better-ship 0.24.0 → 0.26.0

package/dist/cloudflare.d.ts

@@ -1,6 +1,6 @@
 import { W as DomainEvent, et as D1ConstraintKind, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-DUFS0SJ_.js";
-import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-tNZHSCpJ.js";
-import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-_B8l8l6l.js";
+import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-lS_g1olK.js";
+import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-15Sv9WnG.js";
 import { BatchItem } from "drizzle-orm/batch";
 import { AnyD1Database, DrizzleD1Database } from "drizzle-orm/d1";
 //#region src/infrastructure/cloudflare/d1-database-types.d.ts

package/dist/durable-object-errors-DkMFXQnK.js

@@ -0,0 +1,48 @@
+import { _ as isTransientCloudflareRuntimeError, g as isCloudflareRetryableError, h as isCloudflareOverloadedError, nt as AppError, v as isAbortError, y as isTransientTransportError } from "./core-BiN6S_cm.js";
+import { z } from "zod";
+
+//#region src/infrastructure/cloudflare/durable-object-errors.ts
+/** Stable tag for a failed Durable Object call. */
+const DURABLE_OBJECT_CALL_ERROR = "DurableObjectCallError";
+const RemoteClassifiedErrorSchema = z.object({
+	_tag: z.string(),
+	classification: z.enum([
+		"transient",
+		"terminal",
+		"unknown"
+	]),
+	remote: z.literal(true)
+});
+const RemoteCallErrorSchema = RemoteClassifiedErrorSchema.extend({
+	_tag: z.literal(DURABLE_OBJECT_CALL_ERROR),
+	cause: z.unknown()
+});
+/** Recognize a judged local or remote error without admitting its tag to the public error table. */
+function isClassifiedDurableObjectError(cause) {
+	return cause instanceof AppError || cause instanceof Error && RemoteClassifiedErrorSchema.safeParse(cause).success;
+}
+/** Classify the error itself. Its cause remains diagnostic evidence, not a second retry decision. */
+function classifyDurableObjectError(cause) {
+	if (isAbortError(cause)) return "terminal";
+	if (isClassifiedDurableObjectError(cause)) return cause.classification;
+	if (isCloudflareOverloadedError(cause)) return "terminal";
+	if (isCloudflareRetryableError(cause) || isTransientCloudflareRuntimeError(cause) || isTransientTransportError(cause)) return "transient";
+	return "unknown";
+}
+/** Identify a local call error or its validated Workers RPC representation. */
+function isDurableObjectCallError(cause) {
+	return cause instanceof DurableObjectCallError || cause instanceof Error && RemoteCallErrorSchema.safeParse(cause).success;
+}
+/** A call failed after retries stopped. Classification does not establish repeat safety. */
+var DurableObjectCallError = class extends AppError {
+	_tag = DURABLE_OBJECT_CALL_ERROR;
+	classification;
+	constructor(args) {
+		super("Durable Object call failed", { cause: args.cause });
+		this.classification = classifyDurableObjectError(args.cause);
+	}
+};
+
+//#endregion
+export { isDurableObjectCallError as a, isClassifiedDurableObjectError as i, DurableObjectCallError as n, classifyDurableObjectError as r, DURABLE_OBJECT_CALL_ERROR as t };
+//# sourceMappingURL=durable-object-errors-DkMFXQnK.js.map

package/dist/durable-object-errors-DkMFXQnK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-object-errors-DkMFXQnK.js","names":[],"sources":["../src/infrastructure/cloudflare/durable-object-errors.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport {\n  AppError,\n  isAbortError,\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientCloudflareRuntimeError,\n  isTransientTransportError,\n  type FailureClassification,\n} from '@/core'\n\n/** Stable tag for a failed Durable Object call. */\nexport const DURABLE_OBJECT_CALL_ERROR = 'DurableObjectCallError'\n\nconst RemoteClassifiedErrorSchema = z.object({\n  _tag: z.string(),\n  classification: z.enum(['transient', 'terminal', 'unknown']),\n  remote: z.literal(true),\n})\n\nconst RemoteCallErrorSchema = RemoteClassifiedErrorSchema.extend({\n  _tag: z.literal(DURABLE_OBJECT_CALL_ERROR),\n  cause: z.unknown(),\n})\n\n/** Recognize a judged local or remote error without admitting its tag to the public error table. */\nexport function isClassifiedDurableObjectError(\n  cause: unknown,\n): cause is AppError | (Error & z.output<typeof RemoteClassifiedErrorSchema>) {\n  return (\n    cause instanceof AppError ||\n    (cause instanceof Error && RemoteClassifiedErrorSchema.safeParse(cause).success)\n  )\n}\n\n/** Classify the error itself. Its cause remains diagnostic evidence, not a second retry decision. */\nexport function classifyDurableObjectError(cause: unknown): FailureClassification {\n  if (isAbortError(cause)) return 'terminal'\n  if (isClassifiedDurableObjectError(cause)) return cause.classification\n  if (isCloudflareOverloadedError(cause)) return 'terminal'\n  if (\n    isCloudflareRetryableError(cause) ||\n    isTransientCloudflareRuntimeError(cause) ||\n    isTransientTransportError(cause)\n  )\n    return 'transient'\n  return 'unknown'\n}\n\n/** Identify a local call error or its validated Workers RPC representation. */\nexport function isDurableObjectCallError(\n  cause: unknown,\n): cause is DurableObjectCallError | (Error & z.output<typeof RemoteCallErrorSchema>) {\n  return (\n    cause instanceof DurableObjectCallError ||\n    (cause instanceof Error && RemoteCallErrorSchema.safeParse(cause).success)\n  )\n}\n\n/** A call failed after retries stopped. Classification does not establish repeat safety. */\nexport class DurableObjectCallError extends AppError {\n  readonly _tag = DURABLE_OBJECT_CALL_ERROR\n  readonly classification: FailureClassification\n\n  constructor(args: { readonly cause: unknown }) {\n    super('Durable Object call failed', { cause: args.cause })\n    this.classification = classifyDurableObjectError(args.cause)\n  }\n}\n"],"mappings":";;;;;AAaA,MAAa,4BAA4B;AAEzC,MAAM,8BAA8B,EAAE,OAAO;CAC3C,MAAM,EAAE,OAAO;CACf,gBAAgB,EAAE,KAAK;EAAC;EAAa;EAAY;CAAS,CAAC;CAC3D,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAED,MAAM,wBAAwB,4BAA4B,OAAO;CAC/D,MAAM,EAAE,QAAQ,yBAAyB;CACzC,OAAO,EAAE,QAAQ;AACnB,CAAC;;AAGD,SAAgB,+BACd,OAC4E;CAC5E,OACE,iBAAiB,YAChB,iBAAiB,SAAS,4BAA4B,UAAU,KAAK,CAAC,CAAC;AAE5E;;AAGA,SAAgB,2BAA2B,OAAuC;CAChF,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,+BAA+B,KAAK,GAAG,OAAO,MAAM;CACxD,IAAI,4BAA4B,KAAK,GAAG,OAAO;CAC/C,IACE,2BAA2B,KAAK,KAChC,kCAAkC,KAAK,KACvC,0BAA0B,KAAK,GAE/B,OAAO;CACT,OAAO;AACT;;AAGA,SAAgB,yBACd,OACoF;CACpF,OACE,iBAAiB,0BAChB,iBAAiB,SAAS,sBAAsB,UAAU,KAAK,CAAC,CAAC;AAEtE;;AAGA,IAAa,yBAAb,cAA4C,SAAS;CACnD,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAAmC;EAC7C,MAAM,8BAA8B,EAAE,OAAO,KAAK,MAAM,CAAC;EACzD,KAAK,iBAAiB,2BAA2B,KAAK,KAAK;CAC7D;AACF"}

package/dist/{index-tNZHSCpJ.d.ts → index-lS_g1olK.d.ts}

@@ -100,6 +100,21 @@ type OutboundEmail = {
 type ReceivedEmail = {
   readonly headers: Readonly<Record<string, string>>;
 };
+/** One attachment of a received email. `downloadUrl` is a signed link that stops working at `expiresAt`. */
+type ReceivedAttachment = {
+  readonly filename: string | null;
+  readonly contentType: string;
+  readonly size: number;
+  readonly downloadUrl: string;
+  readonly expiresAt: string;
+};
+/** A received email's sender, plain text body, and attachments, for an application that reads mail it receives. */
+type ReceivedContent = {
+  /** The sender as the email states it, for example "Display Name <address@domain.com>". */
+  readonly from: string;
+  readonly text: string | null;
+  readonly attachments: readonly ReceivedAttachment[];
+};
 /** The provider accepted the email and assigned its id. */
 type EmailAccepted = {
   readonly providerId: string;
@@ -395,5 +410,5 @@ declare class UnitOfWorkAlreadyActiveError extends AppError {
   constructor();
 }
 //#endregion
-export { CommandHandler as $, IOutboxRepository as A, OutboundEmail as B, UnitOfWorkDeps as C, OutboxRelay as D, IOutboxRelay as E, IEventCollector as F, ObservabilityUser as G, RecordingEmailService as H, EmailAccepted as I, MetricOptions as J, MetricAttributeValue as K, EmailAttachment as L, OutboxClaim as M, OutboxMessage as N, OutboxRelayOptions as O, IMessageStore as P, NULL_ANALYTICS as Q, IEmailService as R, UnitOfWork as S, IOutboxPublisher as T, ObservabilityScope as U, ReceivedEmail as V, ObservabilityService as W, NULL_METRICS_SERVICE as X, MetricsService as Y, AnalyticsService as Z, RecordEmailEventCommand as _, OutboxRetentionResult as a, recordEmailEvent as b, CommandRegistry as c, MessageRegistry as d, EventHandler as et, MessageResult as f, IEmailDeliverabilityStore as g, EmailBounceRecord as h, OutboxRetentionOptions as i, IOutboxRetentionRepository as j, DeadLetterReason as k, EventRegistry as l, RegistryMessage as m, MessageAlreadyProcessedError as n, IMessageBus as o, QueryRegistry as p, MetricAttributes as q, OutboxRetention as r, MessageBus as s, UnitOfWorkAlreadyActiveError as t, QueryHandler as tt, Handlers as u, RecordEmailEventDeps as v, ITransaction as w, IUnitOfWork as x, RecordEmailEventRepos as y, MimeType as z };
-//# sourceMappingURL=index-tNZHSCpJ.d.ts.map
+export { AnalyticsService as $, IOutboxRepository as A, OutboundEmail as B, UnitOfWorkDeps as C, OutboxRelay as D, IOutboxRelay as E, IEventCollector as F, ObservabilityScope as G, ReceivedContent as H, EmailAccepted as I, MetricAttributeValue as J, ObservabilityService as K, EmailAttachment as L, OutboxClaim as M, OutboxMessage as N, OutboxRelayOptions as O, IMessageStore as P, NULL_METRICS_SERVICE as Q, IEmailService as R, UnitOfWork as S, IOutboxPublisher as T, ReceivedEmail as U, ReceivedAttachment as V, RecordingEmailService as W, MetricOptions as X, MetricAttributes as Y, MetricsService as Z, RecordEmailEventCommand as _, OutboxRetentionResult as a, recordEmailEvent as b, CommandRegistry as c, MessageRegistry as d, NULL_ANALYTICS as et, MessageResult as f, IEmailDeliverabilityStore as g, EmailBounceRecord as h, OutboxRetentionOptions as i, IOutboxRetentionRepository as j, DeadLetterReason as k, EventRegistry as l, RegistryMessage as m, MessageAlreadyProcessedError as n, EventHandler as nt, IMessageBus as o, QueryRegistry as p, ObservabilityUser as q, OutboxRetention as r, QueryHandler as rt, MessageBus as s, UnitOfWorkAlreadyActiveError as t, CommandHandler as tt, Handlers as u, RecordEmailEventDeps as v, ITransaction as w, IUnitOfWork as x, RecordEmailEventRepos as y, MimeType as z };
+//# sourceMappingURL=index-lS_g1olK.d.ts.map

package/dist/index-lS_g1olK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-lS_g1olK.d.ts","names":[],"sources":["../src/application/handlers.ts","../src/application/analytics-service.ts","../src/application/metrics-service.ts","../src/application/observability-service.ts","../src/application/email-service.ts","../src/application/event-collector.ts","../src/application/message-store.ts","../src/application/outbox-repository.ts","../src/application/outbox-relay.ts","../src/application/transaction.ts","../src/application/unit-of-work.ts","../src/application/record-email-event.ts","../src/application/registry.ts","../src/application/message-bus.ts","../src/application/outbox-retention.ts","../src/application/message-already-processed.error.ts","../src/application/unit-of-work.errors.ts"],"mappings":";;;;;;KAMY,eAAe,iBAAiB,eAAe,MAAM,UAC/D,SAAS,UACT,MAAM,SACH,QAAQ;;;;;KAMD,aAAa,eAAe,aAAa,WAAW,UAC9D,OAAO,QACP,MAAM,cACH,QAAQ;;KAGD,aAAa,eAAe,aAAa,SACnD,OAAO,QACP,MAAM,SACH;;;;UCrBY,iBAAiB,eAAe,sBAAsB;;EAErE,SAAS,oBAAoB,aAAa;;EAE1C,MAAM,oBAAoB;;EAE1B,MAAM,OAAO,QAAQ,oBAAoB,WAAW;;EAEpD,eAAe,OAAO,QAAQ,oBAAoB,WAAW;;;cAIlD,gBAAgB;;;;KCdjB;;KAGA,mBAAmB,SAAS,eAAe;;UAGtC;WACN,aAAa;WACb;;;UAIM,eAAe;;EAE9B,MAAM,MAAM,OAAO,gBAAgB,UAAU;;EAE7C,MAAM,MAAM,OAAO,eAAe,UAAU;;EAE5C,UAAU,MAAM,OAAO,eAAe,UAAU;;;cAIrC,sBAAsB;;;;UCtBlB;WACN;;;UAIM;;EAEf,QAAQ,MAAM;;;UAIC,6BAA6B;;EAE5C,mBAAmB,GAAG,WAAW,OAAO,uBAAuB,IAAI,QAAQ,KAAK,QAAQ;;;;;KCX9E;;KAGA;WACD;WACA,kBAAkB;;WAElB,cAAc;;;;;;;KAQb;;WAED;WACA;WACA;WACA;;WAEA,iBAAiB;;WAEjB;WACA;;WAEA,OAAO,SAAS;WAChB,uBAAuB;;;KAItB;WAA2B,SAAS,SAAS;;;KAG7C;WACD;WACA;WACA;WACA;WACA;;;KAIC;;WAED;WACA;WACA,sBAAsB;;;KAIrB;WAA2B;;;;;;UAMtB;;EAEf,UAAU,OAAO,gBAAgB,QAAQ;;;cAI9B,iCAAiC;;WAEnC,MAAM;;EAGT,UAAU,OAAO,gBAAgB,QAAQ;;;;;UCrEhC;EACf,KAAK,OAAO;EACZ,WAAW,cAAc;;;;;;;;UCCV;;EAEf,MAAM,WAAW,YAAY;;EAE7B,cAAc,QAAQ,cAAc,eAAe;;;;;KCPzC;WACD,SAAS;WACT;;;KAIC;WACD;WACA,UAAU,cAAc;;;KAIvB;;UAGK;;EAEf,sBAAsB,QAAQ,MAAM,oBAAoB;;EAExD,mBAAmB,QAAQ,MAAM,oBAAoB;;EAErD,qBAAqB,QAAQ,MAAM,oBAAoB;;;;;;UAOxC,0BAA0B;;EAEzC,aAAa,oBAAoB,QAAQ;;EAEzC,cAAc,OAAO,aAAa,UAAU,cAAc,iBAAiB;;EAE3E,aAAa,OAAO,aAAa,UAAU,cAAc,iBAAiB;;EAE1E,WACE,OAAO,aACP,UAAU,cAAc,gBACxB,QAAQ,kBACR,uBACC;;;;;;;;;UC9BY;EACf;;;UAIe;;EAEf,iBAAiB,UAAU,cAAc,eAAe,QAAQ,cAAc;;;KAIpE;WACD;WACA;WACA;;;;;;cASE;mBAIQ;mBACA;mBAJF;EAEjB,YACmB,WAAW,kBACX,YAAY,mBAC7B,UAAS;;EAUL,SAAS;;EA4BT,SAAS;UAWD;UAkBA;;;;;;;;;UCzGC,aAAa;EAC5B,YAAY,GAAG,OAAO,IAAI,OAAO,QAAQ,KAAK,QAAQ;;;;;;;;;UCOvC,YAAY;EAC3B,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;KAGhE,eAAe,IAAI;WACpB,aAAa,aAAa;;WAE1B,eAAe,IAAI,OAAO;;WAE1B,qBAAqB,IAAI,OAAO;WAChC,gBAAgB;WAChB,OAAO;;;cAIL,WAAW,IAAI,kBAAkB,YAAY;mBAC3B;EAA7B,YAA6B,MAAM,eAAe,IAAI;EAEhD,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;;;;KC1BtE;WACD,MAAM;WACN;;;;;;UAOM;;EAEf,aAAa,SAAS,cAAc,QAAQ,oBAAoB;;EAEhE,gBAAgB,SAAS,eAAe;;;KAI9B;WAAmC,qBAAqB;;;KAGxD;WAAkC,KAAK,YAAY;;;KAGnD,0BAA0B,gBAAgB;;;;;iBAMhC,iBACpB,SAAS,yBACT,MAAM,uBACL;;;;KChCS,gBAAgB,iBAAiB,eAAe,oBAChD,KAAK,YAAY,YAAY,eAAe,GAAG;;KAI/C,cAAc,eAAe,aAAa,yBAC1C,KAAK,UAAU,YAAY,aAAa,GAAG;;;;;KAO3C,cAAc,eAAe,aAAa,oBAC1C,KAAK,UAAU,aAAa,cAAc,aAAa,GAAG;;;;;;KAQ1D,gBAAgB,iBAAiB,eAAe,aAAa,WAAW;WACzE,UAAU,gBAAgB,QAAQ,UAAU,gBAAgB;WAC5D,SAAS,cAAc,QAAQ,UAAU,cAAc;WACvD,QAAQ,cAAc,QAAQ,UAAU,cAAc;;KAK5D,KAAK;EAAU,OAAO,SAAS,eAAe,MAAM,OAAO;;KAC3D,aAAa;EAAU,OAAO,OAAO,aAAa,MAAM,OAAO;;;;;;KAMxD,SAAS;WACV,UAAU,SAAS,eAAe,KAAK;WACvC,SAAS,SAAS,eAAe,KAAK;WACtC,QAAQ,SAAS,QAAQ,eAAe,cAAc,aAAa;;KAGzE,YAAY,UAAU,WAAW,QAAQ,aAAa,SAAS;KAE/D,oBAAoB,UACvB,YAAY,aAAa,iBAAiB,oBAAoB,iBAC1D,WAAW,QAAQ,eAAe;;KAI5B,gBAAgB,kBAAkB,mBAC1C,YAAY,yBACZ,YAAY,wBACZ,oBAAoB;KAEnB,UAAU,QAAQ,wBAAwB,oBAAoB,SAC/D,QAAQ,WAAW,QAAQ,OAAO,QAAQ;;KAIlC,cACV,iBAAiB,eACjB,kBAAkB,mBAChB,iBAAiB,gBACjB,UAAU,uBAAuB,oBACjC,iBAAiB,cACf,UAAU,sBAAsB;;;;UCvDrB,YAAY,kBAAkB;EAC7C,OAAO,iBAAiB,gBAAgB,gBAAgB,YACtD,SAAS,WACR,QAAQ,cAAc,UAAU;;;;;;cAOxB,WAAW,MAAM,kBAAkB,SAAS,kBAAkB,YAAY;mBAElE;mBACA;EAFnB,YACmB,MAAM,MACN,UAAU;;EAIvB,OAAO,iBAAiB,gBAAgB,gBAAgB,YAC5D,SAAS,WACR,QAAQ,cAAc,UAAU;UAM3B;UASA;UASA;;;;;;UAWM;;;;;KCpEJ;WACD;WACA;WACA;WACA;WACA;;;KAIC;WACD;WACA;WACA;;;cAIE;mBAIQ;mBAHF;EAEjB,YACmB,YAAY,4BAC7B,UAAS;;EAYL,MAAM,IAAI,OAAO,QAAQ;UAcjB;;;;;cC/CH,qCAAqC;WAKrC,WAAW;WAJb;WACA;EAET,YACW,WAAW,WACpB;aAAqB;;;SAMhB,KAAK,gBAAgB,WAAW,YAAY;;;;;cCZxC,qCAAqC;WACvC;WACA;EAET"}

package/dist/kv-errors-BUTpFy0t.js

@@ -0,0 +1,144 @@
+import { g as isCloudflareRetryableError, h as isCloudflareOverloadedError, nt as AppError, y as isTransientTransportError } from "./core-BiN6S_cm.js";
+
+//#region src/infrastructure/cloudflare/kv-errors.ts
+/** Extract Typist's verified KV message formats, including nested causes. */
+function extractKVMeta(cause) {
+	const message = getDeepErrorMessage(cause);
+	if (!message) return void 0;
+	const statusMatch = message.match(/\bKV\s+(GET|PUT|DELETE|LIST)\s+failed:\s+(\d{3})\b/);
+	const operation = statusMatch?.[1];
+	const status = statusMatch ? Number(statusMatch[2]) : void 0;
+	if (/Key name cannot be empty/i.test(message)) return {
+		kind: "invalid_key",
+		message,
+		status,
+		operation
+	};
+	if (/exceeds key length limit/i.test(message)) return {
+		kind: "key_too_large",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration_ttl/i.test(message)) return {
+		kind: "invalid_expiration_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration of/i.test(message)) return {
+		kind: "invalid_expiration",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid cache_ttl/i.test(message)) return {
+		kind: "invalid_cache_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid key_count_limit/i.test(message)) return {
+		kind: "invalid_list_limit",
+		message,
+		status,
+		operation
+	};
+	if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) return {
+		kind: "value_too_large",
+		message,
+		status,
+		operation
+	};
+	if (status === 429) return {
+		kind: "rate_limited",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 500) return {
+		kind: "server_error",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 400) return {
+		kind: "client_error",
+		message,
+		status,
+		operation
+	};
+}
+/** Identify recognized KV failures that another attempt cannot resolve. */
+function isTerminalKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	if (meta.kind === "rate_limited" || meta.kind === "server_error") return false;
+	if (meta.status === 408) return false;
+	return true;
+}
+/** Identify a PUT rate limit that requires at least one second before retrying. */
+function isKVPutRateLimitError(cause) {
+	const meta = extractKVMeta(cause);
+	return meta?.operation === "PUT" && meta.kind === "rate_limited";
+}
+/** Identify PUT rate limits, server failures, and request timeouts. */
+function isTransientKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	return isKVPutRateLimitError(cause) || meta.kind === "server_error" || meta.status === 408;
+}
+/** Apply Typist's KV, overload, platform, and transport checks in their original order. */
+function isRetryableKVError(cause) {
+	if (isTerminalKVError(cause)) return false;
+	if (isTransientKVError(cause)) return true;
+	if (isCloudflareOverloadedError(cause)) return false;
+	return isCloudflareRetryableError(cause) || isTransientTransportError(cause);
+}
+/** Return the existing retry decision and minimum delay in milliseconds. */
+function decideKVRetry(cause) {
+	if (!isRetryableKVError(cause)) return { retry: false };
+	return {
+		retry: true,
+		retryAfterMs: isKVPutRateLimitError(cause) ? 1e3 : 0
+	};
+}
+/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */
+var KVError = class extends AppError {
+	_tag = "KVError";
+	classification;
+	retryable;
+	operation;
+	key;
+	cause;
+	kv;
+	context;
+	constructor(args) {
+		const kv = extractKVMeta(args.cause);
+		const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause);
+		const keyContext = args.key === void 0 ? "" : ` for key "${args.key}"`;
+		super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause });
+		this.operation = args.operation;
+		this.key = args.key;
+		this.cause = args.cause;
+		this.kv = kv;
+		this.context = {
+			operation: args.operation,
+			key: args.key,
+			kv
+		};
+		this.retryable = isRetryableKVError(args.cause);
+		this.classification = isTerminalKVError(args.cause) ? "terminal" : this.retryable ? "transient" : "unknown";
+	}
+};
+function getDeepErrorMessage(cause) {
+	if (typeof cause === "string") return cause;
+	if (cause === null || cause === void 0) return "";
+	if (typeof cause === "number" || typeof cause === "boolean" || typeof cause === "bigint") return String(cause);
+	if (typeof cause !== "object") return "";
+	return `${"message" in cause && typeof cause.message === "string" ? cause.message : ""} ${"cause" in cause ? getDeepErrorMessage(cause.cause) : ""}`.trim();
+}
+
+//#endregion
+export { isRetryableKVError as a, isKVPutRateLimitError as i, decideKVRetry as n, isTerminalKVError as o, extractKVMeta as r, isTransientKVError as s, KVError as t };
+//# sourceMappingURL=kv-errors-BUTpFy0t.js.map

package/dist/kv-errors-BUTpFy0t.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-errors-BUTpFy0t.js","names":[],"sources":["../src/infrastructure/cloudflare/kv-errors.ts"],"sourcesContent":["import {\n  AppError,\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientTransportError,\n  type FailureClassification,\n} from '@/core'\n\n/** KV operations recognized in binding error messages. */\nexport type KVOperation = 'get' | 'put' | 'delete' | 'list'\n\n/** KV failure kinds retained from Typist's binding tests. */\nexport type KVErrorKind =\n  | 'invalid_key'\n  | 'key_too_large'\n  | 'invalid_expiration_ttl'\n  | 'invalid_expiration'\n  | 'invalid_cache_ttl'\n  | 'invalid_list_limit'\n  | 'value_too_large'\n  | 'client_error'\n  | 'rate_limited'\n  | 'server_error'\n\n/** Evidence extracted from a KV error and its causes. */\nexport interface KVErrorMeta {\n  kind: KVErrorKind\n  message: string\n  status?: number | undefined\n  operation?: Uppercase<KVOperation> | undefined\n}\n\n/** Extract Typist's verified KV message formats, including nested causes. */\nexport function extractKVMeta(cause: unknown): KVErrorMeta | undefined {\n  const message = getDeepErrorMessage(cause)\n  if (!message) return undefined\n  const statusMatch = message.match(/\\bKV\\s+(GET|PUT|DELETE|LIST)\\s+failed:\\s+(\\d{3})\\b/)\n  // SAFETY: The regular expression permits only uppercase KV operation names in this capture.\n  const operation = statusMatch?.[1] as Uppercase<KVOperation> | undefined\n  const status = statusMatch ? Number(statusMatch[2]) : undefined\n\n  if (/Key name cannot be empty/i.test(message)) {\n    return { kind: 'invalid_key', message, status, operation }\n  }\n  if (/exceeds key length limit/i.test(message)) {\n    return { kind: 'key_too_large', message, status, operation }\n  }\n  if (/Invalid expiration_ttl/i.test(message)) {\n    return { kind: 'invalid_expiration_ttl', message, status, operation }\n  }\n  if (/Invalid expiration of/i.test(message)) {\n    return { kind: 'invalid_expiration', message, status, operation }\n  }\n  if (/Invalid cache_ttl/i.test(message)) {\n    return { kind: 'invalid_cache_ttl', message, status, operation }\n  }\n  if (/Invalid key_count_limit/i.test(message)) {\n    return { kind: 'invalid_list_limit', message, status, operation }\n  }\n  if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) {\n    return { kind: 'value_too_large', message, status, operation }\n  }\n  if (status === 429) return { kind: 'rate_limited', message, status, operation }\n  if (status !== undefined && status >= 500) {\n    return { kind: 'server_error', message, status, operation }\n  }\n  if (status !== undefined && status >= 400) {\n    return { kind: 'client_error', message, status, operation }\n  }\n  return undefined\n}\n\n/** Identify recognized KV failures that another attempt cannot resolve. */\nexport function isTerminalKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  if (meta.kind === 'rate_limited' || meta.kind === 'server_error') return false\n  if (meta.status === 408) return false\n  return true\n}\n\n/** Identify a PUT rate limit that requires at least one second before retrying. */\nexport function isKVPutRateLimitError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  return meta?.operation === 'PUT' && meta.kind === 'rate_limited'\n}\n\n/** Identify PUT rate limits, server failures, and request timeouts. */\nexport function isTransientKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  return isKVPutRateLimitError(cause) || meta.kind === 'server_error' || meta.status === 408\n}\n\n/** Apply Typist's KV, overload, platform, and transport checks in their original order. */\nexport function isRetryableKVError(cause: unknown): boolean {\n  if (isTerminalKVError(cause)) return false\n  if (isTransientKVError(cause)) return true\n  if (isCloudflareOverloadedError(cause)) return false\n  return isCloudflareRetryableError(cause) || isTransientTransportError(cause)\n}\n\n/** Return the existing retry decision and minimum delay in milliseconds. */\nexport function decideKVRetry(\n  cause: unknown,\n): { retry: false } | { retry: true; retryAfterMs: number } {\n  if (!isRetryableKVError(cause)) return { retry: false }\n  return { retry: true, retryAfterMs: isKVPutRateLimitError(cause) ? 1_000 : 0 }\n}\n\n/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */\nexport class KVError extends AppError {\n  readonly _tag = 'KVError'\n  readonly classification: FailureClassification\n  retryable: boolean\n  readonly operation: KVOperation\n  readonly key?: string | undefined\n  override readonly cause: unknown\n  readonly kv?: KVErrorMeta | undefined\n  readonly context: {\n    operation: KVOperation\n    key?: string | undefined\n    kv?: KVErrorMeta | undefined\n  }\n\n  constructor(args: { operation: KVOperation; key?: string | undefined; cause: unknown }) {\n    const kv = extractKVMeta(args.cause)\n    const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause)\n    const keyContext = args.key === undefined ? '' : ` for key \"${args.key}\"`\n    super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause })\n    this.operation = args.operation\n    this.key = args.key\n    this.cause = args.cause\n    this.kv = kv\n    this.context = { operation: args.operation, key: args.key, kv }\n    this.retryable = isRetryableKVError(args.cause)\n    this.classification = isTerminalKVError(args.cause)\n      ? 'terminal'\n      : this.retryable\n        ? 'transient'\n        : 'unknown'\n  }\n}\n\n// oxlint-disable anti-slop/no-runtime-typeof -- Preserve Typist's primitive messages and nested causes at the raw binding boundary.\nfunction getDeepErrorMessage(cause: unknown): string {\n  if (typeof cause === 'string') return cause\n  if (cause === null || cause === undefined) return ''\n  if (typeof cause === 'number' || typeof cause === 'boolean' || typeof cause === 'bigint') {\n    return String(cause)\n  }\n  if (typeof cause !== 'object') return ''\n  const message = 'message' in cause && typeof cause.message === 'string' ? cause.message : ''\n  const causeMessage = 'cause' in cause ? getDeepErrorMessage(cause.cause) : ''\n  return `${message} ${causeMessage}`.trim()\n}\n// oxlint-enable anti-slop/no-runtime-typeof\n"],"mappings":";;;;AAiCA,SAAgB,cAAc,OAAyC;CACrE,MAAM,UAAU,oBAAoB,KAAK;CACzC,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,cAAc,QAAQ,MAAM,oDAAoD;CAEtF,MAAM,YAAY,cAAc;CAChC,MAAM,SAAS,cAAc,OAAO,YAAY,EAAE,IAAI;CAEtD,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAe;EAAS;EAAQ;CAAU;CAE3D,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAiB;EAAS;EAAQ;CAAU;CAE7D,IAAI,0BAA0B,KAAK,OAAO,GACxC,OAAO;EAAE,MAAM;EAA0B;EAAS;EAAQ;CAAU;CAEtE,IAAI,yBAAyB,KAAK,OAAO,GACvC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,qBAAqB,KAAK,OAAO,GACnC,OAAO;EAAE,MAAM;EAAqB;EAAS;EAAQ;CAAU;CAEjE,IAAI,2BAA2B,KAAK,OAAO,GACzC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,6CAA6C,KAAK,OAAO,GAC3D,OAAO;EAAE,MAAM;EAAmB;EAAS;EAAQ;CAAU;CAE/D,IAAI,WAAW,KAAK,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAC9E,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAE5D,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;AAG9D;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,gBAAgB,OAAO;CACzE,IAAI,KAAK,WAAW,KAAK,OAAO;CAChC,OAAO;AACT;;AAGA,SAAgB,sBAAsB,OAAyB;CAC7D,MAAM,OAAO,cAAc,KAAK;CAChC,OAAO,MAAM,cAAc,SAAS,KAAK,SAAS;AACpD;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,OAAO,sBAAsB,KAAK,KAAK,KAAK,SAAS,kBAAkB,KAAK,WAAW;AACzF;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,IAAI,kBAAkB,KAAK,GAAG,OAAO;CACrC,IAAI,mBAAmB,KAAK,GAAG,OAAO;CACtC,IAAI,4BAA4B,KAAK,GAAG,OAAO;CAC/C,OAAO,2BAA2B,KAAK,KAAK,0BAA0B,KAAK;AAC7E;;AAGA,SAAgB,cACd,OAC0D;CAC1D,IAAI,CAAC,mBAAmB,KAAK,GAAG,OAAO,EAAE,OAAO,MAAM;CACtD,OAAO;EAAE,OAAO;EAAM,cAAc,sBAAsB,KAAK,IAAI,MAAQ;CAAE;AAC/E;;AAGA,IAAa,UAAb,cAA6B,SAAS;CACpC,AAAS,OAAO;CAChB,AAAS;CACT;CACA,AAAS;CACT,AAAS;CACT,AAAkB;CAClB,AAAS;CACT,AAAS;CAMT,YAAY,MAA4E;EACtF,MAAM,KAAK,cAAc,KAAK,KAAK;EACnC,MAAM,eAAe,oBAAoB,KAAK,KAAK,KAAK,OAAO,KAAK,KAAK;EACzE,MAAM,aAAa,KAAK,QAAQ,SAAY,KAAK,aAAa,KAAK,IAAI;EACvE,MAAM,MAAM,KAAK,UAAU,SAAS,WAAW,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,CAAC;EACxF,KAAK,YAAY,KAAK;EACtB,KAAK,MAAM,KAAK;EAChB,KAAK,QAAQ,KAAK;EAClB,KAAK,KAAK;EACV,KAAK,UAAU;GAAE,WAAW,KAAK;GAAW,KAAK,KAAK;GAAK;EAAG;EAC9D,KAAK,YAAY,mBAAmB,KAAK,KAAK;EAC9C,KAAK,iBAAiB,kBAAkB,KAAK,KAAK,IAC9C,aACA,KAAK,YACH,cACA;CACR;AACF;AAGA,SAAS,oBAAoB,OAAwB;CACnD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,UAAU,QAAQ,UAAU,QAAW,OAAO;CAClD,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,aAAa,OAAO,UAAU,UAC9E,OAAO,OAAO,KAAK;CAErB,IAAI,OAAO,UAAU,UAAU,OAAO;CAGtC,OAAO,GAFS,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,GAExE,GADG,WAAW,QAAQ,oBAAoB,MAAM,KAAK,IAAI,KACvC,KAAK;AAC3C"}

package/dist/metrics-CWv37yf9.js

@@ -0,0 +1,30 @@
+//#region src/infrastructure/posthog/metrics.ts
+/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
+var PostHogMetricsService = class {
+	client;
+	waitUntil;
+	/** Use the analytics client's metrics; the runtime owns each flush promise. */
+	constructor(client, waitUntil) {
+		this.client = client;
+		this.waitUntil = waitUntil;
+	}
+	/** Record a total and schedule its flush. */
+	count(name, value = 1, options) {
+		this.client.metrics.count(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+	/** Record a current value and schedule its flush. */
+	gauge(name, value, options) {
+		this.client.metrics.gauge(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+	/** Record an observation and schedule its flush. */
+	histogram(name, value, options) {
+		this.client.metrics.histogram(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+};
+
+//#endregion
+export { PostHogMetricsService as t };
+//# sourceMappingURL=metrics-CWv37yf9.js.map

package/dist/metrics-CWv37yf9.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-CWv37yf9.js","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"sourcesContent":["import type { PostHog } from 'posthog-node'\n\nimport type { MetricOptions, MetricsService } from '@/application'\n\n/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */\nexport class PostHogMetricsService implements MetricsService {\n  /** Use the analytics client's metrics; the runtime owns each flush promise. */\n  constructor(\n    private readonly client: Pick<PostHog, 'metrics'>,\n    private readonly waitUntil: (promise: Promise<unknown>) => void,\n  ) {}\n\n  /** Record a total and schedule its flush. */\n  count(name: string, value = 1, options?: MetricOptions): void {\n    this.client.metrics.count(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n\n  /** Record a current value and schedule its flush. */\n  gauge(name: string, value: number, options?: MetricOptions): void {\n    this.client.metrics.gauge(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n\n  /** Record an observation and schedule its flush. */\n  histogram(name: string, value: number, options?: MetricOptions): void {\n    this.client.metrics.histogram(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n}\n"],"mappings":";;AAKA,IAAa,wBAAb,MAA6D;CAGxC;CACA;;CAFnB,YACE,AAAiB,QACjB,AAAiB,WACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,MAAc,QAAQ,GAAG,SAA+B;EAC5D,KAAK,OAAO,QAAQ,MAAM,MAAM,OAAO,OAAO;EAC9C,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;;CAGA,MAAM,MAAc,OAAe,SAA+B;EAChE,KAAK,OAAO,QAAQ,MAAM,MAAM,OAAO,OAAO;EAC9C,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;;CAGA,UAAU,MAAc,OAAe,SAA+B;EACpE,KAAK,OAAO,QAAQ,UAAU,MAAM,OAAO,OAAO;EAClD,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;AACF"}

package/dist/metrics-cv9P5nvk.d.ts

@@ -0,0 +1,19 @@
+import { X as MetricOptions, Z as MetricsService } from "./index-lS_g1olK.js";
+import { PostHog } from "posthog-node";
+//#region src/infrastructure/posthog/metrics.d.ts
+/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
+declare class PostHogMetricsService implements MetricsService {
+  private readonly client;
+  private readonly waitUntil;
+  /** Use the analytics client's metrics; the runtime owns each flush promise. */
+  constructor(client: Pick<PostHog, 'metrics'>, waitUntil: (promise: Promise<unknown>) => void);
+  /** Record a total and schedule its flush. */
+  count(name: string, value?: number, options?: MetricOptions): void;
+  /** Record a current value and schedule its flush. */
+  gauge(name: string, value: number, options?: MetricOptions): void;
+  /** Record an observation and schedule its flush. */
+  histogram(name: string, value: number, options?: MetricOptions): void;
+}
+//#endregion
+export { PostHogMetricsService as t };
+//# sourceMappingURL=metrics-cv9P5nvk.d.ts.map

package/dist/metrics-cv9P5nvk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-cv9P5nvk.d.ts","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"mappings":";;;;cAKa,iCAAiC;mBAGzB;mBACA;;EAFnB,YACmB,QAAQ,KAAK,qBACb,YAAY,SAAS;;EAIxC,MAAM,cAAc,gBAAW,UAAU;;EAMzC,MAAM,cAAc,eAAe,UAAU;;EAM7C,UAAU,cAAc,eAAe,UAAU"}

package/dist/{outbox-repository-options-_B8l8l6l.d.ts → outbox-repository-options-15Sv9WnG.d.ts}

@@ -1,5 +1,5 @@
 import "./index-DUFS0SJ_.js";
-import { F as IEventCollector } from "./index-tNZHSCpJ.js";
+import { F as IEventCollector } from "./index-lS_g1olK.js";
 import { BatchItem } from "drizzle-orm/batch";
 //#region src/infrastructure/drizzle-schema.d.ts
 /**
@@ -23,4 +23,4 @@ declare const OUTBOX_REPOSITORY_DEFAULTS: {
 type OutboxRepositoryOptions = Readonly<Partial<typeof OUTBOX_REPOSITORY_DEFAULTS>>;
 //#endregion
 export { eventCollector as n, DrizzleSchema as r, OutboxRepositoryOptions as t };
-//# sourceMappingURL=outbox-repository-options-_B8l8l6l.d.ts.map
+//# sourceMappingURL=outbox-repository-options-15Sv9WnG.d.ts.map

package/dist/{outbox-repository-options-_B8l8l6l.d.ts.map → outbox-repository-options-15Sv9WnG.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"outbox-repository-options-_B8l8l6l.d.ts","names":[],"sources":["../src/infrastructure/drizzle-schema.ts","../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"mappings":";;;;;;;;KAKY,gBAAgB;;;;cCuBf,gBAAgB;;;;cC3BhB;EACX;EACA;EACA;;;KAIU,0BAA0B,SAAS,eAAe"}
+{"version":3,"file":"outbox-repository-options-15Sv9WnG.d.ts","names":[],"sources":["../src/infrastructure/drizzle-schema.ts","../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"mappings":";;;;;;;;KAKY,gBAAgB;;;;cCuBf,gBAAgB;;;;cC3BhB;EACX;EACA;EACA;;;KAIU,0BAA0B,SAAS,eAAe"}

package/dist/payment-service-DUYd3Itt.d.ts

@@ -0,0 +1,52 @@
+import Stripe from "stripe";
+//#region src/infrastructure/stripe/payment-service.d.ts
+/** Supply the same key and parameters when repeating one durable payment attempt. */
+type PaymentRequestOptions = Stripe.RequestOptions & Required<Pick<Stripe.RequestOptions, 'idempotencyKey'>>;
+/** Native Checkout parameters; the service selects payment or setup mode. */
+type CheckoutInput = Omit<Stripe.Checkout.SessionCreateParams, 'mode'>;
+/** A saved customer method; the service confirms the payment off-session. */
+type SavedMethodCharge = Omit<Stripe.PaymentIntentCreateParams, 'confirm' | 'off_session'> & Required<Pick<Stripe.PaymentIntentCreateParams, 'customer' | 'payment_method'>>;
+/** Native customer response, including Stripe request metadata. */
+type CustomerResult = Awaited<ReturnType<Stripe['customers']['create']>>;
+/** Native Checkout response. Its URL can be null; this does not confirm payment. */
+type CheckoutResult = Awaited<ReturnType<Stripe['checkout']['sessions']['create']>>;
+/** Native PaymentIntent response. Applications decide what each status permits. */
+type PaymentResult = Awaited<ReturnType<Stripe['paymentIntents']['create']>>;
+/**
+ * Stripe payment operations, with native types and stable keys for mutations.
+ * Rejects with PaymentServiceError for Stripe failures; non-Stripe failures propagate unchanged.
+ */
+interface IPaymentService {
+  /** Create a customer; the application owns persistence and reuse of the customer link. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Create one-time payment checkout; application fulfillment requires verified payment confirmation. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Create checkout in setup mode. The application records consent and verifies the saved method's owner. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Confirm a saved method off-session. PaymentServiceError retains card errors in cause. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Retrieve an existing payment without starting another payment attempt. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+}
+/**
+ * Ported from Typist's StripeClient request boundary; the native SDK now owns retries.
+ * The injected client owns retry and timeout defaults. Native request options can override them.
+ */
+declare class StripePaymentService implements IPaymentService {
+  private readonly stripe;
+  /** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */
+  constructor(stripe: Stripe);
+  /** Create a customer with a stable application key and preserve the native response. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Force payment mode after caller parameters; return the native Checkout Session. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force setup mode after caller parameters; this operation does not charge the customer. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force confirmation and off-session use; retain native card failures in PaymentServiceError.cause. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Preserve every native status and response field when reconciling an existing payment. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+}
+//#endregion
+export { PaymentRequestOptions as a, StripePaymentService as c, IPaymentService as i, CheckoutResult as n, PaymentResult as o, CustomerResult as r, SavedMethodCharge as s, CheckoutInput as t };
+//# sourceMappingURL=payment-service-DUYd3Itt.d.ts.map

package/dist/payment-service-DUYd3Itt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service-DUYd3Itt.d.ts","names":[],"sources":["../src/infrastructure/stripe/payment-service.ts"],"mappings":";;;KAKY,wBAAwB,OAAO,iBACzC,SAAS,KAAK,OAAO;;KAGX,gBAAgB,KAAK,OAAO,SAAS;;KAGrC,oBAAoB,KAAK,OAAO,wDAC1C,SAAS,KAAK,OAAO;;KAGX,iBAAiB,QAAQ,WAAW;;KAGpC,iBAAiB,QAAQ,WAAW;;KAGpC,gBAAgB,QAAQ,WAAW;;;;;UAM9B;;EAEf,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAEX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAE9E,mBAAmB,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAElF,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAEX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ;;;;;;cAOA,gCAAgC;mBAEd;;EAA7B,YAA6B,QAAQ;;EAGrC,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAKX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAO9E,mBACE,OAAO,eACP,SAAS,wBACR,QAAQ;;EAOX,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAOX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ"}

package/dist/payment-service.error-CqF7GkNp.js

@@ -0,0 +1,30 @@
+import { nt as AppError } from "./core-BiN6S_cm.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/stripe/payment-service.error.ts
+/** A final Stripe request failure. The caller logs once; native details remain in cause. */
+var PaymentServiceError = class extends AppError {
+	operation;
+	_tag = "PaymentServiceError";
+	classification;
+	/** Classify the final SDK error without scheduling another payment attempt. */
+	constructor(operation, cause) {
+		super(`Stripe request failed: ${operation}`, { cause });
+		this.operation = operation;
+		this.classification = classifyStripeError(cause);
+	}
+};
+function classifyStripeError(error) {
+	if (error.headers?.["stripe-should-retry"] === "false") return "terminal";
+	const status = error.statusCode;
+	if (status !== void 0 && status >= 400 && status < 500 && status !== 409 && status !== 429) return "terminal";
+	if (error instanceof Stripe.errors.StripeAuthenticationError || error instanceof Stripe.errors.StripePermissionError || error instanceof Stripe.errors.StripeInvalidRequestError || error instanceof Stripe.errors.StripeIdempotencyError || error instanceof Stripe.errors.StripeCardError) return "terminal";
+	if (error.headers?.["stripe-should-retry"] === "true") return "transient";
+	if (status === 409 || status === 429 || status !== void 0 && status >= 500) return "transient";
+	if (error instanceof Stripe.errors.StripeConnectionError || error instanceof Stripe.errors.StripeAPIError || error instanceof Stripe.errors.StripeRateLimitError) return "transient";
+	return "unknown";
+}
+
+//#endregion
+export { PaymentServiceError as t };
+//# sourceMappingURL=payment-service.error-CqF7GkNp.js.map

package/dist/payment-service.error-CqF7GkNp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.error-CqF7GkNp.js","names":[],"sources":["../src/infrastructure/stripe/payment-service.error.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { AppError, type FailureClassification } from '@/core'\n\n/** A final Stripe request failure. The caller logs once; native details remain in cause. */\nexport class PaymentServiceError extends AppError {\n  readonly _tag = 'PaymentServiceError'\n  readonly classification: FailureClassification\n\n  /** Classify the final SDK error without scheduling another payment attempt. */\n  constructor(\n    readonly operation: string,\n    cause: Stripe.errors.StripeError,\n  ) {\n    super(`Stripe request failed: ${operation}`, { cause })\n    this.classification = classifyStripeError(cause)\n  }\n}\n\nfunction classifyStripeError(error: Stripe.errors.StripeError): FailureClassification {\n  if (error.headers?.['stripe-should-retry'] === 'false') return 'terminal'\n  const status = error.statusCode\n  if (status !== undefined && status >= 400 && status < 500 && status !== 409 && status !== 429)\n    return 'terminal'\n  if (\n    error instanceof Stripe.errors.StripeAuthenticationError ||\n    error instanceof Stripe.errors.StripePermissionError ||\n    error instanceof Stripe.errors.StripeInvalidRequestError ||\n    error instanceof Stripe.errors.StripeIdempotencyError ||\n    error instanceof Stripe.errors.StripeCardError\n  )\n    return 'terminal'\n  if (error.headers?.['stripe-should-retry'] === 'true') return 'transient'\n  if (status === 409 || status === 429 || (status !== undefined && status >= 500))\n    return 'transient'\n  if (\n    error instanceof Stripe.errors.StripeConnectionError ||\n    error instanceof Stripe.errors.StripeAPIError ||\n    error instanceof Stripe.errors.StripeRateLimitError\n  )\n    return 'transient'\n  return 'unknown'\n}\n"],"mappings":";;;;;AAKA,IAAa,sBAAb,cAAyC,SAAS;CAMrC;CALX,AAAS,OAAO;CAChB,AAAS;;CAGT,YACE,AAAS,WACT,OACA;EACA,MAAM,0BAA0B,aAAa,EAAE,MAAM,CAAC;EAH7C;EAIT,KAAK,iBAAiB,oBAAoB,KAAK;CACjD;AACF;AAEA,SAAS,oBAAoB,OAAyD;CACpF,IAAI,MAAM,UAAU,2BAA2B,SAAS,OAAO;CAC/D,MAAM,SAAS,MAAM;CACrB,IAAI,WAAW,UAAa,UAAU,OAAO,SAAS,OAAO,WAAW,OAAO,WAAW,KACxF,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,0BAC/B,iBAAiB,OAAO,OAAO,iBAE/B,OAAO;CACT,IAAI,MAAM,UAAU,2BAA2B,QAAQ,OAAO;CAC9D,IAAI,WAAW,OAAO,WAAW,OAAQ,WAAW,UAAa,UAAU,KACzE,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,kBAC/B,iBAAiB,OAAO,OAAO,sBAE/B,OAAO;CACT,OAAO;AACT"}

package/dist/postgres.d.ts

@@ -1,6 +1,6 @@
 import { W as DomainEvent, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-DUFS0SJ_.js";
-import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-tNZHSCpJ.js";
-import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-_B8l8l6l.js";
+import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-lS_g1olK.js";
+import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-15Sv9WnG.js";
 import { ExtractTablesWithRelations } from "drizzle-orm";
 import { PostgresJsDatabase, PostgresJsTransaction, drizzle } from "drizzle-orm/postgres-js";
 //#region src/infrastructure/postgres/postgres-database-types.d.ts

package/dist/posthog/metrics.d.ts

@@ -1,18 +1,2 @@
-import { J as MetricOptions, Y as MetricsService } from "../index-tNZHSCpJ.js";
-import { PostHog } from "posthog-node";
-//#region src/infrastructure/posthog/metrics.d.ts
-/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
-export declare class PostHogMetricsService implements MetricsService {
-  private readonly client;
-  private readonly waitUntil;
-  /** Use the analytics client's metrics; the runtime owns each flush promise. */
-  constructor(client: Pick<PostHog, 'metrics'>, waitUntil: (promise: Promise<unknown>) => void);
-  /** Record a total and schedule its flush. */
-  count(name: string, value?: number, options?: MetricOptions): void;
-  /** Record a current value and schedule its flush. */
-  gauge(name: string, value: number, options?: MetricOptions): void;
-  /** Record an observation and schedule its flush. */
-  histogram(name: string, value: number, options?: MetricOptions): void;
-}
-//#endregion
-//# sourceMappingURL=metrics.d.ts.map
+import { t as PostHogMetricsService } from "../metrics-cv9P5nvk.js";
+export { PostHogMetricsService };

package/dist/posthog/metrics.js

@@ -1,30 +1,3 @@
-//#region src/infrastructure/posthog/metrics.ts
-/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
-var PostHogMetricsService = class {
-	client;
-	waitUntil;
-	/** Use the analytics client's metrics; the runtime owns each flush promise. */
-	constructor(client, waitUntil) {
-		this.client = client;
-		this.waitUntil = waitUntil;
-	}
-	/** Record a total and schedule its flush. */
-	count(name, value = 1, options) {
-		this.client.metrics.count(name, value, options);
-		this.waitUntil(this.client.metrics.flush());
-	}
-	/** Record a current value and schedule its flush. */
-	gauge(name, value, options) {
-		this.client.metrics.gauge(name, value, options);
-		this.waitUntil(this.client.metrics.flush());
-	}
-	/** Record an observation and schedule its flush. */
-	histogram(name, value, options) {
-		this.client.metrics.histogram(name, value, options);
-		this.waitUntil(this.client.metrics.flush());
-	}
-};
+import { t as PostHogMetricsService } from "../metrics-CWv37yf9.js";
 
-//#endregion
-export { PostHogMetricsService };
-//# sourceMappingURL=metrics.js.map
+export { PostHogMetricsService };

package/dist/posthog/server.d.ts

@@ -1,6 +1,6 @@
 import { Gt as AnalyticsEventIdentity, Kt as AnalyticsEventInput, qt as AnalyticsProperties } from "../index-DUFS0SJ_.js";
-import { Z as AnalyticsService } from "../index-tNZHSCpJ.js";
-import { PostHogMetricsService } from "./metrics.js";
+import { $ as AnalyticsService } from "../index-lS_g1olK.js";
+import { t as PostHogMetricsService } from "../metrics-cv9P5nvk.js";
 import { PostHog, PostHogOptions } from "posthog-node";
 //#region src/infrastructure/posthog/server.d.ts
 /** Deployment values and SDK options; the runtime owns delivery promises. */

package/dist/posthog/server.js

@@ -1,5 +1,5 @@
 import { tt as MissingConfigurationError } from "../core-BiN6S_cm.js";
-import { PostHogMetricsService } from "./metrics.js";
+import { t as PostHogMetricsService } from "../metrics-CWv37yf9.js";
 import { PostHog } from "posthog-node";
 
 //#region src/infrastructure/posthog/server.ts

package/dist/r2-errors-rk7n7rvk.js

@@ -0,0 +1,90 @@
+import { nt as AppError, u as classifyBoundaryError, v as isAbortError } from "./core-BiN6S_cm.js";
+import { z } from "zod";
+
+//#region src/infrastructure/cloudflare/r2-errors.ts
+const R2FailureSchema = z.object({
+	code: z.number().int().positive(),
+	action: z.string().optional()
+});
+const classifications = /* @__PURE__ */ new Map([
+	[10001, "transient"],
+	[10043, "transient"],
+	[10054, "transient"],
+	[10058, "transient"],
+	[10013, "transient"],
+	[10002, "terminal"],
+	[10003, "terminal"],
+	[10018, "terminal"],
+	[10035, "terminal"],
+	[10042, "terminal"],
+	[10005, "terminal"],
+	[10006, "terminal"],
+	[10008, "terminal"],
+	[10009, "terminal"],
+	[10073, "terminal"],
+	[10007, "terminal"],
+	[10020, "terminal"],
+	[100100, "terminal"],
+	[10012, "terminal"],
+	[10069, "terminal"],
+	[10033, "terminal"],
+	[10014, "terminal"],
+	[10037, "terminal"],
+	[10039, "terminal"],
+	[10031, "terminal"],
+	[10011, "terminal"],
+	[10024, "terminal"],
+	[10025, "terminal"],
+	[10048, "terminal"]
+]);
+function extractR2Failure(cause) {
+	if (!(cause instanceof Error)) return void 0;
+	const parsed = R2FailureSchema.safeParse(cause);
+	if (parsed.success) return parsed.data;
+	const match = /\((\d{5,6})\)\s*$/.exec(cause.message);
+	return match?.[1] === void 0 ? void 0 : { code: Number(match[1]) };
+}
+function classifyR2Code(cause) {
+	const failure = extractR2Failure(cause);
+	return failure === void 0 ? void 0 : classifications.get(failure.code) ?? "unknown";
+}
+function classifyR2Error(cause) {
+	if (isAbortError(cause)) return "terminal";
+	if (cause instanceof AppError) return cause.classification;
+	return classifyBoundaryError({
+		cause,
+		classifyBoundary: classifyR2Code,
+		includeCloudflare: true
+	});
+}
+/** A raw binding failure after one attempt. Classification does not establish whether a mutation committed. */
+var R2Error = class extends AppError {
+	_tag = "R2Error";
+	classification;
+	operation;
+	r2;
+	cause;
+	constructor(input) {
+		super(`R2 ${input.operation} failed`, { cause: input.cause });
+		this.operation = input.operation;
+		this.cause = input.cause;
+		this.r2 = extractR2Failure(input.cause);
+		this.classification = classifyR2Error(input.cause);
+	}
+};
+/** JSON serialization or syntax failed. Binding and body-read failures use R2Error. */
+var R2JsonError = class extends AppError {
+	_tag = "R2JsonError";
+	classification = "terminal";
+	operation;
+	cause;
+	constructor(input) {
+		super(`R2 JSON ${input.operation} failed`, { cause: input.cause });
+		this.operation = input.operation;
+		this.cause = input.cause;
+	}
+};
+
+//#endregion
+export { R2JsonError as n, R2Error as t };
+//# sourceMappingURL=r2-errors-rk7n7rvk.js.map