better-ship 0.35.1 → 0.37.0

package/dist/application.d.ts

@@ -1,3 +1,3 @@
 import { G as DomainMessage, K as DomainQuery, U as DomainCommand, W as DomainEvent, q as MessageId } from "./index-DUFS0SJ_.js";
-import { $ as AnalyticsService, A as IOutboxRepository, B as OutboundEmail, C as UnitOfWorkDeps, D as OutboxRelay, E as IOutboxRelay, F as IEventCollector, G as ObservabilityScope, H as ReceivedContent, I as EmailAccepted, J as MetricAttributeValue, K as ObservabilityService, L as EmailAttachment, M as OutboxClaim, N as OutboxMessage, O as OutboxRelayOptions, P as IMessageStore, Q as NULL_METRICS_SERVICE, R as IEmailService, S as UnitOfWork, T as IOutboxPublisher, U as ReceivedEmail, V as ReceivedAttachment, W as RecordingEmailService, X as MetricOptions, Y as MetricAttributes, Z as MetricsService, _ as RecordEmailEventCommand, a as OutboxRetentionResult, b as recordEmailEvent, c as CommandRegistry, d as MessageRegistry, et as NULL_ANALYTICS, f as MessageResult, g as IEmailDeliverabilityStore, h as EmailBounceRecord, i as OutboxRetentionOptions, j as IOutboxRetentionRepository, k as DeadLetterReason, l as EventRegistry, m as RegistryMessage, n as MessageAlreadyProcessedError, nt as EventHandler, o as IMessageBus, p as QueryRegistry, q as ObservabilityUser, r as OutboxRetention, rt as QueryHandler, s as MessageBus, t as UnitOfWorkAlreadyActiveError, tt as CommandHandler, u as Handlers, v as RecordEmailEventDeps, w as ITransaction, x as IUnitOfWork, y as RecordEmailEventRepos, z as MimeType } from "./index-CbvNd665.js";
-export { type AnalyticsService, type CommandHandler, type CommandRegistry, type DeadLetterReason, type DomainCommand, type DomainEvent, type DomainMessage, type DomainQuery, type EmailAccepted, type EmailAttachment, type EmailBounceRecord, type EventHandler, type EventRegistry, type Handlers, type IEmailDeliverabilityStore, type IEmailService, type IEventCollector, type IMessageBus, type IMessageStore, type IOutboxPublisher, type IOutboxRelay, type IOutboxRepository, type IOutboxRetentionRepository, type ITransaction, type IUnitOfWork, MessageAlreadyProcessedError, MessageBus, type MessageId, type MessageRegistry, type MessageResult, type MetricAttributeValue, type MetricAttributes, type MetricOptions, type MetricsService, type MimeType, NULL_ANALYTICS, NULL_METRICS_SERVICE, type ObservabilityScope, type ObservabilityService, type ObservabilityUser, type OutboundEmail, type OutboxClaim, type OutboxMessage, OutboxRelay, type OutboxRelayOptions, OutboxRetention, type OutboxRetentionOptions, type OutboxRetentionResult, type QueryHandler, type QueryRegistry, type ReceivedAttachment, type ReceivedContent, type ReceivedEmail, type RecordEmailEventCommand, type RecordEmailEventDeps, type RecordEmailEventRepos, RecordingEmailService, type RegistryMessage, UnitOfWork, UnitOfWorkAlreadyActiveError, type UnitOfWorkDeps, recordEmailEvent };
+import { $ as MetricsService, A as IOutboxRepository, B as OutboundEmail, C as UnitOfWorkDeps, D as OutboxRelay, E as IOutboxRelay, F as IEventCollector, G as applyObservabilityUser, H as ReceivedContent, I as EmailAccepted, J as ObservabilityService, K as setObservabilityUserHook, L as EmailAttachment, M as OutboxClaim, N as OutboxMessage, O as OutboxRelayOptions, P as IMessageStore, Q as MetricOptions, R as IEmailService, S as UnitOfWork, T as IOutboxPublisher, U as ReceivedEmail, V as ReceivedAttachment, W as RecordingEmailService, X as MetricAttributeValue, Y as ObservabilityUser, Z as MetricAttributes, _ as RecordEmailEventCommand, a as OutboxRetentionResult, at as QueryHandler, b as recordEmailEvent, c as CommandRegistry, d as MessageRegistry, et as NULL_METRICS_SERVICE, f as MessageResult, g as IEmailDeliverabilityStore, h as EmailBounceRecord, i as OutboxRetentionOptions, it as EventHandler, j as IOutboxRetentionRepository, k as DeadLetterReason, l as EventRegistry, m as RegistryMessage, n as MessageAlreadyProcessedError, nt as NULL_ANALYTICS, o as IMessageBus, p as QueryRegistry, q as ObservabilityScope, r as OutboxRetention, rt as CommandHandler, s as MessageBus, t as UnitOfWorkAlreadyActiveError, tt as AnalyticsService, u as Handlers, v as RecordEmailEventDeps, w as ITransaction, x as IUnitOfWork, y as RecordEmailEventRepos, z as MimeType } from "./index-BosM_da2.js";
+export { type AnalyticsService, type CommandHandler, type CommandRegistry, type DeadLetterReason, type DomainCommand, type DomainEvent, type DomainMessage, type DomainQuery, type EmailAccepted, type EmailAttachment, type EmailBounceRecord, type EventHandler, type EventRegistry, type Handlers, type IEmailDeliverabilityStore, type IEmailService, type IEventCollector, type IMessageBus, type IMessageStore, type IOutboxPublisher, type IOutboxRelay, type IOutboxRepository, type IOutboxRetentionRepository, type ITransaction, type IUnitOfWork, MessageAlreadyProcessedError, MessageBus, type MessageId, type MessageRegistry, type MessageResult, type MetricAttributeValue, type MetricAttributes, type MetricOptions, type MetricsService, type MimeType, NULL_ANALYTICS, NULL_METRICS_SERVICE, type ObservabilityScope, type ObservabilityService, type ObservabilityUser, type OutboundEmail, type OutboxClaim, type OutboxMessage, OutboxRelay, type OutboxRelayOptions, OutboxRetention, type OutboxRetentionOptions, type OutboxRetentionResult, type QueryHandler, type QueryRegistry, type ReceivedAttachment, type ReceivedContent, type ReceivedEmail, type RecordEmailEventCommand, type RecordEmailEventDeps, type RecordEmailEventRepos, RecordingEmailService, type RegistryMessage, UnitOfWork, UnitOfWorkAlreadyActiveError, type UnitOfWorkDeps, applyObservabilityUser, recordEmailEvent, setObservabilityUserHook };

package/dist/application.js

@@ -1,3 +1,4 @@
 import { a as MessageBus, c as RecordingEmailService, i as OutboxRelay, l as NULL_METRICS_SERVICE, n as UnitOfWork, o as MessageAlreadyProcessedError, r as OutboxRetention, s as recordEmailEvent, t as UnitOfWorkAlreadyActiveError, u as NULL_ANALYTICS } from "./application-B5hnNUdI.js";
+import { n as setObservabilityUserHook, t as applyObservabilityUser } from "./request-user-B4rh1c2-.js";
 
-export { MessageAlreadyProcessedError, MessageBus, NULL_ANALYTICS, NULL_METRICS_SERVICE, OutboxRelay, OutboxRetention, RecordingEmailService, UnitOfWork, UnitOfWorkAlreadyActiveError, recordEmailEvent };
+export { MessageAlreadyProcessedError, MessageBus, NULL_ANALYTICS, NULL_METRICS_SERVICE, OutboxRelay, OutboxRetention, RecordingEmailService, UnitOfWork, UnitOfWorkAlreadyActiveError, applyObservabilityUser, recordEmailEvent, setObservabilityUserHook };

package/dist/browser-user.d.ts

@@ -0,0 +1,14 @@
+//#region src/infrastructure/observability/browser-user.d.ts
+/**
+ * Identify the signed-in user in PostHog and Sentry.
+ * Sends the id only. A client that is not initialized does nothing.
+ * Call it when the session user id is present. A loading session does not call it.
+ */
+export declare function identifyObservabilityUser(userId: string): void;
+/**
+ * Clear the Sentry user and reset PostHog on sign-out.
+ * A disabled client does nothing. Call this once from the application's sign-out path.
+ */
+export declare function clearObservabilityUser(): void;
+//#endregion
+//# sourceMappingURL=browser-user.d.ts.map

package/dist/browser-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-user.d.ts","names":[],"sources":["../src/infrastructure/observability/browser-user.ts"],"mappings":";;;;;;wBAQgB,0BAA0B;;;;;wBAW1B"}

package/dist/browser-user.js

@@ -0,0 +1,25 @@
+import * as Sentry from "@sentry/tanstackstart-react";
+import { posthog as posthog$1 } from "posthog-js";
+
+//#region src/infrastructure/observability/browser-user.ts
+/**
+* Identify the signed-in user in PostHog and Sentry.
+* Sends the id only. A client that is not initialized does nothing.
+* Call it when the session user id is present. A loading session does not call it.
+*/
+function identifyObservabilityUser(userId) {
+	if (posthog$1.__loaded) posthog$1.identify(userId);
+	if (Sentry.isEnabled()) Sentry.setUser({ id: userId });
+}
+/**
+* Clear the Sentry user and reset PostHog on sign-out.
+* A disabled client does nothing. Call this once from the application's sign-out path.
+*/
+function clearObservabilityUser() {
+	if (posthog$1.__loaded) posthog$1.reset();
+	if (Sentry.isEnabled()) Sentry.setUser(null);
+}
+
+//#endregion
+export { clearObservabilityUser, identifyObservabilityUser };
+//# sourceMappingURL=browser-user.js.map

package/dist/browser-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-user.js","names":["posthog"],"sources":["../src/infrastructure/observability/browser-user.ts"],"sourcesContent":["import * as Sentry from '@sentry/tanstackstart-react'\nimport { posthog } from 'posthog-js'\n\n/**\n * Identify the signed-in user in PostHog and Sentry.\n * Sends the id only. A client that is not initialized does nothing.\n * Call it when the session user id is present. A loading session does not call it.\n */\nexport function identifyObservabilityUser(userId: string): void {\n  // identify() warns when the SDK is not loaded. A disabled client must stay silent.\n  // oxlint-disable-next-line no-underscore-dangle -- PostHog's public loaded flag. There is no other initialized check.\n  if (posthog.__loaded) posthog.identify(userId)\n  if (Sentry.isEnabled()) Sentry.setUser({ id: userId })\n}\n\n/**\n * Clear the Sentry user and reset PostHog on sign-out.\n * A disabled client does nothing. Call this once from the application's sign-out path.\n */\nexport function clearObservabilityUser(): void {\n  // oxlint-disable-next-line no-underscore-dangle -- Same loaded flag as identifyObservabilityUser.\n  if (posthog.__loaded) posthog.reset()\n  if (Sentry.isEnabled()) Sentry.setUser(null)\n}\n"],"mappings":";;;;;;;;;AAQA,SAAgB,0BAA0B,QAAsB;CAG9D,IAAIA,UAAQ,UAAU,UAAQ,SAAS,MAAM;CAC7C,IAAI,OAAO,UAAU,GAAG,OAAO,QAAQ,EAAE,IAAI,OAAO,CAAC;AACvD;;;;;AAMA,SAAgB,yBAA+B;CAE7C,IAAIA,UAAQ,UAAU,UAAQ,MAAM;CACpC,IAAI,OAAO,UAAU,GAAG,OAAO,QAAQ,IAAI;AAC7C"}

package/dist/cloudflare/queue.d.ts

@@ -1,5 +1,5 @@
 import { U as DomainCommand, W as DomainEvent, Xt as AppError, Zt as FailureClassification } from "../index-DUFS0SJ_.js";
-import { D as OutboxRelay, E as IOutboxRelay } from "../index-CbvNd665.js";
+import { D as OutboxRelay, E as IOutboxRelay } from "../index-BosM_da2.js";
 import { z } from "zod";
 //#region src/infrastructure/cloudflare/queue/queue-message.d.ts
 /** A message a queue carries: a command from outside the request, or an event from the outbox. */

package/dist/cloudflare.d.ts

@@ -1,6 +1,6 @@
 import { W as DomainEvent, et as D1ConstraintKind, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-DUFS0SJ_.js";
-import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-CbvNd665.js";
-import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-gk3JOjLB.js";
+import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-BosM_da2.js";
+import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-A2fA1UDX.js";
 import { BatchItem } from "drizzle-orm/batch";
 import { AnyD1Database, DrizzleD1Database } from "drizzle-orm/d1";
 //#region src/infrastructure/cloudflare/d1-database-types.d.ts

package/dist/{index-CbvNd665.d.ts → index-BosM_da2.d.ts}

@@ -66,6 +66,12 @@ interface ObservabilityService extends ObservabilityScope {
   withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T>;
 }
 //#endregion
+//#region src/application/request-user.d.ts
+/** Set or clear the process-wide request user hook. */
+declare function setObservabilityUserHook(hook: ((user: ObservabilityUser) => void) | null): void;
+/** Attribute the current execution to this user. No hook means the call does nothing. */
+declare function applyObservabilityUser(user: ObservabilityUser): void;
+//#endregion
 //#region src/application/email-service.d.ts
 /** A media type such as `application/pdf`. */
 type MimeType = `${string}/${string}`;
@@ -409,5 +415,5 @@ declare class UnitOfWorkAlreadyActiveError extends AppError {
   constructor();
 }
 //#endregion
-export { AnalyticsService as $, IOutboxRepository as A, OutboundEmail as B, UnitOfWorkDeps as C, OutboxRelay as D, IOutboxRelay as E, IEventCollector as F, ObservabilityScope as G, ReceivedContent as H, EmailAccepted as I, MetricAttributeValue as J, ObservabilityService as K, EmailAttachment as L, OutboxClaim as M, OutboxMessage as N, OutboxRelayOptions as O, IMessageStore as P, NULL_METRICS_SERVICE as Q, IEmailService as R, UnitOfWork as S, IOutboxPublisher as T, ReceivedEmail as U, ReceivedAttachment as V, RecordingEmailService as W, MetricOptions as X, MetricAttributes as Y, MetricsService as Z, RecordEmailEventCommand as _, OutboxRetentionResult as a, recordEmailEvent as b, CommandRegistry as c, MessageRegistry as d, NULL_ANALYTICS as et, MessageResult as f, IEmailDeliverabilityStore as g, EmailBounceRecord as h, OutboxRetentionOptions as i, IOutboxRetentionRepository as j, DeadLetterReason as k, EventRegistry as l, RegistryMessage as m, MessageAlreadyProcessedError as n, EventHandler as nt, IMessageBus as o, QueryRegistry as p, ObservabilityUser as q, OutboxRetention as r, QueryHandler as rt, MessageBus as s, UnitOfWorkAlreadyActiveError as t, CommandHandler as tt, Handlers as u, RecordEmailEventDeps as v, ITransaction as w, IUnitOfWork as x, RecordEmailEventRepos as y, MimeType as z };
-//# sourceMappingURL=index-CbvNd665.d.ts.map
+export { MetricsService as $, IOutboxRepository as A, OutboundEmail as B, UnitOfWorkDeps as C, OutboxRelay as D, IOutboxRelay as E, IEventCollector as F, applyObservabilityUser as G, ReceivedContent as H, EmailAccepted as I, ObservabilityService as J, setObservabilityUserHook as K, EmailAttachment as L, OutboxClaim as M, OutboxMessage as N, OutboxRelayOptions as O, IMessageStore as P, MetricOptions as Q, IEmailService as R, UnitOfWork as S, IOutboxPublisher as T, ReceivedEmail as U, ReceivedAttachment as V, RecordingEmailService as W, MetricAttributeValue as X, ObservabilityUser as Y, MetricAttributes as Z, RecordEmailEventCommand as _, OutboxRetentionResult as a, QueryHandler as at, recordEmailEvent as b, CommandRegistry as c, MessageRegistry as d, NULL_METRICS_SERVICE as et, MessageResult as f, IEmailDeliverabilityStore as g, EmailBounceRecord as h, OutboxRetentionOptions as i, EventHandler as it, IOutboxRetentionRepository as j, DeadLetterReason as k, EventRegistry as l, RegistryMessage as m, MessageAlreadyProcessedError as n, NULL_ANALYTICS as nt, IMessageBus as o, QueryRegistry as p, ObservabilityScope as q, OutboxRetention as r, CommandHandler as rt, MessageBus as s, UnitOfWorkAlreadyActiveError as t, AnalyticsService as tt, Handlers as u, RecordEmailEventDeps as v, ITransaction as w, IUnitOfWork as x, RecordEmailEventRepos as y, MimeType as z };
+//# sourceMappingURL=index-BosM_da2.d.ts.map

package/dist/index-BosM_da2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-BosM_da2.d.ts","names":[],"sources":["../src/application/handlers.ts","../src/application/analytics-service.ts","../src/application/metrics-service.ts","../src/application/observability-service.ts","../src/application/request-user.ts","../src/application/email-service.ts","../src/application/event-collector.ts","../src/application/message-store.ts","../src/application/outbox-repository.ts","../src/application/outbox-relay.ts","../src/application/transaction.ts","../src/application/unit-of-work.ts","../src/application/record-email-event.ts","../src/application/registry.ts","../src/application/message-bus.ts","../src/application/outbox-retention.ts","../src/application/message-already-processed.error.ts","../src/application/unit-of-work.errors.ts"],"mappings":";;;;;;KAMY,eAAe,iBAAiB,eAAe,MAAM,UAC/D,SAAS,UACT,MAAM,SACH,QAAQ;;;;;KAMD,aAAa,eAAe,aAAa,WAAW,UAC9D,OAAO,QACP,MAAM,cACH,QAAQ;;KAGD,aAAa,eAAe,aAAa,SACnD,OAAO,QACP,MAAM,SACH;;;;UCrBY,iBAAiB,eAAe,sBAAsB;;EAErE,SAAS,oBAAoB,aAAa;;EAE1C,MAAM,oBAAoB;;EAE1B,MAAM,OAAO,QAAQ,oBAAoB,WAAW;;EAEpD,eAAe,OAAO,QAAQ,oBAAoB,WAAW;;;cAIlD,gBAAgB;;;;KCdjB;;KAGA,mBAAmB,SAAS,eAAe;;UAGtC;WACN,aAAa;WACb;;;UAIM,eAAe;;EAE9B,MAAM,MAAM,OAAO,gBAAgB,UAAU;;EAE7C,MAAM,MAAM,OAAO,eAAe,UAAU;;EAE5C,UAAU,MAAM,OAAO,eAAe,UAAU;;;cAIrC,sBAAsB;;;;UCtBlB;WACN;;;UAIM;;EAEf,QAAQ,MAAM;;;UAIC,6BAA6B;;EAE5C,mBAAmB,GAAG,WAAW,OAAO,uBAAuB,IAAI,QAAQ,KAAK,QAAQ;;;;;iBCJ1E,yBAAyB,QAAQ,MAAM;;iBAKvC,uBAAuB,MAAM;;;;KCZjC;;KAGA;WACD;WACA,kBAAkB;;WAElB,cAAc;;;;;;;KAQb;;WAED;WACA;WACA;WACA;;WAEA,iBAAiB;;WAEjB;WACA;;WAEA,OAAO,SAAS;WAChB,uBAAuB;;;KAItB;WAA2B,SAAS,SAAS;;;KAG7C;WACD;WACA;WACA;WACA;WACA;;;KAIC;;WAED;WACA;WACA,sBAAsB;;;KAIrB;WAA2B;;;;;;UAMtB;;EAEf,UAAU,OAAO,gBAAgB,QAAQ;;;cAI9B,iCAAiC;;WAEnC,MAAM;;EAGT,UAAU,OAAO,gBAAgB,QAAQ;;;;;UCrEhC;EACf,KAAK,OAAO;EACZ,WAAW,cAAc;;;;;;;;UCCV;;EAEf,MAAM,WAAW,YAAY;;EAE7B,cAAc,QAAQ,cAAc,eAAe;;;;;KCPzC;WACD,SAAS;WACT;;;KAIC;WACD;WACA,UAAU,cAAc;;;KAIvB;;UAGK;;EAEf,sBAAsB,QAAQ,MAAM,oBAAoB;;EAExD,mBAAmB,QAAQ,MAAM,oBAAoB;;EAErD,qBAAqB,QAAQ,MAAM,oBAAoB;;;;;;UAOxC,0BAA0B;;EAEzC,aAAa,oBAAoB,QAAQ;;EAEzC,cAAc,OAAO,aAAa,UAAU,cAAc,iBAAiB;;EAE3E,aAAa,OAAO,aAAa,UAAU,cAAc,iBAAiB;;EAE1E,WACE,OAAO,aACP,UAAU,cAAc,gBACxB,QAAQ,kBACR,uBACC;;;;;;;;;UC9BY;EACf;;;UAIe;;EAEf,iBAAiB,UAAU,cAAc,eAAe,QAAQ,cAAc;;;KAIpE;WACD;WACA;WACA;;;;;;cASE;mBAIQ;mBACA;mBAJF;EAEjB,YACmB,WAAW,kBACX,YAAY,mBAC7B,UAAS;;EAUL,SAAS;;EA4BT,SAAS;UAWD;UAkBA;;;;;;;;UC1GC,aAAa;EAC5B,YAAY,GAAG,OAAO,IAAI,OAAO,QAAQ,KAAK,QAAQ;;;;;;;;;UCQvC,YAAY;EAC3B,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;KAGhE,eAAe,IAAI;WACpB,aAAa,aAAa;;WAE1B,eAAe,IAAI,OAAO;;WAE1B,qBAAqB,IAAI,OAAO;WAChC,gBAAgB;WAChB,OAAO;;;cAIL,WAAW,IAAI,kBAAkB,YAAY;mBAC3B;EAA7B,YAA6B,MAAM,eAAe,IAAI;EAEhD,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;;;;KC1BtE;WACD,MAAM;WACN;;;;;;UAOM;;EAEf,aAAa,SAAS,cAAc,QAAQ,oBAAoB;;EAEhE,gBAAgB,SAAS,eAAe;;;KAI9B;WAAmC,qBAAqB;;;KAGxD;WAAkC,KAAK,YAAY;;;KAGnD,0BAA0B,gBAAgB;;;;;iBAMhC,iBACpB,SAAS,yBACT,MAAM,uBACL;;;;KChCS,gBAAgB,iBAAiB,eAAe,oBAChD,KAAK,YAAY,YAAY,eAAe,GAAG;;KAI/C,cAAc,eAAe,aAAa,yBAC1C,KAAK,UAAU,YAAY,aAAa,GAAG;;;;;KAO3C,cAAc,eAAe,aAAa,oBAC1C,KAAK,UAAU,aAAa,cAAc,aAAa,GAAG;;;;;;KAQ1D,gBAAgB,iBAAiB,eAAe,aAAa,WAAW;WACzE,UAAU,gBAAgB,QAAQ,UAAU,gBAAgB;WAC5D,SAAS,cAAc,QAAQ,UAAU,cAAc;WACvD,QAAQ,cAAc,QAAQ,UAAU,cAAc;;KAK5D,KAAK;EAAU,OAAO,SAAS,eAAe,MAAM,OAAO;;KAC3D,aAAa;EAAU,OAAO,OAAO,aAAa,MAAM,OAAO;;;;;;KAMxD,SAAS;WACV,UAAU,SAAS,eAAe,KAAK;WACvC,SAAS,SAAS,eAAe,KAAK;WACtC,QAAQ,SAAS,QAAQ,eAAe,cAAc,aAAa;;KAGzE,YAAY,UAAU,WAAW,QAAQ,aAAa,SAAS;KAE/D,oBAAoB,UACvB,YAAY,aAAa,iBAAiB,oBAAoB,iBAC1D,WAAW,QAAQ,eAAe;;KAI5B,gBAAgB,kBAAkB,mBAC1C,YAAY,yBACZ,YAAY,wBACZ,oBAAoB;KAEnB,UAAU,QAAQ,wBAAwB,oBAAoB,SAC/D,QAAQ,WAAW,QAAQ,OAAO,QAAQ;;KAIlC,cACV,iBAAiB,eACjB,kBAAkB,mBAChB,iBAAiB,gBACjB,UAAU,uBAAuB,oBACjC,iBAAiB,cACf,UAAU,sBAAsB;;;;UCvDrB,YAAY,kBAAkB;EAC7C,OAAO,iBAAiB,gBAAgB,gBAAgB,YACtD,SAAS,WACR,QAAQ,cAAc,UAAU;;;;;;cAOxB,WAAW,MAAM,kBAAkB,SAAS,kBAAkB,YAAY;mBAElE;mBACA;EAFnB,YACmB,MAAM,MACN,UAAU;;EAIvB,OAAO,iBAAiB,gBAAgB,gBAAgB,YAC5D,SAAS,WACR,QAAQ,cAAc,UAAU;UAM3B;UASA;UASA;;;;;;UAWM;;;;;KCpEJ;WACD;WACA;WACA;WACA;WACA;;;KAIC;WACD;WACA;WACA;;;cAIE;mBAIQ;mBAHF;EAEjB,YACmB,YAAY,4BAC7B,UAAS;;EAYL,MAAM,IAAI,OAAO,QAAQ;UAcjB;;;;;cC/CH,qCAAqC;WAKrC,WAAW;WAJb;WACA;EAET,YACW,WAAW,WACpB;aAAqB;;;SAMhB,KAAK,gBAAgB,WAAW,YAAY;;;;;cCZxC,qCAAqC;WACvC;WACA;EAET"}

package/dist/{metrics-DXhrc6ii.d.ts → metrics-B89jvpZQ.d.ts}

@@ -1,4 +1,4 @@
-import { X as MetricOptions, Z as MetricsService } from "./index-CbvNd665.js";
+import { $ as MetricsService, Q as MetricOptions } from "./index-BosM_da2.js";
 import { PostHog } from "posthog-node";
 //#region src/infrastructure/posthog/metrics.d.ts
 /** PostHog Metrics with Worker lifetime management, ported from Typist's metrics-service.ts. */
@@ -16,4 +16,4 @@ declare class PostHogMetricsService implements MetricsService {
 }
 //#endregion
 export { PostHogMetricsService as t };
-//# sourceMappingURL=metrics-DXhrc6ii.d.ts.map
+//# sourceMappingURL=metrics-B89jvpZQ.d.ts.map

package/dist/{metrics-DXhrc6ii.d.ts.map → metrics-B89jvpZQ.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"metrics-DXhrc6ii.d.ts","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"mappings":";;;;cAKa,iCAAiC;mBAGzB;mBACA;;EAFnB,YACmB,QAAQ,KAAK,qBACb,YAAY,SAAS;;EAIxC,MAAM,cAAc,gBAAW,UAAU;;EAMzC,MAAM,cAAc,eAAe,UAAU;;EAM7C,UAAU,cAAc,eAAe,UAAU"}
+{"version":3,"file":"metrics-B89jvpZQ.d.ts","names":[],"sources":["../src/infrastructure/posthog/metrics.ts"],"mappings":";;;;cAKa,iCAAiC;mBAGzB;mBACA;;EAFnB,YACmB,QAAQ,KAAK,qBACb,YAAY,SAAS;;EAIxC,MAAM,cAAc,gBAAW,UAAU;;EAMzC,MAAM,cAAc,eAAe,UAAU;;EAM7C,UAAU,cAAc,eAAe,UAAU"}

package/dist/{outbox-repository-options-gk3JOjLB.d.ts → outbox-repository-options-A2fA1UDX.d.ts}

@@ -1,5 +1,5 @@
 import "./index-DUFS0SJ_.js";
-import { F as IEventCollector } from "./index-CbvNd665.js";
+import { F as IEventCollector } from "./index-BosM_da2.js";
 import { BatchItem } from "drizzle-orm/batch";
 //#region src/infrastructure/drizzle-schema.d.ts
 /**
@@ -23,4 +23,4 @@ declare const OUTBOX_REPOSITORY_DEFAULTS: {
 type OutboxRepositoryOptions = Readonly<Partial<typeof OUTBOX_REPOSITORY_DEFAULTS>>;
 //#endregion
 export { eventCollector as n, DrizzleSchema as r, OutboxRepositoryOptions as t };
-//# sourceMappingURL=outbox-repository-options-gk3JOjLB.d.ts.map
+//# sourceMappingURL=outbox-repository-options-A2fA1UDX.d.ts.map

package/dist/{outbox-repository-options-gk3JOjLB.d.ts.map → outbox-repository-options-A2fA1UDX.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"outbox-repository-options-gk3JOjLB.d.ts","names":[],"sources":["../src/infrastructure/drizzle-schema.ts","../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"mappings":";;;;;;;;KAKY,gBAAgB;;;;cCuBf,gBAAgB;;;;cC3BhB;EACX;EACA;EACA;;;KAIU,0BAA0B,SAAS,eAAe"}
+{"version":3,"file":"outbox-repository-options-A2fA1UDX.d.ts","names":[],"sources":["../src/infrastructure/drizzle-schema.ts","../src/infrastructure/unit-of-work-context.ts","../src/infrastructure/outbox-repository-options.ts"],"mappings":";;;;;;;;KAKY,gBAAgB;;;;cCuBf,gBAAgB;;;;cC3BhB;EACX;EACA;EACA;;;KAIU,0BAA0B,SAAS,eAAe"}

package/dist/postgres.d.ts

@@ -1,6 +1,6 @@
 import { W as DomainEvent, Xt as AppError, nt as DatabaseFailure, q as MessageId, tt as DatabaseError } from "./index-DUFS0SJ_.js";
-import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-CbvNd665.js";
-import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-gk3JOjLB.js";
+import { A as IOutboxRepository, M as OutboxClaim, N as OutboxMessage, P as IMessageStore, k as DeadLetterReason, w as ITransaction } from "./index-BosM_da2.js";
+import { n as eventCollector, r as DrizzleSchema, t as OutboxRepositoryOptions } from "./outbox-repository-options-A2fA1UDX.js";
 import { ExtractTablesWithRelations } from "drizzle-orm";
 import { NodePgDatabase, NodePgTransaction } from "drizzle-orm/node-postgres";
 import { Pool } from "pg";

package/dist/posthog/metrics.d.ts

@@ -1,2 +1,2 @@
-import { t as PostHogMetricsService } from "../metrics-DXhrc6ii.js";
+import { t as PostHogMetricsService } from "../metrics-B89jvpZQ.js";
 export { PostHogMetricsService };

package/dist/posthog/server.d.ts

@@ -1,6 +1,6 @@
 import { Gt as AnalyticsEventIdentity, Kt as AnalyticsEventInput, qt as AnalyticsProperties } from "../index-DUFS0SJ_.js";
-import { $ as AnalyticsService } from "../index-CbvNd665.js";
-import { t as PostHogMetricsService } from "../metrics-DXhrc6ii.js";
+import { tt as AnalyticsService } from "../index-BosM_da2.js";
+import { t as PostHogMetricsService } from "../metrics-B89jvpZQ.js";
 import { PostHog, PostHogOptions } from "posthog-node";
 //#region src/infrastructure/posthog/server.d.ts
 /** Deployment values and SDK options; the runtime owns delivery promises. */

package/dist/request-user-B4rh1c2-.js

@@ -0,0 +1,19 @@
+//#region src/application/request-user.ts
+/**
+* Process-wide request user hook.
+* The Sentry server entry sets it once. Auth middleware calls it after a session resolves.
+* The hook does not store a user id. The adapter writes the id on the current isolation scope.
+*/
+let observabilityUserHook = null;
+/** Set or clear the process-wide request user hook. */
+function setObservabilityUserHook(hook) {
+	observabilityUserHook = hook;
+}
+/** Attribute the current execution to this user. No hook means the call does nothing. */
+function applyObservabilityUser(user) {
+	observabilityUserHook?.(user);
+}
+
+//#endregion
+export { setObservabilityUserHook as n, applyObservabilityUser as t };
+//# sourceMappingURL=request-user-B4rh1c2-.js.map

package/dist/request-user-B4rh1c2-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-user-B4rh1c2-.js","names":[],"sources":["../src/application/request-user.ts"],"sourcesContent":["import type { ObservabilityUser } from './observability-service.ts'\n\n/**\n * Process-wide request user hook.\n * The Sentry server entry sets it once. Auth middleware calls it after a session resolves.\n * The hook does not store a user id. The adapter writes the id on the current isolation scope.\n */\nlet observabilityUserHook: ((user: ObservabilityUser) => void) | null = null\n\n/** Set or clear the process-wide request user hook. */\nexport function setObservabilityUserHook(hook: ((user: ObservabilityUser) => void) | null): void {\n  observabilityUserHook = hook\n}\n\n/** Attribute the current execution to this user. No hook means the call does nothing. */\nexport function applyObservabilityUser(user: ObservabilityUser): void {\n  observabilityUserHook?.(user)\n}\n"],"mappings":";;;;;;AAOA,IAAI,wBAAoE;;AAGxE,SAAgB,yBAAyB,MAAwD;CAC/F,wBAAwB;AAC1B;;AAGA,SAAgB,uBAAuB,MAA+B;CACpE,wBAAwB,IAAI;AAC9B"}

package/dist/resend.d.ts

@@ -1,5 +1,5 @@
 import { jt as BounceType } from "./index-DUFS0SJ_.js";
-import { B as OutboundEmail, H as ReceivedContent, I as EmailAccepted, R as IEmailService, U as ReceivedEmail } from "./index-CbvNd665.js";
+import { B as OutboundEmail, H as ReceivedContent, I as EmailAccepted, R as IEmailService, U as ReceivedEmail } from "./index-BosM_da2.js";
 import { n as WebhookVerifier } from "./webhook-verification-D1c7BY4q.js";
 import "resend";
 //#region src/infrastructure/resend/resend-email-service.d.ts

package/dist/sentry/server.d.ts

@@ -1,5 +1,5 @@
 import { u as LoggerErrorHook } from "../index-DUFS0SJ_.js";
-import { G as ObservabilityScope, K as ObservabilityService, q as ObservabilityUser } from "../index-CbvNd665.js";
+import { J as ObservabilityService, Y as ObservabilityUser, q as ObservabilityScope } from "../index-BosM_da2.js";
 import * as Sentry from "@sentry/cloudflare";
 //#region src/infrastructure/sentry/server.d.ts
 /** Application-owned deployment settings with the full Cloudflare SDK option contract. */
@@ -8,7 +8,10 @@ export type SentryServerOptions = Sentry.CloudflareOptions & {
   readonly environment: string;
   readonly enabled: boolean;
 };
-/** Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults. */
+/**
+ * Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults.
+ * Registers the request user hook so auth middleware can set `{ id }` on the current isolation scope.
+ */
 export declare function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions;
 /** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */
 export declare function createSentryLoggerErrorHook(): LoggerErrorHook;

package/dist/sentry/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"mappings":";;;;;YAMY,sBAAsB,OAAO;WAC9B;WACA;WACA;;;wBAIK,oBAAoB,SAAS,sBAAsB,OAAO;;wBAK1D,+BAA+B;;qBAWlC,sCAAsC;;EAEjD,QAAQ,MAAM;;EAKR,mBAAmB,GAAG,WAAW,OAAO,uBAAuB,IAAI,QAAQ,KAAK,QAAQ"}
+{"version":3,"file":"server.d.ts","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"mappings":";;;;;YAQY,sBAAsB,OAAO;WAC9B;WACA;WACA;;;;;;wBAOK,oBAAoB,SAAS,sBAAsB,OAAO;;wBAU1D,+BAA+B;;qBAWlC,sCAAsC;;EAEjD,QAAQ,MAAM;;EAKR,mBAAmB,GAAG,WAAW,OAAO,uBAAuB,IAAI,QAAQ,KAAK,QAAQ"}

package/dist/sentry/server.js

@@ -1,8 +1,16 @@
+import { n as setObservabilityUserHook } from "../request-user-B4rh1c2-.js";
 import * as Sentry from "@sentry/cloudflare";
 
 //#region src/infrastructure/sentry/server.ts
-/** Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults. */
+/**
+* Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults.
+* Registers the request user hook so auth middleware can set `{ id }` on the current isolation scope.
+*/
 function createSentryOptions(options) {
+	setObservabilityUserHook((user) => {
+		if (!Sentry.isEnabled()) return;
+		Sentry.setUser({ id: user.id });
+	});
 	return options;
 }
 /** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */

package/dist/sentry/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/** Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults. */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  return options\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, userId, attributes }) => {\n    if (userId !== undefined) {\n      Sentry.captureException(error, { extra: attributes, user: { id: userId } })\n      return\n    }\n    Sentry.captureException(error, { extra: attributes })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser({ id: user.id })\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope((scope) =>\n      callback({ setUser: (user) => scope.setUser({ id: user.id }) }),\n    )\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;AAaA,SAAgB,oBAAoB,SAAwD;CAC1F,OAAO;AACT;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,QAAQ,iBAAiB;EACxC,IAAI,WAAW,QAAW;GACxB,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAY,MAAM,EAAE,IAAI,OAAO;GAAE,CAAC;GAC1E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,WAAW,CAAC;CACtD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC;CAChC;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,oBAAoB,UACtC,SAAS,EAAE,UAAU,SAAS,MAAM,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAChE;CACF;AACF"}
+{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\nimport { setObservabilityUserHook } from '../../application/request-user.ts'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/**\n * Pass application options to Workers, Durable Objects, and Workflows with the SDK defaults.\n * Registers the request user hook so auth middleware can set `{ id }` on the current isolation scope.\n */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  // Auth middleware cannot import this SDK. The hook writes `{ id }` only when Sentry is enabled.\n  setObservabilityUserHook((user) => {\n    if (!Sentry.isEnabled()) return\n    Sentry.setUser({ id: user.id })\n  })\n  return options\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, userId, attributes }) => {\n    if (userId !== undefined) {\n      Sentry.captureException(error, { extra: attributes, user: { id: userId } })\n      return\n    }\n    Sentry.captureException(error, { extra: attributes })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser({ id: user.id })\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope((scope) =>\n      callback({ setUser: (user) => scope.setUser({ id: user.id }) }),\n    )\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;;;;;AAkBA,SAAgB,oBAAoB,SAAwD;CAE1F,0BAA0B,SAAS;EACjC,IAAI,CAAC,OAAO,UAAU,GAAG;EACzB,OAAO,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC;CAChC,CAAC;CACD,OAAO;AACT;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,QAAQ,iBAAiB;EACxC,IAAI,WAAW,QAAW;GACxB,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAY,MAAM,EAAE,IAAI,OAAO;GAAE,CAAC;GAC1E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,WAAW,CAAC;CACtD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC;CAChC;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,oBAAoB,UACtC,SAAS,EAAE,UAAU,SAAS,MAAM,QAAQ,EAAE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAChE;CACF;AACF"}

package/dist/tanstack/oxlint.d.ts

@@ -0,0 +1,10 @@
+//#region src/infrastructure/tanstack/oxlint/index.d.ts
+/**
+ * Oxlint plugin for TanStack Form and Query.
+ * Enable the `tanstack/*` rules from `jsPlugins`.
+ * Ported from Suparelay `packages/tanstack-lint`. The rule ids are unchanged.
+ */
+declare const tanstackPlugin: import("@oxlint/plugins").Plugin;
+//#endregion
+export { tanstackPlugin as default };
+//# sourceMappingURL=oxlint.d.ts.map

package/dist/tanstack/oxlint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint.d.ts","names":[],"sources":["../../src/infrastructure/tanstack/oxlint/index.ts"],"mappings":";;;;;;cAaM,0CAAc"}

package/dist/tanstack/oxlint.js

@@ -0,0 +1,256 @@
+import { defineRule, eslintCompatPlugin } from "@oxlint/plugins";
+
+//#region src/infrastructure/tanstack/oxlint/form-options.ts
+const FORM_HOOKS = /* @__PURE__ */ new Set(["useForm", "useAppForm"]);
+const SAFETY = /(?:^|[^\p{L}\p{N}_])SAFETY\s*:\s*\S/u;
+/** The options object of a `useForm({ … })` or `useAppForm({ … })` call. */
+function formOptions(node) {
+	if (node.callee.type !== "Identifier" || !FORM_HOOKS.has(node.callee.name)) return null;
+	const [options] = node.arguments;
+	return options?.type === "ObjectExpression" ? options : null;
+}
+/** A plain `name: value` property of an object literal. */
+function propertyNamed(object, name) {
+	for (const property of object.properties) {
+		if (property.type !== "Property" || property.computed) continue;
+		const key = property.key;
+		if (key.type === "Identifier" && key.name === name) return property;
+		if (key.type === "Literal" && key.value === name) return property;
+	}
+	return null;
+}
+/** A `// SAFETY:` comment directly before the node allows one exception. */
+function hasSafetyComment(sourceCode, node) {
+	return sourceCode.getCommentsBefore(node).some((comment) => SAFETY.test(comment.value));
+}
+/** Every node under `root`. Parent links are not followed. */
+function* descendants(root) {
+	for (const [key, value] of Object.entries(root)) {
+		if (key === "parent") continue;
+		const children = Array.isArray(value) ? value : [value];
+		for (const child of children) if (isAstNode(child)) {
+			yield child;
+			yield* descendants(child);
+		}
+	}
+}
+function isAstNode(value) {
+	return value instanceof Object && "type" in value && "start" in value;
+}
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/form-schema-validators.ts
+const DYNAMIC_SLOTS = /* @__PURE__ */ new Set(["onDynamic", "onDynamicAsync"]);
+/**
+* Require one named schema on `useForm` and `useAppForm`.
+* `validationLogic` must call `revalidateLogic`. The schema sits on `validators.onDynamic`.
+* A `// SAFETY:` comment before the call allows one form.
+*/
+const formSchemaValidatorsRule = defineRule({
+	meta: {
+		type: "problem",
+		docs: { description: "Require `validationLogic: revalidateLogic(…)` and `validators: { onDynamic: Schema }` on every TanStack form." },
+		messages: {
+			logic: "Choose the timing with validationLogic: revalidateLogic({ mode, modeAfterSubmission }).",
+			missing: "Validate the form with one schema: validators: { onDynamic: Schema }.",
+			slot: "Replace {{slot}} with onDynamic; revalidateLogic sets the timing.",
+			inline: "Pass a schema, not a function: validators: { onDynamic: Schema }."
+		}
+	},
+	createOnce(context) {
+		return { CallExpression(node) {
+			const options = formOptions(node);
+			if (options === null || hasSafetyComment(context.sourceCode, node)) return;
+			const logic = propertyNamed(options, "validationLogic");
+			if (logic === null || logic.value.type !== "CallExpression" || logic.value.callee.type !== "Identifier" || logic.value.callee.name !== "revalidateLogic") context.report({
+				node: logic ?? node,
+				messageId: "logic"
+			});
+			const validators = propertyNamed(options, "validators");
+			if (validators === null || validators.value.type !== "ObjectExpression") {
+				context.report({
+					node: validators ?? node,
+					messageId: "missing"
+				});
+				return;
+			}
+			for (const slot of validators.value.properties) {
+				if (slot.type !== "Property" || slot.key.type !== "Identifier") continue;
+				if (!DYNAMIC_SLOTS.has(slot.key.name)) context.report({
+					node: slot,
+					messageId: "slot",
+					data: { slot: slot.key.name }
+				});
+				else if (slot.value.type !== "Identifier" && slot.value.type !== "MemberExpression") context.report({
+					node: slot.value,
+					messageId: "inline"
+				});
+			}
+		} };
+	}
+});
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/form-stable-default-values.ts
+/** A call whose result changes between renders, such as the current time or a random id. */
+function isUnstable(node) {
+	if (node.type === "NewExpression") return node.callee.type === "Identifier" && node.callee.name === "Date";
+	if (node.type !== "CallExpression" || node.callee.type !== "MemberExpression") return false;
+	const { object, property } = node.callee;
+	if (object.type !== "Identifier" || property.type !== "Identifier") return false;
+	return object.name === "Date" && property.name === "now" || object.name === "Math" && property.name === "random" || object.name === "crypto" && property.name === "randomUUID";
+}
+/**
+* Reject a time or random value written inside `defaultValues`.
+* TanStack Form applies a changed default to an untouched form on the next render.
+*/
+const formStableDefaultValuesRule = defineRule({
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow time or random values computed inline in `defaultValues`." },
+		messages: { unstable: "Compute this default once with useState(() => …) or a module constant; an inline value resets the form on render." }
+	},
+	createOnce(context) {
+		return { CallExpression(node) {
+			const options = formOptions(node);
+			const defaults = options === null ? null : propertyNamed(options, "defaultValues");
+			if (defaults === null) return;
+			for (const child of [defaults.value, ...descendants(defaults.value)]) if (isUnstable(child)) context.report({
+				node: child,
+				messageId: "unstable"
+			});
+		} };
+	}
+});
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/no-field-validators.ts
+const FIELD_COMPONENTS = /* @__PURE__ */ new Set(["Field", "AppField"]);
+/** Reject field-level `validators`. The form schema is the only validation source. */
+const noFieldValidatorsRule = defineRule({
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow field-level `validators`; the form schema validates." },
+		messages: { fieldValidators: "Remove validators from the field. Put the rule in the form schema." }
+	},
+	createOnce(context) {
+		return {
+			JSXOpeningElement(node) {
+				if (node.name.type !== "JSXMemberExpression") return;
+				if (!FIELD_COMPONENTS.has(node.name.property.name)) return;
+				for (const attribute of node.attributes) if (attribute.type === "JSXAttribute" && attribute.name.type === "JSXIdentifier" && attribute.name.name === "validators") context.report({
+					node: attribute,
+					messageId: "fieldValidators"
+				});
+			},
+			CallExpression(node) {
+				if (node.callee.type !== "Identifier" || node.callee.name !== "useField") return;
+				const [options] = node.arguments;
+				if (options?.type !== "ObjectExpression") return;
+				const validators = propertyNamed(options, "validators");
+				if (validators !== null) context.report({
+					node: validators,
+					messageId: "fieldValidators"
+				});
+			}
+		};
+	}
+});
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/no-submit-branching.ts
+const BRANCH_OPERATORS = /* @__PURE__ */ new Set([
+	"??",
+	"||",
+	"&&"
+]);
+function isBranch(node) {
+	if (node.type === "IfStatement" || node.type === "ConditionalExpression") return true;
+	return node.type === "LogicalExpression" && BRANCH_OPERATORS.has(node.operator);
+}
+/**
+* Reject a condition inside `onSubmit`.
+* The schema already accepted the values. A `// SAFETY:` comment on `onSubmit` allows one check.
+*/
+const noSubmitBranchingRule = defineRule({
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow conditions in a TanStack form's `onSubmit`." },
+		messages: { branch: "Move this check into the form schema. Use Schema.parse(value) when the submitted type must be narrowed." }
+	},
+	createOnce(context) {
+		return { CallExpression(node) {
+			const options = formOptions(node);
+			const submit = options === null ? null : propertyNamed(options, "onSubmit");
+			if (submit === null || hasSafetyComment(context.sourceCode, submit)) return;
+			for (const child of descendants(submit.value)) if (isBranch(child)) context.report({
+				node: child,
+				messageId: "branch"
+			});
+		} };
+	}
+});
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/query-key-from-factory.ts
+const CACHE_METHODS = /* @__PURE__ */ new Set([
+	"getQueryData",
+	"setQueryData",
+	"getQueryState",
+	"ensureQueryData"
+]);
+/**
+* Reject a query key array written outside a `*-queries.ts` factory.
+* Invalidation then reads the same key the factory stored.
+*/
+const queryKeyFromFactoryRule = defineRule({
+	meta: {
+		type: "problem",
+		docs: { description: "Disallow query key arrays outside `*-queries.ts` factory files." },
+		messages: { literal: "Read this key from the entity's query factory, for example entityQueries.lists() or entityQueries.detail(input).queryKey." }
+	},
+	createOnce(context) {
+		const inFactory = () => context.filename.endsWith("-queries.ts");
+		return {
+			Property(node) {
+				if (inFactory() || node.computed || node.key.type !== "Identifier") return;
+				if (node.key.name === "queryKey" && node.value.type === "ArrayExpression") context.report({
+					node: node.value,
+					messageId: "literal"
+				});
+			},
+			CallExpression(node) {
+				if (inFactory() || node.callee.type !== "MemberExpression") return;
+				const method = node.callee.property;
+				if (method.type !== "Identifier" || !CACHE_METHODS.has(method.name)) return;
+				const [key] = node.arguments;
+				if (key?.type === "ArrayExpression") context.report({
+					node: key,
+					messageId: "literal"
+				});
+			}
+		};
+	}
+});
+
+//#endregion
+//#region src/infrastructure/tanstack/oxlint/index.ts
+/**
+* Oxlint plugin for TanStack Form and Query.
+* Enable the `tanstack/*` rules from `jsPlugins`.
+* Ported from Suparelay `packages/tanstack-lint`. The rule ids are unchanged.
+*/
+const tanstackPlugin = eslintCompatPlugin({
+	meta: { name: "tanstack" },
+	rules: {
+		"form-schema-validators": formSchemaValidatorsRule,
+		"form-stable-default-values": formStableDefaultValuesRule,
+		"no-field-validators": noFieldValidatorsRule,
+		"no-submit-branching": noSubmitBranchingRule,
+		"query-key-from-factory": queryKeyFromFactoryRule
+	}
+});
+
+//#endregion
+export { tanstackPlugin as default };
+//# sourceMappingURL=oxlint.js.map

package/dist/tanstack/oxlint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oxlint.js","names":[],"sources":["../../src/infrastructure/tanstack/oxlint/form-options.ts","../../src/infrastructure/tanstack/oxlint/form-schema-validators.ts","../../src/infrastructure/tanstack/oxlint/form-stable-default-values.ts","../../src/infrastructure/tanstack/oxlint/no-field-validators.ts","../../src/infrastructure/tanstack/oxlint/no-submit-branching.ts","../../src/infrastructure/tanstack/oxlint/query-key-from-factory.ts","../../src/infrastructure/tanstack/oxlint/index.ts"],"sourcesContent":["import type { ESTree, SourceCode } from '@oxlint/plugins'\n\nconst FORM_HOOKS = new Set(['useForm', 'useAppForm'])\nconst SAFETY = /(?:^|[^\\p{L}\\p{N}_])SAFETY\\s*:\\s*\\S/u\n\n/** The options object of a `useForm({ … })` or `useAppForm({ … })` call. */\nexport function formOptions(node: ESTree.CallExpression): ESTree.ObjectExpression | null {\n  if (node.callee.type !== 'Identifier' || !FORM_HOOKS.has(node.callee.name)) return null\n  const [options] = node.arguments\n  return options?.type === 'ObjectExpression' ? options : null\n}\n\n/** A plain `name: value` property of an object literal. */\nexport function propertyNamed(\n  object: ESTree.ObjectExpression,\n  name: string,\n): ESTree.ObjectProperty | null {\n  for (const property of object.properties) {\n    if (property.type !== 'Property' || property.computed) continue\n    const key = property.key\n    if (key.type === 'Identifier' && key.name === name) return property\n    if (key.type === 'Literal' && key.value === name) return property\n  }\n  return null\n}\n\n/** A `// SAFETY:` comment directly before the node allows one exception. */\nexport function hasSafetyComment(sourceCode: SourceCode, node: ESTree.Node): boolean {\n  return sourceCode.getCommentsBefore(node).some((comment) => SAFETY.test(comment.value))\n}\n\n/** Every node under `root`. Parent links are not followed. */\nexport function* descendants(root: ESTree.Node): Generator<ESTree.Node> {\n  for (const [key, value] of Object.entries(root)) {\n    if (key === 'parent') continue\n    const children = Array.isArray(value) ? value : [value]\n    for (const child of children) {\n      if (isAstNode(child)) {\n        yield child\n        yield* descendants(child)\n      }\n    }\n  }\n}\n\ntype AstChild =\n  | { type?: string; start?: number }\n  | string\n  | number\n  | boolean\n  | bigint\n  | symbol\n  | null\n  | undefined\n\nfunction isAstNode(value: AstChild): value is ESTree.Node {\n  return value instanceof Object && 'type' in value && 'start' in value\n}\n","import { defineRule } from '@oxlint/plugins'\n\nimport { formOptions, hasSafetyComment, propertyNamed } from './form-options.ts'\n\nconst DYNAMIC_SLOTS = new Set(['onDynamic', 'onDynamicAsync'])\n\n/**\n * Require one named schema on `useForm` and `useAppForm`.\n * `validationLogic` must call `revalidateLogic`. The schema sits on `validators.onDynamic`.\n * A `// SAFETY:` comment before the call allows one form.\n */\nexport const formSchemaValidatorsRule = defineRule({\n  meta: {\n    type: 'problem',\n    docs: {\n      description:\n        'Require `validationLogic: revalidateLogic(…)` and `validators: { onDynamic: Schema }` on every TanStack form.',\n    },\n    messages: {\n      logic:\n        'Choose the timing with validationLogic: revalidateLogic({ mode, modeAfterSubmission }).',\n      missing: 'Validate the form with one schema: validators: { onDynamic: Schema }.',\n      slot: 'Replace {{slot}} with onDynamic; revalidateLogic sets the timing.',\n      inline: 'Pass a schema, not a function: validators: { onDynamic: Schema }.',\n    },\n  },\n  createOnce(context) {\n    return {\n      CallExpression(node) {\n        const options = formOptions(node)\n        if (options === null || hasSafetyComment(context.sourceCode, node)) return\n        const logic = propertyNamed(options, 'validationLogic')\n        if (\n          logic === null ||\n          logic.value.type !== 'CallExpression' ||\n          logic.value.callee.type !== 'Identifier' ||\n          logic.value.callee.name !== 'revalidateLogic'\n        ) {\n          context.report({ node: logic ?? node, messageId: 'logic' })\n        }\n        const validators = propertyNamed(options, 'validators')\n        if (validators === null || validators.value.type !== 'ObjectExpression') {\n          context.report({ node: validators ?? node, messageId: 'missing' })\n          return\n        }\n        for (const slot of validators.value.properties) {\n          if (slot.type !== 'Property' || slot.key.type !== 'Identifier') continue\n          if (!DYNAMIC_SLOTS.has(slot.key.name)) {\n            context.report({ node: slot, messageId: 'slot', data: { slot: slot.key.name } })\n          } else if (slot.value.type !== 'Identifier' && slot.value.type !== 'MemberExpression') {\n            context.report({ node: slot.value, messageId: 'inline' })\n          }\n        }\n      },\n    }\n  },\n})\n","import { defineRule } from '@oxlint/plugins'\nimport type { ESTree } from '@oxlint/plugins'\n\nimport { descendants, formOptions, propertyNamed } from './form-options.ts'\n\n/** A call whose result changes between renders, such as the current time or a random id. */\nfunction isUnstable(node: ESTree.Node): boolean {\n  if (node.type === 'NewExpression') {\n    return node.callee.type === 'Identifier' && node.callee.name === 'Date'\n  }\n  if (node.type !== 'CallExpression' || node.callee.type !== 'MemberExpression') return false\n  const { object, property } = node.callee\n  if (object.type !== 'Identifier' || property.type !== 'Identifier') return false\n  return (\n    (object.name === 'Date' && property.name === 'now') ||\n    (object.name === 'Math' && property.name === 'random') ||\n    (object.name === 'crypto' && property.name === 'randomUUID')\n  )\n}\n\n/**\n * Reject a time or random value written inside `defaultValues`.\n * TanStack Form applies a changed default to an untouched form on the next render.\n */\nexport const formStableDefaultValuesRule = defineRule({\n  meta: {\n    type: 'problem',\n    docs: { description: 'Disallow time or random values computed inline in `defaultValues`.' },\n    messages: {\n      unstable:\n        'Compute this default once with useState(() => …) or a module constant; an inline value resets the form on render.',\n    },\n  },\n  createOnce(context) {\n    return {\n      CallExpression(node) {\n        const options = formOptions(node)\n        const defaults = options === null ? null : propertyNamed(options, 'defaultValues')\n        if (defaults === null) return\n        for (const child of [defaults.value, ...descendants(defaults.value)]) {\n          if (isUnstable(child)) context.report({ node: child, messageId: 'unstable' })\n        }\n      },\n    }\n  },\n})\n","import { defineRule } from '@oxlint/plugins'\n\nimport { propertyNamed } from './form-options.ts'\n\nconst FIELD_COMPONENTS = new Set(['Field', 'AppField'])\n\n/** Reject field-level `validators`. The form schema is the only validation source. */\nexport const noFieldValidatorsRule = defineRule({\n  meta: {\n    type: 'problem',\n    docs: { description: 'Disallow field-level `validators`; the form schema validates.' },\n    messages: {\n      fieldValidators: 'Remove validators from the field. Put the rule in the form schema.',\n    },\n  },\n  createOnce(context) {\n    return {\n      JSXOpeningElement(node) {\n        if (node.name.type !== 'JSXMemberExpression') return\n        if (!FIELD_COMPONENTS.has(node.name.property.name)) return\n        for (const attribute of node.attributes) {\n          if (\n            attribute.type === 'JSXAttribute' &&\n            attribute.name.type === 'JSXIdentifier' &&\n            attribute.name.name === 'validators'\n          ) {\n            context.report({ node: attribute, messageId: 'fieldValidators' })\n          }\n        }\n      },\n      CallExpression(node) {\n        if (node.callee.type !== 'Identifier' || node.callee.name !== 'useField') return\n        const [options] = node.arguments\n        if (options?.type !== 'ObjectExpression') return\n        const validators = propertyNamed(options, 'validators')\n        if (validators !== null) context.report({ node: validators, messageId: 'fieldValidators' })\n      },\n    }\n  },\n})\n","import { defineRule } from '@oxlint/plugins'\nimport type { ESTree } from '@oxlint/plugins'\n\nimport { descendants, formOptions, hasSafetyComment, propertyNamed } from './form-options.ts'\n\nconst BRANCH_OPERATORS = new Set(['??', '||', '&&'])\n\nfunction isBranch(node: ESTree.Node): boolean {\n  if (node.type === 'IfStatement' || node.type === 'ConditionalExpression') return true\n  return node.type === 'LogicalExpression' && BRANCH_OPERATORS.has(node.operator)\n}\n\n/**\n * Reject a condition inside `onSubmit`.\n * The schema already accepted the values. A `// SAFETY:` comment on `onSubmit` allows one check.\n */\nexport const noSubmitBranchingRule = defineRule({\n  meta: {\n    type: 'problem',\n    docs: { description: \"Disallow conditions in a TanStack form's `onSubmit`.\" },\n    messages: {\n      branch:\n        'Move this check into the form schema. Use Schema.parse(value) when the submitted type must be narrowed.',\n    },\n  },\n  createOnce(context) {\n    return {\n      CallExpression(node) {\n        const options = formOptions(node)\n        const submit = options === null ? null : propertyNamed(options, 'onSubmit')\n        if (submit === null || hasSafetyComment(context.sourceCode, submit)) return\n        for (const child of descendants(submit.value)) {\n          if (isBranch(child)) context.report({ node: child, messageId: 'branch' })\n        }\n      },\n    }\n  },\n})\n","import { defineRule } from '@oxlint/plugins'\n\nconst CACHE_METHODS = new Set(['getQueryData', 'setQueryData', 'getQueryState', 'ensureQueryData'])\n\n/**\n * Reject a query key array written outside a `*-queries.ts` factory.\n * Invalidation then reads the same key the factory stored.\n */\nexport const queryKeyFromFactoryRule = defineRule({\n  meta: {\n    type: 'problem',\n    docs: { description: 'Disallow query key arrays outside `*-queries.ts` factory files.' },\n    messages: {\n      literal:\n        \"Read this key from the entity's query factory, for example entityQueries.lists() or entityQueries.detail(input).queryKey.\",\n    },\n  },\n  createOnce(context) {\n    const inFactory = () => context.filename.endsWith('-queries.ts')\n    return {\n      Property(node) {\n        if (inFactory() || node.computed || node.key.type !== 'Identifier') return\n        if (node.key.name === 'queryKey' && node.value.type === 'ArrayExpression') {\n          context.report({ node: node.value, messageId: 'literal' })\n        }\n      },\n      CallExpression(node) {\n        if (inFactory() || node.callee.type !== 'MemberExpression') return\n        const method = node.callee.property\n        if (method.type !== 'Identifier' || !CACHE_METHODS.has(method.name)) return\n        const [key] = node.arguments\n        if (key?.type === 'ArrayExpression') context.report({ node: key, messageId: 'literal' })\n      },\n    }\n  },\n})\n","import { eslintCompatPlugin } from '@oxlint/plugins'\n\nimport { formSchemaValidatorsRule } from './form-schema-validators.ts'\nimport { formStableDefaultValuesRule } from './form-stable-default-values.ts'\nimport { noFieldValidatorsRule } from './no-field-validators.ts'\nimport { noSubmitBranchingRule } from './no-submit-branching.ts'\nimport { queryKeyFromFactoryRule } from './query-key-from-factory.ts'\n\n/**\n * Oxlint plugin for TanStack Form and Query.\n * Enable the `tanstack/*` rules from `jsPlugins`.\n * Ported from Suparelay `packages/tanstack-lint`. The rule ids are unchanged.\n */\nconst tanstackPlugin = eslintCompatPlugin({\n  meta: { name: 'tanstack' },\n  rules: {\n    'form-schema-validators': formSchemaValidatorsRule,\n    'form-stable-default-values': formStableDefaultValuesRule,\n    'no-field-validators': noFieldValidatorsRule,\n    'no-submit-branching': noSubmitBranchingRule,\n    'query-key-from-factory': queryKeyFromFactoryRule,\n  },\n})\n\nexport default tanstackPlugin\n"],"mappings":";;;AAEA,MAAM,6BAAa,IAAI,IAAI,CAAC,WAAW,YAAY,CAAC;AACpD,MAAM,SAAS;;AAGf,SAAgB,YAAY,MAA6D;CACvF,IAAI,KAAK,OAAO,SAAS,gBAAgB,CAAC,WAAW,IAAI,KAAK,OAAO,IAAI,GAAG,OAAO;CACnF,MAAM,CAAC,WAAW,KAAK;CACvB,OAAO,SAAS,SAAS,qBAAqB,UAAU;AAC1D;;AAGA,SAAgB,cACd,QACA,MAC8B;CAC9B,KAAK,MAAM,YAAY,OAAO,YAAY;EACxC,IAAI,SAAS,SAAS,cAAc,SAAS,UAAU;EACvD,MAAM,MAAM,SAAS;EACrB,IAAI,IAAI,SAAS,gBAAgB,IAAI,SAAS,MAAM,OAAO;EAC3D,IAAI,IAAI,SAAS,aAAa,IAAI,UAAU,MAAM,OAAO;CAC3D;CACA,OAAO;AACT;;AAGA,SAAgB,iBAAiB,YAAwB,MAA4B;CACnF,OAAO,WAAW,kBAAkB,IAAI,CAAC,CAAC,MAAM,YAAY,OAAO,KAAK,QAAQ,KAAK,CAAC;AACxF;;AAGA,UAAiB,YAAY,MAA2C;CACtE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,GAAG;EAC/C,IAAI,QAAQ,UAAU;EACtB,MAAM,WAAW,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;EACtD,KAAK,MAAM,SAAS,UAClB,IAAI,UAAU,KAAK,GAAG;GACpB,MAAM;GACN,OAAO,YAAY,KAAK;EAC1B;CAEJ;AACF;AAYA,SAAS,UAAU,OAAuC;CACxD,OAAO,iBAAiB,UAAU,UAAU,SAAS,WAAW;AAClE;;;;ACrDA,MAAM,gCAAgB,IAAI,IAAI,CAAC,aAAa,gBAAgB,CAAC;;;;;;AAO7D,MAAa,2BAA2B,WAAW;CACjD,MAAM;EACJ,MAAM;EACN,MAAM,EACJ,aACE,gHACJ;EACA,UAAU;GACR,OACE;GACF,SAAS;GACT,MAAM;GACN,QAAQ;EACV;CACF;CACA,WAAW,SAAS;EAClB,OAAO,EACL,eAAe,MAAM;GACnB,MAAM,UAAU,YAAY,IAAI;GAChC,IAAI,YAAY,QAAQ,iBAAiB,QAAQ,YAAY,IAAI,GAAG;GACpE,MAAM,QAAQ,cAAc,SAAS,iBAAiB;GACtD,IACE,UAAU,QACV,MAAM,MAAM,SAAS,oBACrB,MAAM,MAAM,OAAO,SAAS,gBAC5B,MAAM,MAAM,OAAO,SAAS,mBAE5B,QAAQ,OAAO;IAAE,MAAM,SAAS;IAAM,WAAW;GAAQ,CAAC;GAE5D,MAAM,aAAa,cAAc,SAAS,YAAY;GACtD,IAAI,eAAe,QAAQ,WAAW,MAAM,SAAS,oBAAoB;IACvE,QAAQ,OAAO;KAAE,MAAM,cAAc;KAAM,WAAW;IAAU,CAAC;IACjE;GACF;GACA,KAAK,MAAM,QAAQ,WAAW,MAAM,YAAY;IAC9C,IAAI,KAAK,SAAS,cAAc,KAAK,IAAI,SAAS,cAAc;IAChE,IAAI,CAAC,cAAc,IAAI,KAAK,IAAI,IAAI,GAClC,QAAQ,OAAO;KAAE,MAAM;KAAM,WAAW;KAAQ,MAAM,EAAE,MAAM,KAAK,IAAI,KAAK;IAAE,CAAC;SAC1E,IAAI,KAAK,MAAM,SAAS,gBAAgB,KAAK,MAAM,SAAS,oBACjE,QAAQ,OAAO;KAAE,MAAM,KAAK;KAAO,WAAW;IAAS,CAAC;GAE5D;EACF,EACF;CACF;AACF,CAAC;;;;;AClDD,SAAS,WAAW,MAA4B;CAC9C,IAAI,KAAK,SAAS,iBAChB,OAAO,KAAK,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS;CAEnE,IAAI,KAAK,SAAS,oBAAoB,KAAK,OAAO,SAAS,oBAAoB,OAAO;CACtF,MAAM,EAAE,QAAQ,aAAa,KAAK;CAClC,IAAI,OAAO,SAAS,gBAAgB,SAAS,SAAS,cAAc,OAAO;CAC3E,OACG,OAAO,SAAS,UAAU,SAAS,SAAS,SAC5C,OAAO,SAAS,UAAU,SAAS,SAAS,YAC5C,OAAO,SAAS,YAAY,SAAS,SAAS;AAEnD;;;;;AAMA,MAAa,8BAA8B,WAAW;CACpD,MAAM;EACJ,MAAM;EACN,MAAM,EAAE,aAAa,qEAAqE;EAC1F,UAAU,EACR,UACE,oHACJ;CACF;CACA,WAAW,SAAS;EAClB,OAAO,EACL,eAAe,MAAM;GACnB,MAAM,UAAU,YAAY,IAAI;GAChC,MAAM,WAAW,YAAY,OAAO,OAAO,cAAc,SAAS,eAAe;GACjF,IAAI,aAAa,MAAM;GACvB,KAAK,MAAM,SAAS,CAAC,SAAS,OAAO,GAAG,YAAY,SAAS,KAAK,CAAC,GACjE,IAAI,WAAW,KAAK,GAAG,QAAQ,OAAO;IAAE,MAAM;IAAO,WAAW;GAAW,CAAC;EAEhF,EACF;CACF;AACF,CAAC;;;;ACzCD,MAAM,mCAAmB,IAAI,IAAI,CAAC,SAAS,UAAU,CAAC;;AAGtD,MAAa,wBAAwB,WAAW;CAC9C,MAAM;EACJ,MAAM;EACN,MAAM,EAAE,aAAa,gEAAgE;EACrF,UAAU,EACR,iBAAiB,qEACnB;CACF;CACA,WAAW,SAAS;EAClB,OAAO;GACL,kBAAkB,MAAM;IACtB,IAAI,KAAK,KAAK,SAAS,uBAAuB;IAC9C,IAAI,CAAC,iBAAiB,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG;IACpD,KAAK,MAAM,aAAa,KAAK,YAC3B,IACE,UAAU,SAAS,kBACnB,UAAU,KAAK,SAAS,mBACxB,UAAU,KAAK,SAAS,cAExB,QAAQ,OAAO;KAAE,MAAM;KAAW,WAAW;IAAkB,CAAC;GAGtE;GACA,eAAe,MAAM;IACnB,IAAI,KAAK,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,YAAY;IAC1E,MAAM,CAAC,WAAW,KAAK;IACvB,IAAI,SAAS,SAAS,oBAAoB;IAC1C,MAAM,aAAa,cAAc,SAAS,YAAY;IACtD,IAAI,eAAe,MAAM,QAAQ,OAAO;KAAE,MAAM;KAAY,WAAW;IAAkB,CAAC;GAC5F;EACF;CACF;AACF,CAAC;;;;AClCD,MAAM,mCAAmB,IAAI,IAAI;CAAC;CAAM;CAAM;AAAI,CAAC;AAEnD,SAAS,SAAS,MAA4B;CAC5C,IAAI,KAAK,SAAS,iBAAiB,KAAK,SAAS,yBAAyB,OAAO;CACjF,OAAO,KAAK,SAAS,uBAAuB,iBAAiB,IAAI,KAAK,QAAQ;AAChF;;;;;AAMA,MAAa,wBAAwB,WAAW;CAC9C,MAAM;EACJ,MAAM;EACN,MAAM,EAAE,aAAa,uDAAuD;EAC5E,UAAU,EACR,QACE,0GACJ;CACF;CACA,WAAW,SAAS;EAClB,OAAO,EACL,eAAe,MAAM;GACnB,MAAM,UAAU,YAAY,IAAI;GAChC,MAAM,SAAS,YAAY,OAAO,OAAO,cAAc,SAAS,UAAU;GAC1E,IAAI,WAAW,QAAQ,iBAAiB,QAAQ,YAAY,MAAM,GAAG;GACrE,KAAK,MAAM,SAAS,YAAY,OAAO,KAAK,GAC1C,IAAI,SAAS,KAAK,GAAG,QAAQ,OAAO;IAAE,MAAM;IAAO,WAAW;GAAS,CAAC;EAE5E,EACF;CACF;AACF,CAAC;;;;ACnCD,MAAM,gCAAgB,IAAI,IAAI;CAAC;CAAgB;CAAgB;CAAiB;AAAiB,CAAC;;;;;AAMlG,MAAa,0BAA0B,WAAW;CAChD,MAAM;EACJ,MAAM;EACN,MAAM,EAAE,aAAa,kEAAkE;EACvF,UAAU,EACR,SACE,4HACJ;CACF;CACA,WAAW,SAAS;EAClB,MAAM,kBAAkB,QAAQ,SAAS,SAAS,aAAa;EAC/D,OAAO;GACL,SAAS,MAAM;IACb,IAAI,UAAU,KAAK,KAAK,YAAY,KAAK,IAAI,SAAS,cAAc;IACpE,IAAI,KAAK,IAAI,SAAS,cAAc,KAAK,MAAM,SAAS,mBACtD,QAAQ,OAAO;KAAE,MAAM,KAAK;KAAO,WAAW;IAAU,CAAC;GAE7D;GACA,eAAe,MAAM;IACnB,IAAI,UAAU,KAAK,KAAK,OAAO,SAAS,oBAAoB;IAC5D,MAAM,SAAS,KAAK,OAAO;IAC3B,IAAI,OAAO,SAAS,gBAAgB,CAAC,cAAc,IAAI,OAAO,IAAI,GAAG;IACrE,MAAM,CAAC,OAAO,KAAK;IACnB,IAAI,KAAK,SAAS,mBAAmB,QAAQ,OAAO;KAAE,MAAM;KAAK,WAAW;IAAU,CAAC;GACzF;EACF;CACF;AACF,CAAC;;;;;;;;;ACtBD,MAAM,iBAAiB,mBAAmB;CACxC,MAAM,EAAE,MAAM,WAAW;CACzB,OAAO;EACL,0BAA0B;EAC1B,8BAA8B;EAC9B,uBAAuB;EACvB,uBAAuB;EACvB,0BAA0B;CAC5B;AACF,CAAC"}

package/dist/tanstack.d.ts

@@ -55,7 +55,7 @@ type AuthMiddlewareOptions<Session extends AuthSession> = {
 /**
  * Preserve Porte's function and request middleware contracts with application-owned services.
  * Optional lookup failures log once and continue as guests. Required lookup failures propagate.
- * `onAuthenticated` runs after a session resolves and before the rest of the chain.
+ * A resolved session applies `{ id }` on the observability hook, then runs `onAuthenticated`, before the handler.
  */
 export declare function createAuthMiddleware<Session extends AuthSession>(options: AuthMiddlewareOptions<Session>): {
   extractAuth: import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, AuthContext<Session>, undefined, undefined, undefined>;