,OAAO,IAAI;CAC5E,OAAO,KAAK,MAAM,SAAS,IAAI,eAAe,SAAS;AACzD;;AAGA,SAAgB,sBACd,aACA,YACA,SACQ;CACR,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAC9C,OAAO,MAAM,oCAAoC;CAEnD,OAAO,KAAK,IAAI,cAAc,MAAM,UAAU,IAAI,UAAU;AAC9D;;;;AC/BA,MAAM,SAAS;CACb,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAEA,MAAM,MAAM,OAAO,aAAa,EAAE;AAClC,MAAM,QAAQ,GAAG,IAAI;AACrB,MAAM,cAAc;CAClB,OAAO,GAAG,IAAI;CACd,MAAM,GAAG,IAAI;CACb,MAAM,GAAG,IAAI;CACb,OAAO,GAAG,IAAI;AAChB;AAEA,IAAI,SAAoB;AAExB,SAAgB,oBAAoB,OAAwB;CAC1D,SAAS;AACX;AAEA,SAAS,UAAU,OAAwC;CACzD,MAAM,UAAU,EAAE,GAAG,MAAM,WAAW;CACtC,IAAI,MAAM,WAAW,QAAW,QAAQ,SAAS,MAAM;CACvD,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,IAAI,SAAY;AACzD;AAEA,SAAS,UAAU,OAA2B;CAC5C,IAAI,EAAE,MAAM,iBAAiB,QAAQ,OAAO;CAC5C,MAAM,QAAQ;EAAE,MAAM,MAAM,MAAM;EAAM,SAAS,MAAM,MAAM;EAAS,OAAO,MAAM,MAAM;CAAM;CAC/F,OAAO;EAAE,GAAG;EAAO;CAAM;AAC3B;;AAGA,MAAa,eAAwB,UAAU;CAC7C,MAAM,QAAQ,QAAQ,OAAO,MAAM;CACnC,IAAI,WAAW,QAAQ;EACrB,MAAM,UAAU,KAAK,CAAC;EACtB;CACF;CAEA,MAAM,UAAU,UAAU,KAAK;CAC/B,MAAM,SAAS,YAAY,SAAY,CAAC,IAAI,CAAC,OAAO;CACpD,MAAM,SAAS,MAAM,UAAU,SAAY,CAAC,IAAI,CAAC,MAAM,KAAK;CAC5D,IAAI,WAAW,kBAAkB;EAC/B,MACE,KAAK,MAAM,UAAU,MAAM,MAAM,MAAM,OAAO,MAAM,OAAO,MAAM,MAAM,SACvE,kBACA,IACA,kBACA,IACA,GAAG,QACH,GAAG,MACL;EACA;CACF;CACA,MACE,GAAG,IAAI,MAAM,MAAM,YAAY,MAAM,GAAG,YAAY,MAAM,OAAO,GAAG,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,OAAO,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,SACtI,GAAG,QACH,GAAG,MACL;AACF;;;;;AChDA,MAAa,WAAW;CACtB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAiDA,MAAM,SAAS,OAAO,OAAO,QAAQ;AACrC,IAAI,YAA0B,SAAS;AACvC,IAAI,UAAmB;AACvB,IAAI,YAAoC;;AAGxC,SAAgB,gBAAgB,UAAgC;CAC9D,YAAY,SAAS,SAAS,SAAS;CACvC,oBAAoB,SAAS,UAAU,MAAM;AAC/C;;AAGA,SAAgB,WAAW,MAAqB;CAC9C,UAAU;AACZ;;AAGA,SAAgB,mBAAmB,MAAoC;CACrE,YAAY;AACd;AAGA,SAAS,YAAY,QAAsC;CACzD,MAAM,EAAE,OAAO,QAAQ,GAAG,eAAe;CACzC,OAAO;EAAE;EAAO,QAAQ,OAAO,WAAW,WAAW,SAAS;EAAW;CAAW;AACtF;AAGA,SAAS,SAAS,QAAgB,OAAiB,OAAe,QAAyB;CACzF,IAAI,cAAc,SAAS,OAAO,QAAQ,KAAK,IAAI,OAAO,QAAQ,SAAS,GAAG;CAE9E,MAAM,EAAE,OAAO,QAAQ,eAAe,YAAY,MAAM;CACxD,IAAI,QAAkB;EAAE,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;EAAG;EAAO;EAAQ;EAAO;CAAW;CAC9F,IAAI,WAAW,QAAW,QAAQ;EAAE,GAAG;EAAO;CAAO;CACrD,IAAI,UAAU,QAAW,QAAQ;EAAE,GAAG;EAAO;CAAM;CACnD,IAAI;EACF,QAAQ,KAAK;CACf,QAAQ,CAER;AACF;;AAGA,SAAgB,aAAa,QAAwB;CACnD,OAAO;EACL,QAAQ,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,OAAO,OAAO,MAAM;EAC7E,OAAO,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,MAAM,OAAO,MAAM;EAC3E,OAAO,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,MAAM,OAAO,MAAM;EAC3E,QAAQ,OAAO,SAAS,CAAC,MAAM;GAC7B,SAAS,QAAQ,SAAS,OAAO,OAAO,MAAM;GAC9C,MAAM,UAAU,YAAY,MAAM;GAClC,IAAI,cAAc,QAAQ,QAAQ,UAAU,QAAW;GACvD,IAAI;IACF,UAAU,OAAO;GACnB,QAAQ,CAER;EACF;CACF;AACF"}
+{"version":3,"file":"core-BT1dSEQI.js","names":["uuidv7","uuidv7"],"sources":["../src/core/app-error.ts","../src/core/missing-configuration.error.ts","../src/core/analytics-event.ts","../src/core/email-address.ts","../src/core/email-idempotency-key.ts","../src/core/email-service.error.ts","../src/core/email-deliverability.ts","../src/core/record-email-event.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/request.errors.ts","../src/core/problem-details.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/identity.ts","../src/core/define-messages.ts","../src/core/entity.ts","../src/core/failure-classification.ts","../src/core/transport-classification.ts","../src/core/cloudflare-classification.ts","../src/core/classify-failure.ts","../src/core/backoff.ts","../src/core/console-log-sink.ts","../src/core/logger.ts"],"sourcesContent":["import type { FailureClassification } from './failure-classification.ts'\n\n/**\n * The base of every expected failure. A subclass declares its tag and its classification,\n * so no boundary has to guess what kind of failure it holds. A boundary tells our errors from\n * raw throws with `instanceof AppError`; a value that fails it was never judged.\n *\n * A `readonly` field with a literal initializer keeps the literal type, so\n * `readonly _tag = 'StoreUnavailable'` is enough for `Result` unions and `matchError`.\n */\nexport abstract class AppError extends Error {\n  abstract readonly _tag: string\n  abstract readonly classification: FailureClassification\n\n  override get name(): string {\n    return this._tag\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Required configuration is absent. Ported from Porte's configuration.errors.ts. */\nexport class MissingConfigurationError extends AppError {\n  readonly _tag = 'MissingConfigurationError'\n  readonly classification = 'terminal'\n\n  /** Name the missing setting without including its value. */\n  constructor(readonly key: string) {\n    super(`${key} is required`)\n  }\n}\n","import { z } from 'zod'\n\n/** An event name and its application-owned properties, ported from Typist's analytics/types.ts. */\nexport interface AnalyticsEventInput<\n  TName extends string = string,\n  TProperties extends object = object,\n> {\n  readonly name: TName\n  readonly properties: TProperties\n}\n\n/** A value supported by analytics person properties. */\nexport type AnalyticsProperty =\n  | string\n  | number\n  | boolean\n  | null\n  | undefined\n  | readonly AnalyticsProperty[]\n  | AnalyticsProperties\n\n/** Person properties supplied by the application. */\nexport interface AnalyticsProperties {\n  readonly [name: string]: AnalyticsProperty\n}\n\n/** Parse a persisted analytics event UUID; the SDK generates ordinary event UUIDs itself. */\nexport const AnalyticsEventIdSchema = z.uuid().brand<'AnalyticsEventId'>()\n\n/** The identity of one analytics event across repeated application deliveries. */\nexport type AnalyticsEventId = z.infer<typeof AnalyticsEventIdSchema>\n\n/** Supply both original values when replaying one event; never share them across different occurrences. */\nexport interface AnalyticsEventIdentity {\n  readonly uuid: AnalyticsEventId\n  readonly timestamp: Date\n}\n","import { z } from 'zod'\n\n/** A parsed email address for message payloads and webhook recipients. Ported from Typist's `EmailSchema`. */\nexport const EmailAddressSchema = z.email().brand<'EmailAddress'>()\n\n/** An address the schema accepted. */\nexport type EmailAddress = z.infer<typeof EmailAddressSchema>\n","import type { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\n\n/** A key only `emailIdempotencyKey` mints, so every send carries one built by its rules. */\nexport type EmailIdempotencyKey = string & z.core.$brand<'EmailIdempotencyKey'>\n\n// Resend accepts 1 to 256 characters. Source: https://resend.com/docs/dashboard/emails/idempotency-keys\nconst MAX_KEY_LENGTH = 256\n\n/** A key outside 1 to 256 characters. Keys come from stable ids, so this is a defect, not a retry. */\nexport class InvalidEmailIdempotencyKeyError extends AppError {\n  readonly _tag = 'InvalidEmailIdempotencyKeyError'\n  readonly classification = 'terminal'\n\n  constructor(readonly length: number) {\n    super(`Email idempotency key must have 1 to ${MAX_KEY_LENGTH} characters`)\n  }\n}\n\n/**\n * `<scope>/<id>` for one logical send. Resend deduplicates it for 24 hours.\n * Derive `id` from a stable identity: a message id, a job id, a user id with a template name.\n * The same key must map to an identical payload; a changed body is rejected as terminal.\n * A random `id` means every request is a deliberate new send, as a sign-in code resend is.\n * Source: https://resend.com/docs/dashboard/emails/idempotency-keys\n */\nexport function emailIdempotencyKey(scope: string, id: string): EmailIdempotencyKey {\n  const key = `${scope}/${id}`\n  if (scope.length === 0 || id.length === 0 || key.length > MAX_KEY_LENGTH)\n    throw new InvalidEmailIdempotencyKeyError(key.length)\n  // SAFETY: the brand is a compile-time mark; the checks above are the whole rule.\n  return key as EmailIdempotencyKey\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** Why the provider rejected a send. The reason owns the classification, so the two never disagree. */\nexport type EmailSendFailureReason =\n  | 'rate_limited'\n  | 'idempotency_conflict'\n  | 'provider_error'\n  | 'quota_exceeded'\n  | 'invalid_request'\n  | 'configuration'\n\nconst CLASSIFICATION_BY_REASON = {\n  rate_limited: 'transient',\n  idempotency_conflict: 'transient',\n  provider_error: 'transient',\n  quota_exceeded: 'terminal',\n  invalid_request: 'terminal',\n  configuration: 'terminal',\n} satisfies Record<EmailSendFailureReason, FailureClassification>\n\n/**\n * The provider rejected a send. The boundary that awaited the send logs once; the adapter never does.\n * `retryAfter` is the server's delay in seconds when it sent one, so `retryAfterSecondsOf` reads it.\n */\nexport class EmailServiceError extends AppError {\n  readonly _tag = 'EmailServiceError'\n  readonly classification: FailureClassification\n  readonly reason: EmailSendFailureReason\n  readonly provider: string\n  readonly providerCode: string\n  readonly statusCode: number | null\n  readonly retryAfter: number | null\n\n  constructor(args: {\n    readonly reason: EmailSendFailureReason\n    readonly provider: string\n    readonly providerCode: string\n    readonly statusCode: number | null\n    readonly retryAfter: number | null\n    readonly cause: unknown\n  }) {\n    super(`Email send failed: ${args.provider} ${args.providerCode}`, { cause: args.cause })\n    this.reason = args.reason\n    this.classification = CLASSIFICATION_BY_REASON[args.reason]\n    this.provider = args.provider\n    this.providerCode = args.providerCode\n    this.statusCode = args.statusCode\n    this.retryAfter = args.retryAfter\n  }\n}\n","import { z } from 'zod'\n\n/** The bounce classes Resend reports, ported from Typist's comm-eligibility.ts. */\nexport const BounceTypeSchema = z.enum(['Permanent', 'Transient', 'Undetermined'])\n\n/** One bounce class. */\nexport type BounceType = z.infer<typeof BounceTypeSchema>\n\n/** Parse a provider's bounce type. An unknown value is `Undetermined`, which suppresses. */\nexport function parseBounceType(value: string | undefined): BounceType {\n  const parsed = BounceTypeSchema.safeParse(value)\n  return parsed.success ? parsed.data : 'Undetermined'\n}\n\nconst BOUNCE_SEVERITY = {\n  Transient: 1,\n  Undetermined: 2,\n  Permanent: 3,\n} satisfies Record<BounceType, number>\n\n/** Keep the higher severity. Equal severity permits replacement; callers own timestamp ordering. */\nexport function shouldUpdateBounce(incoming: BounceType, current: BounceType | null): boolean {\n  if (current === null) return true\n  return BOUNCE_SEVERITY[incoming] >= BOUNCE_SEVERITY[current]\n}\n\n/** Typist's send policy: no complaint, and either no bounce or a transient one. Delivery is not guaranteed. */\nexport function isEmailDeliverable(bounceType: BounceType | null, complained: boolean): boolean {\n  if (complained) return false\n  return bounceType === null || bounceType === 'Transient'\n}\n","import { z } from 'zod'\n\nimport { EmailAddressSchema } from './email-address.ts'\nimport { BounceTypeSchema } from './email-deliverability.ts'\n\n/**\n * The payload of the command an application registers to record a bounce or a complaint.\n * Register it under a name of the application's choice in `defineMessages`; `recordEmailEvent` handles it.\n */\nexport const RecordEmailEventPayloadSchema = z.object({\n  recipients: z.array(EmailAddressSchema).min(1),\n  event: z.discriminatedUnion('type', [\n    z.object({\n      type: z.literal('bounced'),\n      bounceType: BounceTypeSchema,\n      bounceSubType: z.string().nullable(),\n    }),\n    z.object({ type: z.literal('complained') }),\n  ]),\n})\n\n/** A parsed payload. */\nexport type RecordEmailEventPayload = z.infer<typeof RecordEmailEventPayloadSchema>\n","import { AppError } from './app-error.ts'\n\n/** A protected operation requires a session that the caller did not provide. */\nexport class AuthenticationError extends AppError {\n  readonly _tag = 'AuthenticationError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Authentication required')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** HTTP 429 with a retry delay in seconds. A null delay means the response supplies no valid duration. */\nexport class RateLimitError extends AppError {\n  readonly _tag = 'RateLimitError'\n  readonly classification = 'transient'\n  readonly status = 429\n\n  constructor(readonly retryAfter: number | null) {\n    super('Too many requests')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A presented session cookie no longer resolves; the application owns cleanup and redirect policy. */\nexport class StaleSessionError extends AppError {\n  readonly _tag = 'StaleSessionError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Session is no longer valid. Sign in again.')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** The authenticated caller cannot perform this operation. Ported from Porte's auth.errors.ts. */\nexport class NotAuthorizedError extends AppError {\n  readonly _tag = 'NotAuthorizedError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Not allowed')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Safe public replacement for an unknown failure, ported from Porte's internal.errors.ts. */\nexport class InternalServerError extends AppError {\n  readonly _tag = 'InternalServerError'\n  readonly classification = 'unknown'\n\n  constructor() {\n    super('Something went wrong')\n  }\n}\n\n/** Safe public replacement for a classified transient failure. */\nexport class ServiceUnavailableError extends AppError {\n  readonly _tag = 'ServiceUnavailableError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('Try again shortly')\n  }\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { ValidationProblemError } from './problem-details.ts'\n\n/** One invalid value as a validator reports it: a message and a path of keys. */\nexport type ValidationIssue = {\n  readonly message: string\n  readonly path: readonly PropertyKey[]\n}\n\n/** Invalid user input, one entry per invalid value in the RFC 9457 shape. Technical failures use another error. */\nexport class ValidationError extends AppError {\n  readonly _tag = 'ValidationError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly errors: readonly ValidationProblemError[],\n    message = 'The request was not valid',\n  ) {\n    super(message)\n  }\n\n  /** Convert a Zod error. Each issue path becomes a JSON Pointer. */\n  static fromZod(error: z.ZodError, message?: string): ValidationError {\n    return ValidationError.fromIssues(error.issues, message)\n  }\n\n  /** Convert issues from any validator, such as issues TanStack serialized into an error message. */\n  static fromIssues(issues: readonly ValidationIssue[], message?: string): ValidationError {\n    return new ValidationError(\n      issues.map((issue) => ({ detail: issue.message, pointer: jsonPointer(issue.path) })),\n      message,\n    )\n  }\n}\n\n/** The server cannot parse the request syntax. */\nexport class MalformedRequestError extends AppError {\n  readonly _tag = 'MalformedRequestError'\n  readonly classification = 'terminal'\n\n  constructor(args: { cause: unknown }) {\n    super('The request was malformed', args)\n  }\n}\n\n/** No resource matches the requested HTTP path. */\nexport class ResourceNotFoundError extends AppError {\n  readonly _tag = 'ResourceNotFoundError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Resource not found')\n  }\n}\n\n/** A WebSocket route received a request without an upgrade. */\nexport class UpgradeRequiredError extends AppError {\n  readonly _tag = 'UpgradeRequiredError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('WebSocket upgrade required')\n  }\n}\n\n/** The requested operation did not answer before its deadline. */\nexport class RequestTimeoutError extends AppError {\n  readonly _tag = 'RequestTimeoutError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('The request timed out')\n  }\n}\n\nconst readablePathSchema = z.array(z.union([z.string(), z.number()]))\n\n// A symbol step cannot be shown, so the pointer keeps only the steps a person can read.\nfunction jsonPointer(path: readonly PropertyKey[]): string {\n  const parsed = readablePathSchema.safeParse(path)\n  const steps = parsed.success ? parsed.data : []\n  if (steps.length === 0) return '#'\n  return `#/${steps.map((step) => String(step).replaceAll('~', '~0').replaceAll('/', '~1')).join('/')}`\n}\n","import { z } from 'zod'\n\n/**\n * The standard RFC 9457 body for a failed HTTP response.\n * The HTTP response status remains authoritative; extensions may add problem-specific data.\n * @see https://http.dev/problem-details\n */\nexport const ProblemDetailsSchema = z.looseObject({\n  /**\n   * Stable URI for the problem type; use `about:blank` when the HTTP status is sufficient.\n   * @example \"about:blank\"\n   */\n  type: z.string(),\n  /**\n   * Stable human-readable name for the problem type.\n   * @example \"Service Unavailable\"\n   */\n  title: z.string(),\n  /**\n   * Safe human-readable explanation for this occurrence; clients must not parse it.\n   * @example \"The service is unavailable.\"\n   */\n  detail: z.string().optional(),\n  /**\n   * URI reference for this occurrence; omit it when no correlation resource exists.\n   * @example \"/problems/occurrences/01K5F6Y7\"\n   */\n  instance: z.string().optional(),\n})\n\n/** An RFC 9457 problem body for a failed HTTP response. */\nexport type ProblemDetails = z.infer<typeof ProblemDetailsSchema>\n\n/** One invalid value in a `422` validation problem. */\nexport const ValidationProblemErrorSchema = z.object({\n  /**\n   * Safe explanation of why this value is invalid.\n   * @example \"Must be a positive integer.\"\n   */\n  detail: z.string(),\n  /**\n   * RFC 6901 JSON Pointer fragment for the invalid value.\n   * @example \"#/age\"\n   */\n  pointer: z.string().regex(/^#(?:\\/(?:[^~]|~[01])*)*$/u),\n})\n\n/** One invalid value in a `422` validation problem. */\nexport type ValidationProblemError = z.infer<typeof ValidationProblemErrorSchema>\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport const ValidationProblemDetailsSchema = ProblemDetailsSchema.extend({\n  errors: z.array(ValidationProblemErrorSchema).min(1),\n})\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport type ValidationProblemDetails = z.infer<typeof ValidationProblemDetailsSchema>\n","import { panic } from 'better-result'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport { AuthenticationError } from './authentication.error.ts'\nimport { InternalServerError, ServiceUnavailableError } from './internal.errors.ts'\nimport { NotAuthorizedError } from './not-authorized.error.ts'\nimport { ValidationProblemErrorSchema } from './problem-details.ts'\nimport { RateLimitError } from './rate-limit.error.ts'\nimport {\n  MalformedRequestError,\n  RequestTimeoutError,\n  ResourceNotFoundError,\n  UpgradeRequiredError,\n  ValidationError,\n} from './request.errors.ts'\nimport { StaleSessionError } from './stale-session.error.ts'\n\ntype PublicFields = z.ZodObject\n\n/**\n * One public error: its class, its HTTP status, and the extra properties a client may read.\n * `fields` strips the thrown error on the server and parses the payload in the browser.\n */\nexport type ErrorEntry<Tag extends string, Fields extends PublicFields = PublicFields> = {\n  readonly error: abstract new (...args: never[]) => AppError & { readonly _tag: Tag }\n  readonly status: number\n  readonly fields?: Fields\n}\n\ntype AnyErrorEntry = ErrorEntry<string>\n\n/** Entries keyed by tag. The compiler rejects a key that differs from the class's `_tag`. */\nexport type ErrorEntries<Entries> = {\n  readonly [Tag in keyof Entries & string]: ErrorEntry<Tag>\n}\n\ntype EntryPayload<Tag extends string, Entry> = Entry extends {\n  readonly fields: infer Fields extends z.ZodType\n}\n  ? { readonly _tag: Tag; readonly message: string } & z.output<Fields>\n  : { readonly _tag: Tag; readonly message: string }\n\ntype PayloadOfEntries<Entries> = {\n  [Tag in keyof Entries & string]: EntryPayload<Tag, Entries[Tag]>\n}[keyof Entries & string]\n\n/** The HTTP status and public payload for one resolved failure. */\nexport type ResolvedError<Payload> = {\n  readonly status: number\n  readonly payload: Payload\n}\n\n/**\n * One application's public errors, shared by every transport boundary and the browser.\n * `resolve` and `fallback` serve boundaries. `parse` and `generic` serve screens.\n */\nexport type ErrorTable<Entries> = {\n  readonly entries: Entries\n  /** The discriminated union of every entry's `_tag`, `message`, and fields. */\n  readonly payloadSchema: z.ZodType<PayloadOfEntries<Entries>>\n  /** The `InternalServerError` payload, for screens that must show something. */\n  readonly generic: PayloadOfEntries<Entries>\n  /** Read a rejection value. Null means no known tag, so the request never reached the Worker. */\n  parse(cause: unknown): PayloadOfEntries<Entries> | null\n  /** Narrow a rejection value to one tag's payload, for a caller that acts on that one error. */\n  is<Tag extends keyof Entries & string>(\n    cause: unknown,\n    tag: Tag,\n  ): cause is Extract<PayloadOfEntries<Entries>, { readonly _tag: Tag }>\n  /** Match a local instance or a remote error by tag. Null means the failure is not public. */\n  resolve(cause: unknown): ResolvedError<PayloadOfEntries<Entries>> | null\n  /** The replacement for an unmapped failure: 503 when it declared itself transient, else 500. */\n  fallback(cause: unknown): ResolvedError<PayloadOfEntries<Entries>>\n}\n\n/** The union of payloads a table can produce. */\nexport type ErrorPayloadOf<Table> =\n  Table extends ErrorTable<infer Entries> ? PayloadOfEntries<Entries> : never\n\n/** The union of tags a table contains. */\nexport type ErrorTagOf<Table> =\n  Table extends ErrorTable<infer Entries> ? keyof Entries & string : never\n\nfunction entriesOf<const Entries extends ErrorEntries<Entries>>(entries: Entries): Entries {\n  return entries\n}\n\nconst ValidationFields = z.object({ errors: z.array(ValidationProblemErrorSchema) })\nconst RateLimitFields = z.object({ retryAfter: z.number().nullable() })\n\n/** The errors every application can throw, with their statuses. `defineErrors` includes them. */\nexport const sharedErrors = entriesOf({\n  MalformedRequestError: { error: MalformedRequestError, status: 400 },\n  AuthenticationError: { error: AuthenticationError, status: 401 },\n  StaleSessionError: { error: StaleSessionError, status: 401 },\n  NotAuthorizedError: { error: NotAuthorizedError, status: 403 },\n  ResourceNotFoundError: { error: ResourceNotFoundError, status: 404 },\n  ValidationError: { error: ValidationError, status: 422, fields: ValidationFields },\n  UpgradeRequiredError: { error: UpgradeRequiredError, status: 426 },\n  RateLimitError: { error: RateLimitError, status: 429, fields: RateLimitFields },\n  InternalServerError: { error: InternalServerError, status: 500 },\n  ServiceUnavailableError: { error: ServiceUnavailableError, status: 503 },\n  RequestTimeoutError: { error: RequestTimeoutError, status: 504 },\n})\n\ntype MergedEntries<Entries> = Omit<typeof sharedErrors, keyof Entries> & Entries\n\n// Workers RPC drops the prototype but keeps own properties and marks the error as remote.\nconst RemoteErrorSchema = z.object({\n  _tag: z.string(),\n  message: z.string(),\n  remote: z.literal(true),\n})\n\ntype Match = { readonly tag: string; readonly entry: AnyErrorEntry; readonly error: Error }\n\nfunction match(byTag: ReadonlyMap<string, AnyErrorEntry>, cause: unknown): Match | null {\n  if (cause instanceof AppError) {\n    const entry = byTag.get(cause._tag)\n    if (entry === undefined || !(cause instanceof entry.error)) return null\n    return { tag: cause._tag, entry, error: cause }\n  }\n  if (!(cause instanceof Error)) return null\n  const remote = RemoteErrorSchema.safeParse(cause)\n  if (!remote.success) return null\n  const entry = byTag.get(remote.data._tag)\n  return entry === undefined ? null : { tag: remote.data._tag, entry, error: cause }\n}\n\n/**\n * Build the application's error table. The shared entries are always included;\n * an entry with the same key replaces the shared one.\n */\nexport function defineErrors<const Entries extends ErrorEntries<Entries>>(\n  entries: Entries,\n): ErrorTable<MergedEntries<Entries>> {\n  type Payload = PayloadOfEntries<MergedEntries<Entries>>\n  const merged = { ...sharedErrors, ...entries }\n  const byTag: ReadonlyMap<string, AnyErrorEntry> = new Map(Object.entries<AnyErrorEntry>(merged))\n\n  const resolve = (cause: unknown): ResolvedError<Payload> | null => {\n    const found = match(byTag, cause)\n    if (found === null) return null\n    const fields = found.entry.fields?.safeParse(found.error)\n    if (fields !== undefined && !fields.success) return null\n    // SAFETY: The entry's own `fields` schema produced these properties, so the payload has the shape declared for this tag.\n    const payload = { _tag: found.tag, message: found.error.message, ...fields?.data } as Payload\n    return { status: found.entry.status, payload }\n  }\n\n  const resolveShared = (error: AppError): ResolvedError<Payload> =>\n    resolve(error) ?? panic(`Error table cannot resolve shared error ${error._tag}`)\n  const generic = resolveShared(new InternalServerError())\n  const unavailable = resolveShared(new ServiceUnavailableError())\n\n  const variants = [...byTag].map(([tag, entry]) =>\n    // oxlint-disable-next-line anti-slop/no-shape-in-symbol-names -- Zod names an object schema's property map `shape`.\n    z.strictObject({ _tag: z.literal(tag), message: z.string(), ...entry.fields?.shape }),\n  )\n  const [first, ...rest] = variants\n  if (first === undefined) return panic('Error table has no entries')\n  // Each variant is one entry's `_tag`, `message`, and fields, which is the union `PayloadOfEntries` describes.\n  const payloadSchema = z.discriminatedUnion('_tag', [first, ...rest]).pipe(z.custom<Payload>())\n\n  // No return annotation: TypeScript resolves the deferred payload union differently in that position.\n  const parse = (cause: unknown) => {\n    const parsed = payloadSchema.safeParse(cause)\n    return parsed.success ? parsed.data : null\n  }\n\n  return {\n    entries: merged,\n    payloadSchema,\n    generic: generic.payload,\n    parse,\n    is<Tag extends keyof MergedEntries<Entries> & string>(\n      cause: unknown,\n      tag: Tag,\n    ): cause is Extract<Payload, { readonly _tag: Tag }> {\n      const parsed = parse(cause)\n      return parsed !== null && parsed._tag === tag\n    },\n    resolve,\n    fallback: (cause) =>\n      cause instanceof AppError && cause.classification === 'transient' ? unavailable : generic,\n  }\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** SQLite reports these constraint categories through D1. */\nexport type D1ConstraintKind = 'unique' | 'not_null' | 'foreign_key' | 'check'\n\n/** Database evidence for callers that interpret a specific code or constraint. */\nexport type DatabaseFailure =\n  | {\n      readonly database: 'd1'\n      readonly code: string | undefined\n      readonly kind: D1ConstraintKind | undefined\n      readonly table: string | undefined\n      readonly column: string | undefined\n      readonly constraintName: string | undefined\n    }\n  | {\n      readonly database: 'postgres'\n      readonly code: string | undefined\n      readonly table_name: string | undefined\n      readonly column_name: string | undefined\n      readonly constraint_name: string | undefined\n    }\n\n/** Classification describes the failure; callers must separately establish whether repetition is safe. */\nexport class DatabaseError extends AppError {\n  readonly _tag = 'DatabaseError'\n\n  constructor(\n    readonly operation: string,\n    readonly classification: FailureClassification,\n    readonly details: DatabaseFailure,\n    options: { readonly cause: unknown },\n  ) {\n    super(`Database operation failed: ${operation}`, options)\n  }\n}\n","import { panic } from 'better-result'\n\n/**\n * Mark a line the types say cannot run. A union member without a branch stops compilation here.\n *\n * @throws Panic when a value outside the union arrives at runtime.\n */\nexport function unreachable(value: never): never {\n  return panic(`Unreachable: ${String(value)}`)\n}\n\n/**\n * Mark a body that is not written yet. A defect, not an expected failure.\n *\n * @param what - The behavior the body will provide, such as `invoice export`.\n * @throws Panic always.\n */\nexport function notImplemented(what: string): never {\n  return panic(`Not implemented: ${what}`)\n}\n","import { v7 as uuidv7 } from 'uuid'\nimport { z } from 'zod'\n\n/** A string only `create()` or `schema.parse()` of the same kind can produce. */\nexport type Id<Brand extends string> = string & z.core.$brand<Brand>\n\n/** One id kind the application mints. `schema` parses untrusted input; `create` mints a uuid v7. */\nexport type IdDefinition<Brand extends string> = {\n  readonly schema: z.core.$ZodBranded<z.ZodUUID, Brand>\n  /** Mint a new time-ordered id. No parse: we produced it, so it is valid by construction. */\n  create(): Id<Brand>\n}\n\n/** The id type of a definition: `type CallId = IdOf<typeof CallId>`. */\nexport type IdOf<Definition extends IdDefinition<string>> = z.output<Definition['schema']>\n\n/**\n * Define an id kind the application mints: `export const CallId = defineId('CallId')`.\n * An id another system mints, such as a provider's call id, stays a plain branded schema.\n */\nexport function defineId<const Brand extends string>(brand: Brand): IdDefinition<Brand> {\n  const schema = z.uuidv7({ error: `Invalid ${brand}` })\n  return {\n    // SAFETY: `brand()` is type-only and returns a conditional TypeScript cannot reduce for a generic brand; for every literal it is this branded schema.\n    schema: schema.brand<Brand>() as z.core.$ZodBranded<z.ZodUUID, Brand>,\n    // SAFETY: uuidv7() always yields a valid v7 uuid, and the brand is a compile-time mark only.\n    create: () => uuidv7() as Id<Brand>,\n  }\n}\n","import { panic } from 'better-result'\nimport { v7 as uuidv7 } from 'uuid'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { MessageId } from './messages.ts'\n\n/** Payload schemas keyed by message name. Payloads cannot declare `type`, `name`, or `id`. */\nexport type PayloadSchemas = Readonly<Record<string, z.ZodType<object>>>\n\n/** Optional payload schema maps for one message collection. */\nexport type MessageDefinition = {\n  readonly commands?: PayloadSchemas\n  readonly events?: PayloadSchemas\n  readonly queries?: PayloadSchemas\n}\n\nconst completed = Symbol('MessageCollection')\nconst MessageIdSchema = z.string().min(1)\nconst envelopes = {\n  command: z.object({ type: z.literal('command'), id: MessageIdSchema }),\n  event: z.object({ type: z.literal('event'), id: MessageIdSchema }),\n  query: z.object({ type: z.literal('query') }),\n}\n\ntype MessageKind = keyof typeof envelopes\ntype RoutingField = 'type' | 'name' | 'id'\ntype SchemaMap = Readonly<Record<string, z.ZodType<object>>>\ntype EmptySchemas = Record<never, never>\ntype SchemaMaps = {\n  readonly commandSchemas: SchemaMap\n  readonly eventSchemas: SchemaMap\n  readonly querySchemas: SchemaMap\n}\ntype CompletedMessages = SchemaMaps & { readonly [completed]: true }\ntype SchemaOf<Schemas extends SchemaMap> = Schemas[keyof Schemas & string]\ntype Payload<Message> = Message extends object ? Omit<Message, RoutingField> : never\n\n/** Complete schemas, union schemas, and factories for one message collection. */\nexport type MessageCollection<Maps extends SchemaMaps> = Maps & {\n  readonly [completed]: true\n  readonly commandSchema: z.ZodUnion<SchemaOf<Maps['commandSchemas']>[]>\n  readonly eventSchema: z.ZodUnion<SchemaOf<Maps['eventSchemas']>[]>\n  readonly querySchema: z.ZodUnion<SchemaOf<Maps['querySchemas']>[]>\n  /** Commands and events can cross a queue. Queries cannot. */\n  readonly queueSchema: z.ZodUnion<\n    (SchemaOf<Maps['commandSchemas']> | SchemaOf<Maps['eventSchemas']>)[]\n  >\n  /** Add the command envelope without parsing. The default ID is UUID v7; supplied IDs stay unchanged. */\n  createCommand<Name extends keyof Maps['commandSchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['commandSchemas'][NoInfer<Name>]>>,\n    id?: MessageId,\n  ): z.output<Maps['commandSchemas'][Name]>\n  /** Add the event envelope without parsing. The default ID is UUID v7; supplied IDs stay unchanged. */\n  createEvent<Name extends keyof Maps['eventSchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['eventSchemas'][NoInfer<Name>]>>,\n    id?: MessageId,\n  ): z.output<Maps['eventSchemas'][Name]>\n  /** Add the query envelope without parsing. Queries have no ID. */\n  createQuery<Name extends keyof Maps['querySchemas'] & string>(\n    this: void,\n    name: Name,\n    payload: Payload<z.output<Maps['querySchemas'][NoInfer<Name>]>>,\n  ): z.output<Maps['querySchemas'][Name]>\n}\n\n/** The command union inferred from a collection's complete schemas. */\nexport type CommandOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['commandSchemas']>\n>\n\n/** The event union inferred from a collection's complete schemas. */\nexport type EventOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['eventSchemas']>\n>\n\n/** The query union inferred from a collection's complete schemas. */\nexport type QueryOf<Messages extends CompletedMessages> = z.output<\n  SchemaOf<Messages['querySchemas']>\n>\n\n/** Every message inferred from a collection's complete schemas. */\nexport type MessageOf<Messages extends CompletedMessages> =\n  | CommandOf<Messages>\n  | EventOf<Messages>\n  | QueryOf<Messages>\n\ntype KeysOfUnion<Value> = Value extends Value ? keyof Value : never\ntype WithoutRoutingFields<Schemas extends PayloadSchemas> = {\n  readonly [Name in keyof Schemas]: KeysOfUnion<z.output<Schemas[Name]>> &\n    RoutingField extends never\n    ? Schemas[Name]\n    : never\n}\n\nfunction messageSchema<\n  Kind extends MessageKind,\n  Name extends string,\n  Schema extends z.ZodType<object>,\n>(kind: Kind, name: Name, payload: Schema) {\n  return z.intersection(envelopes[kind], z.object({ name: z.literal(name) })).and(payload)\n}\n\ntype CompleteSchemas<Kind extends MessageKind, Schemas extends PayloadSchemas> = {\n  readonly [Name in keyof Schemas & string]: ReturnType<\n    typeof messageSchema<Kind, Name, Schemas[Name]>\n  >\n}\n\nfunction completeSchemas<Kind extends MessageKind, Schemas extends PayloadSchemas>(\n  kind: Kind,\n  schemas: Schemas | undefined,\n): CompleteSchemas<Kind, Schemas> {\n  const entries = Object.entries<z.ZodType<object>>(schemas ?? {}).map(([name, payload]) => [\n    name,\n    messageSchema(kind, name, payload),\n  ])\n  // SAFETY: Each entry preserves its name and wraps its payload schema with the selected envelope.\n  return Object.freeze(Object.fromEntries(entries)) as CompleteSchemas<Kind, Schemas>\n}\n\nfunction unionOf<Schemas extends SchemaMap>(schemas: Schemas): z.ZodUnion<SchemaOf<Schemas>[]> {\n  // SAFETY: Object.values contains exactly the complete schemas indexed by this map's keys.\n  return z.union(Object.values(schemas)) as z.ZodUnion<SchemaOf<Schemas>[]>\n}\n\nfunction collection<Maps extends SchemaMaps>(maps: Maps): MessageCollection<Maps> {\n  return Object.freeze<MessageCollection<Maps>>({\n    ...maps,\n    [completed]: true,\n    commandSchema: unionOf<Maps['commandSchemas']>(maps.commandSchemas),\n    eventSchema: unionOf<Maps['eventSchemas']>(maps.eventSchemas),\n    querySchema: unionOf<Maps['querySchemas']>(maps.querySchemas),\n    // SAFETY: The queue union contains the command and event schemas from these maps, without rebuilding them.\n    queueSchema: z.union([\n      ...Object.values(maps.commandSchemas),\n      ...Object.values(maps.eventSchemas),\n    ]) as MessageCollection<Maps>['queueSchema'],\n    createCommand: (name, payload, id = uuidv7()) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; the factory supplies its envelope.\n      return { ...payload, type: 'command', name, id } as z.output<\n        Maps['commandSchemas'][typeof name]\n      >\n    },\n    createEvent: (name, payload, id = uuidv7()) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; the factory supplies its envelope.\n      return { ...payload, type: 'event', name, id } as z.output<Maps['eventSchemas'][typeof name]>\n    },\n    createQuery: (name, payload) => {\n      // SAFETY: The typed payload supplies all non-envelope fields for this name; a query has no ID.\n      return { ...payload, type: 'query', name } as z.output<Maps['querySchemas'][typeof name]>\n    },\n  })\n}\n\n/** Build each complete schema once. Omitted kinds have empty maps and schemas that reject every input. */\nexport function defineMessages<\n  const Commands extends PayloadSchemas = EmptySchemas,\n  const Events extends PayloadSchemas = EmptySchemas,\n  const Queries extends PayloadSchemas = EmptySchemas,\n>(definition: {\n  readonly commands?: Commands & WithoutRoutingFields<Commands>\n  readonly events?: Events & WithoutRoutingFields<Events>\n  readonly queries?: Queries & WithoutRoutingFields<Queries>\n}) {\n  return collection({\n    commandSchemas: completeSchemas<'command', Commands>('command', definition.commands),\n    eventSchemas: completeSchemas<'event', Events>('event', definition.events),\n    querySchemas: completeSchemas<'query', Queries>('query', definition.queries),\n  })\n}\n\n/** Two collections declare the same name within one message kind. */\nexport class DuplicateMessageNameError extends AppError {\n  readonly _tag = 'DuplicateMessageNameError'\n  readonly classification = 'terminal'\n\n  /** Identify the duplicate kind and name so the application can correct its definitions. */\n  constructor(\n    readonly kind: MessageKind,\n    readonly messageName: string,\n  ) {\n    super(`Duplicate ${kind} name: ${messageName}`)\n  }\n}\n\ntype SchemaAtName<Maps, Name extends PropertyKey> =\n  Maps extends Record<Name, infer Schema extends z.ZodType<object>> ? Schema : never\ntype MergedMaps<Collections extends readonly CompletedMessages[]> = {\n  readonly [Key in keyof SchemaMaps]: {\n    readonly [Name in KeysOfUnion<Collections[number][Key]> & string]: SchemaAtName<\n      Collections[number][Key],\n      Name\n    >\n  }\n}\ntype DuplicateNames<Collections extends readonly CompletedMessages[]> =\n  Collections extends readonly [\n    infer First extends CompletedMessages,\n    ...infer Rest extends readonly CompletedMessages[],\n  ]\n    ?\n        | {\n            [Key in keyof SchemaMaps]: keyof First[Key] & KeysOfUnion<Rest[number][Key]>\n          }[keyof SchemaMaps]\n        | DuplicateNames<Rest>\n    : never\n\nfunction mergeSchemas<\n  Collections extends readonly CompletedMessages[],\n  Key extends keyof SchemaMaps,\n>(collections: Collections, key: Key, kind: MessageKind): MergedMaps<Collections>[Key] {\n  const merged = new Map<string, z.ZodType<object>>()\n  for (const messages of collections) {\n    if (!messages?.[completed])\n      return panic('combineMessages requires completed message collections')\n    for (const [name, schema] of Object.entries(messages[key])) {\n      if (merged.has(name)) throw new DuplicateMessageNameError(kind, name)\n      merged.set(name, schema)\n    }\n  }\n  // SAFETY: Every schema comes from the selected complete map, and duplicate names are rejected before insertion.\n  return Object.freeze(Object.fromEntries(merged)) as MergedMaps<Collections>[Key]\n}\n\n/**\n * Merge completed collections without rebuilding complete schemas.\n * @throws DuplicateMessageNameError when two collections declare the same name within one kind.\n */\nexport function combineMessages<const Collections extends readonly CompletedMessages[]>(\n  ...collections: Collections & (DuplicateNames<Collections> extends never ? unknown : never)\n) {\n  return collection({\n    commandSchemas: mergeSchemas(collections, 'commandSchemas', 'command'),\n    eventSchemas: mergeSchemas(collections, 'eventSchemas', 'event'),\n    querySchemas: mergeSchemas(collections, 'querySchemas', 'query'),\n  })\n}\n","import type { DomainEvent } from './messages.ts'\n\n/** What an aggregate's plain data must have: an identity. A branded id keeps its brand. */\nexport type EntityData = { readonly id: string }\n\n/**\n * The base of an aggregate: its identity, the events it raised, and the plain data a repository\n * stores. The subclass keeps its constructor private and declares `static restore(data: Data)`,\n * the one door a repository rebuilds it through. A repository drains the events after `save`.\n */\nexport abstract class Entity<Data extends EntityData, TEvent extends DomainEvent = DomainEvent> {\n  private events: TEvent[] = []\n\n  abstract readonly id: Data['id']\n\n  /** Record one event with the state change that caused it. The unit of work commits both. */\n  protected addEvent(event: TEvent): void {\n    this.events.push(event)\n  }\n\n  /** A copy of the events raised since the last `clearEvents`. */\n  collectEvents(): ReadonlyArray<TEvent> {\n    return [...this.events]\n  }\n\n  /** Forget the raised events once the boundary has taken them. */\n  clearEvents(): void {\n    this.events = []\n  }\n\n  /** Plain data for the repository. The subclass's `restore(data)` accepts exactly this. */\n  abstract toPlainObject(): Data\n}\n","/**\n * What one failure is, before any policy decides what to do about it.\n *\n * `transient`: the world may differ on the next attempt. `terminal`: repeating gives the\n * same answer. `unknown`: nobody judged this error, so it came from outside unwrapped.\n */\nexport type FailureClassification = 'transient' | 'terminal' | 'unknown'\n\n/**\n * Who is asking to repeat the work.\n *\n * An immediate owner holds a caller and a socket open. A durable owner already stored the\n * work, so it can afford to try again on a failure nobody classified.\n */\nexport type RetryOwner = 'immediate' | 'durable'\n\n/** Decide whether one retry owner may repeat a failed operation. */\nexport function shouldRetryFailure(args: {\n  readonly classification: FailureClassification\n  readonly repeatSafe: boolean\n  readonly owner: RetryOwner\n}): boolean {\n  if (!args.repeatSafe) return false\n  if (args.classification === 'transient') return true\n  if (args.classification === 'terminal') return false\n  return args.owner === 'durable'\n}\n","/**\n * Messages that the platform-neutral transports raise for a failure that may pass.\n *\n * A boundary that knows its own runtime adds its own patterns before these.\n */\nconst TRANSIENT_TRANSPORT_PATTERNS = [\n  /network/,\n  /fetch failed/,\n  /timeout/,\n  /timed?\\s*out/,\n  /connection.*(lost|reset|refused|closed|aborted)/,\n  /econnreset/,\n  /econnrefused/,\n  /etimedout/,\n  /eai_again/,\n]\n\n/** Cancellation is a decision, not a failure to repeat. */\nexport function isAbortError(cause: unknown): boolean {\n  return cause instanceof Error && cause.name === 'AbortError'\n}\n\n/** Match known transient transport messages while excluding explicit cancellation. */\nexport function isTransientTransportError(cause: unknown): boolean {\n  if (!(cause instanceof Error) || isAbortError(cause)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_TRANSPORT_PATTERNS.some((pattern) => pattern.test(message))\n}\n","import { z } from 'zod'\n\n/** Stable Cloudflare messages that mean the runtime failed, not our code, and a repeat may pass. */\nexport const CLOUDFLARE_TRANSIENT_ERROR_PATTERNS = {\n  networkConnectionLost: /network connection lost/,\n  objectReset: /caused object to be reset/,\n  codeUpdateReset: /reset because its code was updated/,\n  objectMoved: /object has moved to a different machine/,\n  internalWorkflows: /internal workflows error/,\n} as const\n\nconst TRANSIENT_PLATFORM_PATTERNS = [\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.objectReset,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.codeUpdateReset,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.objectMoved,\n  CLOUDFLARE_TRANSIENT_ERROR_PATTERNS.internalWorkflows,\n]\n\n// workerd stamps these flags as own properties on the error it throws across a binding.\nconst RetryableFlagSchema = z.object({ retryable: z.literal(true) })\nconst OverloadedFlagSchema = z.object({ overloaded: z.literal(true) })\nconst ObjectResetFlagSchema = z.object({ durableObjectReset: z.literal(true) })\n\n/** workerd stamps `retryable` on a failure it judged safe to repeat. */\nexport function isCloudflareRetryableError(cause: unknown): boolean {\n  return RetryableFlagSchema.validate(cause)\n}\n\n/** workerd stamps `overloaded` when the target could not take the call. */\nexport function isCloudflareOverloadedError(cause: unknown): boolean {\n  return OverloadedFlagSchema.validate(cause)\n}\n\n/** workerd stamps `durableObjectReset` when the object restarted during the call. */\nexport function isCloudflareObjectResetError(cause: unknown): boolean {\n  return ObjectResetFlagSchema.validate(cause)\n}\n\n/** Match transient Cloudflare runtime evidence without the general transport patterns. */\nexport function isTransientCloudflareRuntimeError(cause: unknown): boolean {\n  if (isCloudflareObjectResetError(cause)) return true\n  if (!(cause instanceof Error)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_PLATFORM_PATTERNS.some((pattern) => pattern.test(message))\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport {\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientCloudflareRuntimeError,\n} from './cloudflare-classification.ts'\nimport type { FailureClassification } from './failure-classification.ts'\nimport { isAbortError, isTransientTransportError } from './transport-classification.ts'\n\n/** A boundary's own rule for its raw errors. `undefined` means the boundary has no opinion. */\nexport type BoundaryErrorClassifier = (cause: unknown) => FailureClassification | undefined\n\n/**\n * Classify one raw external error: the boundary's own rule first, then Cloudflare's signals,\n * then the transport patterns. Cancellation is terminal even when Cloudflare marks it retryable.\n */\nexport function classifyBoundaryError(args: {\n  readonly cause: unknown\n  readonly classifyBoundary: BoundaryErrorClassifier\n  readonly includeCloudflare: boolean\n}): FailureClassification {\n  const boundary = args.classifyBoundary(args.cause)\n  if (boundary !== undefined) return boundary\n\n  if (isAbortError(args.cause)) return 'terminal'\n\n  if (\n    args.includeCloudflare &&\n    (isCloudflareOverloadedError(args.cause) ||\n      isCloudflareRetryableError(args.cause) ||\n      isTransientCloudflareRuntimeError(args.cause))\n  ) {\n    return 'transient'\n  }\n\n  if (isTransientTransportError(args.cause)) return 'transient'\n\n  return 'unknown'\n}\n\n/**\n * Judge a final failure for its durable retry owner. An `AppError` carries its own answer.\n * A raw throw nobody judged is unknown, so an immediate owner stops and a durable one may repeat.\n */\nexport function classifyFailure(cause: unknown): FailureClassification {\n  if (cause instanceof AppError) return cause.classification\n  if (isAbortError(cause)) return 'terminal'\n  if (isTransientCloudflareRuntimeError(cause)) return 'transient'\n  return 'unknown'\n}\n\nconst RetryAfterSchema = z.object({ retryAfter: z.number().positive() })\n\n/** Read a positive server-advertised retry delay in seconds, such as `RateLimitError.retryAfter`. */\nexport function retryAfterSecondsOf(cause: unknown): number | null {\n  const result = RetryAfterSchema.safeParse(cause)\n  return result.success ? result.data.retryAfter : null\n}\n","import { panic } from 'better-result'\n\n/** Uniform jitter within one fixed window. */\nexport function spreadJitterMs(spreadMs: number): number {\n  if (!Number.isFinite(spreadMs) || spreadMs < 0) {\n    return panic('spreadMs must be a non-negative number')\n  }\n  return Math.floor(Math.random() * spreadMs)\n}\n\n/**\n * Half the capped exponential delay, plus jitter over the other half. Decorrelates concurrent\n * repeats like full jitter, but keeps a floor: use it when few attempts remain before work is dropped.\n */\nexport function exponentialEqualJitterMs(\n  baseDelayMs: number,\n  maxDelayMs: number,\n  attempt: number,\n): number {\n  const halfCapMs = exponentialDelayCapMs(baseDelayMs, maxDelayMs, attempt) / 2\n  return Math.floor(halfCapMs) + spreadJitterMs(halfCapMs)\n}\n\n/** Capped exponential delay for a durable retry recorded in storage. */\nexport function exponentialDelayCapMs(\n  baseDelayMs: number,\n  maxDelayMs: number,\n  attempt: number,\n): number {\n  if (!Number.isSafeInteger(attempt) || attempt < 1) {\n    return panic('attempt must be a positive integer')\n  }\n  return Math.min(baseDelayMs * 2 ** (attempt - 1), maxDelayMs)\n}\n","import type { LogEntry, LogFields, LogFormat, LogLevel, LogSink } from './logger.ts'\n\nconst METHOD = {\n  DEBUG: 'debug',\n  INFO: 'info',\n  WARN: 'warn',\n  ERROR: 'error',\n} as const satisfies Record<LogLevel, 'debug' | 'info' | 'warn' | 'error'>\n\nconst ESC = String.fromCharCode(27)\nconst RESET = `${ESC}[0m`\nconst LEVEL_COLOR = {\n  DEBUG: `${ESC}[2;36m`,\n  INFO: `${ESC}[34m`,\n  WARN: `${ESC}[33m`,\n  ERROR: `${ESC}[1;31m`,\n} satisfies Record<LogLevel, string>\n\nlet format: LogFormat = 'json'\n\nexport function setConsoleLogFormat(value: LogFormat): void {\n  format = value\n}\n\nfunction contextOf(entry: LogEntry): LogFields | undefined {\n  const context = { ...entry.attributes }\n  if (entry.userId !== undefined) context.userId = entry.userId\n  return Object.keys(context).length === 0 ? undefined : context\n}\n\nfunction jsonEntry(entry: LogEntry): LogEntry {\n  if (!(entry.error instanceof Error)) return entry\n  const error = { name: entry.error.name, message: entry.error.message, stack: entry.error.stack }\n  return { ...entry, error }\n}\n\n/** Write one structured record or one readable development entry to `console`. */\nexport const consoleSink: LogSink = (entry) => {\n  const write = console[METHOD[entry.level]]\n  if (format === 'json') {\n    write(jsonEntry(entry))\n    return\n  }\n\n  const context = contextOf(entry)\n  const values = context === undefined ? [] : [context]\n  const errors = entry.error === undefined ? [] : [entry.error]\n  if (format === 'pretty-browser') {\n    write(\n      `${entry.timestamp} [${entry.level}] [${entry.module}] ${entry.event}`,\n      ...values,\n      ...errors,\n    )\n    return\n  }\n  write(\n    `${ESC}[90m${entry.timestamp}${RESET} ${LEVEL_COLOR[entry.level]}[${entry.level}]${RESET} ${ESC}[34m[${entry.module}]${RESET} ${entry.event}`,\n    ...values,\n    ...errors,\n  )\n}\n","import { consoleSink, setConsoleLogFormat } from './console-log-sink.ts'\n\n/** One JSON-compatible value in a normal log field. */\nexport type LogValue =\n  | string\n  | number\n  | boolean\n  | null\n  | readonly LogValue[]\n  | { readonly [key: string]: LogValue }\n\n/** Flat fields for one log call. Only `error` can contain an arbitrary value. */\n// oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- A logger accepts caller-owned fields at its public boundary.\nexport type LogFields = Readonly<Record<string, unknown>>\n\n/** Supported log levels in ascending order. */\nexport const LogLevel = {\n  DEBUG: 'DEBUG',\n  INFO: 'INFO',\n  WARN: 'WARN',\n  ERROR: 'ERROR',\n} as const\nexport type LogLevel = (typeof LogLevel)[keyof typeof LogLevel]\n\n/** The minimum emitted level, or `OFF` for no console output. */\nexport type LogThreshold = LogLevel | 'OFF'\n\n/** Explicit output formats for production, browser development, and terminal development. */\nexport type LogFormat = 'json' | 'pretty-browser' | 'pretty-terminal'\n\n/** Process-wide logger settings supplied at startup. */\nexport interface LoggerSettings {\n  readonly level?: LogThreshold\n  readonly format?: LogFormat\n}\n\n/** One structured record sent to a log sink. */\nexport type LogEntry = {\n  readonly timestamp: string\n  readonly level: LogLevel\n  readonly module: string\n  readonly event: string\n  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- The entry keeps caller-owned fields for its sink.\n  readonly attributes: LogFields\n  readonly userId?: string\n  readonly error?: unknown\n}\n\n/** The original error and fields sent to an error service. */\nexport interface ErrorCaptureEntry {\n  readonly error: unknown\n  readonly userId: string | undefined\n  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- Sentry accepts the caller-owned fields as extra context.\n  readonly attributes: LogFields\n}\n\n/** A function that forwards one error to an error service. */\nexport type LoggerErrorHook = (entry: ErrorCaptureEntry) => void\n\n/** A destination for structured log records. */\nexport type LogSink = (entry: LogEntry) => void\n\n/** The common flat logger API for all levels. */\nexport interface Logger {\n  debug(event: string, fields?: LogFields): void\n  info(event: string, fields?: LogFields): void\n  warn(event: string, fields?: LogFields): void\n  error(event: string, fields?: LogFields): void\n}\n\nconst LEVELS = Object.values(LogLevel)\nlet threshold: LogThreshold = LogLevel.INFO\nlet logSink: LogSink = consoleSink\nlet errorHook: LoggerErrorHook | null = null\n\n/** Set the process-wide level and output format. Omitted fields restore production defaults. */\nexport function configureLogger(settings: LoggerSettings): void {\n  threshold = settings.level ?? LogLevel.INFO\n  setConsoleLogFormat(settings.format ?? 'json')\n}\n\n/** Set the process-wide log destination. */\nexport function setLogSink(sink: LogSink): void {\n  logSink = sink\n}\n\n/** Set or clear the process-wide error service hook. */\nexport function setLoggerErrorHook(hook: LoggerErrorHook | null): void {\n  errorHook = hook\n}\n\n/* oxlint-disable anti-slop/no-runtime-typeof -- The logger validates its reserved userId field. */\nfunction splitFields(fields: LogFields): ErrorCaptureEntry {\n  const { error, userId, ...attributes } = fields\n  return { error, userId: typeof userId === 'string' ? userId : undefined, attributes }\n}\n/* oxlint-enable anti-slop/no-runtime-typeof */\n\nfunction writeLog(module: string, level: LogLevel, event: string, fields: LogFields): void {\n  if (threshold === 'OFF' || LEVELS.indexOf(level) < LEVELS.indexOf(threshold)) return\n\n  const { error, userId, attributes } = splitFields(fields)\n  let entry: LogEntry = { timestamp: new Date().toISOString(), level, module, event, attributes }\n  if (userId !== undefined) entry = { ...entry, userId }\n  if (error !== undefined) entry = { ...entry, error }\n  try {\n    logSink(entry)\n  } catch {\n    // A diagnostic failure must not change application control flow.\n  }\n}\n\n/** Create a logger for one module. */\nexport function createLogger(module: string): Logger {\n  return {\n    debug: (event, fields = {}) => writeLog(module, LogLevel.DEBUG, event, fields),\n    info: (event, fields = {}) => writeLog(module, LogLevel.INFO, event, fields),\n    warn: (event, fields = {}) => writeLog(module, LogLevel.WARN, event, fields),\n    error: (event, fields = {}) => {\n      writeLog(module, LogLevel.ERROR, event, fields)\n      const capture = splitFields(fields)\n      if (errorHook === null || capture.error === undefined) return\n      try {\n        errorHook(capture)\n      } catch {\n        // An error service failure must not change application control flow.\n      }\n    },\n  }\n}\n\nexport { consoleSink }\n"],"mappings":";;;;;;;;;;;;;AAUA,IAAsB,WAAtB,cAAuC,MAAM;CAI3C,IAAa,OAAe;EAC1B,OAAO,KAAK;CACd;AACF;;;;;ACdA,IAAa,4BAAb,cAA+C,SAAS;CAKjC;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YAAY,AAAS,KAAa;EAChC,MAAM,GAAG,IAAI,aAAa;EADP;CAErB;AACF;;;;;ACgBA,MAAa,yBAAyB,EAAE,KAAK,CAAC,CAAC,MAA0B;;;;;ACxBzE,MAAa,qBAAqB,EAAE,MAAM,CAAC,CAAC,MAAsB;;;;ACKlE,MAAM,iBAAiB;;AAGvB,IAAa,kCAAb,cAAqD,SAAS;CAIvC;CAHrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,AAAS,QAAgB;EACnC,MAAM,wCAAwC,eAAe,YAAY;EADtD;CAErB;AACF;;;;;;;;AASA,SAAgB,oBAAoB,OAAe,IAAiC;CAClF,MAAM,MAAM,GAAG,MAAM,GAAG;CACxB,IAAI,MAAM,WAAW,KAAK,GAAG,WAAW,KAAK,IAAI,SAAS,gBACxD,MAAM,IAAI,gCAAgC,IAAI,MAAM;CAEtD,OAAO;AACT;;;;ACrBA,MAAM,2BAA2B;CAC/B,cAAc;CACd,sBAAsB;CACtB,gBAAgB;CAChB,gBAAgB;CAChB,iBAAiB;CACjB,eAAe;AACjB;;;;;AAMA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,MAOT;EACD,MAAM,sBAAsB,KAAK,SAAS,GAAG,KAAK,gBAAgB,EAAE,OAAO,KAAK,MAAM,CAAC;EACvF,KAAK,SAAS,KAAK;EACnB,KAAK,iBAAiB,yBAAyB,KAAK;EACpD,KAAK,WAAW,KAAK;EACrB,KAAK,eAAe,KAAK;EACzB,KAAK,aAAa,KAAK;EACvB,KAAK,aAAa,KAAK;CACzB;AACF;;;;;AC/CA,MAAa,mBAAmB,EAAE,KAAK;CAAC;CAAa;CAAa;AAAc,CAAC;;AAMjF,SAAgB,gBAAgB,OAAuC;CACrE,MAAM,SAAS,iBAAiB,UAAU,KAAK;CAC/C,OAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,MAAM,kBAAkB;CACtB,WAAW;CACX,cAAc;CACd,WAAW;AACb;;AAGA,SAAgB,mBAAmB,UAAsB,SAAqC;CAC5F,IAAI,YAAY,MAAM,OAAO;CAC7B,OAAO,gBAAgB,aAAa,gBAAgB;AACtD;;AAGA,SAAgB,mBAAmB,YAA+B,YAA8B;CAC9F,IAAI,YAAY,OAAO;CACvB,OAAO,eAAe,QAAQ,eAAe;AAC/C;;;;;;;;ACrBA,MAAa,gCAAgC,EAAE,OAAO;CACpD,YAAY,EAAE,MAAM,kBAAkB,CAAC,CAAC,IAAI,CAAC;CAC7C,OAAO,EAAE,mBAAmB,QAAQ,CAClC,EAAE,OAAO;EACP,MAAM,EAAE,QAAQ,SAAS;EACzB,YAAY;EACZ,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,CAAC,GACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAC5C,CAAC;AACH,CAAC;;;;;AChBD,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,yBAAyB;CACjC;AACF;;;;;ACPA,IAAa,iBAAb,cAAoC,SAAS;CAKtB;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS,SAAS;CAElB,YAAY,AAAS,YAA2B;EAC9C,MAAM,mBAAmB;EADN;CAErB;AACF;;;;;ACRA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4CAA4C;CACpD;AACF;;;;;ACPA,IAAa,qBAAb,cAAwC,SAAS;CAC/C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,aAAa;CACrB;AACF;;;;;ACPA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,sBAAsB;CAC9B;AACF;;AAGA,IAAa,0BAAb,cAA6C,SAAS;CACpD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,mBAAmB;CAC3B;AACF;;;;;ACRA,IAAa,kBAAb,MAAa,wBAAwB,SAAS;CAKjC;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,QACT,UAAU,6BACV;EACA,MAAM,OAAO;EAHJ;CAIX;;CAGA,OAAO,QAAQ,OAAmB,SAAmC;EACnE,OAAO,gBAAgB,WAAW,MAAM,QAAQ,OAAO;CACzD;;CAGA,OAAO,WAAW,QAAoC,SAAmC;EACvF,OAAO,IAAI,gBACT,OAAO,KAAK,WAAW;GAAE,QAAQ,MAAM;GAAS,SAAS,YAAY,MAAM,IAAI;EAAE,EAAE,GACnF,OACF;CACF;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,MAA0B;EACpC,MAAM,6BAA6B,IAAI;CACzC;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,oBAAoB;CAC5B;AACF;;AAGA,IAAa,uBAAb,cAA0C,SAAS;CACjD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4BAA4B;CACpC;AACF;;AAGA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,uBAAuB;CAC/B;AACF;AAEA,MAAM,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAGpE,SAAS,YAAY,MAAsC;CACzD,MAAM,SAAS,mBAAmB,UAAU,IAAI;CAChD,MAAM,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;CAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;AACpG;;;;;;;;;AC9EA,MAAa,uBAAuB,EAAE,YAAY;;;;;CAKhD,MAAM,EAAE,OAAO;;;;;CAKf,OAAO,EAAE,OAAO;;;;;CAKhB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;;;;;CAK5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;AAChC,CAAC;;AAMD,MAAa,+BAA+B,EAAE,OAAO;;;;;CAKnD,QAAQ,EAAE,OAAO;;;;;CAKjB,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4BAA4B;AACxD,CAAC;;AAMD,MAAa,iCAAiC,qBAAqB,OAAO,EACxE,QAAQ,EAAE,MAAM,4BAA4B,CAAC,CAAC,IAAI,CAAC,EACrD,CAAC;;;;AC+BD,SAAS,UAAuD,SAA2B;CACzF,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,EAAE,CAAC;AACnF,MAAM,kBAAkB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGtE,MAAa,eAAe,UAAU;CACpC,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,mBAAmB;EAAE,OAAO;EAAmB,QAAQ;CAAI;CAC3D,oBAAoB;EAAE,OAAO;EAAoB,QAAQ;CAAI;CAC7D,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,iBAAiB;EAAE,OAAO;EAAiB,QAAQ;EAAK,QAAQ;CAAiB;CACjF,sBAAsB;EAAE,OAAO;EAAsB,QAAQ;CAAI;CACjE,gBAAgB;EAAE,OAAO;EAAgB,QAAQ;EAAK,QAAQ;CAAgB;CAC9E,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,yBAAyB;EAAE,OAAO;EAAyB,QAAQ;CAAI;CACvE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;AACjE,CAAC;AAKD,MAAM,oBAAoB,EAAE,OAAO;CACjC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAID,SAAS,MAAM,OAA2C,OAA8B;CACtF,IAAI,iBAAiB,UAAU;EAC7B,MAAM,QAAQ,MAAM,IAAI,MAAM,IAAI;EAClC,IAAI,UAAU,UAAa,EAAE,iBAAiB,MAAM,QAAQ,OAAO;EACnE,OAAO;GAAE,KAAK,MAAM;GAAM;GAAO,OAAO;EAAM;CAChD;CACA,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kBAAkB,UAAU,KAAK;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,IAAI;CACxC,OAAO,UAAU,SAAY,OAAO;EAAE,KAAK,OAAO,KAAK;EAAM;EAAO,OAAO;CAAM;AACnF;;;;;AAMA,SAAgB,aACd,SACoC;CAEpC,MAAM,SAAS;EAAE,GAAG;EAAc,GAAG;CAAQ;CAC7C,MAAM,QAA4C,IAAI,IAAI,OAAO,QAAuB,MAAM,CAAC;CAE/F,MAAM,WAAW,UAAkD;EACjE,MAAM,QAAQ,MAAM,OAAO,KAAK;EAChC,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,SAAS,MAAM,MAAM,QAAQ,UAAU,MAAM,KAAK;EACxD,IAAI,WAAW,UAAa,CAAC,OAAO,SAAS,OAAO;EAEpD,MAAM,UAAU;GAAE,MAAM,MAAM;GAAK,SAAS,MAAM,MAAM;GAAS,GAAG,QAAQ;EAAK;EACjF,OAAO;GAAE,QAAQ,MAAM,MAAM;GAAQ;EAAQ;CAC/C;CAEA,MAAM,iBAAiB,UACrB,QAAQ,KAAK,KAAK,MAAM,2CAA2C,MAAM,MAAM;CACjF,MAAM,UAAU,cAAc,IAAI,oBAAoB,CAAC;CACvD,MAAM,cAAc,cAAc,IAAI,wBAAwB,CAAC;CAM/D,MAAM,CAAC,OAAO,GAAG,QAJA,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,WAErC,EAAE,aAAa;EAAE,MAAM,EAAE,QAAQ,GAAG;EAAG,SAAS,EAAE,OAAO;EAAG,GAAG,MAAM,QAAQ;CAAM,CAAC,CAEtD;CAChC,IAAI,UAAU,QAAW,OAAO,MAAM,4BAA4B;CAElE,MAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAgB,CAAC;CAG7F,MAAM,SAAS,UAAmB;EAChC,MAAM,SAAS,cAAc,UAAU,KAAK;EAC5C,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;CAEA,OAAO;EACL,SAAS;EACT;EACA,SAAS,QAAQ;EACjB;EACA,GACE,OACA,KACmD;GACnD,MAAM,SAAS,MAAM,KAAK;GAC1B,OAAO,WAAW,QAAQ,OAAO,SAAS;EAC5C;EACA;EACA,WAAW,UACT,iBAAiB,YAAY,MAAM,mBAAmB,cAAc,cAAc;CACtF;AACF;;;;;AClKA,IAAa,gBAAb,cAAmC,SAAS;CAI/B;CACA;CACA;CALX,AAAS,OAAO;CAEhB,YACE,AAAS,WACT,AAAS,gBACT,AAAS,SACT,SACA;EACA,MAAM,8BAA8B,aAAa,OAAO;EAL/C;EACA;EACA;CAIX;AACF;;;;;;;;;AC7BA,SAAgB,YAAY,OAAqB;CAC/C,OAAO,MAAM,gBAAgB,OAAO,KAAK,GAAG;AAC9C;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CAClD,OAAO,MAAM,oBAAoB,MAAM;AACzC;;;;;;;;ACCA,SAAgB,SAAqC,OAAmC;CAEtF,OAAO;EAEL,QAHa,EAAE,OAAO,EAAE,OAAO,WAAW,QAAQ,CAGrC,CAAC,CAAC,MAAa;EAE5B,cAAcA,GAAO;CACvB;AACF;;;;ACXA,MAAM,YAAY,OAAO,mBAAmB;AAC5C,MAAM,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AACxC,MAAM,YAAY;CAChB,SAAS,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,SAAS;EAAG,IAAI;CAAgB,CAAC;CACrE,OAAO,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,OAAO;EAAG,IAAI;CAAgB,CAAC;CACjE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;AAC9C;AA4EA,SAAS,cAIP,MAAY,MAAY,SAAiB;CACzC,OAAO,EAAE,aAAa,UAAU,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO;AACzF;AAQA,SAAS,gBACP,MACA,SACgC;CAChC,MAAM,UAAU,OAAO,QAA2B,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,aAAa,CACxF,MACA,cAAc,MAAM,MAAM,OAAO,CACnC,CAAC;CAED,OAAO,OAAO,OAAO,OAAO,YAAY,OAAO,CAAC;AAClD;AAEA,SAAS,QAAmC,SAAmD;CAE7F,OAAO,EAAE,MAAM,OAAO,OAAO,OAAO,CAAC;AACvC;AAEA,SAAS,WAAoC,MAAqC;CAChF,OAAO,OAAO,OAAgC;EAC5C,GAAG;GACF,YAAY;EACb,eAAe,QAAgC,KAAK,cAAc;EAClE,aAAa,QAA8B,KAAK,YAAY;EAC5D,aAAa,QAA8B,KAAK,YAAY;EAE5D,aAAa,EAAE,MAAM,CACnB,GAAG,OAAO,OAAO,KAAK,cAAc,GACpC,GAAG,OAAO,OAAO,KAAK,YAAY,CACpC,CAAC;EACD,gBAAgB,MAAM,SAAS,KAAKC,GAAO,MAAM;GAE/C,OAAO;IAAE,GAAG;IAAS,MAAM;IAAW;IAAM;GAAG;EAGjD;EACA,cAAc,MAAM,SAAS,KAAKA,GAAO,MAAM;GAE7C,OAAO;IAAE,GAAG;IAAS,MAAM;IAAS;IAAM;GAAG;EAC/C;EACA,cAAc,MAAM,YAAY;GAE9B,OAAO;IAAE,GAAG;IAAS,MAAM;IAAS;GAAK;EAC3C;CACF,CAAC;AACH;;AAGA,SAAgB,eAId,YAIC;CACD,OAAO,WAAW;EAChB,gBAAgB,gBAAqC,WAAW,WAAW,QAAQ;EACnF,cAAc,gBAAiC,SAAS,WAAW,MAAM;EACzE,cAAc,gBAAkC,SAAS,WAAW,OAAO;CAC7E,CAAC;AACH;;AAGA,IAAa,4BAAb,cAA+C,SAAS;CAM3C;CACA;CANX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,MACT,AAAS,aACT;EACA,MAAM,aAAa,KAAK,SAAS,aAAa;EAHrC;EACA;CAGX;AACF;AAwBA,SAAS,aAGP,aAA0B,KAAU,MAAiD;CACrF,MAAM,yBAAS,IAAI,IAA+B;CAClD,KAAK,MAAM,YAAY,aAAa;EAClC,IAAI,CAAC,WAAW,YACd,OAAO,MAAM,wDAAwD;EACvE,KAAK,MAAM,CAAC,MAAM,WAAW,OAAO,QAAQ,SAAS,IAAI,GAAG;GAC1D,IAAI,OAAO,IAAI,IAAI,GAAG,MAAM,IAAI,0BAA0B,MAAM,IAAI;GACpE,OAAO,IAAI,MAAM,MAAM;EACzB;CACF;CAEA,OAAO,OAAO,OAAO,OAAO,YAAY,MAAM,CAAC;AACjD;;;;;AAMA,SAAgB,gBACd,GAAG,aACH;CACA,OAAO,WAAW;EAChB,gBAAgB,aAAa,aAAa,kBAAkB,SAAS;EACrE,cAAc,aAAa,aAAa,gBAAgB,OAAO;EAC/D,cAAc,aAAa,aAAa,gBAAgB,OAAO;CACjE,CAAC;AACH;;;;;;;;;ACvOA,IAAsB,SAAtB,MAAgG;CAC9F,AAAQ,SAAmB,CAAC;;CAK5B,AAAU,SAAS,OAAqB;EACtC,KAAK,OAAO,KAAK,KAAK;CACxB;;CAGA,gBAAuC;EACrC,OAAO,CAAC,GAAG,KAAK,MAAM;CACxB;;CAGA,cAAoB;EAClB,KAAK,SAAS,CAAC;CACjB;AAIF;;;;;ACfA,SAAgB,mBAAmB,MAIvB;CACV,IAAI,CAAC,KAAK,YAAY,OAAO;CAC7B,IAAI,KAAK,mBAAmB,aAAa,OAAO;CAChD,IAAI,KAAK,mBAAmB,YAAY,OAAO;CAC/C,OAAO,KAAK,UAAU;AACxB;;;;;;;;;ACrBA,MAAM,+BAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAgB,aAAa,OAAyB;CACpD,OAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;;AAGA,SAAgB,0BAA0B,OAAyB;CACjE,IAAI,EAAE,iBAAiB,UAAU,aAAa,KAAK,GAAG,OAAO;CAC7D,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,6BAA6B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC7E;;;;;ACxBA,MAAa,sCAAsC;CACjD,uBAAuB;CACvB,aAAa;CACb,iBAAiB;CACjB,aAAa;CACb,mBAAmB;AACrB;AAEA,MAAM,8BAA8B;CAClC,oCAAoC;CACpC,oCAAoC;CACpC,oCAAoC;CACpC,oCAAoC;AACtC;AAGA,MAAM,sBAAsB,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC;AACnE,MAAM,uBAAuB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC;AACrE,MAAM,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,IAAI,EAAE,CAAC;;AAG9E,SAAgB,2BAA2B,OAAyB;CAClE,OAAO,oBAAoB,SAAS,KAAK;AAC3C;;AAGA,SAAgB,4BAA4B,OAAyB;CACnE,OAAO,qBAAqB,SAAS,KAAK;AAC5C;;AAGA,SAAgB,6BAA6B,OAAyB;CACpE,OAAO,sBAAsB,SAAS,KAAK;AAC7C;;AAGA,SAAgB,kCAAkC,OAAyB;CACzE,IAAI,6BAA6B,KAAK,GAAG,OAAO;CAChD,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,4BAA4B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC5E;;;;;;;;AC1BA,SAAgB,sBAAsB,MAIZ;CACxB,MAAM,WAAW,KAAK,iBAAiB,KAAK,KAAK;CACjD,IAAI,aAAa,QAAW,OAAO;CAEnC,IAAI,aAAa,KAAK,KAAK,GAAG,OAAO;CAErC,IACE,KAAK,sBACJ,4BAA4B,KAAK,KAAK,KACrC,2BAA2B,KAAK,KAAK,KACrC,kCAAkC,KAAK,KAAK,IAE9C,OAAO;CAGT,IAAI,0BAA0B,KAAK,KAAK,GAAG,OAAO;CAElD,OAAO;AACT;;;;;AAMA,SAAgB,gBAAgB,OAAuC;CACrE,IAAI,iBAAiB,UAAU,OAAO,MAAM;CAC5C,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,kCAAkC,KAAK,GAAG,OAAO;CACrD,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGvE,SAAgB,oBAAoB,OAA+B;CACjE,MAAM,SAAS,iBAAiB,UAAU,KAAK;CAC/C,OAAO,OAAO,UAAU,OAAO,KAAK,aAAa;AACnD;;;;;ACxDA,SAAgB,eAAe,UAA0B;CACvD,IAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,WAAW,GAC3C,OAAO,MAAM,wCAAwC;CAEvD,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,QAAQ;AAC5C;;;;;AAMA,SAAgB,yBACd,aACA,YACA,SACQ;CACR,MAAM,YAAY,sBAAsB,aAAa,YAAY,OAAO,IAAI;CAC5E,OAAO,KAAK,MAAM,SAAS,IAAI,eAAe,SAAS;AACzD;;AAGA,SAAgB,sBACd,aACA,YACA,SACQ;CACR,IAAI,CAAC,OAAO,cAAc,OAAO,KAAK,UAAU,GAC9C,OAAO,MAAM,oCAAoC;CAEnD,OAAO,KAAK,IAAI,cAAc,MAAM,UAAU,IAAI,UAAU;AAC9D;;;;AC/BA,MAAM,SAAS;CACb,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAEA,MAAM,MAAM,OAAO,aAAa,EAAE;AAClC,MAAM,QAAQ,GAAG,IAAI;AACrB,MAAM,cAAc;CAClB,OAAO,GAAG,IAAI;CACd,MAAM,GAAG,IAAI;CACb,MAAM,GAAG,IAAI;CACb,OAAO,GAAG,IAAI;AAChB;AAEA,IAAI,SAAoB;AAExB,SAAgB,oBAAoB,OAAwB;CAC1D,SAAS;AACX;AAEA,SAAS,UAAU,OAAwC;CACzD,MAAM,UAAU,EAAE,GAAG,MAAM,WAAW;CACtC,IAAI,MAAM,WAAW,QAAW,QAAQ,SAAS,MAAM;CACvD,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,IAAI,SAAY;AACzD;AAEA,SAAS,UAAU,OAA2B;CAC5C,IAAI,EAAE,MAAM,iBAAiB,QAAQ,OAAO;CAC5C,MAAM,QAAQ;EAAE,MAAM,MAAM,MAAM;EAAM,SAAS,MAAM,MAAM;EAAS,OAAO,MAAM,MAAM;CAAM;CAC/F,OAAO;EAAE,GAAG;EAAO;CAAM;AAC3B;;AAGA,MAAa,eAAwB,UAAU;CAC7C,MAAM,QAAQ,QAAQ,OAAO,MAAM;CACnC,IAAI,WAAW,QAAQ;EACrB,MAAM,UAAU,KAAK,CAAC;EACtB;CACF;CAEA,MAAM,UAAU,UAAU,KAAK;CAC/B,MAAM,SAAS,YAAY,SAAY,CAAC,IAAI,CAAC,OAAO;CACpD,MAAM,SAAS,MAAM,UAAU,SAAY,CAAC,IAAI,CAAC,MAAM,KAAK;CAC5D,IAAI,WAAW,kBAAkB;EAC/B,MACE,GAAG,MAAM,UAAU,IAAI,MAAM,MAAM,KAAK,MAAM,OAAO,IAAI,MAAM,SAC/D,GAAG,QACH,GAAG,MACL;EACA;CACF;CACA,MACE,GAAG,IAAI,MAAM,MAAM,YAAY,MAAM,GAAG,YAAY,MAAM,OAAO,GAAG,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,OAAO,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,SACtI,GAAG,QACH,GAAG,MACL;AACF;;;;;AC5CA,MAAa,WAAW;CACtB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAiDA,MAAM,SAAS,OAAO,OAAO,QAAQ;AACrC,IAAI,YAA0B,SAAS;AACvC,IAAI,UAAmB;AACvB,IAAI,YAAoC;;AAGxC,SAAgB,gBAAgB,UAAgC;CAC9D,YAAY,SAAS,SAAS,SAAS;CACvC,oBAAoB,SAAS,UAAU,MAAM;AAC/C;;AAGA,SAAgB,WAAW,MAAqB;CAC9C,UAAU;AACZ;;AAGA,SAAgB,mBAAmB,MAAoC;CACrE,YAAY;AACd;AAGA,SAAS,YAAY,QAAsC;CACzD,MAAM,EAAE,OAAO,QAAQ,GAAG,eAAe;CACzC,OAAO;EAAE;EAAO,QAAQ,OAAO,WAAW,WAAW,SAAS;EAAW;CAAW;AACtF;AAGA,SAAS,SAAS,QAAgB,OAAiB,OAAe,QAAyB;CACzF,IAAI,cAAc,SAAS,OAAO,QAAQ,KAAK,IAAI,OAAO,QAAQ,SAAS,GAAG;CAE9E,MAAM,EAAE,OAAO,QAAQ,eAAe,YAAY,MAAM;CACxD,IAAI,QAAkB;EAAE,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;EAAG;EAAO;EAAQ;EAAO;CAAW;CAC9F,IAAI,WAAW,QAAW,QAAQ;EAAE,GAAG;EAAO;CAAO;CACrD,IAAI,UAAU,QAAW,QAAQ;EAAE,GAAG;EAAO;CAAM;CACnD,IAAI;EACF,QAAQ,KAAK;CACf,QAAQ,CAER;AACF;;AAGA,SAAgB,aAAa,QAAwB;CACnD,OAAO;EACL,QAAQ,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,OAAO,OAAO,MAAM;EAC7E,OAAO,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,MAAM,OAAO,MAAM;EAC3E,OAAO,OAAO,SAAS,CAAC,MAAM,SAAS,QAAQ,SAAS,MAAM,OAAO,MAAM;EAC3E,QAAQ,OAAO,SAAS,CAAC,MAAM;GAC7B,SAAS,QAAQ,SAAS,OAAO,OAAO,MAAM;GAC9C,MAAM,UAAU,YAAY,MAAM;GAClC,IAAI,cAAc,QAAQ,QAAQ,UAAU,QAAW;GACvD,IAAI;IACF,UAAU,OAAO;GACnB,QAAQ,CAER;EACF;CACF;AACF"}

package/dist/core.js

@@ -1,3 +1,3 @@
-import { $ as EmailAddressSchema, A as sharedErrors, B as ServiceUnavailableError, C as combineMessages, D as unreachable, E as notImplemented, F as RequestTimeoutError, G as RecordEmailEventPayloadSchema, H as StaleSessionError, I as ResourceNotFoundError, J as parseBounceType, K as BounceTypeSchema, L as UpgradeRequiredError, M as ValidationProblemDetailsSchema, N as ValidationProblemErrorSchema, O as DatabaseError, P as MalformedRequestError, Q as emailIdempotencyKey, R as ValidationError, S as DuplicateMessageNameError, T as defineId, U as RateLimitError, V as NotAuthorizedError, W as AuthenticationError, X as EmailServiceError, Y as shouldUpdateBounce, Z as InvalidEmailIdempotencyKeyError, _ as isTransientCloudflareRuntimeError, a as setLoggerErrorHook, b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, et as AnalyticsEventIdSchema, f as retryAfterSecondsOf, g as isCloudflareRetryableError, h as isCloudflareOverloadedError, i as setLogSink, j as ProblemDetailsSchema, k as defineErrors, l as spreadJitterMs, m as isCloudflareObjectResetError, n as configureLogger, nt as AppError, o as consoleSink, p as CLOUDFLARE_TRANSIENT_ERROR_PATTERNS, q as isEmailDeliverable, r as createLogger, s as exponentialDelayCapMs, t as LogLevel, tt as MissingConfigurationError, u as classifyBoundaryError, v as isAbortError, w as defineMessages, x as Entity, y as isTransientTransportError, z as InternalServerError } from "./core-UUW2unJd.js";
+import { $ as EmailAddressSchema, A as sharedErrors, B as ServiceUnavailableError, C as combineMessages, D as unreachable, E as notImplemented, F as RequestTimeoutError, G as RecordEmailEventPayloadSchema, H as StaleSessionError, I as ResourceNotFoundError, J as parseBounceType, K as BounceTypeSchema, L as UpgradeRequiredError, M as ValidationProblemDetailsSchema, N as ValidationProblemErrorSchema, O as DatabaseError, P as MalformedRequestError, Q as emailIdempotencyKey, R as ValidationError, S as DuplicateMessageNameError, T as defineId, U as RateLimitError, V as NotAuthorizedError, W as AuthenticationError, X as EmailServiceError, Y as shouldUpdateBounce, Z as InvalidEmailIdempotencyKeyError, _ as isTransientCloudflareRuntimeError, a as setLoggerErrorHook, b as shouldRetryFailure, c as exponentialEqualJitterMs, d as classifyFailure, et as AnalyticsEventIdSchema, f as retryAfterSecondsOf, g as isCloudflareRetryableError, h as isCloudflareOverloadedError, i as setLogSink, j as ProblemDetailsSchema, k as defineErrors, l as spreadJitterMs, m as isCloudflareObjectResetError, n as configureLogger, nt as AppError, o as consoleSink, p as CLOUDFLARE_TRANSIENT_ERROR_PATTERNS, q as isEmailDeliverable, r as createLogger, s as exponentialDelayCapMs, t as LogLevel, tt as MissingConfigurationError, u as classifyBoundaryError, v as isAbortError, w as defineMessages, x as Entity, y as isTransientTransportError, z as InternalServerError } from "./core-BT1dSEQI.js";
 
 export { AnalyticsEventIdSchema, AppError, AuthenticationError, BounceTypeSchema, CLOUDFLARE_TRANSIENT_ERROR_PATTERNS, DatabaseError, DuplicateMessageNameError, EmailAddressSchema, EmailServiceError, Entity, InternalServerError, InvalidEmailIdempotencyKeyError, LogLevel, MalformedRequestError, MissingConfigurationError, NotAuthorizedError, ProblemDetailsSchema, RateLimitError, RecordEmailEventPayloadSchema, RequestTimeoutError, ResourceNotFoundError, ServiceUnavailableError, StaleSessionError, UpgradeRequiredError, ValidationError, ValidationProblemDetailsSchema, ValidationProblemErrorSchema, classifyBoundaryError, classifyFailure, combineMessages, configureLogger, consoleSink, createLogger, defineErrors, defineId, defineMessages, emailIdempotencyKey, exponentialDelayCapMs, exponentialEqualJitterMs, isAbortError, isCloudflareObjectResetError, isCloudflareOverloadedError, isCloudflareRetryableError, isEmailDeliverable, isTransientCloudflareRuntimeError, isTransientTransportError, notImplemented, parseBounceType, retryAfterSecondsOf, setLogSink, setLoggerErrorHook, sharedErrors, shouldRetryFailure, shouldUpdateBounce, spreadJitterMs, unreachable };

package/dist/http.d.ts

@@ -1,19 +1,27 @@
 import { l as Logger } from "./index-DUFS0SJ_.js";
-import { n as WebhookVerificationError, r as WebhookVerifier, t as WebhookVerification } from "./webhook-verification-BuxPzdr4.js";
+import { n as WebhookVerifier, t as WebhookVerificationError } from "./webhook-verification-D1c7BY4q.js";
 //#region src/infrastructure/http/webhook-handler.d.ts
+/** Application policy and diagnostics for one webhook body. */
+type WebhookHandlerOptions = {
+  readonly maxBodyBytes: number;
+  readonly logger?: Pick<Logger, 'warn'>;
+};
 /** Read raw webhook requests and acknowledge effects only after the callback completes. */
-export declare class WebhookHandler<Event> {
+export declare class WebhookHandler<Verified> {
   private readonly verifier;
   private readonly logger;
-  /** Inject provider verification and an optional logger with the application's module name. */
-  constructor(verifier: WebhookVerifier<Event>, logger?: Pick<Logger, 'warn'>);
+  private readonly maxBodyBytes;
+  /** Inject provider verification, the application body limit, and optional diagnostics. */
+  constructor(verifier: WebhookVerifier<Verified>, options: WebhookHandlerOptions);
   /**
-   * Return 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.
+   * Return 413 for large content, 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.
    * Operational and callback failures propagate to the route's error boundary without an acknowledgment.
    */
-  handle(request: Request, onEvent: (event: Event) => Promise<void>): Promise<Response>;
+  handle(request: Request, onVerified: (value: Verified) => Promise<void>): Promise<Response>;
+  private readBody;
+  private rejectBodyTooLarge;
   private reject;
 }
 //#endregion
-export { type WebhookVerification, WebhookVerificationError, type WebhookVerifier };
+export { type WebhookHandlerOptions, WebhookVerificationError, type WebhookVerifier };
 //# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-handler.ts"],"mappings":";;;;qBAOa,eAAe;mBAGP;mBACA;;EAFnB,YACmB,UAAU,gBAAgB,QAC1B,SAAQ,KAAK;;;;;EAO1B,OAAO,SAAS,SAAS,UAAU,OAAO,UAAU,gBAAgB,QAAQ;UAQ1E"}
+{"version":3,"file":"http.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-handler.ts"],"mappings":";;;;KAOY;WACD;WACA,SAAS,KAAK;;;qBAIZ,eAAe;mBAMP;mBALF;mBACA;;EAGjB,YACmB,UAAU,gBAAgB,WAC3C,SAAS;;;;;EAUL,OACJ,SAAS,SACT,aAAa,OAAO,aAAa,gBAChC,QAAQ;UAcG;UA+BN;UAKA"}

package/dist/http.js

@@ -1,5 +1,5 @@
-import { r as createLogger } from "./core-UUW2unJd.js";
-import { t as WebhookVerificationError } from "./webhook-verification-BBmjkHgI.js";
+import { r as createLogger } from "./core-BT1dSEQI.js";
+import { t as WebhookVerificationError } from "./webhook-verification-qSFXv5H3.js";
 import { StatusCodes } from "http-status-codes";
 
 //#region src/infrastructure/http/webhook-handler.ts
@@ -7,22 +7,61 @@ import { StatusCodes } from "http-status-codes";
 var WebhookHandler = class {
 	verifier;
 	logger;
-	/** Inject provider verification and an optional logger with the application's module name. */
-	constructor(verifier, logger = createLogger("webhook")) {
+	maxBodyBytes;
+	/** Inject provider verification, the application body limit, and optional diagnostics. */
+	constructor(verifier, options) {
 		this.verifier = verifier;
-		this.logger = logger;
+		this.logger = options.logger ?? createLogger("webhook");
+		this.maxBodyBytes = options.maxBodyBytes;
 	}
 	/**
-	* Return 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.
+	* Return 413 for large content, 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.
 	* Operational and callback failures propagate to the route's error boundary without an acknowledgment.
 	*/
-	async handle(request, onEvent) {
-		const body = await request.text();
-		const result = await this.verifier.verify(body, request.headers);
-		if (result.outcome === "rejected") return this.reject(result.error);
-		if (result.outcome === "event") await onEvent(result.event);
+	async handle(request, onVerified) {
+		const body = await this.readBody(request);
+		if (body === null) return this.rejectBodyTooLarge();
+		let verified;
+		try {
+			verified = await this.verifier.verify(body, request.headers);
+		} catch (cause) {
+			if (cause instanceof WebhookVerificationError) return this.reject(cause);
+			throw cause;
+		}
+		if (verified !== null) await onVerified(verified);
 		return new Response(null, { status: StatusCodes.OK });
 	}
+	async readBody(request) {
+		const contentLength = request.headers.get("content-length");
+		if (contentLength !== null && /^\d+$/.test(contentLength)) {
+			if (Number(contentLength) > this.maxBodyBytes) return null;
+		}
+		if (request.body === null) return "";
+		const reader = request.body.getReader();
+		const decoder = new TextDecoder();
+		let body = "";
+		let byteCount = 0;
+		try {
+			while (true) {
+				const chunk = await reader.read();
+				if (chunk.done) return body + decoder.decode();
+				byteCount += chunk.value.byteLength;
+				if (byteCount > this.maxBodyBytes) {
+					try {
+						await reader.cancel();
+					} catch {}
+					return null;
+				}
+				body += decoder.decode(chunk.value, { stream: true });
+			}
+		} finally {
+			reader.releaseLock();
+		}
+	}
+	rejectBodyTooLarge() {
+		this.logger.warn("webhook_rejected", { reason: "body_too_large" });
+		return new Response(null, { status: StatusCodes.REQUEST_TOO_LONG });
+	}
 	reject(error) {
 		this.logger.warn("webhook_rejected", { reason: error.reason });
 		const status = error.reason === "missing_headers" || error.reason === "invalid_signature" ? StatusCodes.UNAUTHORIZED : StatusCodes.BAD_REQUEST;

package/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","names":[],"sources":["../src/infrastructure/http/webhook-handler.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { createLogger, type Logger } from '@/core'\n\nimport { WebhookVerificationError, type WebhookVerifier } from './webhook-verification.ts'\n\n/** Read raw webhook requests and acknowledge effects only after the callback completes. */\nexport class WebhookHandler<Event> {\n  /** Inject provider verification and an optional logger with the application's module name. */\n  constructor(\n    private readonly verifier: WebhookVerifier<Event>,\n    private readonly logger: Pick<Logger, 'warn'> = createLogger('webhook'),\n  ) {}\n\n  /**\n   * Return 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.\n   * Operational and callback failures propagate to the route's error boundary without an acknowledgment.\n   */\n  async handle(request: Request, onEvent: (event: Event) => Promise<void>): Promise<Response> {\n    const body = await request.text()\n    const result = await this.verifier.verify(body, request.headers)\n    if (result.outcome === 'rejected') return this.reject(result.error)\n    if (result.outcome === 'event') await onEvent(result.event)\n    return new Response(null, { status: StatusCodes.OK })\n  }\n\n  private reject(error: WebhookVerificationError): Response {\n    this.logger.warn('webhook_rejected', { reason: error.reason })\n    const status =\n      error.reason === 'missing_headers' || error.reason === 'invalid_signature'\n        ? StatusCodes.UNAUTHORIZED\n        : StatusCodes.BAD_REQUEST\n    return new Response(null, { status })\n  }\n}\n"],"mappings":";;;;;;AAOA,IAAa,iBAAb,MAAmC;CAGd;CACA;;CAFnB,YACE,AAAiB,UACjB,AAAiB,SAA+B,aAAa,SAAS,GACtE;EAFiB;EACA;CAChB;;;;;CAMH,MAAM,OAAO,SAAkB,SAA6D;EAC1F,MAAM,OAAO,MAAM,QAAQ,KAAK;EAChC,MAAM,SAAS,MAAM,KAAK,SAAS,OAAO,MAAM,QAAQ,OAAO;EAC/D,IAAI,OAAO,YAAY,YAAY,OAAO,KAAK,OAAO,OAAO,KAAK;EAClE,IAAI,OAAO,YAAY,SAAS,MAAM,QAAQ,OAAO,KAAK;EAC1D,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,YAAY,GAAG,CAAC;CACtD;CAEA,AAAQ,OAAO,OAA2C;EACxD,KAAK,OAAO,KAAK,oBAAoB,EAAE,QAAQ,MAAM,OAAO,CAAC;EAC7D,MAAM,SACJ,MAAM,WAAW,qBAAqB,MAAM,WAAW,sBACnD,YAAY,eACZ,YAAY;EAClB,OAAO,IAAI,SAAS,MAAM,EAAE,OAAO,CAAC;CACtC;AACF"}
+{"version":3,"file":"http.js","names":[],"sources":["../src/infrastructure/http/webhook-handler.ts"],"sourcesContent":["import { StatusCodes } from 'http-status-codes'\n\nimport { createLogger, type Logger } from '@/core'\n\nimport { WebhookVerificationError, type WebhookVerifier } from './webhook-verification.ts'\n\n/** Application policy and diagnostics for one webhook body. */\nexport type WebhookHandlerOptions = {\n  readonly maxBodyBytes: number\n  readonly logger?: Pick<Logger, 'warn'>\n}\n\n/** Read raw webhook requests and acknowledge effects only after the callback completes. */\nexport class WebhookHandler<Verified> {\n  private readonly logger: Pick<Logger, 'warn'>\n  private readonly maxBodyBytes: number\n\n  /** Inject provider verification, the application body limit, and optional diagnostics. */\n  constructor(\n    private readonly verifier: WebhookVerifier<Verified>,\n    options: WebhookHandlerOptions,\n  ) {\n    this.logger = options.logger ?? createLogger('webhook')\n    this.maxBodyBytes = options.maxBodyBytes\n  }\n\n  /**\n   * Return 413 for large content, 401 for authentication failure, 400 for invalid content, and 200 after callback completion or an ignored event.\n   * Operational and callback failures propagate to the route's error boundary without an acknowledgment.\n   */\n  async handle(\n    request: Request,\n    onVerified: (value: Verified) => Promise<void>,\n  ): Promise<Response> {\n    const body = await this.readBody(request)\n    if (body === null) return this.rejectBodyTooLarge()\n    let verified: Verified | null\n    try {\n      verified = await this.verifier.verify(body, request.headers)\n    } catch (cause) {\n      if (cause instanceof WebhookVerificationError) return this.reject(cause)\n      throw cause\n    }\n    if (verified !== null) await onVerified(verified)\n    return new Response(null, { status: StatusCodes.OK })\n  }\n\n  private async readBody(request: Request): Promise<string | null> {\n    const contentLength = request.headers.get('content-length')\n    if (contentLength !== null && /^\\d+$/.test(contentLength)) {\n      if (Number(contentLength) > this.maxBodyBytes) return null\n    }\n    if (request.body === null) return ''\n\n    const reader = request.body.getReader()\n    const decoder = new TextDecoder()\n    let body = ''\n    let byteCount = 0\n    try {\n      while (true) {\n        const chunk = await reader.read()\n        if (chunk.done) return body + decoder.decode()\n        byteCount += chunk.value.byteLength\n        if (byteCount > this.maxBodyBytes) {\n          try {\n            await reader.cancel()\n          } catch {\n            // A cancellation failure must not replace the body-size rejection.\n          }\n          return null\n        }\n        body += decoder.decode(chunk.value, { stream: true })\n      }\n    } finally {\n      reader.releaseLock()\n    }\n  }\n\n  private rejectBodyTooLarge(): Response {\n    this.logger.warn('webhook_rejected', { reason: 'body_too_large' })\n    return new Response(null, { status: StatusCodes.REQUEST_TOO_LONG })\n  }\n\n  private reject(error: WebhookVerificationError): Response {\n    this.logger.warn('webhook_rejected', { reason: error.reason })\n    const status =\n      error.reason === 'missing_headers' || error.reason === 'invalid_signature'\n        ? StatusCodes.UNAUTHORIZED\n        : StatusCodes.BAD_REQUEST\n    return new Response(null, { status })\n  }\n}\n"],"mappings":";;;;;;AAaA,IAAa,iBAAb,MAAsC;CAMjB;CALnB,AAAiB;CACjB,AAAiB;;CAGjB,YACE,AAAiB,UACjB,SACA;EAFiB;EAGjB,KAAK,SAAS,QAAQ,UAAU,aAAa,SAAS;EACtD,KAAK,eAAe,QAAQ;CAC9B;;;;;CAMA,MAAM,OACJ,SACA,YACmB;EACnB,MAAM,OAAO,MAAM,KAAK,SAAS,OAAO;EACxC,IAAI,SAAS,MAAM,OAAO,KAAK,mBAAmB;EAClD,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,KAAK,SAAS,OAAO,MAAM,QAAQ,OAAO;EAC7D,SAAS,OAAO;GACd,IAAI,iBAAiB,0BAA0B,OAAO,KAAK,OAAO,KAAK;GACvE,MAAM;EACR;EACA,IAAI,aAAa,MAAM,MAAM,WAAW,QAAQ;EAChD,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,YAAY,GAAG,CAAC;CACtD;CAEA,MAAc,SAAS,SAA0C;EAC/D,MAAM,gBAAgB,QAAQ,QAAQ,IAAI,gBAAgB;EAC1D,IAAI,kBAAkB,QAAQ,QAAQ,KAAK,aAAa,GACtD;OAAI,OAAO,aAAa,IAAI,KAAK,cAAc,OAAO;EAAG;EAE3D,IAAI,QAAQ,SAAS,MAAM,OAAO;EAElC,MAAM,SAAS,QAAQ,KAAK,UAAU;EACtC,MAAM,UAAU,IAAI,YAAY;EAChC,IAAI,OAAO;EACX,IAAI,YAAY;EAChB,IAAI;GACF,OAAO,MAAM;IACX,MAAM,QAAQ,MAAM,OAAO,KAAK;IAChC,IAAI,MAAM,MAAM,OAAO,OAAO,QAAQ,OAAO;IAC7C,aAAa,MAAM,MAAM;IACzB,IAAI,YAAY,KAAK,cAAc;KACjC,IAAI;MACF,MAAM,OAAO,OAAO;KACtB,QAAQ,CAER;KACA,OAAO;IACT;IACA,QAAQ,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;GACtD;EACF,UAAU;GACR,OAAO,YAAY;EACrB;CACF;CAEA,AAAQ,qBAA+B;EACrC,KAAK,OAAO,KAAK,oBAAoB,EAAE,QAAQ,iBAAiB,CAAC;EACjE,OAAO,IAAI,SAAS,MAAM,EAAE,QAAQ,YAAY,iBAAiB,CAAC;CACpE;CAEA,AAAQ,OAAO,OAA2C;EACxD,KAAK,OAAO,KAAK,oBAAoB,EAAE,QAAQ,MAAM,OAAO,CAAC;EAC7D,MAAM,SACJ,MAAM,WAAW,qBAAqB,MAAM,WAAW,sBACnD,YAAY,eACZ,YAAY;EAClB,OAAO,IAAI,SAAS,MAAM,EAAE,OAAO,CAAC;CACtC;AACF"}

package/dist/{outbox-repository-options-CgdqU20T.js → outbox-repository-options-B8TnAE1h.js}

@@ -1,4 +1,4 @@
-import { t as UnitOfWorkAlreadyActiveError } from "./application-CNdzHIXk.js";
+import { t as UnitOfWorkAlreadyActiveError } from "./application-Dg1jIKPe.js";
 import { panic } from "better-result";
 import { AsyncLocalStorage } from "node:async_hooks";
 
@@ -54,4 +54,4 @@ const OUTBOX_REPOSITORY_DEFAULTS = {
 
 //#endregion
 export { stageD1Statement as a, runWithUnitOfWorkContext as i, collectD1Statements as n, eventCollector as r, OUTBOX_REPOSITORY_DEFAULTS as t };
-//# sourceMappingURL=outbox-repository-options-CgdqU20T.js.map
+//# sourceMappingURL=outbox-repository-options-B8TnAE1h.js.map

package/dist/{outbox-repository-options-CgdqU20T.js.map → outbox-repository-options-B8TnAE1h.js.map}

@@ -1 +1 @@
-{"version":3,"file":"outbox-repository-options-CgdqU20T.js","names":[],"sources":["../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\n\nimport { panic } from 'better-result'\nimport type { BatchItem } from 'drizzle-orm/batch'\n\nimport { UnitOfWorkAlreadyActiveError, type IEventCollector } from '@/application'\nimport type { DomainEvent } from '@/core'\n\ntype UnitOfWorkContext = { readonly events: DomainEvent[] } & (\n  | { readonly database: 'd1'; readonly statements: BatchItem<'sqlite'>[] }\n  | { readonly database: 'postgres' }\n)\n\n// One async scope isolates events and D1 statements and rejects nesting across both adapters.\nconst storage = new AsyncLocalStorage<UnitOfWorkContext>()\n\n/** Reject nested transactions before database work starts; preserve independent concurrent execution. */\nexport async function runWithUnitOfWorkContext<T>(\n  database: UnitOfWorkContext['database'],\n  work: () => Promise<T>,\n): Promise<T> {\n  if (storage.getStore() !== undefined) throw new UnitOfWorkAlreadyActiveError()\n  const context: UnitOfWorkContext =\n    database === 'd1' ? { database, events: [], statements: [] } : { database, events: [] }\n  return storage.run(context, work)\n}\n\n/** Inject this shared scope into the unit of work and expose its emitter to application handlers. */\nexport const eventCollector: IEventCollector = {\n  emit(event) {\n    currentContext().events.push(event)\n  },\n  collect() {\n    return [...currentContext().events]\n  },\n}\n\n/** Queue one native D1 statement for the active batch; other contexts cannot accept D1 writes. */\nexport function stageD1Statement(statement: BatchItem<'sqlite'>): void {\n  d1Context().statements.push(statement)\n}\n\n/** Read the active D1 batch in staging order for commit. */\nexport function collectD1Statements(): ReadonlyArray<BatchItem<'sqlite'>> {\n  return [...d1Context().statements]\n}\n\nfunction d1Context(): Extract<UnitOfWorkContext, { database: 'd1' }> {\n  const context = currentContext()\n  if (context.database !== 'd1') return panic('D1 statements require a D1 unit of work')\n  return context\n}\n\nfunction currentContext(): UnitOfWorkContext {\n  return storage.getStore() ?? panic('operation requires an active unit of work')\n}\n","/** Shared lease and delay defaults for both database adapters. */\nexport const OUTBOX_REPOSITORY_DEFAULTS = {\n  leaseMs: 60_000,\n  retryBaseDelayMs: 1_000,\n  retryMaxDelayMs: 60_000,\n}\n\n/** Override lease and delay limits at the composition root. */\nexport type OutboxRepositoryOptions = Readonly<Partial<typeof OUTBOX_REPOSITORY_DEFAULTS>>\n"],"mappings":";;;;;AAcA,MAAM,UAAU,IAAI,kBAAqC;;AAGzD,eAAsB,yBACpB,UACA,MACY;CACZ,IAAI,QAAQ,SAAS,MAAM,QAAW,MAAM,IAAI,6BAA6B;CAC7E,MAAM,UACJ,aAAa,OAAO;EAAE;EAAU,QAAQ,CAAC;EAAG,YAAY,CAAC;CAAE,IAAI;EAAE;EAAU,QAAQ,CAAC;CAAE;CACxF,OAAO,QAAQ,IAAI,SAAS,IAAI;AAClC;;AAGA,MAAa,iBAAkC;CAC7C,KAAK,OAAO;EACV,eAAe,CAAC,CAAC,OAAO,KAAK,KAAK;CACpC;CACA,UAAU;EACR,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM;CACpC;AACF;;AAGA,SAAgB,iBAAiB,WAAsC;CACrE,UAAU,CAAC,CAAC,WAAW,KAAK,SAAS;AACvC;;AAGA,SAAgB,sBAA0D;CACxE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,UAAU;AACnC;AAEA,SAAS,YAA4D;CACnE,MAAM,UAAU,eAAe;CAC/B,IAAI,QAAQ,aAAa,MAAM,OAAO,MAAM,yCAAyC;CACrF,OAAO;AACT;AAEA,SAAS,iBAAoC;CAC3C,OAAO,QAAQ,SAAS,KAAK,MAAM,2CAA2C;AAChF;;;;;ACtDA,MAAa,6BAA6B;CACxC,SAAS;CACT,kBAAkB;CAClB,iBAAiB;AACnB"}
+{"version":3,"file":"outbox-repository-options-B8TnAE1h.js","names":[],"sources":["../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\n\nimport { panic } from 'better-result'\nimport type { BatchItem } from 'drizzle-orm/batch'\n\nimport { UnitOfWorkAlreadyActiveError, type IEventCollector } from '@/application'\nimport type { DomainEvent } from '@/core'\n\ntype UnitOfWorkContext = { readonly events: DomainEvent[] } & (\n  | { readonly database: 'd1'; readonly statements: BatchItem<'sqlite'>[] }\n  | { readonly database: 'postgres' }\n)\n\n// One async scope isolates events and D1 statements and rejects nesting across both adapters.\nconst storage = new AsyncLocalStorage<UnitOfWorkContext>()\n\n/** Reject nested transactions before database work starts; preserve independent concurrent execution. */\nexport async function runWithUnitOfWorkContext<T>(\n  database: UnitOfWorkContext['database'],\n  work: () => Promise<T>,\n): Promise<T> {\n  if (storage.getStore() !== undefined) throw new UnitOfWorkAlreadyActiveError()\n  const context: UnitOfWorkContext =\n    database === 'd1' ? { database, events: [], statements: [] } : { database, events: [] }\n  return storage.run(context, work)\n}\n\n/** Inject this shared scope into the unit of work and expose its emitter to application handlers. */\nexport const eventCollector: IEventCollector = {\n  emit(event) {\n    currentContext().events.push(event)\n  },\n  collect() {\n    return [...currentContext().events]\n  },\n}\n\n/** Queue one native D1 statement for the active batch; other contexts cannot accept D1 writes. */\nexport function stageD1Statement(statement: BatchItem<'sqlite'>): void {\n  d1Context().statements.push(statement)\n}\n\n/** Read the active D1 batch in staging order for commit. */\nexport function collectD1Statements(): ReadonlyArray<BatchItem<'sqlite'>> {\n  return [...d1Context().statements]\n}\n\nfunction d1Context(): Extract<UnitOfWorkContext, { database: 'd1' }> {\n  const context = currentContext()\n  if (context.database !== 'd1') return panic('D1 statements require a D1 unit of work')\n  return context\n}\n\nfunction currentContext(): UnitOfWorkContext {\n  return storage.getStore() ?? panic('operation requires an active unit of work')\n}\n","/** Shared lease and delay defaults for both database adapters. */\nexport const OUTBOX_REPOSITORY_DEFAULTS = {\n  leaseMs: 60_000,\n  retryBaseDelayMs: 1_000,\n  retryMaxDelayMs: 60_000,\n}\n\n/** Override lease and delay limits at the composition root. */\nexport type OutboxRepositoryOptions = Readonly<Partial<typeof OUTBOX_REPOSITORY_DEFAULTS>>\n"],"mappings":";;;;;AAcA,MAAM,UAAU,IAAI,kBAAqC;;AAGzD,eAAsB,yBACpB,UACA,MACY;CACZ,IAAI,QAAQ,SAAS,MAAM,QAAW,MAAM,IAAI,6BAA6B;CAC7E,MAAM,UACJ,aAAa,OAAO;EAAE;EAAU,QAAQ,CAAC;EAAG,YAAY,CAAC;CAAE,IAAI;EAAE;EAAU,QAAQ,CAAC;CAAE;CACxF,OAAO,QAAQ,IAAI,SAAS,IAAI;AAClC;;AAGA,MAAa,iBAAkC;CAC7C,KAAK,OAAO;EACV,eAAe,CAAC,CAAC,OAAO,KAAK,KAAK;CACpC;CACA,UAAU;EACR,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM;CACpC;AACF;;AAGA,SAAgB,iBAAiB,WAAsC;CACrE,UAAU,CAAC,CAAC,WAAW,KAAK,SAAS;AACvC;;AAGA,SAAgB,sBAA0D;CACxE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,UAAU;AACnC;AAEA,SAAS,YAA4D;CACnE,MAAM,UAAU,eAAe;CAC/B,IAAI,QAAQ,aAAa,MAAM,OAAO,MAAM,yCAAyC;CACrF,OAAO;AACT;AAEA,SAAS,iBAAoC;CAC3C,OAAO,QAAQ,SAAS,KAAK,MAAM,2CAA2C;AAChF;;;;;ACtDA,MAAa,6BAA6B;CACxC,SAAS;CACT,kBAAkB;CAClB,iBAAiB;AACnB"}

package/dist/postgres.js

@@ -1,6 +1,6 @@
-import { O as DatabaseError, nt as AppError, s as exponentialDelayCapMs } from "./core-UUW2unJd.js";
-import { o as MessageAlreadyProcessedError } from "./application-CNdzHIXk.js";
-import { i as runWithUnitOfWorkContext, r as eventCollector, t as OUTBOX_REPOSITORY_DEFAULTS } from "./outbox-repository-options-CgdqU20T.js";
+import { O as DatabaseError, nt as AppError, s as exponentialDelayCapMs } from "./core-BT1dSEQI.js";
+import { o as MessageAlreadyProcessedError } from "./application-Dg1jIKPe.js";
+import { i as runWithUnitOfWorkContext, r as eventCollector, t as OUTBOX_REPOSITORY_DEFAULTS } from "./outbox-repository-options-B8TnAE1h.js";
 import { Result } from "better-result";
 import { DrizzleQueryError } from "drizzle-orm/errors";
 import { and, asc, eq, inArray, isNull, lt, lte, or, sql } from "drizzle-orm";

package/dist/posthog/server.js

@@ -1,4 +1,4 @@
-import { tt as MissingConfigurationError } from "../core-UUW2unJd.js";
+import { tt as MissingConfigurationError } from "../core-BT1dSEQI.js";
 import { PostHogMetricsService } from "./metrics.js";
 import { PostHog } from "posthog-node";
 

package/dist/resend.d.ts

@@ -1,6 +1,6 @@
 import { jt as BounceType } from "./index-DUFS0SJ_.js";
 import { B as OutboundEmail, I as EmailAccepted, R as IEmailService } from "./index-CYHXOH08.js";
-import { r as WebhookVerifier, t as WebhookVerification } from "./webhook-verification-BuxPzdr4.js";
+import { n as WebhookVerifier } from "./webhook-verification-D1c7BY4q.js";
 import { Resend } from "resend";
 //#region src/infrastructure/resend/resend-email-service.d.ts
 /** The SDK operations required by the adapter; a test factory can return a plain object. */
@@ -65,8 +65,8 @@ export declare class ResendWebhook implements WebhookVerifier<EmailEvent> {
   private client;
   /** Inject the local SDK verifier when testing. */
   constructor(webhookSecret: string, verifier: () => Promise<ResendWebhookClient>);
-  /** Verify the raw body and Svix headers. Invalid requests return rejected; configuration and SDK defects propagate. */
-  verify(body: string, headers: Headers): Promise<WebhookVerification<EmailEvent>>;
+  /** Verify the raw body and Svix headers. Invalid requests throw typed errors; other failures propagate. */
+  verify(body: string, headers: Headers): Promise<EmailEvent | null>;
 }
 //#endregion
 export type { EmailEvent, EmailEventType, ResendEmailClient, ResendWebhookClient };

package/dist/resend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resend.d.ts","names":[],"sources":["../src/infrastructure/resend/resend-email-service.ts","../src/infrastructure/resend/email-event.ts","../src/infrastructure/resend/resend-webhook.ts"],"mappings":";;;;;;KAsEY;WAA+B,QAAQ,KAAK;;;;;;qBAM3C,8BAA8B;mBAatB;mBACA;;SAZZ,OAAO,gBAAgB,sBAAsB;UAO5C;;EAGR,YACmB,oBAAoB,QAAQ,oBAC5B;;EAIb,UAAU,OAAO,gBAAgB,QAAQ;;;;cCzF3C;;KAYM,yBACA;KAgDP;WACM;WACA;WACA;WACA;WACA,MAAM,SAAS;WACf;;;KAIC,cACP;WACU;WACA;aACE,MAAM;aACN;aACA;;MAGZ;WAA4B;WAA+B;MAC3D;WAA4B;WAAgC;MAC5D;WAA4B,cAAc;;;;;KCvEnC,sBAAsB,KAAK;;qBAG1B,yBAAyB,gBAAgB;mBAcjC;mBACA;;SAbZ,OAAO,wBAAwB;UAQ9B;;EAGR,YACmB,uBACA,gBAAgB,QAAQ;;EAIrC,OAAO,cAAc,SAAS,UAAU,QAAQ,oBAAoB"}
+{"version":3,"file":"resend.d.ts","names":[],"sources":["../src/infrastructure/resend/resend-email-service.ts","../src/infrastructure/resend/email-event.ts","../src/infrastructure/resend/resend-webhook.ts"],"mappings":";;;;;;KAsEY;WAA+B,QAAQ,KAAK;;;;;;qBAM3C,8BAA8B;mBAatB;mBACA;;SAZZ,OAAO,gBAAgB,sBAAsB;UAO5C;;EAGR,YACmB,oBAAoB,QAAQ,oBAC5B;;EAIb,UAAU,OAAO,gBAAgB,QAAQ;;;;cCzF3C;;KAYM,yBACA;KAgDP;WACM;WACA;WACA;WACA;WACA,MAAM,SAAS;WACf;;;KAIC,cACP;WACU;WACA;aACE,MAAM;aACN;aACA;;MAGZ;WAA4B;WAA+B;MAC3D;WAA4B;WAAgC;MAC5D;WAA4B,cAAc;;;;;KC3EnC,sBAAsB,KAAK;;qBAG1B,yBAAyB,gBAAgB;mBAcjC;mBACA;;SAbZ,OAAO,wBAAwB;UAQ9B;;EAGR,YACmB,uBACA,gBAAgB,QAAQ;;EAIrC,OAAO,cAAc,SAAS,UAAU,QAAQ"}