better-ship 0.25.0 → 0.27.0

package/dist/cloudflare/turnstile.js

@@ -0,0 +1,191 @@
+import { b as shouldRetryFailure, c as exponentialEqualJitterMs, nt as AppError, u as classifyBoundaryError } from "../core-BiN6S_cm.js";
+import { z } from "zod";
+import { Result } from "better-result";
+
+//#region src/infrastructure/cloudflare/turnstile/turnstile.error.ts
+/**
+* Siteverify did not produce a verdict.
+* A rejected token is not this error. The caller logs it once.
+*/
+var TurnstileVerificationError = class extends AppError {
+	_tag = "TurnstileVerificationError";
+	classification;
+	errorCodes;
+	constructor(args) {
+		super("Turnstile siteverify could not produce a verdict", { cause: args.cause });
+		this.classification = args.classification;
+		this.errorCodes = args.errorCodes;
+	}
+};
+
+//#endregion
+//#region src/infrastructure/cloudflare/turnstile/turnstile.ts
+/**
+* Turnstile siteverify. Ported from Suparelay `verify-turnstile.ts` and Typist `turnstile.ts`.
+* A rejection is a verdict. This module does not log, and one call retries with one idempotency key.
+*/
+const SITEVERIFY_URL = "https://challenges.cloudflare.com/turnstile/v0/siteverify";
+const MAX_TOKEN_LENGTH = 2048;
+const DEFAULT_TIMEOUT_MS = 1e4;
+const RETRY_TIMES = 2;
+const CONFIGURATION_CODES = /* @__PURE__ */ new Set([
+	"missing-input-secret",
+	"invalid-input-secret",
+	"bad-request"
+]);
+const SuccessBody = z.object({
+	success: z.literal(true),
+	hostname: z.string(),
+	challenge_ts: z.string(),
+	action: z.string().optional(),
+	metadata: z.object({ result_with_testing_key: z.boolean().optional() }).optional()
+});
+const FailureBody = z.object({
+	success: z.literal(false),
+	"error-codes": z.array(z.string()).default([])
+});
+var SiteverifyRetry = class extends Error {
+	errorCodes;
+	_tag = "SiteverifyRetry";
+	constructor(errorCodes, cause) {
+		super("Turnstile siteverify did not answer", { cause });
+		this.errorCodes = errorCodes;
+	}
+};
+/**
+* Ask siteverify whether this token is a solved challenge.
+* A rejection is a verdict. No verdict throws `TurnstileVerificationError`.
+* A transient failure retries twice with the same idempotency key.
+*/
+async function verifyTurnstile(check, options = {}) {
+	if (check.token.length > MAX_TOKEN_LENGTH) return {
+		_tag: "Rejected",
+		errorCodes: ["invalid-input-response"]
+	};
+	const idempotencyKey = resolveIdempotencyKey(check.idempotencyKey);
+	const result = await Result.tryPromise({
+		try: () => requestVerdict(check, idempotencyKey, options),
+		catch: (cause) => cause
+	}, { retry: {
+		times: RETRY_TIMES,
+		delayMs: (_cause, context) => exponentialEqualJitterMs(25, 200, context.attempt),
+		shouldRetry: (cause) => cause instanceof SiteverifyRetry && shouldRetryFailure({
+			classification: "transient",
+			repeatSafe: true,
+			owner: "immediate"
+		})
+	} });
+	if (result.isOk()) return result.value;
+	if (result.error instanceof TurnstileVerificationError) throw result.error;
+	if (result.error instanceof SiteverifyRetry) throw new TurnstileVerificationError({
+		classification: "transient",
+		errorCodes: result.error.errorCodes,
+		cause: result.error.cause
+	});
+	throw new TurnstileVerificationError({
+		classification: "unknown",
+		errorCodes: [],
+		cause: result.error
+	});
+}
+function resolveIdempotencyKey(key) {
+	if (key === void 0) return crypto.randomUUID();
+	if (z.uuid().safeParse(key).success) return key;
+	throw new TurnstileVerificationError({
+		classification: "terminal",
+		errorCodes: [],
+		cause: { idempotencyKey: "invalid" }
+	});
+}
+async function requestVerdict(check, idempotencyKey, options) {
+	const fetchImpl = options.fetch ?? fetch;
+	const fields = {
+		secret: check.secretKey,
+		response: check.token,
+		idempotency_key: idempotencyKey
+	};
+	const payload = check.remoteIp !== void 0 && check.remoteIp !== "" ? {
+		...fields,
+		remoteip: check.remoteIp
+	} : fields;
+	let response;
+	try {
+		response = await fetchImpl(SITEVERIFY_URL, {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify(payload),
+			signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS)
+		});
+	} catch (cause) {
+		throw transportFailure(cause);
+	}
+	const text = await response.text();
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch (cause) {
+		throw unparsedFailure(response.status, cause);
+	}
+	const success = SuccessBody.safeParse(parsed);
+	if (success.success) return decideSuccess(success.data, check);
+	const failure = FailureBody.safeParse(parsed);
+	if (failure.success) return decideFailure(failure.data["error-codes"], response.status);
+	throw unparsedFailure(response.status, { status: response.status });
+}
+function decideSuccess(body, check) {
+	if (check.expectedAction !== void 0 && body.action !== void 0 && body.action !== check.expectedAction) return {
+		_tag: "Rejected",
+		errorCodes: ["action-mismatch"]
+	};
+	if (!(body.metadata?.result_with_testing_key === true) && check.expectedHostnames !== void 0 && !check.expectedHostnames.includes(body.hostname)) return {
+		_tag: "Rejected",
+		errorCodes: ["hostname-mismatch"]
+	};
+	if (body.action === void 0) return {
+		_tag: "Accepted",
+		hostname: body.hostname,
+		challengeTs: body.challenge_ts
+	};
+	return {
+		_tag: "Accepted",
+		hostname: body.hostname,
+		challengeTs: body.challenge_ts,
+		action: body.action
+	};
+}
+function decideFailure(errorCodes, status) {
+	if (errorCodes.some((code) => CONFIGURATION_CODES.has(code))) throw verificationFailure("terminal", errorCodes, status);
+	if (errorCodes.includes("internal-error") || status === 429 || status >= 500) throw new SiteverifyRetry(errorCodes, { status });
+	return {
+		_tag: "Rejected",
+		errorCodes
+	};
+}
+function transportFailure(cause) {
+	const classification = classifyBoundaryError({
+		cause,
+		classifyBoundary: () => void 0,
+		includeCloudflare: false
+	});
+	if (classification === "transient") return new SiteverifyRetry([], cause);
+	return new TurnstileVerificationError({
+		classification,
+		errorCodes: [],
+		cause
+	});
+}
+function unparsedFailure(status, cause) {
+	if (status === 429 || status >= 500) return new SiteverifyRetry([], cause);
+	return verificationFailure("terminal", [], status);
+}
+function verificationFailure(classification, errorCodes, status) {
+	return new TurnstileVerificationError({
+		classification,
+		errorCodes,
+		cause: { status }
+	});
+}
+
+//#endregion
+export { TurnstileVerificationError, verifyTurnstile };
+//# sourceMappingURL=turnstile.js.map

package/dist/cloudflare/turnstile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnstile.js","names":[],"sources":["../../src/infrastructure/cloudflare/turnstile/turnstile.error.ts","../../src/infrastructure/cloudflare/turnstile/turnstile.ts"],"sourcesContent":["import { AppError, type FailureClassification } from '@/core'\n\n/**\n * Siteverify did not produce a verdict.\n * A rejected token is not this error. The caller logs it once.\n */\nexport class TurnstileVerificationError extends AppError {\n  readonly _tag = 'TurnstileVerificationError'\n  readonly classification: FailureClassification\n  readonly errorCodes: readonly string[]\n\n  constructor(args: {\n    readonly classification: FailureClassification\n    readonly errorCodes: readonly string[]\n    readonly cause: unknown\n  }) {\n    super('Turnstile siteverify could not produce a verdict', { cause: args.cause })\n    this.classification = args.classification\n    this.errorCodes = args.errorCodes\n  }\n}\n","import { Result } from 'better-result'\nimport { z } from 'zod'\n\nimport {\n  classifyBoundaryError,\n  exponentialEqualJitterMs,\n  shouldRetryFailure,\n  type FailureClassification,\n} from '@/core'\n\nimport { TurnstileVerificationError } from './turnstile.error.ts'\n\n/**\n * Turnstile siteverify. Ported from Suparelay `verify-turnstile.ts` and Typist `turnstile.ts`.\n * A rejection is a verdict. This module does not log, and one call retries with one idempotency key.\n */\n\nconst SITEVERIFY_URL = 'https://challenges.cloudflare.com/turnstile/v0/siteverify'\n\n// Cloudflare documents 2048 characters. The testing secret still accepts a longer token.\nconst MAX_TOKEN_LENGTH = 2048\n\n// Cloudflare's validation example stops at 10 seconds.\nconst DEFAULT_TIMEOUT_MS = 10_000\n\n// `times` counts retries after the first attempt, so a call stops at three attempts.\nconst RETRY_TIMES = 2\n\nconst CONFIGURATION_CODES: ReadonlySet<string> = new Set([\n  'missing-input-secret',\n  'invalid-input-secret',\n  'bad-request',\n])\n\nconst SuccessBody = z.object({\n  success: z.literal(true),\n  hostname: z.string(),\n  challenge_ts: z.string(),\n  action: z.string().optional(),\n  metadata: z.object({ result_with_testing_key: z.boolean().optional() }).optional(),\n})\n\nconst FailureBody = z.object({\n  success: z.literal(false),\n  'error-codes': z.array(z.string()).default([]),\n})\n\ntype SuccessBody = z.infer<typeof SuccessBody>\n\n/** The values siteverify needs. The secret stays in the caller. */\nexport type TurnstileCheck = {\n  readonly secretKey: string\n  readonly token: string\n  /** Visitor address from `CF-Connecting-IP`. Omit it when the request has none. */\n  readonly remoteIp?: string\n  /** Widget action. A present, different action rejects. A missing action does not. */\n  readonly expectedAction?: string\n  /** Allowed widget hostnames. A testing-key success skips this list. */\n  readonly expectedHostnames?: readonly string[]\n  /** UUID reused for this call's retries. Omit it and the call mints one. */\n  readonly idempotencyKey?: string\n}\n\n/** A solved challenge, or a refusal siteverify already decided. */\nexport type TurnstileVerdict =\n  | {\n      readonly _tag: 'Accepted'\n      readonly hostname: string\n      readonly challengeTs: string\n      readonly action?: string\n    }\n  | {\n      readonly _tag: 'Rejected'\n      readonly errorCodes: readonly string[]\n    }\n\n/** Deadline and fetch overrides. Production calls omit this argument. */\nexport type TurnstileVerifyOptions = {\n  /** Replaces global `fetch`. A test uses it for a response the testing secret cannot return. */\n  readonly fetch?: typeof fetch\n  /** Siteverify deadline in milliseconds. The default is 10 seconds. */\n  readonly timeoutMs?: number\n}\n\nclass SiteverifyRetry extends Error {\n  readonly _tag = 'SiteverifyRetry'\n\n  constructor(\n    readonly errorCodes: readonly string[],\n    cause: unknown,\n  ) {\n    super('Turnstile siteverify did not answer', { cause })\n  }\n}\n\n/**\n * Ask siteverify whether this token is a solved challenge.\n * A rejection is a verdict. No verdict throws `TurnstileVerificationError`.\n * A transient failure retries twice with the same idempotency key.\n */\nexport async function verifyTurnstile(\n  check: TurnstileCheck,\n  options: TurnstileVerifyOptions = {},\n): Promise<TurnstileVerdict> {\n  if (check.token.length > MAX_TOKEN_LENGTH) {\n    return { _tag: 'Rejected', errorCodes: ['invalid-input-response'] }\n  }\n  const idempotencyKey = resolveIdempotencyKey(check.idempotencyKey)\n  const result = await Result.tryPromise(\n    {\n      try: () => requestVerdict(check, idempotencyKey, options),\n      catch: (cause) => cause,\n    },\n    {\n      retry: {\n        times: RETRY_TIMES,\n        delayMs: (_cause, context) => exponentialEqualJitterMs(25, 200, context.attempt),\n        shouldRetry: (cause) =>\n          cause instanceof SiteverifyRetry &&\n          shouldRetryFailure({\n            classification: 'transient',\n            repeatSafe: true,\n            owner: 'immediate',\n          }),\n      },\n    },\n  )\n  if (result.isOk()) return result.value\n  if (result.error instanceof TurnstileVerificationError) throw result.error\n  if (result.error instanceof SiteverifyRetry) {\n    throw new TurnstileVerificationError({\n      classification: 'transient',\n      errorCodes: result.error.errorCodes,\n      cause: result.error.cause,\n    })\n  }\n  throw new TurnstileVerificationError({\n    classification: 'unknown',\n    errorCodes: [],\n    cause: result.error,\n  })\n}\n\nfunction resolveIdempotencyKey(key: string | undefined): string {\n  if (key === undefined) return crypto.randomUUID()\n  if (z.uuid().safeParse(key).success) return key\n  throw new TurnstileVerificationError({\n    classification: 'terminal',\n    errorCodes: [],\n    cause: { idempotencyKey: 'invalid' },\n  })\n}\n\nasync function requestVerdict(\n  check: TurnstileCheck,\n  idempotencyKey: string,\n  options: TurnstileVerifyOptions,\n): Promise<TurnstileVerdict> {\n  const fetchImpl = options.fetch ?? fetch\n  const fields = {\n    secret: check.secretKey,\n    response: check.token,\n    idempotency_key: idempotencyKey,\n  }\n  const payload =\n    check.remoteIp !== undefined && check.remoteIp !== ''\n      ? { ...fields, remoteip: check.remoteIp }\n      : fields\n\n  let response: Response\n  try {\n    response = await fetchImpl(SITEVERIFY_URL, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify(payload),\n      signal: AbortSignal.timeout(options.timeoutMs ?? DEFAULT_TIMEOUT_MS),\n    })\n  } catch (cause) {\n    throw transportFailure(cause)\n  }\n\n  const text = await response.text()\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(text)\n  } catch (cause) {\n    throw unparsedFailure(response.status, cause)\n  }\n\n  const success = SuccessBody.safeParse(parsed)\n  if (success.success) return decideSuccess(success.data, check)\n  const failure = FailureBody.safeParse(parsed)\n  if (failure.success) return decideFailure(failure.data['error-codes'], response.status)\n  throw unparsedFailure(response.status, { status: response.status })\n}\n\nfunction decideSuccess(body: SuccessBody, check: TurnstileCheck): TurnstileVerdict {\n  // A testing secret omits action. Compare only an action the response names.\n  if (\n    check.expectedAction !== undefined &&\n    body.action !== undefined &&\n    body.action !== check.expectedAction\n  ) {\n    return { _tag: 'Rejected', errorCodes: ['action-mismatch'] }\n  }\n  // A testing secret reports example.com, so the allowlist does not apply to it.\n  const testingKey = body.metadata?.result_with_testing_key === true\n  if (\n    !testingKey &&\n    check.expectedHostnames !== undefined &&\n    !check.expectedHostnames.includes(body.hostname)\n  ) {\n    return { _tag: 'Rejected', errorCodes: ['hostname-mismatch'] }\n  }\n  if (body.action === undefined) {\n    return { _tag: 'Accepted', hostname: body.hostname, challengeTs: body.challenge_ts }\n  }\n  return {\n    _tag: 'Accepted',\n    hostname: body.hostname,\n    challengeTs: body.challenge_ts,\n    action: body.action,\n  }\n}\n\nfunction decideFailure(errorCodes: readonly string[], status: number): TurnstileVerdict {\n  if (errorCodes.some((code) => CONFIGURATION_CODES.has(code))) {\n    throw verificationFailure('terminal', errorCodes, status)\n  }\n  if (errorCodes.includes('internal-error') || status === 429 || status >= 500) {\n    throw new SiteverifyRetry(errorCodes, { status })\n  }\n  return { _tag: 'Rejected', errorCodes }\n}\n\nfunction transportFailure(cause: unknown): Error {\n  const classification = classifyBoundaryError({\n    cause,\n    classifyBoundary: () => undefined,\n    includeCloudflare: false,\n  })\n  if (classification === 'transient') return new SiteverifyRetry([], cause)\n  return new TurnstileVerificationError({ classification, errorCodes: [], cause })\n}\n\nfunction unparsedFailure(status: number, cause: unknown): Error {\n  if (status === 429 || status >= 500) return new SiteverifyRetry([], cause)\n  return verificationFailure('terminal', [], status)\n}\n\nfunction verificationFailure(\n  classification: FailureClassification,\n  errorCodes: readonly string[],\n  status: number,\n): TurnstileVerificationError {\n  return new TurnstileVerificationError({\n    classification,\n    errorCodes,\n    cause: { status },\n  })\n}\n"],"mappings":";;;;;;;;;AAMA,IAAa,6BAAb,cAAgD,SAAS;CACvD,AAAS,OAAO;CAChB,AAAS;CACT,AAAS;CAET,YAAY,MAIT;EACD,MAAM,oDAAoD,EAAE,OAAO,KAAK,MAAM,CAAC;EAC/E,KAAK,iBAAiB,KAAK;EAC3B,KAAK,aAAa,KAAK;CACzB;AACF;;;;;;;;ACHA,MAAM,iBAAiB;AAGvB,MAAM,mBAAmB;AAGzB,MAAM,qBAAqB;AAG3B,MAAM,cAAc;AAEpB,MAAM,sCAA2C,IAAI,IAAI;CACvD;CACA;CACA;AACF,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;CAC3B,SAAS,EAAE,QAAQ,IAAI;CACvB,UAAU,EAAE,OAAO;CACnB,cAAc,EAAE,OAAO;CACvB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,UAAU,EAAE,OAAO,EAAE,yBAAyB,EAAE,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;AACnF,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;CAC3B,SAAS,EAAE,QAAQ,KAAK;CACxB,eAAe,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAuCD,IAAM,kBAAN,cAA8B,MAAM;CAIvB;CAHX,AAAS,OAAO;CAEhB,YACE,AAAS,YACT,OACA;EACA,MAAM,uCAAuC,EAAE,MAAM,CAAC;EAH7C;CAIX;AACF;;;;;;AAOA,eAAsB,gBACpB,OACA,UAAkC,CAAC,GACR;CAC3B,IAAI,MAAM,MAAM,SAAS,kBACvB,OAAO;EAAE,MAAM;EAAY,YAAY,CAAC,wBAAwB;CAAE;CAEpE,MAAM,iBAAiB,sBAAsB,MAAM,cAAc;CACjE,MAAM,SAAS,MAAM,OAAO,WAC1B;EACE,WAAW,eAAe,OAAO,gBAAgB,OAAO;EACxD,QAAQ,UAAU;CACpB,GACA,EACE,OAAO;EACL,OAAO;EACP,UAAU,QAAQ,YAAY,yBAAyB,IAAI,KAAK,QAAQ,OAAO;EAC/E,cAAc,UACZ,iBAAiB,mBACjB,mBAAmB;GACjB,gBAAgB;GAChB,YAAY;GACZ,OAAO;EACT,CAAC;CACL,EACF,CACF;CACA,IAAI,OAAO,KAAK,GAAG,OAAO,OAAO;CACjC,IAAI,OAAO,iBAAiB,4BAA4B,MAAM,OAAO;CACrE,IAAI,OAAO,iBAAiB,iBAC1B,MAAM,IAAI,2BAA2B;EACnC,gBAAgB;EAChB,YAAY,OAAO,MAAM;EACzB,OAAO,OAAO,MAAM;CACtB,CAAC;CAEH,MAAM,IAAI,2BAA2B;EACnC,gBAAgB;EAChB,YAAY,CAAC;EACb,OAAO,OAAO;CAChB,CAAC;AACH;AAEA,SAAS,sBAAsB,KAAiC;CAC9D,IAAI,QAAQ,QAAW,OAAO,OAAO,WAAW;CAChD,IAAI,EAAE,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,OAAO;CAC5C,MAAM,IAAI,2BAA2B;EACnC,gBAAgB;EAChB,YAAY,CAAC;EACb,OAAO,EAAE,gBAAgB,UAAU;CACrC,CAAC;AACH;AAEA,eAAe,eACb,OACA,gBACA,SAC2B;CAC3B,MAAM,YAAY,QAAQ,SAAS;CACnC,MAAM,SAAS;EACb,QAAQ,MAAM;EACd,UAAU,MAAM;EAChB,iBAAiB;CACnB;CACA,MAAM,UACJ,MAAM,aAAa,UAAa,MAAM,aAAa,KAC/C;EAAE,GAAG;EAAQ,UAAU,MAAM;CAAS,IACtC;CAEN,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,UAAU,gBAAgB;GACzC,QAAQ;GACR,SAAS,EAAE,gBAAgB,mBAAmB;GAC9C,MAAM,KAAK,UAAU,OAAO;GAC5B,QAAQ,YAAY,QAAQ,QAAQ,aAAa,kBAAkB;EACrE,CAAC;CACH,SAAS,OAAO;EACd,MAAM,iBAAiB,KAAK;CAC9B;CAEA,MAAM,OAAO,MAAM,SAAS,KAAK;CACjC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,SAAS,OAAO;EACd,MAAM,gBAAgB,SAAS,QAAQ,KAAK;CAC9C;CAEA,MAAM,UAAU,YAAY,UAAU,MAAM;CAC5C,IAAI,QAAQ,SAAS,OAAO,cAAc,QAAQ,MAAM,KAAK;CAC7D,MAAM,UAAU,YAAY,UAAU,MAAM;CAC5C,IAAI,QAAQ,SAAS,OAAO,cAAc,QAAQ,KAAK,gBAAgB,SAAS,MAAM;CACtF,MAAM,gBAAgB,SAAS,QAAQ,EAAE,QAAQ,SAAS,OAAO,CAAC;AACpE;AAEA,SAAS,cAAc,MAAmB,OAAyC;CAEjF,IACE,MAAM,mBAAmB,UACzB,KAAK,WAAW,UAChB,KAAK,WAAW,MAAM,gBAEtB,OAAO;EAAE,MAAM;EAAY,YAAY,CAAC,iBAAiB;CAAE;CAI7D,IACE,EAFiB,KAAK,UAAU,4BAA4B,SAG5D,MAAM,sBAAsB,UAC5B,CAAC,MAAM,kBAAkB,SAAS,KAAK,QAAQ,GAE/C,OAAO;EAAE,MAAM;EAAY,YAAY,CAAC,mBAAmB;CAAE;CAE/D,IAAI,KAAK,WAAW,QAClB,OAAO;EAAE,MAAM;EAAY,UAAU,KAAK;EAAU,aAAa,KAAK;CAAa;CAErF,OAAO;EACL,MAAM;EACN,UAAU,KAAK;EACf,aAAa,KAAK;EAClB,QAAQ,KAAK;CACf;AACF;AAEA,SAAS,cAAc,YAA+B,QAAkC;CACtF,IAAI,WAAW,MAAM,SAAS,oBAAoB,IAAI,IAAI,CAAC,GACzD,MAAM,oBAAoB,YAAY,YAAY,MAAM;CAE1D,IAAI,WAAW,SAAS,gBAAgB,KAAK,WAAW,OAAO,UAAU,KACvE,MAAM,IAAI,gBAAgB,YAAY,EAAE,OAAO,CAAC;CAElD,OAAO;EAAE,MAAM;EAAY;CAAW;AACxC;AAEA,SAAS,iBAAiB,OAAuB;CAC/C,MAAM,iBAAiB,sBAAsB;EAC3C;EACA,wBAAwB;EACxB,mBAAmB;CACrB,CAAC;CACD,IAAI,mBAAmB,aAAa,OAAO,IAAI,gBAAgB,CAAC,GAAG,KAAK;CACxE,OAAO,IAAI,2BAA2B;EAAE;EAAgB,YAAY,CAAC;EAAG;CAAM,CAAC;AACjF;AAEA,SAAS,gBAAgB,QAAgB,OAAuB;CAC9D,IAAI,WAAW,OAAO,UAAU,KAAK,OAAO,IAAI,gBAAgB,CAAC,GAAG,KAAK;CACzE,OAAO,oBAAoB,YAAY,CAAC,GAAG,MAAM;AACnD;AAEA,SAAS,oBACP,gBACA,YACA,QAC4B;CAC5B,OAAO,IAAI,2BAA2B;EACpC;EACA;EACA,OAAO,EAAE,OAAO;CAClB,CAAC;AACH"}

package/dist/durable-object-errors-DkMFXQnK.js

@@ -0,0 +1,48 @@
+import { _ as isTransientCloudflareRuntimeError, g as isCloudflareRetryableError, h as isCloudflareOverloadedError, nt as AppError, v as isAbortError, y as isTransientTransportError } from "./core-BiN6S_cm.js";
+import { z } from "zod";
+
+//#region src/infrastructure/cloudflare/durable-object-errors.ts
+/** Stable tag for a failed Durable Object call. */
+const DURABLE_OBJECT_CALL_ERROR = "DurableObjectCallError";
+const RemoteClassifiedErrorSchema = z.object({
+	_tag: z.string(),
+	classification: z.enum([
+		"transient",
+		"terminal",
+		"unknown"
+	]),
+	remote: z.literal(true)
+});
+const RemoteCallErrorSchema = RemoteClassifiedErrorSchema.extend({
+	_tag: z.literal(DURABLE_OBJECT_CALL_ERROR),
+	cause: z.unknown()
+});
+/** Recognize a judged local or remote error without admitting its tag to the public error table. */
+function isClassifiedDurableObjectError(cause) {
+	return cause instanceof AppError || cause instanceof Error && RemoteClassifiedErrorSchema.safeParse(cause).success;
+}
+/** Classify the error itself. Its cause remains diagnostic evidence, not a second retry decision. */
+function classifyDurableObjectError(cause) {
+	if (isAbortError(cause)) return "terminal";
+	if (isClassifiedDurableObjectError(cause)) return cause.classification;
+	if (isCloudflareOverloadedError(cause)) return "terminal";
+	if (isCloudflareRetryableError(cause) || isTransientCloudflareRuntimeError(cause) || isTransientTransportError(cause)) return "transient";
+	return "unknown";
+}
+/** Identify a local call error or its validated Workers RPC representation. */
+function isDurableObjectCallError(cause) {
+	return cause instanceof DurableObjectCallError || cause instanceof Error && RemoteCallErrorSchema.safeParse(cause).success;
+}
+/** A call failed after retries stopped. Classification does not establish repeat safety. */
+var DurableObjectCallError = class extends AppError {
+	_tag = DURABLE_OBJECT_CALL_ERROR;
+	classification;
+	constructor(args) {
+		super("Durable Object call failed", { cause: args.cause });
+		this.classification = classifyDurableObjectError(args.cause);
+	}
+};
+
+//#endregion
+export { isDurableObjectCallError as a, isClassifiedDurableObjectError as i, DurableObjectCallError as n, classifyDurableObjectError as r, DURABLE_OBJECT_CALL_ERROR as t };
+//# sourceMappingURL=durable-object-errors-DkMFXQnK.js.map

package/dist/durable-object-errors-DkMFXQnK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-object-errors-DkMFXQnK.js","names":[],"sources":["../src/infrastructure/cloudflare/durable-object-errors.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport {\n  AppError,\n  isAbortError,\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientCloudflareRuntimeError,\n  isTransientTransportError,\n  type FailureClassification,\n} from '@/core'\n\n/** Stable tag for a failed Durable Object call. */\nexport const DURABLE_OBJECT_CALL_ERROR = 'DurableObjectCallError'\n\nconst RemoteClassifiedErrorSchema = z.object({\n  _tag: z.string(),\n  classification: z.enum(['transient', 'terminal', 'unknown']),\n  remote: z.literal(true),\n})\n\nconst RemoteCallErrorSchema = RemoteClassifiedErrorSchema.extend({\n  _tag: z.literal(DURABLE_OBJECT_CALL_ERROR),\n  cause: z.unknown(),\n})\n\n/** Recognize a judged local or remote error without admitting its tag to the public error table. */\nexport function isClassifiedDurableObjectError(\n  cause: unknown,\n): cause is AppError | (Error & z.output<typeof RemoteClassifiedErrorSchema>) {\n  return (\n    cause instanceof AppError ||\n    (cause instanceof Error && RemoteClassifiedErrorSchema.safeParse(cause).success)\n  )\n}\n\n/** Classify the error itself. Its cause remains diagnostic evidence, not a second retry decision. */\nexport function classifyDurableObjectError(cause: unknown): FailureClassification {\n  if (isAbortError(cause)) return 'terminal'\n  if (isClassifiedDurableObjectError(cause)) return cause.classification\n  if (isCloudflareOverloadedError(cause)) return 'terminal'\n  if (\n    isCloudflareRetryableError(cause) ||\n    isTransientCloudflareRuntimeError(cause) ||\n    isTransientTransportError(cause)\n  )\n    return 'transient'\n  return 'unknown'\n}\n\n/** Identify a local call error or its validated Workers RPC representation. */\nexport function isDurableObjectCallError(\n  cause: unknown,\n): cause is DurableObjectCallError | (Error & z.output<typeof RemoteCallErrorSchema>) {\n  return (\n    cause instanceof DurableObjectCallError ||\n    (cause instanceof Error && RemoteCallErrorSchema.safeParse(cause).success)\n  )\n}\n\n/** A call failed after retries stopped. Classification does not establish repeat safety. */\nexport class DurableObjectCallError extends AppError {\n  readonly _tag = DURABLE_OBJECT_CALL_ERROR\n  readonly classification: FailureClassification\n\n  constructor(args: { readonly cause: unknown }) {\n    super('Durable Object call failed', { cause: args.cause })\n    this.classification = classifyDurableObjectError(args.cause)\n  }\n}\n"],"mappings":";;;;;AAaA,MAAa,4BAA4B;AAEzC,MAAM,8BAA8B,EAAE,OAAO;CAC3C,MAAM,EAAE,OAAO;CACf,gBAAgB,EAAE,KAAK;EAAC;EAAa;EAAY;CAAS,CAAC;CAC3D,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAED,MAAM,wBAAwB,4BAA4B,OAAO;CAC/D,MAAM,EAAE,QAAQ,yBAAyB;CACzC,OAAO,EAAE,QAAQ;AACnB,CAAC;;AAGD,SAAgB,+BACd,OAC4E;CAC5E,OACE,iBAAiB,YAChB,iBAAiB,SAAS,4BAA4B,UAAU,KAAK,CAAC,CAAC;AAE5E;;AAGA,SAAgB,2BAA2B,OAAuC;CAChF,IAAI,aAAa,KAAK,GAAG,OAAO;CAChC,IAAI,+BAA+B,KAAK,GAAG,OAAO,MAAM;CACxD,IAAI,4BAA4B,KAAK,GAAG,OAAO;CAC/C,IACE,2BAA2B,KAAK,KAChC,kCAAkC,KAAK,KACvC,0BAA0B,KAAK,GAE/B,OAAO;CACT,OAAO;AACT;;AAGA,SAAgB,yBACd,OACoF;CACpF,OACE,iBAAiB,0BAChB,iBAAiB,SAAS,sBAAsB,UAAU,KAAK,CAAC,CAAC;AAEtE;;AAGA,IAAa,yBAAb,cAA4C,SAAS;CACnD,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAAmC;EAC7C,MAAM,8BAA8B,EAAE,OAAO,KAAK,MAAM,CAAC;EACzD,KAAK,iBAAiB,2BAA2B,KAAK,KAAK;CAC7D;AACF"}

package/dist/kv-errors-BUTpFy0t.js

@@ -0,0 +1,144 @@
+import { g as isCloudflareRetryableError, h as isCloudflareOverloadedError, nt as AppError, y as isTransientTransportError } from "./core-BiN6S_cm.js";
+
+//#region src/infrastructure/cloudflare/kv-errors.ts
+/** Extract Typist's verified KV message formats, including nested causes. */
+function extractKVMeta(cause) {
+	const message = getDeepErrorMessage(cause);
+	if (!message) return void 0;
+	const statusMatch = message.match(/\bKV\s+(GET|PUT|DELETE|LIST)\s+failed:\s+(\d{3})\b/);
+	const operation = statusMatch?.[1];
+	const status = statusMatch ? Number(statusMatch[2]) : void 0;
+	if (/Key name cannot be empty/i.test(message)) return {
+		kind: "invalid_key",
+		message,
+		status,
+		operation
+	};
+	if (/exceeds key length limit/i.test(message)) return {
+		kind: "key_too_large",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration_ttl/i.test(message)) return {
+		kind: "invalid_expiration_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid expiration of/i.test(message)) return {
+		kind: "invalid_expiration",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid cache_ttl/i.test(message)) return {
+		kind: "invalid_cache_ttl",
+		message,
+		status,
+		operation
+	};
+	if (/Invalid key_count_limit/i.test(message)) return {
+		kind: "invalid_list_limit",
+		message,
+		status,
+		operation
+	};
+	if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) return {
+		kind: "value_too_large",
+		message,
+		status,
+		operation
+	};
+	if (status === 429) return {
+		kind: "rate_limited",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 500) return {
+		kind: "server_error",
+		message,
+		status,
+		operation
+	};
+	if (status !== void 0 && status >= 400) return {
+		kind: "client_error",
+		message,
+		status,
+		operation
+	};
+}
+/** Identify recognized KV failures that another attempt cannot resolve. */
+function isTerminalKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	if (meta.kind === "rate_limited" || meta.kind === "server_error") return false;
+	if (meta.status === 408) return false;
+	return true;
+}
+/** Identify a PUT rate limit that requires at least one second before retrying. */
+function isKVPutRateLimitError(cause) {
+	const meta = extractKVMeta(cause);
+	return meta?.operation === "PUT" && meta.kind === "rate_limited";
+}
+/** Identify PUT rate limits, server failures, and request timeouts. */
+function isTransientKVError(cause) {
+	const meta = extractKVMeta(cause);
+	if (!meta) return false;
+	return isKVPutRateLimitError(cause) || meta.kind === "server_error" || meta.status === 408;
+}
+/** Apply Typist's KV, overload, platform, and transport checks in their original order. */
+function isRetryableKVError(cause) {
+	if (isTerminalKVError(cause)) return false;
+	if (isTransientKVError(cause)) return true;
+	if (isCloudflareOverloadedError(cause)) return false;
+	return isCloudflareRetryableError(cause) || isTransientTransportError(cause);
+}
+/** Return the existing retry decision and minimum delay in milliseconds. */
+function decideKVRetry(cause) {
+	if (!isRetryableKVError(cause)) return { retry: false };
+	return {
+		retry: true,
+		retryAfterMs: isKVPutRateLimitError(cause) ? 1e3 : 0
+	};
+}
+/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */
+var KVError = class extends AppError {
+	_tag = "KVError";
+	classification;
+	retryable;
+	operation;
+	key;
+	cause;
+	kv;
+	context;
+	constructor(args) {
+		const kv = extractKVMeta(args.cause);
+		const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause);
+		const keyContext = args.key === void 0 ? "" : ` for key "${args.key}"`;
+		super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause });
+		this.operation = args.operation;
+		this.key = args.key;
+		this.cause = args.cause;
+		this.kv = kv;
+		this.context = {
+			operation: args.operation,
+			key: args.key,
+			kv
+		};
+		this.retryable = isRetryableKVError(args.cause);
+		this.classification = isTerminalKVError(args.cause) ? "terminal" : this.retryable ? "transient" : "unknown";
+	}
+};
+function getDeepErrorMessage(cause) {
+	if (typeof cause === "string") return cause;
+	if (cause === null || cause === void 0) return "";
+	if (typeof cause === "number" || typeof cause === "boolean" || typeof cause === "bigint") return String(cause);
+	if (typeof cause !== "object") return "";
+	return `${"message" in cause && typeof cause.message === "string" ? cause.message : ""} ${"cause" in cause ? getDeepErrorMessage(cause.cause) : ""}`.trim();
+}
+
+//#endregion
+export { isRetryableKVError as a, isKVPutRateLimitError as i, decideKVRetry as n, isTerminalKVError as o, extractKVMeta as r, isTransientKVError as s, KVError as t };
+//# sourceMappingURL=kv-errors-BUTpFy0t.js.map

package/dist/kv-errors-BUTpFy0t.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv-errors-BUTpFy0t.js","names":[],"sources":["../src/infrastructure/cloudflare/kv-errors.ts"],"sourcesContent":["import {\n  AppError,\n  isCloudflareOverloadedError,\n  isCloudflareRetryableError,\n  isTransientTransportError,\n  type FailureClassification,\n} from '@/core'\n\n/** KV operations recognized in binding error messages. */\nexport type KVOperation = 'get' | 'put' | 'delete' | 'list'\n\n/** KV failure kinds retained from Typist's binding tests. */\nexport type KVErrorKind =\n  | 'invalid_key'\n  | 'key_too_large'\n  | 'invalid_expiration_ttl'\n  | 'invalid_expiration'\n  | 'invalid_cache_ttl'\n  | 'invalid_list_limit'\n  | 'value_too_large'\n  | 'client_error'\n  | 'rate_limited'\n  | 'server_error'\n\n/** Evidence extracted from a KV error and its causes. */\nexport interface KVErrorMeta {\n  kind: KVErrorKind\n  message: string\n  status?: number | undefined\n  operation?: Uppercase<KVOperation> | undefined\n}\n\n/** Extract Typist's verified KV message formats, including nested causes. */\nexport function extractKVMeta(cause: unknown): KVErrorMeta | undefined {\n  const message = getDeepErrorMessage(cause)\n  if (!message) return undefined\n  const statusMatch = message.match(/\\bKV\\s+(GET|PUT|DELETE|LIST)\\s+failed:\\s+(\\d{3})\\b/)\n  // SAFETY: The regular expression permits only uppercase KV operation names in this capture.\n  const operation = statusMatch?.[1] as Uppercase<KVOperation> | undefined\n  const status = statusMatch ? Number(statusMatch[2]) : undefined\n\n  if (/Key name cannot be empty/i.test(message)) {\n    return { kind: 'invalid_key', message, status, operation }\n  }\n  if (/exceeds key length limit/i.test(message)) {\n    return { kind: 'key_too_large', message, status, operation }\n  }\n  if (/Invalid expiration_ttl/i.test(message)) {\n    return { kind: 'invalid_expiration_ttl', message, status, operation }\n  }\n  if (/Invalid expiration of/i.test(message)) {\n    return { kind: 'invalid_expiration', message, status, operation }\n  }\n  if (/Invalid cache_ttl/i.test(message)) {\n    return { kind: 'invalid_cache_ttl', message, status, operation }\n  }\n  if (/Invalid key_count_limit/i.test(message)) {\n    return { kind: 'invalid_list_limit', message, status, operation }\n  }\n  if (/value.*(too large|exceeds)|exceeds.*value/i.test(message)) {\n    return { kind: 'value_too_large', message, status, operation }\n  }\n  if (status === 429) return { kind: 'rate_limited', message, status, operation }\n  if (status !== undefined && status >= 500) {\n    return { kind: 'server_error', message, status, operation }\n  }\n  if (status !== undefined && status >= 400) {\n    return { kind: 'client_error', message, status, operation }\n  }\n  return undefined\n}\n\n/** Identify recognized KV failures that another attempt cannot resolve. */\nexport function isTerminalKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  if (meta.kind === 'rate_limited' || meta.kind === 'server_error') return false\n  if (meta.status === 408) return false\n  return true\n}\n\n/** Identify a PUT rate limit that requires at least one second before retrying. */\nexport function isKVPutRateLimitError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  return meta?.operation === 'PUT' && meta.kind === 'rate_limited'\n}\n\n/** Identify PUT rate limits, server failures, and request timeouts. */\nexport function isTransientKVError(cause: unknown): boolean {\n  const meta = extractKVMeta(cause)\n  if (!meta) return false\n  return isKVPutRateLimitError(cause) || meta.kind === 'server_error' || meta.status === 408\n}\n\n/** Apply Typist's KV, overload, platform, and transport checks in their original order. */\nexport function isRetryableKVError(cause: unknown): boolean {\n  if (isTerminalKVError(cause)) return false\n  if (isTransientKVError(cause)) return true\n  if (isCloudflareOverloadedError(cause)) return false\n  return isCloudflareRetryableError(cause) || isTransientTransportError(cause)\n}\n\n/** Return the existing retry decision and minimum delay in milliseconds. */\nexport function decideKVRetry(\n  cause: unknown,\n): { retry: false } | { retry: true; retryAfterMs: number } {\n  if (!isRetryableKVError(cause)) return { retry: false }\n  return { retry: true, retryAfterMs: isKVPutRateLimitError(cause) ? 1_000 : 0 }\n}\n\n/** A final KV failure with Typist's diagnostics and Better Ship's error classification. */\nexport class KVError extends AppError {\n  readonly _tag = 'KVError'\n  readonly classification: FailureClassification\n  retryable: boolean\n  readonly operation: KVOperation\n  readonly key?: string | undefined\n  override readonly cause: unknown\n  readonly kv?: KVErrorMeta | undefined\n  readonly context: {\n    operation: KVOperation\n    key?: string | undefined\n    kv?: KVErrorMeta | undefined\n  }\n\n  constructor(args: { operation: KVOperation; key?: string | undefined; cause: unknown }) {\n    const kv = extractKVMeta(args.cause)\n    const causeMessage = getDeepErrorMessage(args.cause) || String(args.cause)\n    const keyContext = args.key === undefined ? '' : ` for key \"${args.key}\"`\n    super(`KV ${args.operation} failed${keyContext}: ${causeMessage}`, { cause: args.cause })\n    this.operation = args.operation\n    this.key = args.key\n    this.cause = args.cause\n    this.kv = kv\n    this.context = { operation: args.operation, key: args.key, kv }\n    this.retryable = isRetryableKVError(args.cause)\n    this.classification = isTerminalKVError(args.cause)\n      ? 'terminal'\n      : this.retryable\n        ? 'transient'\n        : 'unknown'\n  }\n}\n\n// oxlint-disable anti-slop/no-runtime-typeof -- Preserve Typist's primitive messages and nested causes at the raw binding boundary.\nfunction getDeepErrorMessage(cause: unknown): string {\n  if (typeof cause === 'string') return cause\n  if (cause === null || cause === undefined) return ''\n  if (typeof cause === 'number' || typeof cause === 'boolean' || typeof cause === 'bigint') {\n    return String(cause)\n  }\n  if (typeof cause !== 'object') return ''\n  const message = 'message' in cause && typeof cause.message === 'string' ? cause.message : ''\n  const causeMessage = 'cause' in cause ? getDeepErrorMessage(cause.cause) : ''\n  return `${message} ${causeMessage}`.trim()\n}\n// oxlint-enable anti-slop/no-runtime-typeof\n"],"mappings":";;;;AAiCA,SAAgB,cAAc,OAAyC;CACrE,MAAM,UAAU,oBAAoB,KAAK;CACzC,IAAI,CAAC,SAAS,OAAO;CACrB,MAAM,cAAc,QAAQ,MAAM,oDAAoD;CAEtF,MAAM,YAAY,cAAc;CAChC,MAAM,SAAS,cAAc,OAAO,YAAY,EAAE,IAAI;CAEtD,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAe;EAAS;EAAQ;CAAU;CAE3D,IAAI,4BAA4B,KAAK,OAAO,GAC1C,OAAO;EAAE,MAAM;EAAiB;EAAS;EAAQ;CAAU;CAE7D,IAAI,0BAA0B,KAAK,OAAO,GACxC,OAAO;EAAE,MAAM;EAA0B;EAAS;EAAQ;CAAU;CAEtE,IAAI,yBAAyB,KAAK,OAAO,GACvC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,qBAAqB,KAAK,OAAO,GACnC,OAAO;EAAE,MAAM;EAAqB;EAAS;EAAQ;CAAU;CAEjE,IAAI,2BAA2B,KAAK,OAAO,GACzC,OAAO;EAAE,MAAM;EAAsB;EAAS;EAAQ;CAAU;CAElE,IAAI,6CAA6C,KAAK,OAAO,GAC3D,OAAO;EAAE,MAAM;EAAmB;EAAS;EAAQ;CAAU;CAE/D,IAAI,WAAW,KAAK,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAC9E,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;CAE5D,IAAI,WAAW,UAAa,UAAU,KACpC,OAAO;EAAE,MAAM;EAAgB;EAAS;EAAQ;CAAU;AAG9D;;AAGA,SAAgB,kBAAkB,OAAyB;CACzD,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,gBAAgB,OAAO;CACzE,IAAI,KAAK,WAAW,KAAK,OAAO;CAChC,OAAO;AACT;;AAGA,SAAgB,sBAAsB,OAAyB;CAC7D,MAAM,OAAO,cAAc,KAAK;CAChC,OAAO,MAAM,cAAc,SAAS,KAAK,SAAS;AACpD;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,MAAM,OAAO,cAAc,KAAK;CAChC,IAAI,CAAC,MAAM,OAAO;CAClB,OAAO,sBAAsB,KAAK,KAAK,KAAK,SAAS,kBAAkB,KAAK,WAAW;AACzF;;AAGA,SAAgB,mBAAmB,OAAyB;CAC1D,IAAI,kBAAkB,KAAK,GAAG,OAAO;CACrC,IAAI,mBAAmB,KAAK,GAAG,OAAO;CACtC,IAAI,4BAA4B,KAAK,GAAG,OAAO;CAC/C,OAAO,2BAA2B,KAAK,KAAK,0BAA0B,KAAK;AAC7E;;AAGA,SAAgB,cACd,OAC0D;CAC1D,IAAI,CAAC,mBAAmB,KAAK,GAAG,OAAO,EAAE,OAAO,MAAM;CACtD,OAAO;EAAE,OAAO;EAAM,cAAc,sBAAsB,KAAK,IAAI,MAAQ;CAAE;AAC/E;;AAGA,IAAa,UAAb,cAA6B,SAAS;CACpC,AAAS,OAAO;CAChB,AAAS;CACT;CACA,AAAS;CACT,AAAS;CACT,AAAkB;CAClB,AAAS;CACT,AAAS;CAMT,YAAY,MAA4E;EACtF,MAAM,KAAK,cAAc,KAAK,KAAK;EACnC,MAAM,eAAe,oBAAoB,KAAK,KAAK,KAAK,OAAO,KAAK,KAAK;EACzE,MAAM,aAAa,KAAK,QAAQ,SAAY,KAAK,aAAa,KAAK,IAAI;EACvE,MAAM,MAAM,KAAK,UAAU,SAAS,WAAW,IAAI,gBAAgB,EAAE,OAAO,KAAK,MAAM,CAAC;EACxF,KAAK,YAAY,KAAK;EACtB,KAAK,MAAM,KAAK;EAChB,KAAK,QAAQ,KAAK;EAClB,KAAK,KAAK;EACV,KAAK,UAAU;GAAE,WAAW,KAAK;GAAW,KAAK,KAAK;GAAK;EAAG;EAC9D,KAAK,YAAY,mBAAmB,KAAK,KAAK;EAC9C,KAAK,iBAAiB,kBAAkB,KAAK,KAAK,IAC9C,aACA,KAAK,YACH,cACA;CACR;AACF;AAGA,SAAS,oBAAoB,OAAwB;CACnD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI,UAAU,QAAQ,UAAU,QAAW,OAAO;CAClD,IAAI,OAAO,UAAU,YAAY,OAAO,UAAU,aAAa,OAAO,UAAU,UAC9E,OAAO,OAAO,KAAK;CAErB,IAAI,OAAO,UAAU,UAAU,OAAO;CAGtC,OAAO,GAFS,aAAa,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,GAExE,GADG,WAAW,QAAQ,oBAAoB,MAAM,KAAK,IAAI,KACvC,KAAK;AAC3C"}

package/dist/metrics-CWv37yf9.js

@@ -0,0 +1,30 @@
+//#region src/infrastructure/posthog/metrics.ts
+/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
+var PostHogMetricsService = class {
+	client;
+	waitUntil;
+	/** Use the analytics client's metrics; the runtime owns each flush promise. */
+	constructor(client, waitUntil) {
+		this.client = client;
+		this.waitUntil = waitUntil;
+	}
+	/** Record a total and schedule its flush. */
+	count(name, value = 1, options) {
+		this.client.metrics.count(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+	/** Record a current value and schedule its flush. */
+	gauge(name, value, options) {
+		this.client.metrics.gauge(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+	/** Record an observation and schedule its flush. */
+	histogram(name, value, options) {
+		this.client.metrics.histogram(name, value, options);
+		this.waitUntil(this.client.metrics.flush());
+	}
+};
+
+//#endregion
+export { PostHogMetricsService as t };
+//# sourceMappingURL=metrics-CWv37yf9.js.map

package/dist/metrics-CWv37yf9.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-CWv37yf9.js","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"sourcesContent":["import type { PostHog } from 'posthog-node'\n\nimport type { MetricOptions, MetricsService } from '@/application'\n\n/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */\nexport class PostHogMetricsService implements MetricsService {\n  /** Use the analytics client's metrics; the runtime owns each flush promise. */\n  constructor(\n    private readonly client: Pick<PostHog, 'metrics'>,\n    private readonly waitUntil: (promise: Promise<unknown>) => void,\n  ) {}\n\n  /** Record a total and schedule its flush. */\n  count(name: string, value = 1, options?: MetricOptions): void {\n    this.client.metrics.count(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n\n  /** Record a current value and schedule its flush. */\n  gauge(name: string, value: number, options?: MetricOptions): void {\n    this.client.metrics.gauge(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n\n  /** Record an observation and schedule its flush. */\n  histogram(name: string, value: number, options?: MetricOptions): void {\n    this.client.metrics.histogram(name, value, options)\n    this.waitUntil(this.client.metrics.flush())\n  }\n}\n"],"mappings":";;AAKA,IAAa,wBAAb,MAA6D;CAGxC;CACA;;CAFnB,YACE,AAAiB,QACjB,AAAiB,WACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,MAAc,QAAQ,GAAG,SAA+B;EAC5D,KAAK,OAAO,QAAQ,MAAM,MAAM,OAAO,OAAO;EAC9C,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;;CAGA,MAAM,MAAc,OAAe,SAA+B;EAChE,KAAK,OAAO,QAAQ,MAAM,MAAM,OAAO,OAAO;EAC9C,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;;CAGA,UAAU,MAAc,OAAe,SAA+B;EACpE,KAAK,OAAO,QAAQ,UAAU,MAAM,OAAO,OAAO;EAClD,KAAK,UAAU,KAAK,OAAO,QAAQ,MAAM,CAAC;CAC5C;AACF"}

package/dist/metrics-cv9P5nvk.d.ts

@@ -0,0 +1,19 @@
+import { X as MetricOptions, Z as MetricsService } from "./index-lS_g1olK.js";
+import { PostHog } from "posthog-node";
+//#region src/infrastructure/posthog/metrics.d.ts
+/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
+declare class PostHogMetricsService implements MetricsService {
+  private readonly client;
+  private readonly waitUntil;
+  /** Use the analytics client's metrics; the runtime owns each flush promise. */
+  constructor(client: Pick<PostHog, 'metrics'>, waitUntil: (promise: Promise<unknown>) => void);
+  /** Record a total and schedule its flush. */
+  count(name: string, value?: number, options?: MetricOptions): void;
+  /** Record a current value and schedule its flush. */
+  gauge(name: string, value: number, options?: MetricOptions): void;
+  /** Record an observation and schedule its flush. */
+  histogram(name: string, value: number, options?: MetricOptions): void;
+}
+//#endregion
+export { PostHogMetricsService as t };
+//# sourceMappingURL=metrics-cv9P5nvk.d.ts.map

package/dist/metrics-cv9P5nvk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-cv9P5nvk.d.ts","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"mappings":";;;;cAKa,iCAAiC;mBAGzB;mBACA;;EAFnB,YACmB,QAAQ,KAAK,qBACb,YAAY,SAAS;;EAIxC,MAAM,cAAc,gBAAW,UAAU;;EAMzC,MAAM,cAAc,eAAe,UAAU;;EAM7C,UAAU,cAAc,eAAe,UAAU"}

package/dist/payment-service-DUYd3Itt.d.ts

@@ -0,0 +1,52 @@
+import Stripe from "stripe";
+//#region src/infrastructure/stripe/payment-service.d.ts
+/** Supply the same key and parameters when repeating one durable payment attempt. */
+type PaymentRequestOptions = Stripe.RequestOptions & Required<Pick<Stripe.RequestOptions, 'idempotencyKey'>>;
+/** Native Checkout parameters; the service selects payment or setup mode. */
+type CheckoutInput = Omit<Stripe.Checkout.SessionCreateParams, 'mode'>;
+/** A saved customer method; the service confirms the payment off-session. */
+type SavedMethodCharge = Omit<Stripe.PaymentIntentCreateParams, 'confirm' | 'off_session'> & Required<Pick<Stripe.PaymentIntentCreateParams, 'customer' | 'payment_method'>>;
+/** Native customer response, including Stripe request metadata. */
+type CustomerResult = Awaited<ReturnType<Stripe['customers']['create']>>;
+/** Native Checkout response. Its URL can be null; this does not confirm payment. */
+type CheckoutResult = Awaited<ReturnType<Stripe['checkout']['sessions']['create']>>;
+/** Native PaymentIntent response. Applications decide what each status permits. */
+type PaymentResult = Awaited<ReturnType<Stripe['paymentIntents']['create']>>;
+/**
+ * Stripe payment operations, with native types and stable keys for mutations.
+ * Rejects with PaymentServiceError for Stripe failures; non-Stripe failures propagate unchanged.
+ */
+interface IPaymentService {
+  /** Create a customer; the application owns persistence and reuse of the customer link. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Create one-time payment checkout; application fulfillment requires verified payment confirmation. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Create checkout in setup mode. The application records consent and verifies the saved method's owner. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Confirm a saved method off-session. PaymentServiceError retains card errors in cause. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Retrieve an existing payment without starting another payment attempt. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+}
+/**
+ * Ported from Typist's StripeClient request boundary; the native SDK now owns retries.
+ * The injected client owns retry and timeout defaults. Native request options can override them.
+ */
+declare class StripePaymentService implements IPaymentService {
+  private readonly stripe;
+  /** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */
+  constructor(stripe: Stripe);
+  /** Create a customer with a stable application key and preserve the native response. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Force payment mode after caller parameters; return the native Checkout Session. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force setup mode after caller parameters; this operation does not charge the customer. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force confirmation and off-session use; retain native card failures in PaymentServiceError.cause. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Preserve every native status and response field when reconciling an existing payment. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+}
+//#endregion
+export { PaymentRequestOptions as a, StripePaymentService as c, IPaymentService as i, CheckoutResult as n, PaymentResult as o, CustomerResult as r, SavedMethodCharge as s, CheckoutInput as t };
+//# sourceMappingURL=payment-service-DUYd3Itt.d.ts.map

package/dist/payment-service-DUYd3Itt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service-DUYd3Itt.d.ts","names":[],"sources":["../src/infrastructure/stripe/payment-service.ts"],"mappings":";;;KAKY,wBAAwB,OAAO,iBACzC,SAAS,KAAK,OAAO;;KAGX,gBAAgB,KAAK,OAAO,SAAS;;KAGrC,oBAAoB,KAAK,OAAO,wDAC1C,SAAS,KAAK,OAAO;;KAGX,iBAAiB,QAAQ,WAAW;;KAGpC,iBAAiB,QAAQ,WAAW;;KAGpC,gBAAgB,QAAQ,WAAW;;;;;UAM9B;;EAEf,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAEX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAE9E,mBAAmB,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAElF,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAEX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ;;;;;;cAOA,gCAAgC;mBAEd;;EAA7B,YAA6B,QAAQ;;EAGrC,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAKX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAO9E,mBACE,OAAO,eACP,SAAS,wBACR,QAAQ;;EAOX,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAOX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ"}

package/dist/payment-service.error-CqF7GkNp.js

@@ -0,0 +1,30 @@
+import { nt as AppError } from "./core-BiN6S_cm.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/stripe/payment-service.error.ts
+/** A final Stripe request failure. The caller logs once; native details remain in cause. */
+var PaymentServiceError = class extends AppError {
+	operation;
+	_tag = "PaymentServiceError";
+	classification;
+	/** Classify the final SDK error without scheduling another payment attempt. */
+	constructor(operation, cause) {
+		super(`Stripe request failed: ${operation}`, { cause });
+		this.operation = operation;
+		this.classification = classifyStripeError(cause);
+	}
+};
+function classifyStripeError(error) {
+	if (error.headers?.["stripe-should-retry"] === "false") return "terminal";
+	const status = error.statusCode;
+	if (status !== void 0 && status >= 400 && status < 500 && status !== 409 && status !== 429) return "terminal";
+	if (error instanceof Stripe.errors.StripeAuthenticationError || error instanceof Stripe.errors.StripePermissionError || error instanceof Stripe.errors.StripeInvalidRequestError || error instanceof Stripe.errors.StripeIdempotencyError || error instanceof Stripe.errors.StripeCardError) return "terminal";
+	if (error.headers?.["stripe-should-retry"] === "true") return "transient";
+	if (status === 409 || status === 429 || status !== void 0 && status >= 500) return "transient";
+	if (error instanceof Stripe.errors.StripeConnectionError || error instanceof Stripe.errors.StripeAPIError || error instanceof Stripe.errors.StripeRateLimitError) return "transient";
+	return "unknown";
+}
+
+//#endregion
+export { PaymentServiceError as t };
+//# sourceMappingURL=payment-service.error-CqF7GkNp.js.map

package/dist/payment-service.error-CqF7GkNp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.error-CqF7GkNp.js","names":[],"sources":["../src/infrastructure/stripe/payment-service.error.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { AppError, type FailureClassification } from '@/core'\n\n/** A final Stripe request failure. The caller logs once; native details remain in cause. */\nexport class PaymentServiceError extends AppError {\n  readonly _tag = 'PaymentServiceError'\n  readonly classification: FailureClassification\n\n  /** Classify the final SDK error without scheduling another payment attempt. */\n  constructor(\n    readonly operation: string,\n    cause: Stripe.errors.StripeError,\n  ) {\n    super(`Stripe request failed: ${operation}`, { cause })\n    this.classification = classifyStripeError(cause)\n  }\n}\n\nfunction classifyStripeError(error: Stripe.errors.StripeError): FailureClassification {\n  if (error.headers?.['stripe-should-retry'] === 'false') return 'terminal'\n  const status = error.statusCode\n  if (status !== undefined && status >= 400 && status < 500 && status !== 409 && status !== 429)\n    return 'terminal'\n  if (\n    error instanceof Stripe.errors.StripeAuthenticationError ||\n    error instanceof Stripe.errors.StripePermissionError ||\n    error instanceof Stripe.errors.StripeInvalidRequestError ||\n    error instanceof Stripe.errors.StripeIdempotencyError ||\n    error instanceof Stripe.errors.StripeCardError\n  )\n    return 'terminal'\n  if (error.headers?.['stripe-should-retry'] === 'true') return 'transient'\n  if (status === 409 || status === 429 || (status !== undefined && status >= 500))\n    return 'transient'\n  if (\n    error instanceof Stripe.errors.StripeConnectionError ||\n    error instanceof Stripe.errors.StripeAPIError ||\n    error instanceof Stripe.errors.StripeRateLimitError\n  )\n    return 'transient'\n  return 'unknown'\n}\n"],"mappings":";;;;;AAKA,IAAa,sBAAb,cAAyC,SAAS;CAMrC;CALX,AAAS,OAAO;CAChB,AAAS;;CAGT,YACE,AAAS,WACT,OACA;EACA,MAAM,0BAA0B,aAAa,EAAE,MAAM,CAAC;EAH7C;EAIT,KAAK,iBAAiB,oBAAoB,KAAK;CACjD;AACF;AAEA,SAAS,oBAAoB,OAAyD;CACpF,IAAI,MAAM,UAAU,2BAA2B,SAAS,OAAO;CAC/D,MAAM,SAAS,MAAM;CACrB,IAAI,WAAW,UAAa,UAAU,OAAO,SAAS,OAAO,WAAW,OAAO,WAAW,KACxF,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,0BAC/B,iBAAiB,OAAO,OAAO,iBAE/B,OAAO;CACT,IAAI,MAAM,UAAU,2BAA2B,QAAQ,OAAO;CAC9D,IAAI,WAAW,OAAO,WAAW,OAAQ,WAAW,UAAa,UAAU,KACzE,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,kBAC/B,iBAAiB,OAAO,OAAO,sBAE/B,OAAO;CACT,OAAO;AACT"}

package/dist/posthog/metrics.d.ts

@@ -1,18 +1,2 @@
-import { X as MetricOptions, Z as MetricsService } from "../index-lS_g1olK.js";
-import { PostHog } from "posthog-node";
-//#region src/infrastructure/posthog/metrics.d.ts
-/** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
-export declare class PostHogMetricsService implements MetricsService {
-  private readonly client;
-  private readonly waitUntil;
-  /** Use the analytics client's metrics; the runtime owns each flush promise. */
-  constructor(client: Pick<PostHog, 'metrics'>, waitUntil: (promise: Promise<unknown>) => void);
-  /** Record a total and schedule its flush. */
-  count(name: string, value?: number, options?: MetricOptions): void;
-  /** Record a current value and schedule its flush. */
-  gauge(name: string, value: number, options?: MetricOptions): void;
-  /** Record an observation and schedule its flush. */
-  histogram(name: string, value: number, options?: MetricOptions): void;
-}
-//#endregion
-//# sourceMappingURL=metrics.d.ts.map
+import { t as PostHogMetricsService } from "../metrics-cv9P5nvk.js";
+export { PostHogMetricsService };