better-ship 0.4.0 → 0.5.0

package/dist/core-CnwWj4MY.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-CnwWj4MY.js","names":[],"sources":["../src/core/app-error.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/request.errors.ts","../src/core/problem-details.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/failure-classification.ts","../src/core/transport-classification.ts","../src/core/logger.ts"],"sourcesContent":["import type { FailureClassification } from './failure-classification.ts'\n\n/**\n * The base of every expected failure. A subclass declares its tag and its classification,\n * so no boundary has to guess what kind of failure it holds. A boundary tells our errors from\n * raw throws with `instanceof AppError`; a value that fails it was never judged.\n *\n * A `readonly` field with a literal initializer keeps the literal type, so\n * `readonly _tag = 'StoreUnavailable'` is enough for `Result` unions and `matchError`.\n */\nexport abstract class AppError extends Error {\n  abstract readonly _tag: string\n  abstract readonly classification: FailureClassification\n\n  override get name(): string {\n    return this._tag\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A protected operation requires a session that the caller did not provide. */\nexport class AuthenticationError extends AppError {\n  readonly _tag = 'AuthenticationError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Authentication required')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** HTTP 429 with a retry delay in seconds. A null delay means the response supplies no valid duration. */\nexport class RateLimitError extends AppError {\n  readonly _tag = 'RateLimitError'\n  readonly classification = 'transient'\n  readonly status = 429\n\n  constructor(readonly retryAfter: number | null) {\n    super('Too many requests')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A presented session cookie no longer resolves; the application owns cleanup and redirect policy. */\nexport class StaleSessionError extends AppError {\n  readonly _tag = 'StaleSessionError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Session is no longer valid. Sign in again.')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** The authenticated caller cannot perform this operation. Ported from Porte's auth.errors.ts. */\nexport class NotAuthorizedError extends AppError {\n  readonly _tag = 'NotAuthorizedError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Not allowed')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Safe public replacement for an unknown failure, ported from Porte's internal.errors.ts. */\nexport class InternalServerError extends AppError {\n  readonly _tag = 'InternalServerError'\n  readonly classification = 'unknown'\n\n  constructor() {\n    super('Something went wrong')\n  }\n}\n\n/** Safe public replacement for a classified transient failure. */\nexport class ServiceUnavailableError extends AppError {\n  readonly _tag = 'ServiceUnavailableError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('Try again shortly')\n  }\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { ValidationProblemError } from './problem-details.ts'\n\n/** One invalid value as a validator reports it: a message and a path of keys. */\nexport type ValidationIssue = {\n  readonly message: string\n  readonly path: readonly PropertyKey[]\n}\n\n/** Invalid user input, one entry per invalid value in the RFC 9457 shape. Technical failures use another error. */\nexport class ValidationError extends AppError {\n  readonly _tag = 'ValidationError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly errors: readonly ValidationProblemError[],\n    message = 'The request was not valid',\n  ) {\n    super(message)\n  }\n\n  /** Convert a Zod error. Each issue path becomes a JSON Pointer. */\n  static fromZod(error: z.ZodError, message?: string): ValidationError {\n    return ValidationError.fromIssues(error.issues, message)\n  }\n\n  /** Convert issues from any validator, such as issues TanStack serialized into an error message. */\n  static fromIssues(issues: readonly ValidationIssue[], message?: string): ValidationError {\n    return new ValidationError(\n      issues.map((issue) => ({ detail: issue.message, pointer: jsonPointer(issue.path) })),\n      message,\n    )\n  }\n}\n\n/** The server cannot parse the request syntax. */\nexport class MalformedRequestError extends AppError {\n  readonly _tag = 'MalformedRequestError'\n  readonly classification = 'terminal'\n\n  constructor(args: { cause: unknown }) {\n    super('The request was malformed', args)\n  }\n}\n\n/** No resource matches the requested HTTP path. */\nexport class ResourceNotFoundError extends AppError {\n  readonly _tag = 'ResourceNotFoundError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Resource not found')\n  }\n}\n\n/** A WebSocket route received a request without an upgrade. */\nexport class UpgradeRequiredError extends AppError {\n  readonly _tag = 'UpgradeRequiredError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('WebSocket upgrade required')\n  }\n}\n\n/** The requested operation did not answer before its deadline. */\nexport class RequestTimeoutError extends AppError {\n  readonly _tag = 'RequestTimeoutError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('The request timed out')\n  }\n}\n\nconst readablePathSchema = z.array(z.union([z.string(), z.number()]))\n\n// A symbol step cannot be shown, so the pointer keeps only the steps a person can read.\nfunction jsonPointer(path: readonly PropertyKey[]): string {\n  const parsed = readablePathSchema.safeParse(path)\n  const steps = parsed.success ? parsed.data : []\n  if (steps.length === 0) return '#'\n  return `#/${steps.map((step) => String(step).replaceAll('~', '~0').replaceAll('/', '~1')).join('/')}`\n}\n","import { z } from 'zod'\n\n/**\n * The standard RFC 9457 body for a failed HTTP response.\n * The HTTP response status remains authoritative; extensions may add problem-specific data.\n * @see https://http.dev/problem-details\n */\nexport const ProblemDetailsSchema = z.looseObject({\n  /**\n   * Stable URI for the problem type; use `about:blank` when the HTTP status is sufficient.\n   * @example \"about:blank\"\n   */\n  type: z.string(),\n  /**\n   * Stable human-readable name for the problem type.\n   * @example \"Service Unavailable\"\n   */\n  title: z.string(),\n  /**\n   * Safe human-readable explanation for this occurrence; clients must not parse it.\n   * @example \"The service is unavailable.\"\n   */\n  detail: z.string().optional(),\n  /**\n   * URI reference for this occurrence; omit it when no correlation resource exists.\n   * @example \"/problems/occurrences/01K5F6Y7\"\n   */\n  instance: z.string().optional(),\n})\n\n/** An RFC 9457 problem body for a failed HTTP response. */\nexport type ProblemDetails = z.infer<typeof ProblemDetailsSchema>\n\n/** One invalid value in a `422` validation problem. */\nexport const ValidationProblemErrorSchema = z.object({\n  /**\n   * Safe explanation of why this value is invalid.\n   * @example \"Must be a positive integer.\"\n   */\n  detail: z.string(),\n  /**\n   * RFC 6901 JSON Pointer fragment for the invalid value.\n   * @example \"#/age\"\n   */\n  pointer: z.string().regex(/^#(?:\\/(?:[^~]|~[01])*)*$/u),\n})\n\n/** One invalid value in a `422` validation problem. */\nexport type ValidationProblemError = z.infer<typeof ValidationProblemErrorSchema>\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport const ValidationProblemDetailsSchema = ProblemDetailsSchema.extend({\n  errors: z.array(ValidationProblemErrorSchema).min(1),\n})\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport type ValidationProblemDetails = z.infer<typeof ValidationProblemDetailsSchema>\n","import { panic } from 'better-result'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport { AuthenticationError } from './authentication.error.ts'\nimport { InternalServerError, ServiceUnavailableError } from './internal.errors.ts'\nimport { NotAuthorizedError } from './not-authorized.error.ts'\nimport { ValidationProblemErrorSchema } from './problem-details.ts'\nimport { RateLimitError } from './rate-limit.error.ts'\nimport {\n  MalformedRequestError,\n  RequestTimeoutError,\n  ResourceNotFoundError,\n  UpgradeRequiredError,\n  ValidationError,\n} from './request.errors.ts'\nimport { StaleSessionError } from './stale-session.error.ts'\n\ntype PublicFields = z.ZodObject\n\n/**\n * One public error: its class, its HTTP status, and the extra properties a client may read.\n * `fields` strips the thrown error on the server and parses the payload in the browser.\n */\nexport type ErrorEntry<Tag extends string, Fields extends PublicFields = PublicFields> = {\n  readonly error: abstract new (...args: never[]) => AppError & { readonly _tag: Tag }\n  readonly status: number\n  readonly fields?: Fields\n}\n\ntype AnyErrorEntry = ErrorEntry<string>\n\n/** Entries keyed by tag. The compiler rejects a key that differs from the class's `_tag`. */\nexport type ErrorEntries<Entries> = {\n  readonly [Tag in keyof Entries & string]: ErrorEntry<Tag>\n}\n\ntype EntryPayload<Tag extends string, Entry> = Entry extends {\n  readonly fields: infer Fields extends z.ZodType\n}\n  ? { readonly _tag: Tag; readonly message: string } & z.output<Fields>\n  : { readonly _tag: Tag; readonly message: string }\n\ntype PayloadOfEntries<Entries> = {\n  [Tag in keyof Entries & string]: EntryPayload<Tag, Entries[Tag]>\n}[keyof Entries & string]\n\n/** The HTTP status and public payload for one resolved failure. */\nexport type ResolvedError<Payload> = {\n  readonly status: number\n  readonly payload: Payload\n}\n\n/**\n * One application's public errors, shared by every transport boundary and the browser.\n * `resolve` and `fallback` serve boundaries. `parse` and `generic` serve screens.\n */\nexport type ErrorTable<Entries> = {\n  readonly entries: Entries\n  /** The discriminated union of every entry's `_tag`, `message`, and fields. */\n  readonly payloadSchema: z.ZodType<PayloadOfEntries<Entries>>\n  /** The `InternalServerError` payload, for screens that must show something. */\n  readonly generic: PayloadOfEntries<Entries>\n  /** Read a rejection value. Null means no known tag, so the request never reached the Worker. */\n  parse(cause: unknown): PayloadOfEntries<Entries> | null\n  /** Narrow a rejection value to one tag's payload, for a caller that acts on that one error. */\n  is<Tag extends keyof Entries & string>(\n    cause: unknown,\n    tag: Tag,\n  ): cause is Extract<PayloadOfEntries<Entries>, { readonly _tag: Tag }>\n  /** Match a local instance or a remote error by tag. Null means the failure is not public. */\n  resolve(cause: unknown): ResolvedError<PayloadOfEntries<Entries>> | null\n  /** The replacement for an unmapped failure: 503 when it declared itself transient, else 500. */\n  fallback(cause: unknown): ResolvedError<PayloadOfEntries<Entries>>\n}\n\n/** The union of payloads a table can produce. */\nexport type ErrorPayloadOf<Table> =\n  Table extends ErrorTable<infer Entries> ? PayloadOfEntries<Entries> : never\n\n/** The union of tags a table contains. */\nexport type ErrorTagOf<Table> =\n  Table extends ErrorTable<infer Entries> ? keyof Entries & string : never\n\nfunction entriesOf<const Entries extends ErrorEntries<Entries>>(entries: Entries): Entries {\n  return entries\n}\n\nconst ValidationFields = z.object({ errors: z.array(ValidationProblemErrorSchema) })\nconst RateLimitFields = z.object({ retryAfter: z.number().nullable() })\n\n/** The errors every application can throw, with their statuses. `defineErrors` includes them. */\nexport const sharedErrors = entriesOf({\n  MalformedRequestError: { error: MalformedRequestError, status: 400 },\n  AuthenticationError: { error: AuthenticationError, status: 401 },\n  StaleSessionError: { error: StaleSessionError, status: 401 },\n  NotAuthorizedError: { error: NotAuthorizedError, status: 403 },\n  ResourceNotFoundError: { error: ResourceNotFoundError, status: 404 },\n  ValidationError: { error: ValidationError, status: 422, fields: ValidationFields },\n  UpgradeRequiredError: { error: UpgradeRequiredError, status: 426 },\n  RateLimitError: { error: RateLimitError, status: 429, fields: RateLimitFields },\n  InternalServerError: { error: InternalServerError, status: 500 },\n  ServiceUnavailableError: { error: ServiceUnavailableError, status: 503 },\n  RequestTimeoutError: { error: RequestTimeoutError, status: 504 },\n})\n\ntype MergedEntries<Entries> = Omit<typeof sharedErrors, keyof Entries> & Entries\n\n// Workers RPC drops the prototype but keeps own properties and marks the error as remote.\nconst RemoteErrorSchema = z.object({\n  _tag: z.string(),\n  message: z.string(),\n  remote: z.literal(true),\n})\n\ntype Match = { readonly tag: string; readonly entry: AnyErrorEntry; readonly error: Error }\n\nfunction match(byTag: ReadonlyMap<string, AnyErrorEntry>, cause: unknown): Match | null {\n  if (cause instanceof AppError) {\n    const entry = byTag.get(cause._tag)\n    if (entry === undefined || !(cause instanceof entry.error)) return null\n    return { tag: cause._tag, entry, error: cause }\n  }\n  if (!(cause instanceof Error)) return null\n  const remote = RemoteErrorSchema.safeParse(cause)\n  if (!remote.success) return null\n  const entry = byTag.get(remote.data._tag)\n  return entry === undefined ? null : { tag: remote.data._tag, entry, error: cause }\n}\n\n/**\n * Build the application's error table. The shared entries are always included;\n * an entry with the same key replaces the shared one.\n */\nexport function defineErrors<const Entries extends ErrorEntries<Entries>>(\n  entries: Entries,\n): ErrorTable<MergedEntries<Entries>> {\n  type Payload = PayloadOfEntries<MergedEntries<Entries>>\n  const merged = { ...sharedErrors, ...entries }\n  const byTag: ReadonlyMap<string, AnyErrorEntry> = new Map(Object.entries<AnyErrorEntry>(merged))\n\n  const resolve = (cause: unknown): ResolvedError<Payload> | null => {\n    const found = match(byTag, cause)\n    if (found === null) return null\n    const fields = found.entry.fields?.safeParse(found.error)\n    if (fields !== undefined && !fields.success) return null\n    // SAFETY: The entry's own `fields` schema produced these properties, so the payload has the shape declared for this tag.\n    const payload = { _tag: found.tag, message: found.error.message, ...fields?.data } as Payload\n    return { status: found.entry.status, payload }\n  }\n\n  const resolveShared = (error: AppError): ResolvedError<Payload> =>\n    resolve(error) ?? panic(`Error table cannot resolve shared error ${error._tag}`)\n  const generic = resolveShared(new InternalServerError())\n  const unavailable = resolveShared(new ServiceUnavailableError())\n\n  const variants = [...byTag].map(([tag, entry]) =>\n    // oxlint-disable-next-line anti-slop/no-shape-in-symbol-names -- Zod names an object schema's property map `shape`.\n    z.strictObject({ _tag: z.literal(tag), message: z.string(), ...entry.fields?.shape }),\n  )\n  const [first, ...rest] = variants\n  if (first === undefined) return panic('Error table has no entries')\n  // Each variant is one entry's `_tag`, `message`, and fields, which is the union `PayloadOfEntries` describes.\n  const payloadSchema = z.discriminatedUnion('_tag', [first, ...rest]).pipe(z.custom<Payload>())\n\n  // No return annotation: TypeScript resolves the deferred payload union differently in that position.\n  const parse = (cause: unknown) => {\n    const parsed = payloadSchema.safeParse(cause)\n    return parsed.success ? parsed.data : null\n  }\n\n  return {\n    entries: merged,\n    payloadSchema,\n    generic: generic.payload,\n    parse,\n    is<Tag extends keyof MergedEntries<Entries> & string>(\n      cause: unknown,\n      tag: Tag,\n    ): cause is Extract<Payload, { readonly _tag: Tag }> {\n      const parsed = parse(cause)\n      return parsed !== null && parsed._tag === tag\n    },\n    resolve,\n    fallback: (cause) =>\n      cause instanceof AppError && cause.classification === 'transient' ? unavailable : generic,\n  }\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** SQLite reports these constraint categories through D1. */\nexport type D1ConstraintKind = 'unique' | 'not_null' | 'foreign_key' | 'check'\n\n/** Database evidence for callers that interpret a specific code or constraint. */\nexport type DatabaseFailure =\n  | {\n      readonly database: 'd1'\n      readonly code: string | undefined\n      readonly kind: D1ConstraintKind | undefined\n      readonly table: string | undefined\n      readonly column: string | undefined\n      readonly constraintName: string | undefined\n    }\n  | {\n      readonly database: 'postgres'\n      readonly code: string | undefined\n      readonly table_name: string | undefined\n      readonly column_name: string | undefined\n      readonly constraint_name: string | undefined\n    }\n\n/** Classification describes the failure; callers must separately establish whether repetition is safe. */\nexport class DatabaseError extends AppError {\n  readonly _tag = 'DatabaseError'\n\n  constructor(\n    readonly operation: string,\n    readonly classification: FailureClassification,\n    readonly details: DatabaseFailure,\n    options: { readonly cause: unknown },\n  ) {\n    super(`Database operation failed: ${operation}`, options)\n  }\n}\n","import { panic } from 'better-result'\n\n/**\n * Mark a line the types say cannot run. A union member without a branch stops compilation here.\n *\n * @throws Panic when a value outside the union arrives at runtime.\n */\nexport function unreachable(value: never): never {\n  return panic(`Unreachable: ${String(value)}`)\n}\n\n/**\n * Mark a body that is not written yet. A defect, not an expected failure.\n *\n * @param what - The behavior the body will provide, such as `invoice export`.\n * @throws Panic always.\n */\nexport function notImplemented(what: string): never {\n  return panic(`Not implemented: ${what}`)\n}\n","/**\n * What one failure is, before any policy decides what to do about it.\n *\n * `transient`: the world may differ on the next attempt. `terminal`: repeating gives the\n * same answer. `unknown`: nobody judged this error, so it came from outside unwrapped.\n */\nexport type FailureClassification = 'transient' | 'terminal' | 'unknown'\n\n/**\n * Who is asking to repeat the work.\n *\n * An immediate owner holds a caller and a socket open. A durable owner already stored the\n * work, so it can afford to try again on a failure nobody classified.\n */\nexport type RetryOwner = 'immediate' | 'durable'\n\n/** Decide whether one retry owner may repeat a failed operation. */\nexport function shouldRetryFailure(args: {\n  readonly classification: FailureClassification\n  readonly repeatSafe: boolean\n  readonly owner: RetryOwner\n}): boolean {\n  if (!args.repeatSafe) return false\n  if (args.classification === 'transient') return true\n  if (args.classification === 'terminal') return false\n  return args.owner === 'durable'\n}\n","/**\n * Messages that the platform-neutral transports raise for a failure that may pass.\n *\n * A boundary that knows its own runtime adds its own patterns before these.\n */\nconst TRANSIENT_TRANSPORT_PATTERNS = [\n  /network/,\n  /fetch failed/,\n  /timeout/,\n  /timed?\\s*out/,\n  /connection.*(lost|reset|refused|closed|aborted)/,\n  /econnreset/,\n  /econnrefused/,\n  /etimedout/,\n  /eai_again/,\n]\n\n/** Cancellation is a decision, not a failure to repeat. */\nexport function isAbortError(cause: unknown): boolean {\n  return cause instanceof Error && cause.name === 'AbortError'\n}\n\n/** Match known transient transport messages while excluding explicit cancellation. */\nexport function isTransientTransportError(cause: unknown): boolean {\n  if (!(cause instanceof Error) || isAbortError(cause)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_TRANSPORT_PATTERNS.some((pattern) => pattern.test(message))\n}\n","/**\n * Module-scoped logging for every host.\n *\n * A logger emits one plain-data entry per log. The default sink hands it to `console` as an\n * entry object for a log service or as a colored line for a person, selected at startup.\n */\n\n/** A value a log entry may carry. Errors enter only through `Logger.error`. */\nexport type LogValue =\n  | string\n  | number\n  | boolean\n  | null\n  | undefined\n  | ReadonlyArray<LogValue>\n  | LogFields\n\n/** Named log values. */\nexport type LogFields = { readonly [key: string]: LogValue }\n\n/**\n * The supported log severity levels, in ascending order.\n *\n * A const object, not an enum, so a parsed environment value typed `'INFO'` is a `LogLevel`.\n */\nexport const LogLevel = {\n  DEBUG: 'DEBUG',\n  INFO: 'INFO',\n  WARN: 'WARN',\n  ERROR: 'ERROR',\n} as const\nexport type LogLevel = (typeof LogLevel)[keyof typeof LogLevel]\n\n/** An error as plain data, including diagnostics, causes, and aggregate members. */\nexport type SerializedError = {\n  readonly name: string\n  readonly message: string\n  readonly stack?: string\n  readonly fields?: LogFields\n  readonly cause?: SerializedError\n  readonly errors?: ReadonlyArray<SerializedError>\n}\n\n/** One log, as the sink receives it. Plain data, safe to stringify. */\nexport type LogEntry = {\n  readonly timestamp: string\n  readonly level: LogLevel\n  readonly module: string\n  readonly message: string\n  readonly details: LogFields\n  readonly userId?: string\n  /** Present on `Logger.error` entries that carried an error. */\n  readonly error?: SerializedError\n}\n\n/** The context an error log carries. */\nexport type ErrorLogContext = {\n  readonly error?: unknown\n  readonly userId?: string\n  readonly details?: LogFields\n}\n\n/** What a logger lets through: a level and everything above it, or nothing. */\nexport type LogThreshold = LogLevel | 'OFF'\n\n/** Overrides the application settings for one logger. */\nexport interface LoggerConfig {\n  readonly level?: LogThreshold\n}\n\n/** `json` writes the entry object. `pretty` writes one readable line for a person. */\nexport type LogFormat = 'json' | 'pretty'\n\n/**\n * The application settings, set once at the composition root.\n *\n * An omitted field keeps its default. An explicit `undefined` is a compile error, so the root\n * parses an environment value before passing it. The logger reads no environment itself.\n */\nexport interface LoggerSettings extends LoggerConfig {\n  readonly format?: LogFormat\n}\n\n// The production server setting, so a root that never configures still logs safely.\nconst DEFAULT_SETTINGS: Required<LoggerSettings> = {\n  level: LogLevel.INFO,\n  format: 'json',\n}\n\n// The application configures once at startup; loggers can exist before startup completes.\nlet settings = DEFAULT_SETTINGS\n\n/**\n * Set application settings, including for existing loggers. Per-logger overrides take priority.\n * Call at startup, never per request. An omitted field resets to INFO and JSON output.\n */\nexport function configureLogger(config: LoggerSettings): void {\n  settings = {\n    level: config.level ?? DEFAULT_SETTINGS.level,\n    format: config.format ?? DEFAULT_SETTINGS.format,\n  }\n}\n\n/** The error data sent to the configured error hook. */\nexport interface ErrorCaptureEntry {\n  readonly error: unknown\n  readonly distinctId: string | undefined\n  readonly context: LogFields\n}\n\n/** A function that forwards one logged error to an error service. */\nexport type LoggerErrorHook = (entry: ErrorCaptureEntry) => void\n\n/** Where every log entry goes. */\nexport type LogSink = (entry: LogEntry) => void\n\nlet errorHook: LoggerErrorHook | null = null\n\n/**\n * Register the function that receives each logged error.\n *\n * Set once at the process entry point. A later call replaces the earlier hook.\n */\nexport function setLoggerErrorHook(fn: LoggerErrorHook): void {\n  errorHook = fn\n}\n\n// One console method per level, so a host that filters by method can tell them apart.\nconst CONSOLE_METHOD = {\n  [LogLevel.DEBUG]: 'debug',\n  [LogLevel.INFO]: 'info',\n  [LogLevel.WARN]: 'warn',\n  [LogLevel.ERROR]: 'error',\n} as const satisfies Record<LogLevel, 'debug' | 'info' | 'warn' | 'error'>\n\n// Built from the code point so no raw control character sits in the source.\nconst ESC = String.fromCharCode(27)\nconst ANSI_RESET = `${ESC}[0m`\nconst ANSI_GRAY = `${ESC}[90m`\nconst ANSI_BLUE = `${ESC}[34m`\n\n// Severity reads at a glance: quiet levels stay dim, and an error is the only bold line.\nconst LEVEL_ANSI = {\n  DEBUG: `${ESC}[2;36m`,\n  INFO: ANSI_BLUE,\n  WARN: `${ESC}[33m`,\n  ERROR: `${ESC}[1;31m`,\n} satisfies Record<LogLevel, string>\n\nfunction prettyLine(entry: LogEntry): string {\n  // Node prints debug and info exactly like log, so the level must be in the text too.\n  const level = `[${entry.level}]`\n  const module = `[${entry.module}]`\n  // A browser console colors by method on its own; a terminal needs ANSI to do the same.\n  if ('window' in globalThis) return `${entry.timestamp} ${level} ${module} ${entry.message}`\n  const timestamp = `${ANSI_GRAY}${entry.timestamp}${ANSI_RESET}`\n  const coloredLevel = `${LEVEL_ANSI[entry.level]}${level}${ANSI_RESET}`\n  const coloredModule = `${ANSI_BLUE}${module}${ANSI_RESET}`\n  return `${timestamp} ${coloredLevel} ${coloredModule} ${entry.message}`\n}\n\n/**\n * JSON format writes the entry object. Pretty format writes one line, then the details,\n * the error, and the stack as separate console arguments.\n */\nexport const consoleSink: LogSink = (entry) => {\n  // Resolved per call, so a console replaced after import still receives the output.\n  const write = console[CONSOLE_METHOD[entry.level]]\n  if (settings.format === 'json') {\n    write(entry)\n    return\n  }\n  const line = prettyLine(entry)\n  const fields =\n    entry.userId === undefined ? entry.details : { ...entry.details, userId: entry.userId }\n  const details = Object.keys(fields).length === 0 ? [] : [fields]\n  if (entry.error === undefined) {\n    write(line, ...details)\n    return\n  }\n  // A stack inside an object prints as one quoted string; as its own argument it prints as lines.\n  const { stack, ...error } = entry.error\n  if (stack === undefined) write(line, ...details, error)\n  else write(line, ...details, error, `\\n${stack}`)\n}\n\nlet logSink: LogSink = consoleSink\n\n/**\n * Send every log entry somewhere other than `console`.\n *\n * Set once at the process entry point, never per module. A logger is created\n * by name and nothing else, so its destination is a fact about the process.\n */\nexport function setLogSink(fn: LogSink): void {\n  logSink = fn\n}\n\nconst LOG_LEVELS = Object.values(LogLevel)\nconst MAX_ERROR_DEPTH = 3\n\n/**\n * Diagnostics worth keeping off an error, named one by one.\n *\n * An allowlist rather than every own property: an error raised by a library we\n * do not control may hang a request or a user payload off itself, and a log is\n * the wrong place to discover that. `_tag` and `classification` are what every `AppError`\n * declares. `remote` and the three flags after it are the ones workerd sets itself.\n */\nconst KEPT_ERROR_FIELDS = [\n  '_tag',\n  'classification',\n  'code',\n  'operation',\n  'status',\n  'statusCode',\n  'remote',\n  'retryable',\n  'overloaded',\n  'durableObjectReset',\n] as const\n\ntype ErrorDiagnostics = Error & { readonly [K in (typeof KEPT_ERROR_FIELDS)[number]]?: LogValue }\n\ntype MutableSerializedError = { -readonly [K in keyof SerializedError]: SerializedError[K] }\n\nconst serializeError = (error: Error, depth = 0): SerializedError => {\n  if (depth > MAX_ERROR_DEPTH) return { name: 'Error', message: '[error nesting truncated]' }\n\n  // Every field is optional, so an `Error` is already one of these.\n  const carrier: ErrorDiagnostics = error\n  const kept = KEPT_ERROR_FIELDS.filter((key) => carrier[key] !== undefined)\n  const serialized: MutableSerializedError = { name: error.name, message: error.message }\n  if (error.stack !== undefined) serialized.stack = error.stack\n  if (kept.length > 0)\n    serialized.fields = Object.fromEntries(kept.map((key) => [key, carrier[key]]))\n  if (error.cause instanceof Error) serialized.cause = serializeError(error.cause, depth + 1)\n  else if (error.cause !== undefined)\n    serialized.cause = { name: 'Error', message: '[non-error cause]' }\n  if (error instanceof AggregateError) {\n    // oxlint-disable-next-line anti-slop/no-unknown-parameters -- AggregateError accepts arbitrary values; instanceof Error validates each member.\n    serialized.errors = error.errors.map((failure: unknown) =>\n      failure instanceof Error\n        ? serializeError(failure, depth + 1)\n        : { name: 'NonError', message: '[non-error aggregate member]' },\n    )\n  }\n  return serialized\n}\n\n/** Write module-scoped logs with application defaults and optional overrides. */\nexport class Logger {\n  private readonly config: LoggerConfig\n\n  /** Create a logger for one module. */\n  constructor(\n    private readonly module: string,\n    overrideConfig?: LoggerConfig,\n  ) {\n    this.config = { ...overrideConfig }\n  }\n\n  private log(\n    level: LogLevel,\n    message: string,\n    details: LogFields,\n    error?: SerializedError,\n    userId?: string,\n  ): void {\n    const threshold = this.config.level ?? settings.level\n    if (threshold === 'OFF') return\n    if (LOG_LEVELS.indexOf(level) < LOG_LEVELS.indexOf(threshold)) return\n\n    let entry: LogEntry = {\n      timestamp: new Date().toISOString(),\n      level,\n      module: this.module,\n      message,\n      details,\n    }\n    if (userId !== undefined) entry = { ...entry, userId }\n    logSink(error === undefined ? entry : { ...entry, error })\n  }\n\n  /** Write a debug log. */\n  debug(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.DEBUG, message, details)\n  }\n\n  /** Write an information log. */\n  info(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.INFO, message, details)\n  }\n\n  /** Write a warning log. */\n  warn(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.WARN, message, details)\n  }\n\n  /**\n   * Write an error log and send the error to the configured hook.\n   *\n   * The details say which call this was, and the error says what went wrong\n   * inside it. Both the entry and the error hook receive the supplied user ID.\n   */\n  error(message: string, context: ErrorLogContext = {}): void {\n    const details = context.details ?? {}\n    const thrown = context.error\n    let error: SerializedError | undefined\n    if (thrown instanceof Error) {\n      error = serializeError(thrown)\n    } else if (thrown !== undefined) {\n      // Not an `Error`, so there is no name or stack to keep, only its JSON form.\n      let json: string\n      try {\n        json = JSON.stringify(thrown)\n      } catch {\n        json = '[non-serializable error]'\n      }\n      error = { name: 'NonError', message: json }\n    }\n    this.log(LogLevel.ERROR, message, details, error, context.userId)\n\n    if (errorHook !== null && thrown !== undefined) {\n      errorHook({ error: thrown, distinctId: context.userId, context: details })\n    }\n  }\n}\n\n/** Create a logger for one module. */\nexport function createLogger(module: string, config?: LoggerConfig): Logger {\n  return new Logger(module, config)\n}\n"],"mappings":";;;;;;;;;;;;AAUA,IAAsB,WAAtB,cAAuC,MAAM;CAI3C,IAAa,OAAe;EAC1B,OAAO,KAAK;CACd;AACF;;;;;ACdA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,yBAAyB;CACjC;AACF;;;;;ACPA,IAAa,iBAAb,cAAoC,SAAS;CAKtB;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS,SAAS;CAElB,YAAY,AAAS,YAA2B;EAC9C,MAAM,mBAAmB;EADN;CAErB;AACF;;;;;ACRA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4CAA4C;CACpD;AACF;;;;;ACPA,IAAa,qBAAb,cAAwC,SAAS;CAC/C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,aAAa;CACrB;AACF;;;;;ACPA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,sBAAsB;CAC9B;AACF;;AAGA,IAAa,0BAAb,cAA6C,SAAS;CACpD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,mBAAmB;CAC3B;AACF;;;;;ACRA,IAAa,kBAAb,MAAa,wBAAwB,SAAS;CAKjC;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,QACT,UAAU,6BACV;EACA,MAAM,OAAO;EAHJ;CAIX;;CAGA,OAAO,QAAQ,OAAmB,SAAmC;EACnE,OAAO,gBAAgB,WAAW,MAAM,QAAQ,OAAO;CACzD;;CAGA,OAAO,WAAW,QAAoC,SAAmC;EACvF,OAAO,IAAI,gBACT,OAAO,KAAK,WAAW;GAAE,QAAQ,MAAM;GAAS,SAAS,YAAY,MAAM,IAAI;EAAE,EAAE,GACnF,OACF;CACF;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,MAA0B;EACpC,MAAM,6BAA6B,IAAI;CACzC;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,oBAAoB;CAC5B;AACF;;AAGA,IAAa,uBAAb,cAA0C,SAAS;CACjD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4BAA4B;CACpC;AACF;;AAGA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,uBAAuB;CAC/B;AACF;AAEA,MAAM,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAGpE,SAAS,YAAY,MAAsC;CACzD,MAAM,SAAS,mBAAmB,UAAU,IAAI;CAChD,MAAM,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;CAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;AACpG;;;;;;;;;AC9EA,MAAa,uBAAuB,EAAE,YAAY;;;;;CAKhD,MAAM,EAAE,OAAO;;;;;CAKf,OAAO,EAAE,OAAO;;;;;CAKhB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;;;;;CAK5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;AAChC,CAAC;;AAMD,MAAa,+BAA+B,EAAE,OAAO;;;;;CAKnD,QAAQ,EAAE,OAAO;;;;;CAKjB,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4BAA4B;AACxD,CAAC;;AAMD,MAAa,iCAAiC,qBAAqB,OAAO,EACxE,QAAQ,EAAE,MAAM,4BAA4B,CAAC,CAAC,IAAI,CAAC,EACrD,CAAC;;;;AC+BD,SAAS,UAAuD,SAA2B;CACzF,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,EAAE,CAAC;AACnF,MAAM,kBAAkB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGtE,MAAa,eAAe,UAAU;CACpC,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,mBAAmB;EAAE,OAAO;EAAmB,QAAQ;CAAI;CAC3D,oBAAoB;EAAE,OAAO;EAAoB,QAAQ;CAAI;CAC7D,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,iBAAiB;EAAE,OAAO;EAAiB,QAAQ;EAAK,QAAQ;CAAiB;CACjF,sBAAsB;EAAE,OAAO;EAAsB,QAAQ;CAAI;CACjE,gBAAgB;EAAE,OAAO;EAAgB,QAAQ;EAAK,QAAQ;CAAgB;CAC9E,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,yBAAyB;EAAE,OAAO;EAAyB,QAAQ;CAAI;CACvE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;AACjE,CAAC;AAKD,MAAM,oBAAoB,EAAE,OAAO;CACjC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAID,SAAS,MAAM,OAA2C,OAA8B;CACtF,IAAI,iBAAiB,UAAU;EAC7B,MAAM,QAAQ,MAAM,IAAI,MAAM,IAAI;EAClC,IAAI,UAAU,UAAa,EAAE,iBAAiB,MAAM,QAAQ,OAAO;EACnE,OAAO;GAAE,KAAK,MAAM;GAAM;GAAO,OAAO;EAAM;CAChD;CACA,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kBAAkB,UAAU,KAAK;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,IAAI;CACxC,OAAO,UAAU,SAAY,OAAO;EAAE,KAAK,OAAO,KAAK;EAAM;EAAO,OAAO;CAAM;AACnF;;;;;AAMA,SAAgB,aACd,SACoC;CAEpC,MAAM,SAAS;EAAE,GAAG;EAAc,GAAG;CAAQ;CAC7C,MAAM,QAA4C,IAAI,IAAI,OAAO,QAAuB,MAAM,CAAC;CAE/F,MAAM,WAAW,UAAkD;EACjE,MAAM,QAAQ,MAAM,OAAO,KAAK;EAChC,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,SAAS,MAAM,MAAM,QAAQ,UAAU,MAAM,KAAK;EACxD,IAAI,WAAW,UAAa,CAAC,OAAO,SAAS,OAAO;EAEpD,MAAM,UAAU;GAAE,MAAM,MAAM;GAAK,SAAS,MAAM,MAAM;GAAS,GAAG,QAAQ;EAAK;EACjF,OAAO;GAAE,QAAQ,MAAM,MAAM;GAAQ;EAAQ;CAC/C;CAEA,MAAM,iBAAiB,UACrB,QAAQ,KAAK,KAAK,MAAM,2CAA2C,MAAM,MAAM;CACjF,MAAM,UAAU,cAAc,IAAI,oBAAoB,CAAC;CACvD,MAAM,cAAc,cAAc,IAAI,wBAAwB,CAAC;CAM/D,MAAM,CAAC,OAAO,GAAG,QAJA,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,WAErC,EAAE,aAAa;EAAE,MAAM,EAAE,QAAQ,GAAG;EAAG,SAAS,EAAE,OAAO;EAAG,GAAG,MAAM,QAAQ;CAAM,CAAC,CAEtD;CAChC,IAAI,UAAU,QAAW,OAAO,MAAM,4BAA4B;CAElE,MAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAgB,CAAC;CAG7F,MAAM,SAAS,UAAmB;EAChC,MAAM,SAAS,cAAc,UAAU,KAAK;EAC5C,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;CAEA,OAAO;EACL,SAAS;EACT;EACA,SAAS,QAAQ;EACjB;EACA,GACE,OACA,KACmD;GACnD,MAAM,SAAS,MAAM,KAAK;GAC1B,OAAO,WAAW,QAAQ,OAAO,SAAS;EAC5C;EACA;EACA,WAAW,UACT,iBAAiB,YAAY,MAAM,mBAAmB,cAAc,cAAc;CACtF;AACF;;;;;AClKA,IAAa,gBAAb,cAAmC,SAAS;CAI/B;CACA;CACA;CALX,AAAS,OAAO;CAEhB,YACE,AAAS,WACT,AAAS,gBACT,AAAS,SACT,SACA;EACA,MAAM,8BAA8B,aAAa,OAAO;EAL/C;EACA;EACA;CAIX;AACF;;;;;;;;;AC7BA,SAAgB,YAAY,OAAqB;CAC/C,OAAO,MAAM,gBAAgB,OAAO,KAAK,GAAG;AAC9C;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CAClD,OAAO,MAAM,oBAAoB,MAAM;AACzC;;;;;ACFA,SAAgB,mBAAmB,MAIvB;CACV,IAAI,CAAC,KAAK,YAAY,OAAO;CAC7B,IAAI,KAAK,mBAAmB,aAAa,OAAO;CAChD,IAAI,KAAK,mBAAmB,YAAY,OAAO;CAC/C,OAAO,KAAK,UAAU;AACxB;;;;;;;;;ACrBA,MAAM,+BAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAgB,aAAa,OAAyB;CACpD,OAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;;AAGA,SAAgB,0BAA0B,OAAyB;CACjE,IAAI,EAAE,iBAAiB,UAAU,aAAa,KAAK,GAAG,OAAO;CAC7D,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,6BAA6B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC7E;;;;;;;;;ACFA,MAAa,WAAW;CACtB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAsDA,MAAM,mBAA6C;CACjD,OAAO,SAAS;CAChB,QAAQ;AACV;AAGA,IAAI,WAAW;;;;;AAMf,SAAgB,gBAAgB,QAA8B;CAC5D,WAAW;EACT,OAAO,OAAO,SAAS,iBAAiB;EACxC,QAAQ,OAAO,UAAU,iBAAiB;CAC5C;AACF;AAeA,IAAI,YAAoC;;;;;;AAOxC,SAAgB,mBAAmB,IAA2B;CAC5D,YAAY;AACd;AAGA,MAAM,iBAAiB;EACpB,SAAS,QAAQ;EACjB,SAAS,OAAO;EAChB,SAAS,OAAO;EAChB,SAAS,QAAQ;AACpB;AAGA,MAAM,MAAM,OAAO,aAAa,EAAE;AAClC,MAAM,aAAa,GAAG,IAAI;AAC1B,MAAM,YAAY,GAAG,IAAI;AACzB,MAAM,YAAY,GAAG,IAAI;AAGzB,MAAM,aAAa;CACjB,OAAO,GAAG,IAAI;CACd,MAAM;CACN,MAAM,GAAG,IAAI;CACb,OAAO,GAAG,IAAI;AAChB;AAEA,SAAS,WAAW,OAAyB;CAE3C,MAAM,QAAQ,IAAI,MAAM,MAAM;CAC9B,MAAM,SAAS,IAAI,MAAM,OAAO;CAEhC,IAAI,YAAY,YAAY,OAAO,GAAG,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM;CAIlF,OAAO,GAAG,GAHW,YAAY,MAAM,YAAY,aAG/B,GAAG,GAFC,WAAW,MAAM,SAAS,QAAQ,aAEtB,GAAG,GADd,YAAY,SAAS,aACO,GAAG,MAAM;AAChE;;;;;AAMA,MAAa,eAAwB,UAAU;CAE7C,MAAM,QAAQ,QAAQ,eAAe,MAAM;CAC3C,IAAI,SAAS,WAAW,QAAQ;EAC9B,MAAM,KAAK;EACX;CACF;CACA,MAAM,OAAO,WAAW,KAAK;CAC7B,MAAM,SACJ,MAAM,WAAW,SAAY,MAAM,UAAU;EAAE,GAAG,MAAM;EAAS,QAAQ,MAAM;CAAO;CACxF,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM;CAC/D,IAAI,MAAM,UAAU,QAAW;EAC7B,MAAM,MAAM,GAAG,OAAO;EACtB;CACF;CAEA,MAAM,EAAE,OAAO,GAAG,UAAU,MAAM;CAClC,IAAI,UAAU,QAAW,MAAM,MAAM,GAAG,SAAS,KAAK;MACjD,MAAM,MAAM,GAAG,SAAS,OAAO,KAAK,OAAO;AAClD;AAEA,IAAI,UAAmB;;;;;;;AAQvB,SAAgB,WAAW,IAAmB;CAC5C,UAAU;AACZ;AAEA,MAAM,aAAa,OAAO,OAAO,QAAQ;AACzC,MAAM,kBAAkB;;;;;;;;;AAUxB,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAMA,MAAM,kBAAkB,OAAc,QAAQ,MAAuB;CACnE,IAAI,QAAQ,iBAAiB,OAAO;EAAE,MAAM;EAAS,SAAS;CAA4B;CAG1F,MAAM,UAA4B;CAClC,MAAM,OAAO,kBAAkB,QAAQ,QAAQ,QAAQ,SAAS,MAAS;CACzE,MAAM,aAAqC;EAAE,MAAM,MAAM;EAAM,SAAS,MAAM;CAAQ;CACtF,IAAI,MAAM,UAAU,QAAW,WAAW,QAAQ,MAAM;CACxD,IAAI,KAAK,SAAS,GAChB,WAAW,SAAS,OAAO,YAAY,KAAK,KAAK,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;CAC/E,IAAI,MAAM,iBAAiB,OAAO,WAAW,QAAQ,eAAe,MAAM,OAAO,QAAQ,CAAC;MACrF,IAAI,MAAM,UAAU,QACvB,WAAW,QAAQ;EAAE,MAAM;EAAS,SAAS;CAAoB;CACnE,IAAI,iBAAiB,gBAEnB,WAAW,SAAS,MAAM,OAAO,KAAK,YACpC,mBAAmB,QACf,eAAe,SAAS,QAAQ,CAAC,IACjC;EAAE,MAAM;EAAY,SAAS;CAA+B,CAClE;CAEF,OAAO;AACT;;AAGA,IAAa,SAAb,MAAoB;CAKC;CAJnB,AAAiB;;CAGjB,YACE,AAAiB,QACjB,gBACA;EAFiB;EAGjB,KAAK,SAAS,EAAE,GAAG,eAAe;CACpC;CAEA,AAAQ,IACN,OACA,SACA,SACA,OACA,QACM;EACN,MAAM,YAAY,KAAK,OAAO,SAAS,SAAS;EAChD,IAAI,cAAc,OAAO;EACzB,IAAI,WAAW,QAAQ,KAAK,IAAI,WAAW,QAAQ,SAAS,GAAG;EAE/D,IAAI,QAAkB;GACpB,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;GAClC;GACA,QAAQ,KAAK;GACb;GACA;EACF;EACA,IAAI,WAAW,QAAW,QAAQ;GAAE,GAAG;GAAO;EAAO;EACrD,QAAQ,UAAU,SAAY,QAAQ;GAAE,GAAG;GAAO;EAAM,CAAC;CAC3D;;CAGA,MAAM,SAAiB,UAAqB,CAAC,GAAS;EACpD,KAAK,IAAI,SAAS,OAAO,SAAS,OAAO;CAC3C;;CAGA,KAAK,SAAiB,UAAqB,CAAC,GAAS;EACnD,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CAC1C;;CAGA,KAAK,SAAiB,UAAqB,CAAC,GAAS;EACnD,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CAC1C;;;;;;;CAQA,MAAM,SAAiB,UAA2B,CAAC,GAAS;EAC1D,MAAM,UAAU,QAAQ,WAAW,CAAC;EACpC,MAAM,SAAS,QAAQ;EACvB,IAAI;EACJ,IAAI,kBAAkB,OACpB,QAAQ,eAAe,MAAM;OACxB,IAAI,WAAW,QAAW;GAE/B,IAAI;GACJ,IAAI;IACF,OAAO,KAAK,UAAU,MAAM;GAC9B,QAAQ;IACN,OAAO;GACT;GACA,QAAQ;IAAE,MAAM;IAAY,SAAS;GAAK;EAC5C;EACA,KAAK,IAAI,SAAS,OAAO,SAAS,SAAS,OAAO,QAAQ,MAAM;EAEhE,IAAI,cAAc,QAAQ,WAAW,QACnC,UAAU;GAAE,OAAO;GAAQ,YAAY,QAAQ;GAAQ,SAAS;EAAQ,CAAC;CAE7E;AACF;;AAGA,SAAgB,aAAa,QAAgB,QAA+B;CAC1E,OAAO,IAAI,OAAO,QAAQ,MAAM;AAClC"}

package/dist/core.d.ts

@@ -1,2 +1,2 @@
-import { A as shouldRetryFailure, C as unreachable, D as AppError, E as DatabaseFailure, O as FailureClassification, S as notImplemented, T as DatabaseError, _ as createLogger, a as LogFormat, b as isAbortError, c as LogThreshold, d as LoggerConfig, f as LoggerErrorHook, g as consoleSink, h as configureLogger, i as LogFields, k as RetryOwner, l as LogValue, m as SerializedError, n as ErrorLogContext, o as LogLevel, p as LoggerSettings, r as LogEntry, s as LogSink, t as ErrorCaptureEntry, u as Logger, v as setLogSink, w as D1ConstraintKind, x as isTransientTransportError, y as setLoggerErrorHook } from "./index-CT1yZd4D.js";
-export { AppError, type D1ConstraintKind, DatabaseError, type DatabaseFailure, type ErrorCaptureEntry, type ErrorLogContext, type FailureClassification, type LogEntry, type LogFields, type LogFormat, LogLevel, type LogSink, type LogThreshold, type LogValue, Logger, type LoggerConfig, type LoggerErrorHook, type LoggerSettings, type RetryOwner, type SerializedError, configureLogger, consoleSink, createLogger, isAbortError, isTransientTransportError, notImplemented, setLogSink, setLoggerErrorHook, shouldRetryFailure, unreachable };
+import { $ as AppError, A as ErrorTable, B as ValidationIssue, C as unreachable, D as ErrorEntries, E as DatabaseFailure, F as MalformedRequestError, G as ValidationProblemError, H as ProblemDetailsSchema, I as RequestTimeoutError, J as ServiceUnavailableError, K as ValidationProblemErrorSchema, L as ResourceNotFoundError, M as ResolvedError, N as defineErrors, O as ErrorEntry, P as sharedErrors, Q as AuthenticationError, R as UpgradeRequiredError, S as notImplemented, T as DatabaseError, U as ValidationProblemDetails, V as ProblemDetails, W as ValidationProblemDetailsSchema, X as StaleSessionError, Y as NotAuthorizedError, Z as RateLimitError, _ as createLogger, a as LogFormat, b as isAbortError, c as LogThreshold, d as LoggerConfig, et as FailureClassification, f as LoggerErrorHook, g as consoleSink, h as configureLogger, i as LogFields, j as ErrorTagOf, k as ErrorPayloadOf, l as LogValue, m as SerializedError, n as ErrorLogContext, nt as shouldRetryFailure, o as LogLevel, p as LoggerSettings, q as InternalServerError, r as LogEntry, s as LogSink, t as ErrorCaptureEntry, tt as RetryOwner, u as Logger, v as setLogSink, w as D1ConstraintKind, x as isTransientTransportError, y as setLoggerErrorHook, z as ValidationError } from "./index-B9Y1hVh6.js";
+export { AppError, AuthenticationError, type D1ConstraintKind, DatabaseError, type DatabaseFailure, type ErrorCaptureEntry, type ErrorEntries, type ErrorEntry, type ErrorLogContext, type ErrorPayloadOf, type ErrorTable, type ErrorTagOf, type FailureClassification, InternalServerError, type LogEntry, type LogFields, type LogFormat, LogLevel, type LogSink, type LogThreshold, type LogValue, Logger, type LoggerConfig, type LoggerErrorHook, type LoggerSettings, MalformedRequestError, NotAuthorizedError, type ProblemDetails, ProblemDetailsSchema, RateLimitError, RequestTimeoutError, type ResolvedError, ResourceNotFoundError, type RetryOwner, type SerializedError, ServiceUnavailableError, StaleSessionError, UpgradeRequiredError, ValidationError, type ValidationIssue, type ValidationProblemDetails, ValidationProblemDetailsSchema, type ValidationProblemError, ValidationProblemErrorSchema, configureLogger, consoleSink, createLogger, defineErrors, isAbortError, isTransientTransportError, notImplemented, setLogSink, setLoggerErrorHook, sharedErrors, shouldRetryFailure, unreachable };

package/dist/core.js

@@ -1,3 +1,3 @@
-import { a as createLogger, c as isAbortError, d as notImplemented, f as unreachable, i as consoleSink, l as isTransientTransportError, m as AppError, n as Logger, o as setLogSink, p as DatabaseError, r as configureLogger, s as setLoggerErrorHook, t as LogLevel, u as shouldRetryFailure } from "./core-D3G-2gIx.js";
+import { A as AppError, C as ValidationError, D as StaleSessionError, E as NotAuthorizedError, O as RateLimitError, S as UpgradeRequiredError, T as ServiceUnavailableError, _ as ValidationProblemDetailsSchema, a as createLogger, b as RequestTimeoutError, c as isAbortError, d as notImplemented, f as unreachable, g as ProblemDetailsSchema, h as sharedErrors, i as consoleSink, k as AuthenticationError, l as isTransientTransportError, m as defineErrors, n as Logger, o as setLogSink, p as DatabaseError, r as configureLogger, s as setLoggerErrorHook, t as LogLevel, u as shouldRetryFailure, v as ValidationProblemErrorSchema, w as InternalServerError, x as ResourceNotFoundError, y as MalformedRequestError } from "./core-CnwWj4MY.js";
 
-export { AppError, DatabaseError, LogLevel, Logger, configureLogger, consoleSink, createLogger, isAbortError, isTransientTransportError, notImplemented, setLogSink, setLoggerErrorHook, shouldRetryFailure, unreachable };
+export { AppError, AuthenticationError, DatabaseError, InternalServerError, LogLevel, Logger, MalformedRequestError, NotAuthorizedError, ProblemDetailsSchema, RateLimitError, RequestTimeoutError, ResourceNotFoundError, ServiceUnavailableError, StaleSessionError, UpgradeRequiredError, ValidationError, ValidationProblemDetailsSchema, ValidationProblemErrorSchema, configureLogger, consoleSink, createLogger, defineErrors, isAbortError, isTransientTransportError, notImplemented, setLogSink, setLoggerErrorHook, sharedErrors, shouldRetryFailure, unreachable };

package/dist/index-B9Y1hVh6.d.ts

@@ -0,0 +1,460 @@
+import { z } from "zod";
+//#region src/core/failure-classification.d.ts
+/**
+ * What one failure is, before any policy decides what to do about it.
+ *
+ * `transient`: the world may differ on the next attempt. `terminal`: repeating gives the
+ * same answer. `unknown`: nobody judged this error, so it came from outside unwrapped.
+ */
+type FailureClassification = 'transient' | 'terminal' | 'unknown';
+/**
+ * Who is asking to repeat the work.
+ *
+ * An immediate owner holds a caller and a socket open. A durable owner already stored the
+ * work, so it can afford to try again on a failure nobody classified.
+ */
+type RetryOwner = 'immediate' | 'durable';
+/** Decide whether one retry owner may repeat a failed operation. */
+declare function shouldRetryFailure(args: {
+  readonly classification: FailureClassification;
+  readonly repeatSafe: boolean;
+  readonly owner: RetryOwner;
+}): boolean;
+//#endregion
+//#region src/core/app-error.d.ts
+/**
+ * The base of every expected failure. A subclass declares its tag and its classification,
+ * so no boundary has to guess what kind of failure it holds. A boundary tells our errors from
+ * raw throws with `instanceof AppError`; a value that fails it was never judged.
+ *
+ * A `readonly` field with a literal initializer keeps the literal type, so
+ * `readonly _tag = 'StoreUnavailable'` is enough for `Result` unions and `matchError`.
+ */
+declare abstract class AppError extends Error {
+  abstract readonly _tag: string;
+  abstract readonly classification: FailureClassification;
+  get name(): string;
+}
+//#endregion
+//#region src/core/authentication.error.d.ts
+/** A protected operation requires a session that the caller did not provide. */
+declare class AuthenticationError extends AppError {
+  readonly _tag = "AuthenticationError";
+  readonly classification = "terminal";
+  constructor();
+}
+//#endregion
+//#region src/core/rate-limit.error.d.ts
+/** HTTP 429 with a retry delay in seconds. A null delay means the response supplies no valid duration. */
+declare class RateLimitError extends AppError {
+  readonly retryAfter: number | null;
+  readonly _tag = "RateLimitError";
+  readonly classification = "transient";
+  readonly status = 429;
+  constructor(retryAfter: number | null);
+}
+//#endregion
+//#region src/core/stale-session.error.d.ts
+/** A presented session cookie no longer resolves; the application owns cleanup and redirect policy. */
+declare class StaleSessionError extends AppError {
+  readonly _tag = "StaleSessionError";
+  readonly classification = "terminal";
+  constructor();
+}
+//#endregion
+//#region src/core/not-authorized.error.d.ts
+/** The authenticated caller cannot perform this operation. Ported from Porte's auth.errors.ts. */
+declare class NotAuthorizedError extends AppError {
+  readonly _tag = "NotAuthorizedError";
+  readonly classification = "terminal";
+  constructor();
+}
+//#endregion
+//#region src/core/internal.errors.d.ts
+/** Safe public replacement for an unknown failure, ported from Porte's internal.errors.ts. */
+declare class InternalServerError extends AppError {
+  readonly _tag = "InternalServerError";
+  readonly classification = "unknown";
+  constructor();
+}
+/** Safe public replacement for a classified transient failure. */
+declare class ServiceUnavailableError extends AppError {
+  readonly _tag = "ServiceUnavailableError";
+  readonly classification = "transient";
+  constructor();
+}
+//#endregion
+//#region src/core/problem-details.d.ts
+/**
+ * The standard RFC 9457 body for a failed HTTP response.
+ * The HTTP response status remains authoritative; extensions may add problem-specific data.
+ * @see https://http.dev/problem-details
+ */
+declare const ProblemDetailsSchema: z.ZodObject<{
+  type: z.ZodString;
+  title: z.ZodString;
+  detail: z.ZodOptional<z.ZodString>;
+  instance: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/** An RFC 9457 problem body for a failed HTTP response. */
+type ProblemDetails = z.infer<typeof ProblemDetailsSchema>;
+/** One invalid value in a `422` validation problem. */
+declare const ValidationProblemErrorSchema: z.ZodObject<{
+  detail: z.ZodString;
+  pointer: z.ZodString;
+}, z.core.$strip>;
+/** One invalid value in a `422` validation problem. */
+type ValidationProblemError = z.infer<typeof ValidationProblemErrorSchema>;
+/** An RFC 9457 validation problem with one or more invalid content values. */
+declare const ValidationProblemDetailsSchema: z.ZodObject<{
+  type: z.ZodString;
+  title: z.ZodString;
+  detail: z.ZodOptional<z.ZodString>;
+  instance: z.ZodOptional<z.ZodString>;
+  errors: z.ZodArray<z.ZodObject<{
+    detail: z.ZodString;
+    pointer: z.ZodString;
+  }, z.core.$strip>>;
+}, z.core.$loose>;
+/** An RFC 9457 validation problem with one or more invalid content values. */
+type ValidationProblemDetails = z.infer<typeof ValidationProblemDetailsSchema>;
+//#endregion
+//#region src/core/request.errors.d.ts
+/** One invalid value as a validator reports it: a message and a path of keys. */
+type ValidationIssue = {
+  readonly message: string;
+  readonly path: readonly PropertyKey[];
+};
+/** Invalid user input, one entry per invalid value in the RFC 9457 shape. Technical failures use another error. */
+declare class ValidationError extends AppError {
+  readonly errors: readonly ValidationProblemError[];
+  readonly _tag = "ValidationError";
+  readonly classification = "terminal";
+  constructor(errors: readonly ValidationProblemError[], message?: string);
+  /** Convert a Zod error. Each issue path becomes a JSON Pointer. */
+  static fromZod(error: z.ZodError, message?: string): ValidationError;
+  /** Convert issues from any validator, such as issues TanStack serialized into an error message. */
+  static fromIssues(issues: readonly ValidationIssue[], message?: string): ValidationError;
+}
+/** The server cannot parse the request syntax. */
+declare class MalformedRequestError extends AppError {
+  readonly _tag = "MalformedRequestError";
+  readonly classification = "terminal";
+  constructor(args: {
+    cause: unknown;
+  });
+}
+/** No resource matches the requested HTTP path. */
+declare class ResourceNotFoundError extends AppError {
+  readonly _tag = "ResourceNotFoundError";
+  readonly classification = "terminal";
+  constructor();
+}
+/** A WebSocket route received a request without an upgrade. */
+declare class UpgradeRequiredError extends AppError {
+  readonly _tag = "UpgradeRequiredError";
+  readonly classification = "terminal";
+  constructor();
+}
+/** The requested operation did not answer before its deadline. */
+declare class RequestTimeoutError extends AppError {
+  readonly _tag = "RequestTimeoutError";
+  readonly classification = "transient";
+  constructor();
+}
+//#endregion
+//#region src/core/error-table.d.ts
+type PublicFields = z.ZodObject;
+/**
+ * One public error: its class, its HTTP status, and the extra properties a client may read.
+ * `fields` strips the thrown error on the server and parses the payload in the browser.
+ */
+type ErrorEntry<Tag extends string, Fields extends PublicFields = PublicFields> = {
+  readonly error: abstract new (...args: never[]) => AppError & {
+    readonly _tag: Tag;
+  };
+  readonly status: number;
+  readonly fields?: Fields;
+};
+/** Entries keyed by tag. The compiler rejects a key that differs from the class's `_tag`. */
+type ErrorEntries<Entries> = { readonly [Tag in keyof Entries & string]: ErrorEntry<Tag>; };
+type EntryPayload<Tag extends string, Entry> = Entry extends {
+  readonly fields: infer Fields extends z.ZodType;
+} ? {
+  readonly _tag: Tag;
+  readonly message: string;
+} & z.output<Fields> : {
+  readonly _tag: Tag;
+  readonly message: string;
+};
+type PayloadOfEntries<Entries> = { [Tag in keyof Entries & string]: EntryPayload<Tag, Entries[Tag]>; }[keyof Entries & string];
+/** The HTTP status and public payload for one resolved failure. */
+type ResolvedError<Payload> = {
+  readonly status: number;
+  readonly payload: Payload;
+};
+/**
+ * One application's public errors, shared by every transport boundary and the browser.
+ * `resolve` and `fallback` serve boundaries. `parse` and `generic` serve screens.
+ */
+type ErrorTable<Entries> = {
+  readonly entries: Entries;
+  /** The discriminated union of every entry's `_tag`, `message`, and fields. */
+  readonly payloadSchema: z.ZodType<PayloadOfEntries<Entries>>;
+  /** The `InternalServerError` payload, for screens that must show something. */
+  readonly generic: PayloadOfEntries<Entries>;
+  /** Read a rejection value. Null means no known tag, so the request never reached the Worker. */
+  parse(cause: unknown): PayloadOfEntries<Entries> | null;
+  /** Narrow a rejection value to one tag's payload, for a caller that acts on that one error. */
+  is<Tag extends keyof Entries & string>(cause: unknown, tag: Tag): cause is Extract<PayloadOfEntries<Entries>, {
+    readonly _tag: Tag;
+  }>;
+  /** Match a local instance or a remote error by tag. Null means the failure is not public. */
+  resolve(cause: unknown): ResolvedError<PayloadOfEntries<Entries>> | null;
+  /** The replacement for an unmapped failure: 503 when it declared itself transient, else 500. */
+  fallback(cause: unknown): ResolvedError<PayloadOfEntries<Entries>>;
+};
+/** The union of payloads a table can produce. */
+type ErrorPayloadOf<Table> = Table extends ErrorTable<infer Entries> ? PayloadOfEntries<Entries> : never;
+/** The union of tags a table contains. */
+type ErrorTagOf<Table> = Table extends ErrorTable<infer Entries> ? keyof Entries & string : never;
+/** The errors every application can throw, with their statuses. `defineErrors` includes them. */
+declare const sharedErrors: {
+  readonly MalformedRequestError: {
+    readonly error: typeof MalformedRequestError;
+    readonly status: 400;
+  };
+  readonly AuthenticationError: {
+    readonly error: typeof AuthenticationError;
+    readonly status: 401;
+  };
+  readonly StaleSessionError: {
+    readonly error: typeof StaleSessionError;
+    readonly status: 401;
+  };
+  readonly NotAuthorizedError: {
+    readonly error: typeof NotAuthorizedError;
+    readonly status: 403;
+  };
+  readonly ResourceNotFoundError: {
+    readonly error: typeof ResourceNotFoundError;
+    readonly status: 404;
+  };
+  readonly ValidationError: {
+    readonly error: typeof ValidationError;
+    readonly status: 422;
+    readonly fields: z.ZodObject<{
+      errors: z.ZodArray<z.ZodObject<{
+        detail: z.ZodString;
+        pointer: z.ZodString;
+      }, z.core.$strip>>;
+    }, z.core.$strip>;
+  };
+  readonly UpgradeRequiredError: {
+    readonly error: typeof UpgradeRequiredError;
+    readonly status: 426;
+  };
+  readonly RateLimitError: {
+    readonly error: typeof RateLimitError;
+    readonly status: 429;
+    readonly fields: z.ZodObject<{
+      retryAfter: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+  };
+  readonly InternalServerError: {
+    readonly error: typeof InternalServerError;
+    readonly status: 500;
+  };
+  readonly ServiceUnavailableError: {
+    readonly error: typeof ServiceUnavailableError;
+    readonly status: 503;
+  };
+  readonly RequestTimeoutError: {
+    readonly error: typeof RequestTimeoutError;
+    readonly status: 504;
+  };
+};
+type MergedEntries<Entries> = Omit<typeof sharedErrors, keyof Entries> & Entries;
+/**
+ * Build the application's error table. The shared entries are always included;
+ * an entry with the same key replaces the shared one.
+ */
+declare function defineErrors<const Entries extends ErrorEntries<Entries>>(entries: Entries): ErrorTable<MergedEntries<Entries>>;
+//#endregion
+//#region src/core/database.error.d.ts
+/** SQLite reports these constraint categories through D1. */
+type D1ConstraintKind = 'unique' | 'not_null' | 'foreign_key' | 'check';
+/** Database evidence for callers that interpret a specific code or constraint. */
+type DatabaseFailure = {
+  readonly database: 'd1';
+  readonly code: string | undefined;
+  readonly kind: D1ConstraintKind | undefined;
+  readonly table: string | undefined;
+  readonly column: string | undefined;
+  readonly constraintName: string | undefined;
+} | {
+  readonly database: 'postgres';
+  readonly code: string | undefined;
+  readonly table_name: string | undefined;
+  readonly column_name: string | undefined;
+  readonly constraint_name: string | undefined;
+};
+/** Classification describes the failure; callers must separately establish whether repetition is safe. */
+declare class DatabaseError extends AppError {
+  readonly operation: string;
+  readonly classification: FailureClassification;
+  readonly details: DatabaseFailure;
+  readonly _tag = "DatabaseError";
+  constructor(operation: string, classification: FailureClassification, details: DatabaseFailure, options: {
+    readonly cause: unknown;
+  });
+}
+//#endregion
+//#region src/core/defects.d.ts
+/**
+ * Mark a line the types say cannot run. A union member without a branch stops compilation here.
+ *
+ * @throws Panic when a value outside the union arrives at runtime.
+ */
+declare function unreachable(value: never): never;
+/**
+ * Mark a body that is not written yet. A defect, not an expected failure.
+ *
+ * @param what - The behavior the body will provide, such as `invoice export`.
+ * @throws Panic always.
+ */
+declare function notImplemented(what: string): never;
+//#endregion
+//#region src/core/transport-classification.d.ts
+/** Cancellation is a decision, not a failure to repeat. */
+declare function isAbortError(cause: unknown): boolean;
+/** Match known transient transport messages while excluding explicit cancellation. */
+declare function isTransientTransportError(cause: unknown): boolean;
+//#endregion
+//#region src/core/logger.d.ts
+/**
+ * Module-scoped logging for every host.
+ *
+ * A logger emits one plain-data entry per log. The default sink hands it to `console` as an
+ * entry object for a log service or as a colored line for a person, selected at startup.
+ */
+/** A value a log entry may carry. Errors enter only through `Logger.error`. */
+type LogValue = string | number | boolean | null | undefined | ReadonlyArray<LogValue> | LogFields;
+/** Named log values. */
+type LogFields = {
+  readonly [key: string]: LogValue;
+};
+/**
+ * The supported log severity levels, in ascending order.
+ *
+ * A const object, not an enum, so a parsed environment value typed `'INFO'` is a `LogLevel`.
+ */
+declare const LogLevel: {
+  readonly DEBUG: 'DEBUG';
+  readonly INFO: 'INFO';
+  readonly WARN: 'WARN';
+  readonly ERROR: 'ERROR';
+};
+type LogLevel = (typeof LogLevel)[keyof typeof LogLevel];
+/** An error as plain data, including diagnostics, causes, and aggregate members. */
+type SerializedError = {
+  readonly name: string;
+  readonly message: string;
+  readonly stack?: string;
+  readonly fields?: LogFields;
+  readonly cause?: SerializedError;
+  readonly errors?: ReadonlyArray<SerializedError>;
+};
+/** One log, as the sink receives it. Plain data, safe to stringify. */
+type LogEntry = {
+  readonly timestamp: string;
+  readonly level: LogLevel;
+  readonly module: string;
+  readonly message: string;
+  readonly details: LogFields;
+  readonly userId?: string;
+  /** Present on `Logger.error` entries that carried an error. */
+  readonly error?: SerializedError;
+};
+/** The context an error log carries. */
+type ErrorLogContext = {
+  readonly error?: unknown;
+  readonly userId?: string;
+  readonly details?: LogFields;
+};
+/** What a logger lets through: a level and everything above it, or nothing. */
+type LogThreshold = LogLevel | 'OFF';
+/** Overrides the application settings for one logger. */
+interface LoggerConfig {
+  readonly level?: LogThreshold;
+}
+/** `json` writes the entry object. `pretty` writes one readable line for a person. */
+type LogFormat = 'json' | 'pretty';
+/**
+ * The application settings, set once at the composition root.
+ *
+ * An omitted field keeps its default. An explicit `undefined` is a compile error, so the root
+ * parses an environment value before passing it. The logger reads no environment itself.
+ */
+interface LoggerSettings extends LoggerConfig {
+  readonly format?: LogFormat;
+}
+/**
+ * Set application settings, including for existing loggers. Per-logger overrides take priority.
+ * Call at startup, never per request. An omitted field resets to INFO and JSON output.
+ */
+declare function configureLogger(config: LoggerSettings): void;
+/** The error data sent to the configured error hook. */
+interface ErrorCaptureEntry {
+  readonly error: unknown;
+  readonly distinctId: string | undefined;
+  readonly context: LogFields;
+}
+/** A function that forwards one logged error to an error service. */
+type LoggerErrorHook = (entry: ErrorCaptureEntry) => void;
+/** Where every log entry goes. */
+type LogSink = (entry: LogEntry) => void;
+/**
+ * Register the function that receives each logged error.
+ *
+ * Set once at the process entry point. A later call replaces the earlier hook.
+ */
+declare function setLoggerErrorHook(fn: LoggerErrorHook): void;
+/**
+ * JSON format writes the entry object. Pretty format writes one line, then the details,
+ * the error, and the stack as separate console arguments.
+ */
+declare const consoleSink: LogSink;
+/**
+ * Send every log entry somewhere other than `console`.
+ *
+ * Set once at the process entry point, never per module. A logger is created
+ * by name and nothing else, so its destination is a fact about the process.
+ */
+declare function setLogSink(fn: LogSink): void;
+/** Write module-scoped logs with application defaults and optional overrides. */
+declare class Logger {
+  private readonly module;
+  private readonly config;
+  /** Create a logger for one module. */
+  constructor(module: string, overrideConfig?: LoggerConfig);
+  private log;
+  /** Write a debug log. */
+  debug(message: string, details?: LogFields): void;
+  /** Write an information log. */
+  info(message: string, details?: LogFields): void;
+  /** Write a warning log. */
+  warn(message: string, details?: LogFields): void;
+  /**
+   * Write an error log and send the error to the configured hook.
+   *
+   * The details say which call this was, and the error says what went wrong
+   * inside it. Both the entry and the error hook receive the supplied user ID.
+   */
+  error(message: string, context?: ErrorLogContext): void;
+}
+/** Create a logger for one module. */
+declare function createLogger(module: string, config?: LoggerConfig): Logger;
+//#endregion
+export { AppError as $, ErrorTable as A, ValidationIssue as B, unreachable as C, ErrorEntries as D, DatabaseFailure as E, MalformedRequestError as F, ValidationProblemError as G, ProblemDetailsSchema as H, RequestTimeoutError as I, ServiceUnavailableError as J, ValidationProblemErrorSchema as K, ResourceNotFoundError as L, ResolvedError as M, defineErrors as N, ErrorEntry as O, sharedErrors as P, AuthenticationError as Q, UpgradeRequiredError as R, notImplemented as S, DatabaseError as T, ValidationProblemDetails as U, ProblemDetails as V, ValidationProblemDetailsSchema as W, StaleSessionError as X, NotAuthorizedError as Y, RateLimitError as Z, createLogger as _, LogFormat as a, isAbortError as b, LogThreshold as c, LoggerConfig as d, FailureClassification as et, LoggerErrorHook as f, consoleSink as g, configureLogger as h, LogFields as i, ErrorTagOf as j, ErrorPayloadOf as k, LogValue as l, SerializedError as m, ErrorLogContext as n, shouldRetryFailure as nt, LogLevel as o, LoggerSettings as p, InternalServerError as q, LogEntry as r, LogSink as s, ErrorCaptureEntry as t, RetryOwner as tt, Logger as u, setLogSink as v, D1ConstraintKind as w, isTransientTransportError as x, setLoggerErrorHook as y, ValidationError as z };
+//# sourceMappingURL=index-B9Y1hVh6.d.ts.map

package/dist/index-B9Y1hVh6.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-B9Y1hVh6.d.ts","names":[],"sources":["../src/core/failure-classification.ts","../src/core/app-error.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/problem-details.ts","../src/core/request.errors.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/transport-classification.ts","../src/core/logger.ts"],"mappings":";;;;;;;;KAMY;;;;;;;KAQA;;iBAGI,mBAAmB;WACxB,gBAAgB;WAChB;WACA,OAAO;;;;;;;;;;;;uBCVI,iBAAiB;oBACnB;oBACA,gBAAgB;MAErB;;;;;cCXF,4BAA4B;WAC9B;WACA;EAET;;;;;cCJW,uBAAuB;WAKb;WAJZ;WACA;WACA;EAET,YAAqB;;;;;cCLV,0BAA0B;WAC5B;WACA;EAET;;;;;cCJW,2BAA2B;WAC7B;WACA;EAET;;;;;cCJW,4BAA4B;WAC9B;WACA;EAET;;;cAMW,gCAAgC;WAClC;WACA;EAET;;;;;;;;;cCVW,sBAAoB,EAAA;;;;;GAqB/B,EAAA,KAAA;;KAGU,iBAAiB,EAAE,aAAa;;cAG/B,8BAA4B,EAAA;;;GAWvC,EAAA,KAAA;;KAGU,yBAAyB,EAAE,aAAa;;cAGvC,gCAA8B,EAAA;;;;;;;;;GAEzC,EAAA,KAAA;;KAGU,2BAA2B,EAAE,aAAa;;;;KClD1C;WACD;WACA,eAAe;;;cAIb,wBAAwB;WAKxB,iBAAiB;WAJnB;WACA;EAET,YACW,iBAAiB,0BAC1B;;SAMK,QAAQ,OAAO,EAAE,UAAU,mBAAmB;;SAK9C,WAAW,iBAAiB,mBAAmB,mBAAmB;;;cAS9D,8BAA8B;WAChC;WACA;EAET,YAAY;IAAQ;;;;cAMT,8BAA8B;WAChC;WACA;EAET;;;cAMW,6BAA6B;WAC/B;WACA;EAET;;;cAMW,4BAA4B;WAC9B;WACA;EAET;;;;KCtDG,eAAe,EAAE;;;;;KAMV,WAAW,oBAAoB,eAAe,eAAe;WAC9D,wBAAwB,kBAAkB;aAAsB,MAAM;;WACtE;WACA,SAAS;;;KAMR,aAAa,uBACb,aAAa,mBAAmB,WAAW;KAGlD,aAAa,oBAAoB,SAAS;WACpC,cAAc,eAAe,EAAE;;WAE3B,MAAM;WAAc;IAAoB,EAAE,OAAO;WACjD,MAAM;WAAc;;KAE9B,iBAAiB,cACnB,aAAa,mBAAmB,aAAa,KAAK,QAAQ,eACrD;;KAGI,cAAc;WACf;WACA,SAAS;;;;;;KAOR,WAAW;WACZ,SAAS;;WAET,eAAe,EAAE,QAAQ,iBAAiB;;WAE1C,SAAS,iBAAiB;;EAEnC,MAAM,iBAAiB,iBAAiB;;EAExC,GAAG,kBAAkB,kBACnB,gBACA,KAAK,MACJ,SAAS,QAAQ,iBAAiB;aAAqB,MAAM;;;EAEhE,QAAQ,iBAAiB,cAAc,iBAAiB;;EAExD,SAAS,iBAAiB,cAAc,iBAAiB;;;KAI/C,eAAe,SACzB,cAAc,iBAAiB,WAAW,iBAAiB;;KAGjD,WAAW,SACrB,cAAc,iBAAiB,iBAAiB;;cAUrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAcR,cAAc,WAAW,YAAY,oBAAoB,WAAW;;;;;iBA4BzD,mBAAmB,gBAAgB,aAAa,UAC9D,SAAS,UACR,WAAW,cAAc;;;;KCpIhB;;KAGA;WAEG;WACA;WACA,MAAM;WACN;WACA;WACA;;WAGA;WACA;WACA;WACA;WACA;;;cAIF,sBAAsB;WAItB;WACA,gBAAgB;WAChB,SAAS;WALX;EAET,YACW,mBACA,gBAAgB,uBAChB,SAAS,iBAClB;aAAoB;;;;;;;;;;iBCzBR,YAAY;;;;;;;iBAUZ,eAAe;;;;iBCCf,aAAa;;iBAKb,0BAA0B;;;;;;;;;;KCf9B,0DAMR,cAAc,YACd;;KAGQ;YAAwB,cAAc;;;;;;;cAOrC;WACX;WACA;WACA;WACA;;KAEU,mBAAmB,uBAAuB;;KAG1C;WACD;WACA;WACA;WACA,SAAS;WACT,QAAQ;WACR,SAAS,cAAc;;;KAItB;WACD;WACA,OAAO;WACP;WACA;WACA,SAAS;WACT;;WAEA,QAAQ;;;KAIP;WACD;WACA;WACA,UAAU;;;KAIT,eAAe;;UAGV;WACN,QAAQ;;;KAIP;;;;;;;UAQK,uBAAuB;WAC7B,SAAS;;;;;;iBAgBJ,gBAAgB,QAAQ;;UAQvB;WACN;WACA;WACA,SAAS;;;KAIR,mBAAmB,OAAO;;KAG1B,WAAW,OAAO;;;;;;iBASd,mBAAmB,IAAI;;;;;cA0C1B,aAAa;;;;;;;iBA6BV,WAAW,IAAI;;cAyDlB;mBAKQ;mBAJF;;EAGjB,YACmB,gBACjB,iBAAiB;UAKX;;EAuBR,MAAM,iBAAiB,UAAS;;EAKhC,KAAK,iBAAiB,UAAS;;EAK/B,KAAK,iBAAiB,UAAS;;;;;;;EAU/B,MAAM,iBAAiB,UAAS;;;iBAyBlB,aAAa,gBAAgB,SAAS,eAAe"}

package/dist/{index-CkaFqbbV.d.ts → index-Bdyh3_xC.d.ts}

@@ -1,4 +1,4 @@
-import { D as AppError } from "./index-CT1yZd4D.js";
+import { $ as AppError } from "./index-B9Y1hVh6.js";
 //#region src/application/messages.d.ts
 /**
  * The identity of a command or event. Receipts and the outbox are keyed by it.
@@ -197,4 +197,4 @@ declare class UnitOfWorkAlreadyActiveError extends AppError {
 }
 //#endregion
 export { Event as C, Query as E, Command as S, MessageId as T, RegistryMessage as _, UnitOfWorkDeps as a, EventHandler as b, IOutboxRelay as c, CommandRegistry as d, EventRegistry as f, QueryRegistry as g, MessageResult as h, UnitOfWork as i, IMessageBus as l, MessageRegistry as m, MessageAlreadyProcessedError as n, IEventCollector as o, Handlers as p, IUnitOfWork as r, ITransaction as s, UnitOfWorkAlreadyActiveError as t, MessageBus as u, IMessageStore as v, Message as w, QueryHandler as x, CommandHandler as y };
-//# sourceMappingURL=index-CkaFqbbV.d.ts.map
+//# sourceMappingURL=index-Bdyh3_xC.d.ts.map

package/dist/{index-CkaFqbbV.d.ts.map → index-Bdyh3_xC.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"index-CkaFqbbV.d.ts","names":[],"sources":["../src/application/messages.ts","../src/application/handlers.ts","../src/application/message-store.ts","../src/application/registry.ts","../src/application/message-bus.ts","../src/application/outbox-relay.ts","../src/application/transaction.ts","../src/application/event-collector.ts","../src/application/unit-of-work.ts","../src/application/message-already-processed.error.ts","../src/application/unit-of-work.errors.ts"],"mappings":";;;;;;;;;KAOY;;KAGA,QAAQ;WACT;WACA,MAAM;WACN,IAAI;;;KAIH,MAAM;WACP;WACA,MAAM;;;KAIL,MAAM;WACP;WACA,MAAM;WACN,IAAI;;;KAIH,UAAU,UAAU,QAAQ;;;;;;;KCxB5B,eAAe,iBAAiB,SAAS,MAAM,UACzD,SAAS,UACT,MAAM,SACH,QAAQ;;;;;KAMD,aAAa,eAAe,OAAO,WAAW,UACxD,OAAO,QACP,MAAM,cACH,QAAQ;;KAGD,aAAa,eAAe,OAAO,SAAS,OAAO,QAAQ,MAAM,SAAS;;;;;;;UCfrE;;EAEf,MAAM,WAAW,YAAY;;EAE7B,cAAc,QAAQ,cAAc,SAAS;;;;;KCNnC,gBAAgB,iBAAiB,SAAS,oBAC1C,KAAK,YAAY,YAAY,eAAe,GAAG;;KAI/C,cAAc,eAAe,OAAO,yBACpC,KAAK,UAAU,YAAY,aAAa,GAAG;;;;;KAO3C,cAAc,eAAe,OAAO,oBACpC,KAAK,UAAU,aAAa,cAAc,aAAa,GAAG;;;;;;KAQ1D,gBAAgB,iBAAiB,SAAS,aAAa,WAAW;WACnE,UAAU,gBAAgB,QAAQ,UAAU,UAAU;WACtD,SAAS,cAAc,QAAQ,UAAU,QAAQ;WACjD,QAAQ,cAAc,QAAQ,UAAU,QAAQ;;KAKtD,KAAK;EAAU,OAAO,SAAS,SAAS,MAAM,OAAO;;KACrD,aAAa;EAAU,OAAO,OAAO,OAAO,MAAM,OAAO;;;;;;KAMlD,SAAS;WACV,UAAU,SAAS,eAAe,KAAK;WACvC,SAAS,SAAS,eAAe,KAAK;WACtC,QAAQ,SAAS,QAAQ,eAAe,cAAc,aAAa;;KAGzE,YAAY,UAAU,WAAW,QAAQ,aAAa,SAAS;KAE/D,oBAAoB,UACvB,YAAY,aAAa,iBAAiB,oBAAoB,iBAC1D,WAAW,QAAQ,eAAe;;KAI5B,gBAAgB,kBAAkB,mBAC1C,YAAY,yBACZ,YAAY,wBACZ,oBAAoB;KAEnB,UAAU,QAAQ,wBAAwB,oBAAoB,SAC/D,QAAQ,WAAW,QAAQ,OAAO,QAAQ;;KAIlC,cACV,iBAAiB,SACjB,kBAAkB,mBAChB,iBAAiB,UACjB,UAAU,uBAAuB,oBACjC,iBAAiB,QACf,UAAU,sBAAsB;;;;UC5DrB,YAAY,kBAAkB;EAC7C,OAAO,iBAAiB,UAAU,gBAAgB,YAChD,SAAS,WACR,QAAQ,cAAc,UAAU;;;;;;cAOxB,WAAW,MAAM,kBAAkB,SAAS,kBAAkB,YAAY;mBAElE;mBACA;EAFnB,YACmB,MAAM,MACN,UAAU;;EAIvB,OAAO,iBAAiB,UAAU,gBAAgB,YACtD,SAAS,WACR,QAAQ,cAAc,UAAU;UAM3B;UASA;UASA;;;;;;UAWM;;;;;;;;;UC5DC;EACf;;;;;;;;;UCDe,aAAa;EAC5B,YAAY,GAAG,OAAO,IAAI,OAAO,QAAQ,KAAK,QAAQ;;;;;UCHvC;EACf,KAAK,OAAO;EACZ,WAAW,cAAc;;;;;;;;;UCOV,YAAY;EAC3B,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;KAGhE,eAAe,IAAI;WACpB,aAAa,aAAa;;WAE1B,eAAe,IAAI,OAAO;;WAE1B,qBAAqB,IAAI,OAAO;WAChC,gBAAgB;WAChB,OAAO;;;cAIL,WAAW,IAAI,kBAAkB,YAAY;mBAC3B;EAA7B,YAA6B,MAAM,eAAe,IAAI;EAEhD,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;;;;cCzBrE,qCAAqC;WAKrC,WAAW;WAJb;WACA;EAET,YACW,WAAW,WACpB;aAAqB;;;SAMhB,KAAK,gBAAgB,WAAW,YAAY;;;;;cCdxC,qCAAqC;WACvC;WACA;EAET"}
+{"version":3,"file":"index-Bdyh3_xC.d.ts","names":[],"sources":["../src/application/messages.ts","../src/application/handlers.ts","../src/application/message-store.ts","../src/application/registry.ts","../src/application/message-bus.ts","../src/application/outbox-relay.ts","../src/application/transaction.ts","../src/application/event-collector.ts","../src/application/unit-of-work.ts","../src/application/message-already-processed.error.ts","../src/application/unit-of-work.errors.ts"],"mappings":";;;;;;;;;KAOY;;KAGA,QAAQ;WACT;WACA,MAAM;WACN,IAAI;;;KAIH,MAAM;WACP;WACA,MAAM;;;KAIL,MAAM;WACP;WACA,MAAM;WACN,IAAI;;;KAIH,UAAU,UAAU,QAAQ;;;;;;;KCxB5B,eAAe,iBAAiB,SAAS,MAAM,UACzD,SAAS,UACT,MAAM,SACH,QAAQ;;;;;KAMD,aAAa,eAAe,OAAO,WAAW,UACxD,OAAO,QACP,MAAM,cACH,QAAQ;;KAGD,aAAa,eAAe,OAAO,SAAS,OAAO,QAAQ,MAAM,SAAS;;;;;;;UCfrE;;EAEf,MAAM,WAAW,YAAY;;EAE7B,cAAc,QAAQ,cAAc,SAAS;;;;;KCNnC,gBAAgB,iBAAiB,SAAS,oBAC1C,KAAK,YAAY,YAAY,eAAe,GAAG;;KAI/C,cAAc,eAAe,OAAO,yBACpC,KAAK,UAAU,YAAY,aAAa,GAAG;;;;;KAO3C,cAAc,eAAe,OAAO,oBACpC,KAAK,UAAU,aAAa,cAAc,aAAa,GAAG;;;;;;KAQ1D,gBAAgB,iBAAiB,SAAS,aAAa,WAAW;WACnE,UAAU,gBAAgB,QAAQ,UAAU,UAAU;WACtD,SAAS,cAAc,QAAQ,UAAU,QAAQ;WACjD,QAAQ,cAAc,QAAQ,UAAU,QAAQ;;KAKtD,KAAK;EAAU,OAAO,SAAS,SAAS,MAAM,OAAO;;KACrD,aAAa;EAAU,OAAO,OAAO,OAAO,MAAM,OAAO;;;;;;KAMlD,SAAS;WACV,UAAU,SAAS,eAAe,KAAK;WACvC,SAAS,SAAS,eAAe,KAAK;WACtC,QAAQ,SAAS,QAAQ,eAAe,cAAc,aAAa;;KAGzE,YAAY,UAAU,WAAW,QAAQ,aAAa,SAAS;KAE/D,oBAAoB,UACvB,YAAY,aAAa,iBAAiB,oBAAoB,iBAC1D,WAAW,QAAQ,eAAe;;KAI5B,gBAAgB,kBAAkB,mBAC1C,YAAY,yBACZ,YAAY,wBACZ,oBAAoB;KAEnB,UAAU,QAAQ,wBAAwB,oBAAoB,SAC/D,QAAQ,WAAW,QAAQ,OAAO,QAAQ;;KAIlC,cACV,iBAAiB,SACjB,kBAAkB,mBAChB,iBAAiB,UACjB,UAAU,uBAAuB,oBACjC,iBAAiB,QACf,UAAU,sBAAsB;;;;UC5DrB,YAAY,kBAAkB;EAC7C,OAAO,iBAAiB,UAAU,gBAAgB,YAChD,SAAS,WACR,QAAQ,cAAc,UAAU;;;;;;cAOxB,WAAW,MAAM,kBAAkB,SAAS,kBAAkB,YAAY;mBAElE;mBACA;EAFnB,YACmB,MAAM,MACN,UAAU;;EAIvB,OAAO,iBAAiB,UAAU,gBAAgB,YACtD,SAAS,WACR,QAAQ,cAAc,UAAU;UAM3B;UASA;UASA;;;;;;UAWM;;;;;;;;;UC5DC;EACf;;;;;;;;;UCDe,aAAa;EAC5B,YAAY,GAAG,OAAO,IAAI,OAAO,QAAQ,KAAK,QAAQ;;;;;UCHvC;EACf,KAAK,OAAO;EACZ,WAAW,cAAc;;;;;;;;;UCOV,YAAY;EAC3B,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;KAGhE,eAAe,IAAI;WACpB,aAAa,aAAa;;WAE1B,eAAe,IAAI,OAAO;;WAE1B,qBAAqB,IAAI,OAAO;WAChC,gBAAgB;WAChB,OAAO;;;cAIL,WAAW,IAAI,kBAAkB,YAAY;mBAC3B;EAA7B,YAA6B,MAAM,eAAe,IAAI;EAEhD,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;;;;cCzBrE,qCAAqC;WAKrC,WAAW;WAJb;WACA;EAET,YACW,WAAW,WACpB;aAAqB;;;SAMhB,KAAK,gBAAgB,WAAW,YAAY;;;;;cCdxC,qCAAqC;WACvC;WACA;EAET"}

package/dist/postgres.d.ts

@@ -1,6 +1,6 @@
-import { C as Event, T as MessageId, s as ITransaction, v as IMessageStore } from "./index-CkaFqbbV.js";
-import { E as DatabaseFailure, T as DatabaseError } from "./index-CT1yZd4D.js";
-import { n as DrizzleSchema, t as eventCollector } from "./unit-of-work-context-DOkIB7HK.js";
+import { C as Event, T as MessageId, s as ITransaction, v as IMessageStore } from "./index-Bdyh3_xC.js";
+import { E as DatabaseFailure, T as DatabaseError } from "./index-B9Y1hVh6.js";
+import { n as DrizzleSchema, t as eventCollector } from "./unit-of-work-context-ml9L9cyY.js";
 import { ExtractTablesWithRelations } from "drizzle-orm";
 import { PostgresJsDatabase, PostgresJsTransaction, drizzle } from "drizzle-orm/postgres-js";
 //#region src/infrastructure/postgres/postgres-database-types.d.ts

package/dist/postgres.js

@@ -1,6 +1,6 @@
-import { m as AppError, p as DatabaseError } from "./core-D3G-2gIx.js";
-import { i as MessageAlreadyProcessedError } from "./application-BpSwCKJ5.js";
-import { n as eventCollector, r as runWithUnitOfWorkContext } from "./unit-of-work-context-CILhzKWb.js";
+import { A as AppError, p as DatabaseError } from "./core-CnwWj4MY.js";
+import { i as MessageAlreadyProcessedError } from "./application-DEerezCl.js";
+import { n as eventCollector, r as runWithUnitOfWorkContext } from "./unit-of-work-context-C7vz5OYS.js";
 import { DrizzleQueryError } from "drizzle-orm/errors";
 import { isNull } from "drizzle-orm";
 import { index, integer, jsonb, pgTable, text, timestamp } from "drizzle-orm/pg-core";