better-ship 0.40.0 → 0.42.0

package/dist/{stripe-fixture-yFUknTJO.js → stripe-fixture-11EmnD6F.js}

@@ -1,4 +1,4 @@
-import { n as createStripeClient } from "./client-Dv1Ch7yY.js";
+import { n as createStripeClient } from "./client-BZgpmuSp.js";
 import Stripe from "stripe";
 
 //#region src/infrastructure/testing/stripe-fixture.ts
@@ -30,4 +30,4 @@ function stripeFixture(respond) {
 
 //#endregion
 export { stripeFixture as t };
-//# sourceMappingURL=stripe-fixture-yFUknTJO.js.map
+//# sourceMappingURL=stripe-fixture-11EmnD6F.js.map

package/dist/{stripe-fixture-yFUknTJO.js.map → stripe-fixture-11EmnD6F.js.map}

@@ -1 +1 @@
-{"version":3,"file":"stripe-fixture-yFUknTJO.js","names":[],"sources":["../src/infrastructure/testing/stripe-fixture.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { createStripeClient } from '../stripe/client.ts'\n\n/** One SDK HTTP attempt; query and body expose Stripe's URL-encoded parameters. */\nexport type StripeCall = {\n  readonly method: string\n  readonly path: string\n  readonly query: URLSearchParams\n  readonly body: URLSearchParams\n  readonly headers: Headers\n}\n\ntype StripeFixture = { stripe: Stripe; requests: readonly StripeCall[] }\n\n/**\n * Construct the real SDK with a fake fetch transport and an ordered record of HTTP attempts.\n * The responder receives an unread request. The shared client factory supplies retry defaults.\n */\nexport function stripeFixture(\n  respond: (request: Request) => Response | Promise<Response>,\n): StripeFixture {\n  const requests: StripeCall[] = []\n  const stripe = createStripeClient('sk_test_fixture', {\n    httpClient: Stripe.createFetchHttpClient(async (input, init) => {\n      const request = new Request(input, init)\n      const url = new URL(request.url)\n      const call: StripeCall = {\n        method: request.method,\n        path: url.pathname,\n        query: url.searchParams,\n        body: new URLSearchParams(),\n        headers: new Headers(request.headers),\n      }\n      requests.push(call)\n      const body = new TextDecoder().decode(await request.clone().arrayBuffer())\n      for (const [key, value] of new URLSearchParams(body)) call.body.append(key, value)\n      return respond(request)\n    }),\n  })\n  return { stripe, requests }\n}\n"],"mappings":";;;;;;;;AAmBA,SAAgB,cACd,SACe;CACf,MAAM,WAAyB,CAAC;CAkBhC,OAAO;EAAE,QAjBM,mBAAmB,mBAAmB,EACnD,YAAY,OAAO,sBAAsB,OAAO,OAAO,SAAS;GAC9D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;GACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;GAC/B,MAAM,OAAmB;IACvB,QAAQ,QAAQ;IAChB,MAAM,IAAI;IACV,OAAO,IAAI;IACX,MAAM,IAAI,gBAAgB;IAC1B,SAAS,IAAI,QAAQ,QAAQ,OAAO;GACtC;GACA,SAAS,KAAK,IAAI;GAClB,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,YAAY,CAAC;GACzE,KAAK,MAAM,CAAC,KAAK,UAAU,IAAI,gBAAgB,IAAI,GAAG,KAAK,KAAK,OAAO,KAAK,KAAK;GACjF,OAAO,QAAQ,OAAO;EACxB,CAAC,EACH,CACc;EAAG;CAAS;AAC5B"}
+{"version":3,"file":"stripe-fixture-11EmnD6F.js","names":[],"sources":["../src/infrastructure/testing/stripe-fixture.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { createStripeClient } from '../stripe/client.ts'\n\n/** One SDK HTTP attempt; query and body expose Stripe's URL-encoded parameters. */\nexport type StripeCall = {\n  readonly method: string\n  readonly path: string\n  readonly query: URLSearchParams\n  readonly body: URLSearchParams\n  readonly headers: Headers\n}\n\ntype StripeFixture = { stripe: Stripe; requests: readonly StripeCall[] }\n\n/**\n * Construct the real SDK with a fake fetch transport and an ordered record of HTTP attempts.\n * The responder receives an unread request. The shared client factory supplies retry defaults.\n */\nexport function stripeFixture(\n  respond: (request: Request) => Response | Promise<Response>,\n): StripeFixture {\n  const requests: StripeCall[] = []\n  const stripe = createStripeClient('sk_test_fixture', {\n    httpClient: Stripe.createFetchHttpClient(async (input, init) => {\n      const request = new Request(input, init)\n      const url = new URL(request.url)\n      const call: StripeCall = {\n        method: request.method,\n        path: url.pathname,\n        query: url.searchParams,\n        body: new URLSearchParams(),\n        headers: new Headers(request.headers),\n      }\n      requests.push(call)\n      const body = new TextDecoder().decode(await request.clone().arrayBuffer())\n      for (const [key, value] of new URLSearchParams(body)) call.body.append(key, value)\n      return respond(request)\n    }),\n  })\n  return { stripe, requests }\n}\n"],"mappings":";;;;;;;;AAmBA,SAAgB,cACd,SACe;CACf,MAAM,WAAyB,CAAC;CAkBhC,OAAO;EAAE,QAjBM,mBAAmB,mBAAmB,EACnD,YAAY,OAAO,sBAAsB,OAAO,OAAO,SAAS;GAC9D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;GACvC,MAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;GAC/B,MAAM,OAAmB;IACvB,QAAQ,QAAQ;IAChB,MAAM,IAAI;IACV,OAAO,IAAI;IACX,MAAM,IAAI,gBAAgB;IAC1B,SAAS,IAAI,QAAQ,QAAQ,OAAO;GACtC;GACA,SAAS,KAAK,IAAI;GAClB,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,QAAQ,MAAM,CAAC,CAAC,YAAY,CAAC;GACzE,KAAK,MAAM,CAAC,KAAK,UAAU,IAAI,gBAAgB,IAAI,GAAG,KAAK,KAAK,OAAO,KAAK,KAAK;GACjF,OAAO,QAAQ,OAAO;EACxB,CAAC,EACH,CACc;EAAG;CAAS;AAC5B"}

package/dist/tanstack.d.ts

@@ -1,4 +1,4 @@
-import { ot as ErrorTable } from "./index-CtIdbnEZ.js";
+import { ut as ErrorTable } from "./index-tJzJUgTh.js";
 import { Register } from "@tanstack/react-start";
 import { BetterAuthCookies } from "better-auth";
 //#region src/infrastructure/tanstack/request-context.d.ts

package/dist/tanstack.js

@@ -1,4 +1,4 @@
-import { H as StaleSessionError, R as ValidationError, W as AuthenticationError, r as createLogger, tt as AppError } from "./core-DOBZeYSX.js";
+import { B as ValidationError, K as AuthenticationError, W as StaleSessionError, r as createLogger, rt as AppError } from "./core-CV8SQv01.js";
 import { t as applyObservabilityUser } from "./request-user-B4rh1c2-.js";
 import { n as withSpan } from "./tracing-C_7B_odV.js";
 import { z } from "zod";

package/dist/testing/outbox-repository.d.ts

@@ -1,5 +1,5 @@
-import { W as DomainEvent } from "../index-CtIdbnEZ.js";
-import { c as IOutboxRepository } from "../index-Db2GV9ZP.js";
+import { J as DomainEvent } from "../index-tJzJUgTh.js";
+import { f as IOutboxRepository } from "../index-DIHLfC-p.js";
 //#region src/infrastructure/testing/outbox-repository-contract.d.ts
 /** Stored fields observed by the adapter contract, independent of a database library. */
 export type OutboxContractRow = {

package/dist/testing/payment-service.js

@@ -1,5 +1,5 @@
-import { t as PaymentServiceError } from "../payment-service.error-BR10zqxk.js";
-import { t as stripeFixture } from "../stripe-fixture-yFUknTJO.js";
+import { t as PaymentServiceError } from "../payment-service.error-oW2bKAfU.js";
+import { t as stripeFixture } from "../stripe-fixture-11EmnD6F.js";
 import Stripe from "stripe";
 import { deepStrictEqual, equal, ok, rejects } from "node:assert/strict";
 

package/dist/testing/stripe.js

@@ -1,3 +1,3 @@
-import { t as stripeFixture } from "../stripe-fixture-yFUknTJO.js";
+import { t as stripeFixture } from "../stripe-fixture-11EmnD6F.js";
 
 export { stripeFixture };

package/dist/{webhook-verification-C4R6OO7f.js → webhook-verification-B8v3-LQ2.js}

@@ -1,4 +1,4 @@
-import { tt as AppError } from "./core-DOBZeYSX.js";
+import { rt as AppError } from "./core-CV8SQv01.js";
 
 //#region src/infrastructure/http/webhook-verification.ts
 /** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */
@@ -15,4 +15,4 @@ var WebhookVerificationError = class extends AppError {
 
 //#endregion
 export { WebhookVerificationError as t };
-//# sourceMappingURL=webhook-verification-C4R6OO7f.js.map
+//# sourceMappingURL=webhook-verification-B8v3-LQ2.js.map

package/dist/{webhook-verification-C4R6OO7f.js.map → webhook-verification-B8v3-LQ2.js.map}

@@ -1 +1 @@
-{"version":3,"file":"webhook-verification-C4R6OO7f.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Verified> {\n  /**\n   * Verify the exact body before parsing it. Return null for an ignored webhook.\n   * @throws WebhookVerificationError when the request cannot be trusted or parsed.\n   */\n  verify(body: string, headers: Headers): Promise<Verified | null>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}
+{"version":3,"file":"webhook-verification-B8v3-LQ2.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Verified> {\n  /**\n   * Verify the exact body before parsing it. Return null for an ignored webhook.\n   * @throws WebhookVerificationError when the request cannot be trusted or parsed.\n   */\n  verify(body: string, headers: Headers): Promise<Verified | null>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}

package/dist/{webhook-verification-DL4L3zbu.d.ts → webhook-verification-Cy4Z5djk.d.ts}

@@ -1,4 +1,4 @@
-import { Jt as AppError } from "./index-CtIdbnEZ.js";
+import { Qt as AppError } from "./index-tJzJUgTh.js";
 //#region src/infrastructure/http/webhook-verification.d.ts
 /** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */
 declare class WebhookVerificationError extends AppError {
@@ -18,4 +18,4 @@ interface WebhookVerifier<Verified> {
 }
 //#endregion
 export { WebhookVerifier as n, WebhookVerificationError as t };
-//# sourceMappingURL=webhook-verification-DL4L3zbu.d.ts.map
+//# sourceMappingURL=webhook-verification-Cy4Z5djk.d.ts.map

package/dist/{webhook-verification-DL4L3zbu.d.ts.map → webhook-verification-Cy4Z5djk.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"webhook-verification-DL4L3zbu.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"mappings":";;;cAGa,iCAAiC;WAMjC;WALF;WACA;;EAGT,YACW,qEACT;;;UAOa,gBAAgB;;;;;EAK/B,OAAO,cAAc,SAAS,UAAU,QAAQ"}
+{"version":3,"file":"webhook-verification-Cy4Z5djk.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"mappings":";;;cAGa,iCAAiC;WAMjC;WALF;WACA;;EAGT,YACW,qEACT;;;UAOa,gBAAgB;;;;;EAK/B,OAAO,cAAc,SAAS,UAAU,QAAQ"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://www.schemastore.org/package.json",
   "name": "better-ship",
-  "version": "0.40.0",
+  "version": "0.42.0",
   "description": "Foundation for applications on Cloudflare Workers: logger, errors, message bus, infrastructure adapters, and UI primitives",
   "license": "Apache-2.0",
   "repository": {

package/src/application/index.ts

@@ -41,6 +41,12 @@ export type { DomainCommand, DomainEvent, DomainMessage, DomainQuery, MessageId
 export { MessageBus, type IMessageBus } from './message-bus.ts'
 export { OutboxRelay, type OutboxRelayOptions } from './outbox-relay.ts'
 export type { IOutboxPublisher, RejectedMessage } from './outbox-publisher.ts'
+export {
+  QueueOrRpcPublisher,
+  type ConsumeResult,
+  type IEventConsumerClient,
+  type QueueOrRpcPublisherOptions,
+} from './queue-or-rpc-publisher.ts'
 export type { IOutboxWake } from './outbox-wake.ts'
 export type {
   OutboxBatch,

package/src/application/outbox-relay.ts

@@ -1,4 +1,4 @@
-import { classifyFailure, createLogger, exponentialDelayCapMs, type DomainEvent } from '@/core'
+import { createLogger, decideRedelivery, type DomainEvent, type RedeliveryDelays } from '@/core'
 
 import type { IOutboxPublisher, RejectedMessage } from './outbox-publisher.ts'
 import type { IOutboxRepository, OutboxFailureReason, OutboxRow } from './outbox-repository.ts'
@@ -8,7 +8,7 @@ export type OutboxRelayOptions = {
   readonly batchSize?: number
   readonly maxBatches?: number
   readonly maxAttempts?: number
-  /** The wait before the first retry; each later retry doubles it. */
+  /** The longest wait before the first retry; each later retry doubles it. Jitter picks between half and all of it. */
   readonly retryBaseDelayMs?: number
   /** The longest wait before a retry. */
   readonly retryMaxDelayMs?: number
@@ -56,8 +56,18 @@ export class OutboxRelay {
     claimToken: string,
     dueRows: ReadonlyArray<OutboxRow>,
   ): Promise<void> {
+    const publishedAt = this.now().getTime()
     const rejectedEvents = await this.publishEvents(dueRows)
     const rejectedEventIds = new Set(rejectedEvents.map(({ message: event }) => event.id))
+    for (const row of dueRows) {
+      // The wait from the commit to the delivery start: the latency a priority event exists to avoid.
+      logger.info('outbox_event_timing', {
+        name: row.payload.name,
+        attempt: row.attempts,
+        waitMs: publishedAt - row.createdAt.getTime(),
+        outcome: rejectedEventIds.has(row.payload.id) ? 'rejected' : 'delivered',
+      })
+    }
     const deliveredRows = dueRows.filter((row) => !rejectedEventIds.has(row.payload.id))
     if (deliveredRows.length > 0) await this.outboxRepo.markPublished(claimToken, deliveredRows)
     for (const [error, rows] of rowsByError(rejectedEvents, dueRows)) {
@@ -102,33 +112,45 @@ export class OutboxRelay {
     rows: ReadonlyArray<OutboxRow>,
     cause: unknown,
   ): Promise<void> {
-    const classification = classifyFailure(cause)
     const errorMessage =
       cause instanceof Error ? cause.message : 'Publisher rejected with a non-error value'
-    if (classification === 'terminal') {
+    if (decideRedelivery(cause, 1, this.delays).action === 'ack') {
       await this.markFailed(claimToken, rows, 'terminal', errorMessage, cause)
       return
     }
     const { exhaustedRows, retryRows } = this.splitByLastAttempt(rows)
     await this.markFailed(claimToken, exhaustedRows, 'exhausted', errorMessage, cause)
-    await this.releaseForRetry(claimToken, retryRows)
+    await this.releaseForRetry(claimToken, retryRows, cause)
   }
 
   /** Releases rows for another attempt. Each row waits longer the more attempts it has used. */
-  private async releaseForRetry(claimToken: string, rows: ReadonlyArray<OutboxRow>): Promise<void> {
+  private async releaseForRetry(
+    claimToken: string,
+    rows: ReadonlyArray<OutboxRow>,
+    cause: unknown,
+  ): Promise<void> {
     const now = this.now().getTime()
     for (const attempts of new Set(rows.map((row) => row.attempts))) {
-      const delayMs = exponentialDelayCapMs(
-        this.options.retryBaseDelayMs,
-        this.options.retryMaxDelayMs,
-        attempts,
-      )
-      const rowsWithSameDelay = rows.filter((row) => row.attempts === attempts)
+      const decision = decideRedelivery(cause, attempts, this.delays)
+      // An ack here means a member error changed between calls; the row then retries at once.
+      const delayMs = decision.action === 'retry' ? decision.delayMs : 0
+      const rowsWithSameAttempts = rows.filter((row) => row.attempts === attempts)
+      // As the queue consumer does: an unknown failure is an error once, on its first attempt.
+      const context = { attempt: attempts, count: rowsWithSameAttempts.length, delayMs }
+      if (decision.action === 'retry' && decision.classification === 'unknown' && attempts === 1) {
+        logger.error('outbox_unknown_failure', { error: cause, ...context })
+      } else {
+        logger.debug('outbox_retry_scheduled', { error: cause, ...context })
+      }
       // oxlint-disable-next-line no-await-in-loop -- Stop releasing rows on the first database failure.
-      await this.outboxRepo.releaseClaim(claimToken, rowsWithSameDelay, new Date(now + delayMs))
+      await this.outboxRepo.releaseClaim(claimToken, rowsWithSameAttempts, new Date(now + delayMs))
     }
   }
 
+  private get delays(): RedeliveryDelays {
+    return { baseDelayMs: this.options.retryBaseDelayMs, maxDelayMs: this.options.retryMaxDelayMs }
+  }
+
   /** Splits claimed rows: rows whose last run crashed with no attempt left, and rows that may run now. */
   private splitByAttemptsLeft(rows: ReadonlyArray<OutboxRow>) {
     return {

package/src/application/outbox-repository.ts

@@ -4,6 +4,8 @@ import type { DomainEvent } from '@/core'
 export type OutboxRow = {
   readonly payload: DomainEvent
   readonly attempts: number
+  /** When the unit of work committed the row. */
+  readonly createdAt: Date
 }
 
 /** The rows one claim leased, and the lease token that every settlement of them must hold. */

package/src/application/queue-or-rpc-publisher.ts

@@ -0,0 +1,70 @@
+import type { DomainEvent } from '@/core'
+
+import type { IOutboxPublisher, RejectedMessage } from './outbox-publisher.ts'
+
+/** A client for a consumer that runs one event when called over RPC; it rejects when the event fails. */
+export interface IEventConsumerClient {
+  consume(event: DomainEvent): Promise<void>
+}
+
+/**
+ * What an RPC event consumer returns. It returns a failure instead of throwing it: the outbox owns
+ * the retries, and a throw from an RPC method is reported to Sentry on every attempt.
+ */
+export type ConsumeResult = { readonly ok: true } | { readonly ok: false; readonly error: unknown }
+
+/** The two clients, the app's rule for choosing between them, and the RPC budget. */
+export type QueueOrRpcPublisherOptions = {
+  readonly queue: IOutboxPublisher
+  readonly consumer: IEventConsumerClient
+  /** The app's rule: which events go over RPC. */
+  readonly usesRpc: (event: DomainEvent) => boolean
+  /** RPC calls in one request. Cloudflare allows 32 Worker invocations per request. */
+  readonly callsPerRequest?: number
+}
+
+const DEFAULT_CALLS_PER_REQUEST = 25
+
+/**
+ * Publishes each event over RPC or to the queue. Events that the rule picks are consumed over RPC,
+ * in parallel, until the request's call budget is used; every other event goes to the queue.
+ * Build one per request, so the budget counts that request's calls. A failed call or queue send
+ * rejects only its own events.
+ */
+export class QueueOrRpcPublisher implements IOutboxPublisher {
+  private callsLeft: number
+
+  constructor(private readonly options: QueueOrRpcPublisherOptions) {
+    this.callsLeft = options.callsPerRequest ?? DEFAULT_CALLS_PER_REQUEST
+  }
+
+  async publish(
+    events: ReadonlyArray<DomainEvent>,
+  ): Promise<readonly RejectedMessage<DomainEvent>[]> {
+    const rpcEvents: DomainEvent[] = []
+    const queuedEvents: DomainEvent[] = []
+    for (const event of events) {
+      if (this.options.usesRpc(event) && this.callsLeft > 0) {
+        rpcEvents.push(event)
+        this.callsLeft -= 1
+      } else {
+        queuedEvents.push(event)
+      }
+    }
+
+    const [queueResult, ...callResults] = await Promise.allSettled([
+      queuedEvents.length > 0 ? this.options.queue.publish(queuedEvents) : Promise.resolve([]),
+      ...rpcEvents.map((event) => this.options.consumer.consume(event)),
+    ])
+
+    const queueRejected =
+      queueResult?.status === 'fulfilled'
+        ? queueResult.value
+        : queuedEvents.map((event) => ({ message: event, error: queueResult?.reason }))
+    const callRejected = rpcEvents.flatMap((event, index) => {
+      const result = callResults[index]
+      return result?.status === 'rejected' ? [{ message: event, error: result.reason }] : []
+    })
+    return [...queueRejected, ...callRejected]
+  }
+}

package/src/core/classify-failure.ts

@@ -40,12 +40,22 @@ export function classifyBoundaryError(args: {
   return 'unknown'
 }
 
+/** An `AppError` that crossed Workers RPC: its class is lost, but its fields and `remote` remain. */
+const RemoteAppErrorSchema = z.object({
+  _tag: z.string(),
+  classification: z.enum(['transient', 'terminal', 'unknown']),
+  remote: z.literal(true),
+})
+
 /**
- * Judge a final failure for its durable retry owner. An `AppError` carries its own answer.
- * A raw throw nobody judged is unknown, so an immediate owner stops and a durable one may repeat.
+ * Judge a final failure for its durable retry owner. An `AppError` carries its own answer, also
+ * after Workers RPC. A raw throw nobody judged is unknown, so an immediate owner stops and a
+ * durable one may repeat.
  */
 export function classifyFailure(cause: unknown): FailureClassification {
   if (cause instanceof AppError) return cause.classification
+  const remote = RemoteAppErrorSchema.safeParse(cause)
+  if (cause instanceof Error && remote.success) return remote.data.classification
   if (isAbortError(cause)) return 'terminal'
   if (isTransientCloudflareRuntimeError(cause)) return 'transient'
   return 'unknown'

package/src/core/index.ts

@@ -98,6 +98,12 @@ export {
   type BoundaryErrorClassifier,
 } from './classify-failure.ts'
 export { exponentialDelayCapMs, exponentialEqualJitterMs, spreadJitterMs } from './backoff.ts'
+export {
+  decideRedelivery,
+  DEFAULT_REDELIVERY_DELAYS,
+  type RedeliveryDecision,
+  type RedeliveryDelays,
+} from './redelivery-policy.ts'
 export {
   configureLogger,
   consoleSink,

package/src/core/redelivery-policy.ts

@@ -0,0 +1,66 @@
+import { exponentialEqualJitterMs, spreadJitterMs } from './backoff.ts'
+import { classifyFailure, retryAfterSecondsOf } from './classify-failure.ts'
+import { shouldRetryFailure, type FailureClassification } from './failure-classification.ts'
+
+const RETRY_AFTER_SPREAD_MS = 5_000
+
+/** The exponential backoff for a durable retry: the first wait, and the longest wait. */
+export type RedeliveryDelays = {
+  readonly baseDelayMs: number
+  readonly maxDelayMs: number
+}
+
+/** The queue consumer's backoff: 5 s, doubling, up to 120 s. */
+export const DEFAULT_REDELIVERY_DELAYS: RedeliveryDelays = {
+  baseDelayMs: 5_000,
+  maxDelayMs: 120_000,
+}
+
+/** How to settle one failed message: stop for good, or deliver it again after a delay. */
+export type RedeliveryDecision =
+  | { readonly action: 'ack'; readonly classification: 'terminal' }
+  | {
+      readonly action: 'retry'
+      readonly classification: Exclude<FailureClassification, 'terminal'>
+      readonly delayMs: number
+    }
+
+/**
+ * Decide whether a failed message stops or is delivered again. A terminal failure stops. Transient
+ * and unknown failures retry: after the advertised wait plus a spread when the error carries one,
+ * else with exponential equal-jitter backoff. An `AggregateError` from event delivery retries when
+ * any member does, after the longest wait. The queue consumer and the outbox relay both use it.
+ */
+export function decideRedelivery(
+  cause: unknown,
+  attempt: number,
+  delays: RedeliveryDelays = DEFAULT_REDELIVERY_DELAYS,
+): RedeliveryDecision {
+  if (cause instanceof AggregateError && cause.errors.length > 0) {
+    const decisions = cause.errors.map((member) => decideRedelivery(member, attempt, delays))
+    const retries = decisions.filter((decision) => decision.action === 'retry')
+    if (retries.length === 0) return { action: 'ack', classification: 'terminal' }
+
+    // Redelivery must respect every failed subscriber's required wait.
+    return {
+      action: 'retry',
+      classification: retries.some((decision) => decision.classification === 'unknown')
+        ? 'unknown'
+        : 'transient',
+      delayMs: Math.max(...retries.map((decision) => decision.delayMs)),
+    }
+  }
+
+  const classification = classifyFailure(cause)
+  if (classification === 'terminal') return { action: 'ack', classification }
+
+  const canRetry = shouldRetryFailure({ classification, repeatSafe: true, owner: 'durable' })
+  if (!canRetry) return { action: 'ack', classification: 'terminal' }
+
+  const retryAfterSeconds = retryAfterSecondsOf(cause)
+  const delayMs =
+    retryAfterSeconds === null
+      ? exponentialEqualJitterMs(delays.baseDelayMs, delays.maxDelayMs, attempt)
+      : retryAfterSeconds * 1_000 + spreadJitterMs(RETRY_AFTER_SPREAD_MS)
+  return { action: 'retry', classification, delayMs }
+}

package/src/infrastructure/cloudflare/d1-outbox-repository.ts

@@ -74,7 +74,10 @@ export class D1OutboxRepository<Schema extends DrizzleSchema> implements IOutbox
         a.createdAt.getTime() - b.createdAt.getTime() ||
         a.payload.id.localeCompare(b.payload.id),
     )
-    return { token, rows: rows.map(({ payload, attempts }) => ({ payload, attempts })) }
+    return {
+      token,
+      rows: rows.map(({ payload, attempts, createdAt }) => ({ payload, attempts, createdAt })),
+    }
   }
 
   /** Mark only supplied rows that still hold this token as published. */

package/src/infrastructure/cloudflare/queue/index.ts

@@ -22,5 +22,4 @@ export {
   QueueSendError,
   type QueueOperation,
 } from './queue.errors.ts'
-export { decideRedelivery, type RedeliveryDecision } from './redelivery-policy.ts'
 export { waitUntilWake } from './wait-until-wake.ts'

package/src/infrastructure/cloudflare/queue/queue-consumer.ts

@@ -1,14 +1,20 @@
 import type { z } from 'zod'
 
 import { MessageAlreadyProcessedError } from '@/application'
-import { createLogger } from '@/core'
+import { createLogger, decideRedelivery } from '@/core'
 
 import type { IQueueClient } from './queue-client.ts'
 import type { QueueMessage } from './queue-message.ts'
 import { DeadLetterUnavailableError } from './queue.errors.ts'
-import { decideRedelivery } from './redelivery-policy.ts'
 
 const logger = createLogger('queue-consumer')
+/** Cloudflare Queues accept a redelivery delay of at most one day. */
+const MAX_QUEUE_DELAY_SECONDS = 24 * 60 * 60
+
+/** Whole seconds, at least 1, at most Cloudflare's one-day limit. */
+function toQueueDelaySeconds(delayMs: number): number {
+  return Math.min(MAX_QUEUE_DELAY_SECONDS, Math.max(1, Math.ceil(delayMs / 1_000)))
+}
 
 /** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */
 export type DispatchWrapper<TMessage extends QueueMessage> = (
@@ -147,19 +153,20 @@ export class QueueConsumer<TMessage extends QueueMessage> {
       return
     }
 
+    const delaySeconds = toQueueDelaySeconds(decision.delayMs)
     const context = {
       name: parsed?.name,
       messageId: parsed?.id,
       queueMessageId: message.id,
       attempt: message.attempts,
       classification: decision.classification,
-      delaySeconds: decision.delaySeconds,
+      delaySeconds,
     }
     if (decision.classification === 'unknown' && message.attempts === 1) {
       logger.error('queue_unknown_failure', { error: cause, ...context })
     } else {
       logger.debug('redelivery_requested', context)
     }
-    message.retry({ delaySeconds: decision.delaySeconds })
+    message.retry({ delaySeconds })
   }
 }

package/src/infrastructure/postgres/postgres-outbox-repository.ts

@@ -75,7 +75,10 @@ export class PostgresOutboxRepository implements IOutboxRepository {
         a.createdAt.getTime() - b.createdAt.getTime() ||
         a.payload.id.localeCompare(b.payload.id),
     )
-    return { token, rows: rows.map(({ payload, attempts }) => ({ payload, attempts })) }
+    return {
+      token,
+      rows: rows.map(({ payload, attempts, createdAt }) => ({ payload, attempts, createdAt })),
+    }
   }
 
   /** Mark only supplied rows that still hold this token as published. */

package/src/infrastructure/stripe/client.ts

@@ -1,10 +1,14 @@
 import Stripe from 'stripe'
 
-/** Default SDK retries; client configuration and individual requests can override this value. */
-export const STRIPE_REQUEST_OPTIONS = Object.freeze({ maxNetworkRetries: 2 })
+/**
+ * Default SDK retries and per-request timeout; client configuration and individual requests can
+ * override them. Three tries of 8 s plus the SDK's short waits stay under a Worker's 30 s `waitUntil`
+ * limit and the outbox's 60 s lease. The SDK's own timeout is 80 s.
+ */
+export const STRIPE_REQUEST_OPTIONS = Object.freeze({ maxNetworkRetries: 2, timeout: 8_000 })
 
 /**
- * Construct a native Stripe client with fetch transport and two SDK retries by default.
+ * Construct a native Stripe client with fetch transport, two SDK retries and an 8 s timeout by default.
  * Native configuration overrides these defaults. Inject the client into application services.
  */
 export function createStripeClient(secretKey: string, options: Stripe.StripeConfig = {}): Stripe {

package/dist/application-xXTCe8o0.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-xXTCe8o0.js","names":["logger"],"sources":["../src/application/analytics-service.ts","../src/application/metrics-service.ts","../src/application/email-service.ts","../src/application/record-email-event.ts","../src/application/message-already-processed.error.ts","../src/application/message-bus.ts","../src/application/outbox-relay.ts","../src/application/outbox-retention.ts","../src/application/unit-of-work.ts","../src/application/unit-of-work.errors.ts"],"sourcesContent":["import type { AnalyticsEventInput, AnalyticsProperties, AnalyticsTarget } from '@/core'\n\n/** The properties of one event name; an untyped service accepts any properties. */\nexport type AnalyticsPropertiesOf<\n  TEvent extends AnalyticsEventInput,\n  TName extends TEvent['name'],\n> = string extends TEvent['name']\n  ? TEvent['properties']\n  : Extract<TEvent, { readonly name: TName }>['properties']\n\n/** Product analytics without an SDK dependency, ported from Typist and Porte. */\nexport interface AnalyticsService<TEvent extends AnalyticsEventInput = AnalyticsEventInput> {\n  /** Attach traits to one person. */\n  identify(distinctId: string, properties?: AnalyticsProperties): void\n  /** Merge a previous ID into this person; the application must establish that both identify the same person. */\n  alias(distinctId: string, previousDistinctId: string): void\n  /** Schedule an event for a person; returning does not confirm remote acceptance. */\n  track<TName extends TEvent['name']>(\n    name: TName,\n    properties: AnalyticsPropertiesOf<TEvent, TName>,\n    target: AnalyticsTarget,\n  ): void\n  /** Schedule an event without creating a person profile for its distinct ID. */\n  trackAnonymous<TName extends TEvent['name']>(\n    name: TName,\n    properties: AnalyticsPropertiesOf<TEvent, TName>,\n    target: AnalyticsTarget,\n  ): void\n}\n\n/**\n * Reports to nobody. The composition root selects this service when analytics is disabled.\n * `satisfies` keeps its own type, so it serves an `AnalyticsService` of any event map.\n */\nexport const NULL_ANALYTICS = {\n  identify: () => {},\n  alias: () => {},\n  track: (\n    _name: string,\n    _properties: AnalyticsEventInput['properties'],\n    _target: AnalyticsTarget,\n  ) => {},\n  trackAnonymous: (\n    _name: string,\n    _properties: AnalyticsEventInput['properties'],\n    _target: AnalyticsTarget,\n  ) => {},\n} satisfies AnalyticsService\n","/** A metric dimension; use a small, bounded value set and never user or request IDs. */\nexport type MetricAttributeValue = string | number | boolean\n\n/** Dimensions shared by observations in one time series. */\nexport type MetricAttributes = Readonly<Record<string, MetricAttributeValue>>\n\n/** Unit and dimensions for an operational measurement. */\nexport interface MetricOptions {\n  readonly attributes?: MetricAttributes\n  readonly unit?: string\n}\n\n/** Operational measurements, ported from Typist's metrics-service.ts; applications own metric names. */\nexport interface MetricsService<TName extends string = string> {\n  /** Add a nonnegative value to a total; the default increment is one. */\n  count(name: TName, value?: number, options?: MetricOptions): void\n  /** Record a current value. */\n  gauge(name: TName, value: number, options?: MetricOptions): void\n  /** Record one observation in a distribution. */\n  histogram(name: TName, value: number, options?: MetricOptions): void\n}\n\n/** Records nothing when the composition root disables metrics. */\nexport const NULL_METRICS_SERVICE: MetricsService = {\n  count: () => {},\n  gauge: () => {},\n  histogram: () => {},\n}\n","import type { EmailIdempotencyKey } from '@/core'\n\n/** A media type such as `application/pdf`. */\nexport type MimeType = `${string}/${string}`\n\n/** A file to attach. Binary content is bytes; the adapter encodes it for the provider. */\nexport type EmailAttachment = {\n  readonly filename: string\n  readonly content: string | Uint8Array\n  /** Optional MIME metadata; Resend accepts filename and content without it. */\n  readonly contentType?: MimeType\n}\n\n/**\n * One transactional email. Resend accepts 50 recipients, 75 tags with ASCII names and values,\n * and 40 MB of attachments after base64. Sources: https://resend.com/docs/api-reference/emails/send-email\n * and https://resend.com/docs/dashboard/emails/tags\n */\nexport type OutboundEmail = {\n  /** Override the default for this email, for example \"Display Name <address@domain.com>\". */\n  readonly from?: string\n  readonly to: string | readonly string[]\n  readonly subject: string\n  readonly html: string\n  /** Optional stable identity of this send. Resend deduplicates supplied keys for 24 hours. */\n  readonly idempotencyKey?: EmailIdempotencyKey\n  /** Resend generates plain text from html when omitted. An empty string disables that generation. */\n  readonly text?: string\n  readonly replyTo?: string\n  /** Labels the provider stores with the email and returns on every delivery event. */\n  readonly tags?: Readonly<Record<string, string>>\n  readonly attachments?: readonly EmailAttachment[]\n}\n\n/** Received email headers, without the body or attachments. */\nexport type ReceivedEmail = { readonly headers: Readonly<Record<string, string>> }\n\n/** One attachment of a received email. `downloadUrl` is a signed link that stops working at `expiresAt`. */\nexport type ReceivedAttachment = {\n  readonly filename: string | null\n  readonly contentType: string\n  readonly size: number\n  readonly downloadUrl: string\n  readonly expiresAt: string\n}\n\n/** A received email's sender, plain text body, and attachments, for an application that reads mail it receives. */\nexport type ReceivedContent = {\n  /** The sender as the email states it, for example \"Display Name <address@domain.com>\". */\n  readonly from: string\n  readonly text: string | null\n  readonly attachments: readonly ReceivedAttachment[]\n}\n\n/** The provider accepted the email and assigned its id. */\nexport type EmailAccepted = { readonly providerId: string }\n\n/**\n * The adapter supplies the default sender and maps provider errors. Each email can override the sender.\n * A provider rejection throws `EmailServiceError`; unexpected SDK rejections propagate unchanged.\n */\nexport interface IEmailService {\n  /** Resolve after provider acceptance; this does not confirm delivery to the recipient. */\n  sendEmail(email: OutboundEmail): Promise<EmailAccepted>\n}\n\n/** Records every send for a test. Provider ids count up as `recorded-1`, `recorded-2`. */\nexport class RecordingEmailService implements IEmailService {\n  /** Sends in call order, including repeated idempotency keys. */\n  readonly sent: OutboundEmail[] = []\n\n  /** Record the send before returning its provider id. */\n  async sendEmail(email: OutboundEmail): Promise<EmailAccepted> {\n    this.sent.push(email)\n    return { providerId: `recorded-${this.sent.length}` }\n  }\n}\n","import type { BounceType, DomainCommand, EmailAddress, RecordEmailEventPayload } from '@/core'\n\nimport type { IUnitOfWork } from './unit-of-work.ts'\n\n/** What a bounce records for one address. */\nexport type EmailBounceRecord = {\n  readonly type: BounceType\n  readonly subType: string | null\n}\n\n/**\n * The application's deliverability state per address. An implementation keeps the higher bounce\n * severity with `shouldUpdateBounce`, and treats an unknown address as nothing to record.\n */\nexport interface IEmailDeliverabilityStore {\n  /** Keep the higher severity atomically. Equal severity permits replacement; the store owns timestamp ordering. */\n  recordBounce(address: EmailAddress, bounce: EmailBounceRecord): Promise<void>\n  /** Record a complaint without clearing existing suppression state. */\n  recordComplaint(address: EmailAddress): Promise<void>\n}\n\n/** The repositories the handler needs from the unit of work. */\nexport type RecordEmailEventRepos = { readonly emailDeliverability: IEmailDeliverabilityStore }\n\n/** The container slice the handler reads. */\nexport type RecordEmailEventDeps = { readonly uow: IUnitOfWork<RecordEmailEventRepos> }\n\n/** The command, under whatever name the application registered the payload. */\nexport type RecordEmailEventCommand = DomainCommand & RecordEmailEventPayload\n\n/**\n * Record a bounce or a complaint for every recipient inside the command's unit of work.\n * The command id is the provider's event id, so a redelivered webhook is `MessageAlreadyProcessedError`.\n */\nexport async function recordEmailEvent(\n  command: RecordEmailEventCommand,\n  deps: RecordEmailEventDeps,\n): Promise<void> {\n  await deps.uow.run(command.id, async ({ emailDeliverability }) => {\n    for (const address of command.recipients) {\n      if (command.event.type === 'bounced') {\n        // oxlint-disable-next-line no-await-in-loop -- Finish each transaction write before starting another; a failure must leave no pending writes.\n        await emailDeliverability.recordBounce(address, {\n          type: command.event.bounceType,\n          subType: command.event.bounceSubType,\n        })\n      } else {\n        // oxlint-disable-next-line no-await-in-loop -- A rejected write must stop the transaction before another write starts.\n        await emailDeliverability.recordComplaint(address)\n      }\n    }\n  })\n}\n","import { AppError, DatabaseError, type MessageId } from '@/core'\n\n/** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */\nexport class MessageAlreadyProcessedError extends AppError {\n  readonly _tag = 'MessageAlreadyProcessedError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly messageId: MessageId,\n    options?: { readonly cause: unknown },\n  ) {\n    super(`message ${messageId} already processed`, options)\n  }\n\n  /** Recognize only the processed-message primary key; preserve other failures unchanged at the call site. */\n  static from(cause: unknown, messageId: MessageId): MessageAlreadyProcessedError | undefined {\n    if (cause instanceof MessageAlreadyProcessedError) return cause\n    if (!(cause instanceof DatabaseError)) return undefined\n    const details = cause.details\n    const duplicate =\n      details.database === 'd1'\n        ? details.kind === 'unique' &&\n          details.table === 'processed_messages' &&\n          details.column === 'message_id'\n        : details.code === '23505' &&\n          details.table_name === 'processed_messages' &&\n          details.constraint_name === 'processed_messages_pkey'\n    if (!duplicate) return undefined\n    return new MessageAlreadyProcessedError(messageId, { cause })\n  }\n}\n","import { panic } from 'better-result'\n\nimport {\n  createLogger,\n  unreachable,\n  type DomainCommand,\n  type DomainEvent,\n  type DomainMessage,\n  type DomainQuery,\n} from '@/core'\n\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { Handlers, MessageResult, RegistryMessage } from './registry.ts'\n\nconst logger = createLogger('message-bus')\n\n/** The port an entrypoint dispatches through. `AppDeps` names this as `IMessageBus<typeof registry>`. */\nexport interface IMessageBus<TRegistry extends Handlers<never>> {\n  handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>>\n}\n\n/**\n * Routes one message to its slot. The bus opens no transaction and keeps no outbox:\n * a handler that writes opens the unit of work itself.\n */\nexport class MessageBus<Deps, TRegistry extends Handlers<Deps>> implements IMessageBus<TRegistry> {\n  constructor(\n    private readonly deps: Deps,\n    private readonly registry: TRegistry,\n  ) {}\n\n  /** Resolves to the handler's own value for a command or query, and to void for an event. */\n  async handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>> {\n    // SAFETY: the slot for this name is what `MessageResult` names, and dispatch returns its value.\n    return (await this.dispatch(message)) as MessageResult<TMessage, TRegistry>\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- one table holds every slot's value; `handle` names it.\n  private dispatch(message: DomainMessage): Promise<unknown> {\n    if (message.type === 'command') return this.handleCommand(message)\n    if (message.type === 'query') return this.handleQuery(message)\n    if (message.type === 'event') return this.handleEvent(message)\n    // A message parsed at a boundary cannot reach here; one that does must not resolve silently.\n    return unreachable(message)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleCommand(command: DomainCommand): Promise<unknown> {\n    // `satisfies` proved the registry complete, so a missing slot is a broken registry object.\n    const handler = this.registry.commands[command.name]\n    if (handler === undefined) return panic(`No handler for command ${command.name}`)\n    logger.debug('handling_command', { name: command.name, id: command.id })\n    return handler(command, this.deps)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleQuery(query: DomainQuery): Promise<unknown> {\n    const handler = this.registry.queries[query.name]\n    if (handler === undefined) return panic(`No handler for query ${query.name}`)\n    return handler(query, this.deps)\n  }\n\n  /**\n   * Subscribers run one after another, so one unit of work finishes before the next starts.\n   * Every subscriber still runs. One failure is rethrown as is. Several are thrown as one `AggregateError`.\n   * A `MessageAlreadyProcessedError` means that subscriber already committed on an earlier delivery, so it counts as delivered.\n   */\n  private async handleEvent(event: DomainEvent): Promise<void> {\n    const subscriptions = this.registry.events[event.name] ?? []\n    const failures: unknown[] = []\n    for (const [subscriber, subscription] of subscriptions.entries()) {\n      try {\n        await subscription(event, this.deps)\n      } catch (reason) {\n        if (reason instanceof MessageAlreadyProcessedError) {\n          // The bus swallows this error, so this line is the only record that the skip happened.\n          logger.info('duplicate_subscriber_ignored', {\n            event: event.name,\n            id: event.id,\n            subscriber,\n          })\n          continue\n        }\n        failures.push(reason)\n      }\n    }\n    if (failures.length === 1) throw failures[0]\n    if (failures.length > 1) {\n      throw new AggregateError(failures, `${event.name}: ${failures.length} subscribers failed`)\n    }\n  }\n}\n","import { classifyFailure, createLogger, exponentialDelayCapMs, type DomainEvent } from '@/core'\n\nimport type { IOutboxPublisher, RejectedMessage } from './outbox-publisher.ts'\nimport type { IOutboxRepository, OutboxFailureReason, OutboxRow } from './outbox-repository.ts'\n\n/** Optional limits for one relay; durable attempts exclude the publisher's immediate retries. */\nexport type OutboxRelayOptions = {\n  readonly batchSize?: number\n  readonly maxBatches?: number\n  readonly maxAttempts?: number\n  /** The wait before the first retry; each later retry doubles it. */\n  readonly retryBaseDelayMs?: number\n  /** The longest wait before a retry. */\n  readonly retryMaxDelayMs?: number\n}\n\nconst logger = createLogger('outbox-relay')\n\n/**\n * Moves committed events out of the outbox: claims due rows, sends their events through the publisher,\n * and records each result on its row. A repository failure propagates to the caller.\n */\nexport class OutboxRelay {\n  private readonly options: Required<OutboxRelayOptions>\n\n  constructor(\n    private readonly publisher: IOutboxPublisher,\n    private readonly outboxRepo: IOutboxRepository,\n    options: OutboxRelayOptions = {},\n    private readonly now: () => Date = () => new Date(),\n  ) {\n    this.options = {\n      batchSize: options.batchSize ?? 50,\n      maxBatches: options.maxBatches ?? 10,\n      maxAttempts: options.maxAttempts ?? 10,\n      retryBaseDelayMs: options.retryBaseDelayMs ?? 1_000,\n      retryMaxDelayMs: options.retryMaxDelayMs ?? 60_000,\n    }\n  }\n\n  /**\n   * Runs one batch: claims due rows, marks rows with no attempt left failed, and publishes the rest.\n   * Called by `drain()`. Returns the claimed count; zero means no row was due.\n   */\n  async flush(): Promise<number> {\n    const batch = await this.outboxRepo.claimDueRows(this.options.batchSize)\n    const { exhaustedRows, dueRows } = this.splitByAttemptsLeft(batch.rows)\n    await this.markFailed(batch.token, exhaustedRows, 'exhausted', 'Claim attempt limit exceeded')\n    if (dueRows.length > 0) await this.publishDueRows(batch.token, dueRows)\n    // drain() keeps going while a claim finds rows, even if every row was exhausted.\n    return batch.rows.length\n  }\n\n  /** Sends the rows' events, marks the delivered rows published, and fails or retries the rest by their error. */\n  private async publishDueRows(\n    claimToken: string,\n    dueRows: ReadonlyArray<OutboxRow>,\n  ): Promise<void> {\n    const rejectedEvents = await this.publishEvents(dueRows)\n    const rejectedEventIds = new Set(rejectedEvents.map(({ message: event }) => event.id))\n    const deliveredRows = dueRows.filter((row) => !rejectedEventIds.has(row.payload.id))\n    if (deliveredRows.length > 0) await this.outboxRepo.markPublished(claimToken, deliveredRows)\n    for (const [error, rows] of rowsByError(rejectedEvents, dueRows)) {\n      // oxlint-disable-next-line no-await-in-loop -- Each error decides fail or retry for its own rows.\n      await this.failOrRetry(claimToken, rows, error)\n    }\n  }\n\n  /** Publishes the rows' events. A thrown publish counts as every event rejected with that error. */\n  private async publishEvents(\n    rows: ReadonlyArray<OutboxRow>,\n  ): Promise<readonly RejectedMessage<DomainEvent>[]> {\n    const events = rows.map((row) => row.payload)\n    try {\n      return await this.publisher.publish(events)\n    } catch (error) {\n      return events.map((event) => ({ message: event, error }))\n    }\n  }\n\n  /**\n   * Runs batches until no row is due: at most `maxBatches` × `batchSize` rows, 500 by default. Called\n   * after a commit through `waitUntilWake`, and by the app's cron sweep. Returns the total claimed count.\n   */\n  async drain(): Promise<number> {\n    let total = 0\n    for (let batchCount = 0; batchCount < this.options.maxBatches; batchCount += 1) {\n      // oxlint-disable-next-line no-await-in-loop -- An empty claim must stop the drain before another claim starts.\n      const claimed = await this.flush()\n      total += claimed\n      if (claimed === 0) break\n    }\n    return total\n  }\n\n  /**\n   * Decides fail or retry for rows whose events were not delivered: the whole send failed, or one event\n   * was rejected. Marks them failed on a terminal error or a last attempt; releases the rest for retry.\n   */\n  private async failOrRetry(\n    claimToken: string,\n    rows: ReadonlyArray<OutboxRow>,\n    cause: unknown,\n  ): Promise<void> {\n    const classification = classifyFailure(cause)\n    const errorMessage =\n      cause instanceof Error ? cause.message : 'Publisher rejected with a non-error value'\n    if (classification === 'terminal') {\n      await this.markFailed(claimToken, rows, 'terminal', errorMessage, cause)\n      return\n    }\n    const { exhaustedRows, retryRows } = this.splitByLastAttempt(rows)\n    await this.markFailed(claimToken, exhaustedRows, 'exhausted', errorMessage, cause)\n    await this.releaseForRetry(claimToken, retryRows)\n  }\n\n  /** Releases rows for another attempt. Each row waits longer the more attempts it has used. */\n  private async releaseForRetry(claimToken: string, rows: ReadonlyArray<OutboxRow>): Promise<void> {\n    const now = this.now().getTime()\n    for (const attempts of new Set(rows.map((row) => row.attempts))) {\n      const delayMs = exponentialDelayCapMs(\n        this.options.retryBaseDelayMs,\n        this.options.retryMaxDelayMs,\n        attempts,\n      )\n      const rowsWithSameDelay = rows.filter((row) => row.attempts === attempts)\n      // oxlint-disable-next-line no-await-in-loop -- Stop releasing rows on the first database failure.\n      await this.outboxRepo.releaseClaim(claimToken, rowsWithSameDelay, new Date(now + delayMs))\n    }\n  }\n\n  /** Splits claimed rows: rows whose last run crashed with no attempt left, and rows that may run now. */\n  private splitByAttemptsLeft(rows: ReadonlyArray<OutboxRow>) {\n    return {\n      exhaustedRows: rows.filter((row) => this.hasNoAttemptLeft(row)),\n      dueRows: rows.filter((row) => !this.hasNoAttemptLeft(row)),\n    }\n  }\n\n  /** Splits failed rows: rows that just used their last attempt, and rows that may retry. */\n  private splitByLastAttempt(rows: ReadonlyArray<OutboxRow>) {\n    return {\n      exhaustedRows: rows.filter((row) => this.isLastAttempt(row)),\n      retryRows: rows.filter((row) => !this.isLastAttempt(row)),\n    }\n  }\n\n  /** True when the row used every attempt before this claim: its last run crashed, so it must not run again. */\n  private hasNoAttemptLeft(row: OutboxRow): boolean {\n    // The claim already counted this run, so a row on its last allowed run equals the limit.\n    return row.attempts > this.options.maxAttempts\n  }\n\n  /** True when the run that just failed was the row's last allowed attempt, so it must not be retried. */\n  private isLastAttempt(row: OutboxRow): boolean {\n    return row.attempts >= this.options.maxAttempts\n  }\n\n  /** Calls `outboxRepo.markFailed`, then logs one error. Does nothing for an empty list. */\n  private async markFailed(\n    claimToken: string,\n    rows: ReadonlyArray<OutboxRow>,\n    reason: OutboxFailureReason,\n    errorMessage: string,\n    cause?: unknown,\n  ): Promise<void> {\n    if (rows.length === 0) return\n    await this.outboxRepo.markFailed(claimToken, rows, reason, errorMessage)\n    logger.error('outbox_rows_failed', {\n      error: cause,\n      claimToken,\n      count: rows.length,\n      reason,\n    })\n  }\n}\n\n/** Groups the rejected events' rows by error object, so one error decides fail or retry for all its rows at once. */\nfunction rowsByError(\n  rejectedEvents: readonly RejectedMessage<DomainEvent>[],\n  rows: ReadonlyArray<OutboxRow>,\n): Map<unknown, OutboxRow[]> {\n  const rowByEventId = new Map(rows.map((row) => [row.payload.id, row]))\n  const groups = new Map<unknown, OutboxRow[]>()\n  for (const { message: event, error } of rejectedEvents) {\n    const row = rowByEventId.get(event.id)\n    if (row === undefined) continue\n    const group = groups.get(error) ?? []\n    group.push(row)\n    groups.set(error, group)\n  }\n  return groups\n}\n","import type { IOutboxRetentionRepository } from './outbox-repository.ts'\n\n/** Typist's retention defaults; receipt retention must cover the application's supported replay period. */\nexport type OutboxRetentionOptions = {\n  readonly publishedRetentionMs?: number\n  readonly failedRetentionMs?: number\n  readonly receiptRetentionMs?: number\n  readonly batchSize?: number\n  readonly maxBatches?: number\n}\n\n/** Deleted records per category during one bounded sweep. */\nexport type OutboxRetentionResult = {\n  readonly published: number\n  readonly failed: number\n  readonly receipts: number\n}\n\n/** Bounded cleanup ported from Typist's message retention handler. The application schedules each sweep. */\nexport class OutboxRetention {\n  private readonly options: Required<OutboxRetentionOptions>\n\n  constructor(\n    private readonly repository: IOutboxRetentionRepository,\n    options: OutboxRetentionOptions = {},\n  ) {\n    this.options = {\n      publishedRetentionMs: options.publishedRetentionMs ?? 86_400_000,\n      failedRetentionMs: options.failedRetentionMs ?? 30 * 86_400_000,\n      receiptRetentionMs: options.receiptRetentionMs ?? 7 * 86_400_000,\n      batchSize: options.batchSize ?? 1_000,\n      maxBatches: options.maxBatches ?? 10,\n    }\n  }\n\n  /** Calculate all cutoffs from one supplied time; propagate repository failures to the calling boundary. */\n  async sweep(at: Date): Promise<OutboxRetentionResult> {\n    const { publishedRetentionMs, failedRetentionMs, receiptRetentionMs } = this.options\n    const published = await this.deleteBatches((size) =>\n      this.repository.deletePublishedBefore(new Date(at.getTime() - publishedRetentionMs), size),\n    )\n    const failed = await this.deleteBatches((size) =>\n      this.repository.deleteFailedBefore(new Date(at.getTime() - failedRetentionMs), size),\n    )\n    const receipts = await this.deleteBatches((size) =>\n      this.repository.deleteReceiptsBefore(new Date(at.getTime() - receiptRetentionMs), size),\n    )\n    return { published, failed, receipts }\n  }\n\n  private async deleteBatches(deleteBatch: (size: number) => Promise<number>): Promise<number> {\n    let total = 0\n    for (let batch = 0; batch < this.options.maxBatches; batch += 1) {\n      // oxlint-disable-next-line no-await-in-loop -- The delete count decides whether another batch is needed.\n      const deleted = await deleteBatch(this.options.batchSize)\n      total += deleted\n      if (deleted < this.options.batchSize) break\n    }\n    return total\n  }\n}\n","import type { MessageId } from '@/core'\n\nimport type { IEventCollector } from './event-collector.ts'\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { IMessageStore } from './message-store.ts'\nimport type { IOutboxWake } from './outbox-wake.ts'\nimport type { ITransaction } from './transaction.ts'\n\n/**\n * Commits the processed-message record, repository writes, and emitted events together before resolving.\n * An existing record rejects with `MessageAlreadyProcessedError`; external effects must run through the outbox after commit.\n * Nested calls reject with `UnitOfWorkAlreadyActiveError`.\n */\nexport interface IUnitOfWork<Repos> {\n  run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T>\n}\n\nexport type UnitOfWorkDeps<Tx, Repos> = {\n  readonly transaction: ITransaction<Tx>\n  /** The processed-messages and outbox repository for this transaction. */\n  readonly messageStore: (tx: Tx) => IMessageStore\n  /** Repositories participate in the current transaction. */\n  readonly createRepositories: (tx: Tx) => Repos\n  readonly eventCollector: IEventCollector\n  readonly relay: IOutboxWake\n}\n\n/** The unit of work: the boundary, the repositories, the events. Every database call is a port. */\nexport class UnitOfWork<Tx, Repos> implements IUnitOfWork<Repos> {\n  constructor(private readonly deps: UnitOfWorkDeps<Tx, Repos>) {}\n\n  async run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T> {\n    const { transaction, messageStore, createRepositories, eventCollector, relay } = this.deps\n    let written = 0\n\n    let value: T\n    try {\n      value = await transaction.transaction(async (tx) => {\n        const store = messageStore(tx)\n        await store.claim(messageId)\n        const repos = createRepositories(tx)\n        const result = await work(repos)\n        const pending = eventCollector.collect()\n        await store.persistEvents(pending)\n        written = pending.length\n        return result\n      })\n    } catch (error) {\n      throw MessageAlreadyProcessedError.from(error, messageId) ?? error\n    }\n\n    if (written > 0) relay.wake()\n    return value\n  }\n}\n","import { AppError } from '@/core'\n\n/** A boundary was opened inside another. One message, one atomic scope. */\nexport class UnitOfWorkAlreadyActiveError extends AppError {\n  readonly _tag = 'UnitOfWorkAlreadyActiveError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('a unit of work is already active')\n  }\n}\n"],"mappings":";;;;;;;;AAkCA,MAAa,iBAAiB;CAC5B,gBAAgB,CAAC;CACjB,aAAa,CAAC;CACd,QACE,OACA,aACA,YACG,CAAC;CACN,iBACE,OACA,aACA,YACG,CAAC;AACR;;;;;ACxBA,MAAa,uBAAuC;CAClD,aAAa,CAAC;CACd,aAAa,CAAC;CACd,iBAAiB,CAAC;AACpB;;;;;ACwCA,IAAa,wBAAb,MAA4D;;CAE1D,AAAS,OAAwB,CAAC;;CAGlC,MAAM,UAAU,OAA8C;EAC5D,KAAK,KAAK,KAAK,KAAK;EACpB,OAAO,EAAE,YAAY,YAAY,KAAK,KAAK,SAAS;CACtD;AACF;;;;;;;;AC1CA,eAAsB,iBACpB,SACA,MACe;CACf,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAI,OAAO,EAAE,0BAA0B;EAChE,KAAK,MAAM,WAAW,QAAQ,YAC5B,IAAI,QAAQ,MAAM,SAAS,WAEzB,MAAM,oBAAoB,aAAa,SAAS;GAC9C,MAAM,QAAQ,MAAM;GACpB,SAAS,QAAQ,MAAM;EACzB,CAAC;OAGD,MAAM,oBAAoB,gBAAgB,OAAO;CAGvD,CAAC;AACH;;;;;ACjDA,IAAa,+BAAb,MAAa,qCAAqC,SAAS;CAK9C;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,WACT,SACA;EACA,MAAM,WAAW,UAAU,qBAAqB,OAAO;EAH9C;CAIX;;CAGA,OAAO,KAAK,OAAgB,WAAgE;EAC1F,IAAI,iBAAiB,8BAA8B,OAAO;EAC1D,IAAI,EAAE,iBAAiB,gBAAgB,OAAO;EAC9C,MAAM,UAAU,MAAM;EAStB,IAAI,EAPF,QAAQ,aAAa,OACjB,QAAQ,SAAS,YACjB,QAAQ,UAAU,wBAClB,QAAQ,WAAW,eACnB,QAAQ,SAAS,WACjB,QAAQ,eAAe,wBACvB,QAAQ,oBAAoB,4BAClB,OAAO;EACvB,OAAO,IAAI,6BAA6B,WAAW,EAAE,MAAM,CAAC;CAC9D;AACF;;;;AChBA,MAAMA,WAAS,aAAa,aAAa;;;;;AAazC,IAAa,aAAb,MAAkG;CAE7E;CACA;CAFnB,YACE,AAAiB,MACjB,AAAiB,UACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,OACJ,SAC6C;EAE7C,OAAQ,MAAM,KAAK,SAAS,OAAO;CACrC;CAGA,AAAQ,SAAS,SAA0C;EACzD,IAAI,QAAQ,SAAS,WAAW,OAAO,KAAK,cAAc,OAAO;EACjE,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAC7D,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAE7D,OAAO,YAAY,OAAO;CAC5B;CAGA,AAAQ,cAAc,SAA0C;EAE9D,MAAM,UAAU,KAAK,SAAS,SAAS,QAAQ;EAC/C,IAAI,YAAY,QAAW,OAAO,MAAM,0BAA0B,QAAQ,MAAM;EAChF,SAAO,MAAM,oBAAoB;GAAE,MAAM,QAAQ;GAAM,IAAI,QAAQ;EAAG,CAAC;EACvE,OAAO,QAAQ,SAAS,KAAK,IAAI;CACnC;CAGA,AAAQ,YAAY,OAAsC;EACxD,MAAM,UAAU,KAAK,SAAS,QAAQ,MAAM;EAC5C,IAAI,YAAY,QAAW,OAAO,MAAM,wBAAwB,MAAM,MAAM;EAC5E,OAAO,QAAQ,OAAO,KAAK,IAAI;CACjC;;;;;;CAOA,MAAc,YAAY,OAAmC;EAC3D,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,SAAS,CAAC;EAC3D,MAAM,WAAsB,CAAC;EAC7B,KAAK,MAAM,CAAC,YAAY,iBAAiB,cAAc,QAAQ,GAC7D,IAAI;GACF,MAAM,aAAa,OAAO,KAAK,IAAI;EACrC,SAAS,QAAQ;GACf,IAAI,kBAAkB,8BAA8B;IAElD,SAAO,KAAK,gCAAgC;KAC1C,OAAO,MAAM;KACb,IAAI,MAAM;KACV;IACF,CAAC;IACD;GACF;GACA,SAAS,KAAK,MAAM;EACtB;EAEF,IAAI,SAAS,WAAW,GAAG,MAAM,SAAS;EAC1C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,GAAG,MAAM,KAAK,IAAI,SAAS,OAAO,oBAAoB;CAE7F;AACF;;;;AC/EA,MAAM,SAAS,aAAa,cAAc;;;;;AAM1C,IAAa,cAAb,MAAyB;CAIJ;CACA;CAEA;CANnB,AAAiB;CAEjB,YACE,AAAiB,WACjB,AAAiB,YACjB,UAA8B,CAAC,GAC/B,AAAiB,4BAAwB,IAAI,KAAK,GAClD;EAJiB;EACA;EAEA;EAEjB,KAAK,UAAU;GACb,WAAW,QAAQ,aAAa;GAChC,YAAY,QAAQ,cAAc;GAClC,aAAa,QAAQ,eAAe;GACpC,kBAAkB,QAAQ,oBAAoB;GAC9C,iBAAiB,QAAQ,mBAAmB;EAC9C;CACF;;;;;CAMA,MAAM,QAAyB;EAC7B,MAAM,QAAQ,MAAM,KAAK,WAAW,aAAa,KAAK,QAAQ,SAAS;EACvE,MAAM,EAAE,eAAe,YAAY,KAAK,oBAAoB,MAAM,IAAI;EACtE,MAAM,KAAK,WAAW,MAAM,OAAO,eAAe,aAAa,8BAA8B;EAC7F,IAAI,QAAQ,SAAS,GAAG,MAAM,KAAK,eAAe,MAAM,OAAO,OAAO;EAEtE,OAAO,MAAM,KAAK;CACpB;;CAGA,MAAc,eACZ,YACA,SACe;EACf,MAAM,iBAAiB,MAAM,KAAK,cAAc,OAAO;EACvD,MAAM,mBAAmB,IAAI,IAAI,eAAe,KAAK,EAAE,SAAS,YAAY,MAAM,EAAE,CAAC;EACrF,MAAM,gBAAgB,QAAQ,QAAQ,QAAQ,CAAC,iBAAiB,IAAI,IAAI,QAAQ,EAAE,CAAC;EACnF,IAAI,cAAc,SAAS,GAAG,MAAM,KAAK,WAAW,cAAc,YAAY,aAAa;EAC3F,KAAK,MAAM,CAAC,OAAO,SAAS,YAAY,gBAAgB,OAAO,GAE7D,MAAM,KAAK,YAAY,YAAY,MAAM,KAAK;CAElD;;CAGA,MAAc,cACZ,MACkD;EAClD,MAAM,SAAS,KAAK,KAAK,QAAQ,IAAI,OAAO;EAC5C,IAAI;GACF,OAAO,MAAM,KAAK,UAAU,QAAQ,MAAM;EAC5C,SAAS,OAAO;GACd,OAAO,OAAO,KAAK,WAAW;IAAE,SAAS;IAAO;GAAM,EAAE;EAC1D;CACF;;;;;CAMA,MAAM,QAAyB;EAC7B,IAAI,QAAQ;EACZ,KAAK,IAAI,aAAa,GAAG,aAAa,KAAK,QAAQ,YAAY,cAAc,GAAG;GAE9E,MAAM,UAAU,MAAM,KAAK,MAAM;GACjC,SAAS;GACT,IAAI,YAAY,GAAG;EACrB;EACA,OAAO;CACT;;;;;CAMA,MAAc,YACZ,YACA,MACA,OACe;EACf,MAAM,iBAAiB,gBAAgB,KAAK;EAC5C,MAAM,eACJ,iBAAiB,QAAQ,MAAM,UAAU;EAC3C,IAAI,mBAAmB,YAAY;GACjC,MAAM,KAAK,WAAW,YAAY,MAAM,YAAY,cAAc,KAAK;GACvE;EACF;EACA,MAAM,EAAE,eAAe,cAAc,KAAK,mBAAmB,IAAI;EACjE,MAAM,KAAK,WAAW,YAAY,eAAe,aAAa,cAAc,KAAK;EACjF,MAAM,KAAK,gBAAgB,YAAY,SAAS;CAClD;;CAGA,MAAc,gBAAgB,YAAoB,MAA+C;EAC/F,MAAM,MAAM,KAAK,IAAI,CAAC,CAAC,QAAQ;EAC/B,KAAK,MAAM,YAAY,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG;GAC/D,MAAM,UAAU,sBACd,KAAK,QAAQ,kBACb,KAAK,QAAQ,iBACb,QACF;GACA,MAAM,oBAAoB,KAAK,QAAQ,QAAQ,IAAI,aAAa,QAAQ;GAExE,MAAM,KAAK,WAAW,aAAa,YAAY,mBAAmB,IAAI,KAAK,MAAM,OAAO,CAAC;EAC3F;CACF;;CAGA,AAAQ,oBAAoB,MAAgC;EAC1D,OAAO;GACL,eAAe,KAAK,QAAQ,QAAQ,KAAK,iBAAiB,GAAG,CAAC;GAC9D,SAAS,KAAK,QAAQ,QAAQ,CAAC,KAAK,iBAAiB,GAAG,CAAC;EAC3D;CACF;;CAGA,AAAQ,mBAAmB,MAAgC;EACzD,OAAO;GACL,eAAe,KAAK,QAAQ,QAAQ,KAAK,cAAc,GAAG,CAAC;GAC3D,WAAW,KAAK,QAAQ,QAAQ,CAAC,KAAK,cAAc,GAAG,CAAC;EAC1D;CACF;;CAGA,AAAQ,iBAAiB,KAAyB;EAEhD,OAAO,IAAI,WAAW,KAAK,QAAQ;CACrC;;CAGA,AAAQ,cAAc,KAAyB;EAC7C,OAAO,IAAI,YAAY,KAAK,QAAQ;CACtC;;CAGA,MAAc,WACZ,YACA,MACA,QACA,cACA,OACe;EACf,IAAI,KAAK,WAAW,GAAG;EACvB,MAAM,KAAK,WAAW,WAAW,YAAY,MAAM,QAAQ,YAAY;EACvE,OAAO,MAAM,sBAAsB;GACjC,OAAO;GACP;GACA,OAAO,KAAK;GACZ;EACF,CAAC;CACH;AACF;;AAGA,SAAS,YACP,gBACA,MAC2B;CAC3B,MAAM,eAAe,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC,IAAI,QAAQ,IAAI,GAAG,CAAC,CAAC;CACrE,MAAM,yBAAS,IAAI,IAA0B;CAC7C,KAAK,MAAM,EAAE,SAAS,OAAO,WAAW,gBAAgB;EACtD,MAAM,MAAM,aAAa,IAAI,MAAM,EAAE;EACrC,IAAI,QAAQ,QAAW;EACvB,MAAM,QAAQ,OAAO,IAAI,KAAK,KAAK,CAAC;EACpC,MAAM,KAAK,GAAG;EACd,OAAO,IAAI,OAAO,KAAK;CACzB;CACA,OAAO;AACT;;;;;AC7KA,IAAa,kBAAb,MAA6B;CAIR;CAHnB,AAAiB;CAEjB,YACE,AAAiB,YACjB,UAAkC,CAAC,GACnC;EAFiB;EAGjB,KAAK,UAAU;GACb,sBAAsB,QAAQ,wBAAwB;GACtD,mBAAmB,QAAQ,qBAAqB;GAChD,oBAAoB,QAAQ,sBAAsB;GAClD,WAAW,QAAQ,aAAa;GAChC,YAAY,QAAQ,cAAc;EACpC;CACF;;CAGA,MAAM,MAAM,IAA0C;EACpD,MAAM,EAAE,sBAAsB,mBAAmB,uBAAuB,KAAK;EAU7E,OAAO;GAAE,iBATe,KAAK,eAAe,SAC1C,KAAK,WAAW,sBAAsB,IAAI,KAAK,GAAG,QAAQ,IAAI,oBAAoB,GAAG,IAAI,CAC3F;GAOoB,cANC,KAAK,eAAe,SACvC,KAAK,WAAW,mBAAmB,IAAI,KAAK,GAAG,QAAQ,IAAI,iBAAiB,GAAG,IAAI,CACrF;GAI4B,gBAHL,KAAK,eAAe,SACzC,KAAK,WAAW,qBAAqB,IAAI,KAAK,GAAG,QAAQ,IAAI,kBAAkB,GAAG,IAAI,CACxF;EACqC;CACvC;CAEA,MAAc,cAAc,aAAiE;EAC3F,IAAI,QAAQ;EACZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,YAAY,SAAS,GAAG;GAE/D,MAAM,UAAU,MAAM,YAAY,KAAK,QAAQ,SAAS;GACxD,SAAS;GACT,IAAI,UAAU,KAAK,QAAQ,WAAW;EACxC;EACA,OAAO;CACT;AACF;;;;;AChCA,IAAa,aAAb,MAAiE;CAClC;CAA7B,YAAY,AAAiB,MAAiC;EAAjC;CAAkC;CAE/D,MAAM,IAAO,WAAsB,MAAgD;EACjF,MAAM,EAAE,aAAa,cAAc,oBAAoB,gBAAgB,UAAU,KAAK;EACtF,IAAI,UAAU;EAEd,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,YAAY,YAAY,OAAO,OAAO;IAClD,MAAM,QAAQ,aAAa,EAAE;IAC7B,MAAM,MAAM,MAAM,SAAS;IAE3B,MAAM,SAAS,MAAM,KADP,mBAAmB,EACH,CAAC;IAC/B,MAAM,UAAU,eAAe,QAAQ;IACvC,MAAM,MAAM,cAAc,OAAO;IACjC,UAAU,QAAQ;IAClB,OAAO;GACT,CAAC;EACH,SAAS,OAAO;GACd,MAAM,6BAA6B,KAAK,OAAO,SAAS,KAAK;EAC/D;EAEA,IAAI,UAAU,GAAG,MAAM,KAAK;EAC5B,OAAO;CACT;AACF;;;;;ACnDA,IAAa,+BAAb,cAAkD,SAAS;CACzD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,kCAAkC;CAC1C;AACF"}

package/dist/client-Dv1Ch7yY.js

@@ -1,20 +0,0 @@
-import Stripe from "stripe";
-
-//#region src/infrastructure/stripe/client.ts
-/** Default SDK retries; client configuration and individual requests can override this value. */
-const STRIPE_REQUEST_OPTIONS = Object.freeze({ maxNetworkRetries: 2 });
-/**
-* Construct a native Stripe client with fetch transport and two SDK retries by default.
-* Native configuration overrides these defaults. Inject the client into application services.
-*/
-function createStripeClient(secretKey, options = {}) {
-	return new Stripe(secretKey, {
-		httpClient: Stripe.createFetchHttpClient(),
-		...STRIPE_REQUEST_OPTIONS,
-		...options
-	});
-}
-
-//#endregion
-export { createStripeClient as n, STRIPE_REQUEST_OPTIONS as t };
-//# sourceMappingURL=client-Dv1Ch7yY.js.map

package/dist/client-Dv1Ch7yY.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-Dv1Ch7yY.js","names":[],"sources":["../src/infrastructure/stripe/client.ts"],"sourcesContent":["import Stripe from 'stripe'\n\n/** Default SDK retries; client configuration and individual requests can override this value. */\nexport const STRIPE_REQUEST_OPTIONS = Object.freeze({ maxNetworkRetries: 2 })\n\n/**\n * Construct a native Stripe client with fetch transport and two SDK retries by default.\n * Native configuration overrides these defaults. Inject the client into application services.\n */\nexport function createStripeClient(secretKey: string, options: Stripe.StripeConfig = {}): Stripe {\n  return new Stripe(secretKey, {\n    httpClient: Stripe.createFetchHttpClient(),\n    ...STRIPE_REQUEST_OPTIONS,\n    ...options,\n  })\n}\n"],"mappings":";;;;AAGA,MAAa,yBAAyB,OAAO,OAAO,EAAE,mBAAmB,EAAE,CAAC;;;;;AAM5E,SAAgB,mBAAmB,WAAmB,UAA+B,CAAC,GAAW;CAC/F,OAAO,IAAI,OAAO,WAAW;EAC3B,YAAY,OAAO,sBAAsB;EACzC,GAAG;EACH,GAAG;CACL,CAAC;AACH"}