better-ship 0.5.0 → 0.7.0

package/src/{application → core}/messages.ts

@@ -8,24 +8,24 @@
 export type MessageId = string
 
 /** An action to perform. One handler, returns a value. The product adds its payload. */
-export type Command<Name extends string = string> = {
+export type DomainCommand<Name extends string = string> = {
   readonly type: 'command'
   readonly name: Name
   readonly id: MessageId
 }
 
 /** A request for data. One handler, returns a value. No id: nothing claims a read. */
-export type Query<Name extends string = string> = {
+export type DomainQuery<Name extends string = string> = {
   readonly type: 'query'
   readonly name: Name
 }
 
 /** A fact that happened. Zero or more subscribers, returns nothing. The product adds its payload. */
-export type Event<Name extends string = string> = {
+export type DomainEvent<Name extends string = string> = {
   readonly type: 'event'
   readonly name: Name
   readonly id: MessageId
 }
 
 /** The routing fields the bus reads. `type` selects the table, `name` selects the slot. */
-export type Message = Command | Event | Query
+export type DomainMessage = DomainCommand | DomainEvent | DomainQuery

package/src/infrastructure/better-auth/options.ts

@@ -10,10 +10,12 @@ import {
   bearer,
   captcha,
   deviceAuthorization,
+  emailOTP,
   lastLoginMethod,
   magicLink,
   openAPI,
   type CloudflareTurnstileOptions,
+  type EmailOTPOptions,
   type LastLoginMethodOptions,
 } from 'better-auth/plugins'
 import { v7 as uuidv7 } from 'uuid'
@@ -22,12 +24,14 @@ import { createLogger } from '@/core'
 
 const logger = createLogger('auth')
 
-// Better Auth does not export its default captcha paths; keep them when adding magic-link requests.
-const MAGIC_LINK_CAPTCHA_ENDPOINTS = [
-  '/sign-up/email',
-  '/sign-in/email',
-  '/request-password-reset',
-  '/sign-in/magic-link',
+// Better Auth does not export its default captcha paths; keep them when adding email delivery endpoints.
+const DEFAULT_CAPTCHA_ENDPOINTS = ['/sign-up/email', '/sign-in/email', '/request-password-reset']
+const MAGIC_LINK_CAPTCHA_ENDPOINT = '/sign-in/magic-link'
+// Every OTP endpoint that sends an email, including the deprecated password-reset alias.
+const EMAIL_OTP_CAPTCHA_ENDPOINTS = [
+  '/email-otp/send-verification-otp',
+  '/email-otp/request-password-reset',
+  '/forget-password/email-otp',
 ]
 
 /**
@@ -57,6 +61,7 @@ export const authDefaults = {
 /** Configure built-in plugins with native options. Runtime auth requires captcha; lastLoginMethod is enabled unless explicitly disabled. */
 export type AuthPluginOptions = {
   readonly magicLink?: Parameters<typeof magicLink>[0]
+  readonly emailOTP?: EmailOTPOptions
   readonly anonymous?: NonNullable<Parameters<typeof anonymous>[0]>
   readonly captcha?: Omit<CloudflareTurnstileOptions, 'provider'>
   readonly lastLoginMethod?: false | NonNullable<Parameters<typeof lastLoginMethod>[0]>
@@ -91,6 +96,7 @@ export type AuthConfig = Omit<BetterAuthOptions, 'database' | 'plugins' | 'rateL
 
 type PluginTypes = {
   magicLink: ReturnType<typeof magicLink>
+  emailOTP: ReturnType<typeof emailOTP>
   anonymous: ReturnType<typeof anonymous>
   captcha: ReturnType<typeof captcha>
   lastLoginMethod: ReturnType<typeof lastLoginMethod<{}>>
@@ -119,6 +125,7 @@ type SelectedPlugins<Options extends AuthPluginOptions> = [
   ...SelectedPlugin<Options, 'lastLoginMethod'>,
   ...SelectedPlugin<Options, 'openAPI'>,
   ...SelectedPlugin<Options, 'magicLink'>,
+  ...SelectedPlugin<Options, 'emailOTP'>,
   ...SelectedPlugin<Options, 'anonymous'>,
   ...SelectedPlugin<Options, 'deviceAuthorization'>,
   ...SelectedPlugin<Options, 'bearer'>,
@@ -175,14 +182,28 @@ function buildPlugins<const Options extends AuthPluginOptions>(
   const plugins: BetterAuthPlugin[] = []
   if (options.captcha !== undefined) {
     const captchaOptions = { ...options.captcha }
-    if (options.magicLink !== undefined && captchaOptions.endpoints === undefined)
-      captchaOptions.endpoints = [...MAGIC_LINK_CAPTCHA_ENDPOINTS]
+    if (captchaOptions.endpoints === undefined) {
+      const endpoints = [...DEFAULT_CAPTCHA_ENDPOINTS]
+      if (options.magicLink !== undefined) endpoints.push(MAGIC_LINK_CAPTCHA_ENDPOINT)
+      if (options.emailOTP !== undefined) endpoints.push(...EMAIL_OTP_CAPTCHA_ENDPOINTS)
+      if (endpoints.length > DEFAULT_CAPTCHA_ENDPOINTS.length) captchaOptions.endpoints = endpoints
+    }
     plugins.push(captcha({ ...captchaOptions, provider: 'cloudflare-turnstile' }))
   }
   if (options.lastLoginMethod !== false) plugins.push(lastLoginMethod(options.lastLoginMethod))
   if (options.openAPI !== undefined) plugins.push(openAPI(options.openAPI))
   if (options.magicLink !== undefined)
     plugins.push(magicLink({ expiresIn: 300, ...options.magicLink }))
+  // Encrypted storage keeps resend reuse possible; an unsalted hash of a six-digit code protects nothing.
+  if (options.emailOTP !== undefined)
+    plugins.push(
+      emailOTP({
+        expiresIn: 300,
+        storeOTP: 'encrypted',
+        resendStrategy: 'reuse',
+        ...options.emailOTP,
+      }),
+    )
   if (options.anonymous !== undefined) plugins.push(anonymous(options.anonymous))
   if (options.deviceAuthorization !== undefined)
     plugins.push(deviceAuthorization(options.deviceAuthorization))

package/src/infrastructure/cloudflare/base-d1-repository.ts

@@ -1,6 +1,6 @@
 import type { BatchItem } from 'drizzle-orm/batch'
 
-import type { Event } from '@/application'
+import type { DomainEvent } from '@/core'
 
 import type { DrizzleSchema } from '../drizzle-schema.ts'
 import { eventCollector, stageD1Statement } from '../unit-of-work-context.ts'
@@ -9,7 +9,7 @@ import type { D1Db } from './d1-database-types.ts'
 
 /** A domain aggregate that accumulates events for the unit of work to drain. */
 export interface AggregateEvents {
-  collectEvents(): ReadonlyArray<Event>
+  collectEvents(): ReadonlyArray<DomainEvent>
   clearEvents(): void
 }
 

package/src/infrastructure/cloudflare/d1-message-store.ts

@@ -1,11 +1,7 @@
 import { eq } from 'drizzle-orm'
 
-import {
-  MessageAlreadyProcessedError,
-  type Event,
-  type IMessageStore,
-  type MessageId,
-} from '@/application'
+import { MessageAlreadyProcessedError, type IMessageStore, type MessageId } from '@/application'
+import type { DomainEvent } from '@/core'
 
 import type { DrizzleSchema } from '../drizzle-schema.ts'
 import { BaseD1Repository } from './base-d1-repository.ts'
@@ -30,7 +26,7 @@ export class D1MessageStore<Schema extends DrizzleSchema>
     this.stage(this.db.insert(processedMessages).values({ messageId }))
   }
 
-  async persistEvents(events: ReadonlyArray<Event>): Promise<void> {
+  async persistEvents(events: ReadonlyArray<DomainEvent>): Promise<void> {
     if (events.length === 0) return
     this.stage(
       this.db

package/src/infrastructure/cloudflare/d1-schema.ts

@@ -1,7 +1,7 @@
 import { sql } from 'drizzle-orm'
 import { index, integer, sqliteTable, text } from 'drizzle-orm/sqlite-core'
 
-import type { Event } from '@/application'
+import type { DomainEvent } from '@/core'
 
 /** One row per committed message. The primary key is the idempotency claim. */
 export const processedMessages = sqliteTable(
@@ -20,7 +20,7 @@ export const messageOutbox = sqliteTable(
   'message_outbox',
   {
     id: text('id').primaryKey(),
-    payload: text('payload', { mode: 'json' }).$type<Event>().notNull(),
+    payload: text('payload', { mode: 'json' }).$type<DomainEvent>().notNull(),
     createdAt: integer('created_at', { mode: 'timestamp' })
       .notNull()
       .$defaultFn(() => new Date()),

package/src/infrastructure/postgres/base-postgres-repository.ts

@@ -1,4 +1,4 @@
-import type { Event } from '@/application'
+import type { DomainEvent } from '@/core'
 
 import type { DrizzleSchema } from '../drizzle-schema.ts'
 import { eventCollector } from '../unit-of-work-context.ts'
@@ -7,7 +7,7 @@ import type { PostgresDbTransaction } from './postgres-database-types.ts'
 
 /** A domain aggregate that accumulates events for the unit of work to drain. */
 export interface AggregateEvents {
-  collectEvents(): ReadonlyArray<Event>
+  collectEvents(): ReadonlyArray<DomainEvent>
   clearEvents(): void
 }
 

package/src/infrastructure/postgres/postgres-message-store.ts

@@ -1,9 +1,5 @@
-import {
-  MessageAlreadyProcessedError,
-  type Event,
-  type IMessageStore,
-  type MessageId,
-} from '@/application'
+import { MessageAlreadyProcessedError, type IMessageStore, type MessageId } from '@/application'
+import type { DomainEvent } from '@/core'
 
 import type { DrizzleSchema } from '../drizzle-schema.ts'
 import type { PostgresDbTransaction } from './postgres-database-types.ts'
@@ -23,7 +19,7 @@ export class PostgresMessageStore<Schema extends DrizzleSchema> implements IMess
     if (claimed.length === 0) throw new MessageAlreadyProcessedError(messageId)
   }
 
-  async persistEvents(events: ReadonlyArray<Event>): Promise<void> {
+  async persistEvents(events: ReadonlyArray<DomainEvent>): Promise<void> {
     if (events.length === 0) return
     await this.db
       .insert(messageOutbox)

package/src/infrastructure/postgres/postgres-schema.ts

@@ -1,7 +1,7 @@
 import { isNull } from 'drizzle-orm'
 import { index, integer, jsonb, pgTable, text, timestamp } from 'drizzle-orm/pg-core'
 
-import type { Event } from '@/application'
+import type { DomainEvent } from '@/core'
 
 /** One row per committed message. The primary key is the idempotency claim. */
 export const processedMessages = pgTable('processed_messages', {
@@ -14,7 +14,7 @@ export const messageOutbox = pgTable(
   'message_outbox',
   {
     id: text('id').primaryKey(),
-    payload: jsonb('payload').$type<Event>().notNull(),
+    payload: jsonb('payload').$type<DomainEvent>().notNull(),
     createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
     availableAt: timestamp('available_at', { withTimezone: true }).notNull().defaultNow(),
     attempts: integer('attempts').notNull().default(0),

package/src/infrastructure/tanstack/index.ts

@@ -10,3 +10,4 @@ export {
   type AuthCookieSource,
   type ErrorMiddlewareOptions,
 } from './error.middleware.ts'
+export { getLastUsedLoginMethod } from './last-login-method.ts'

package/src/infrastructure/tanstack/last-login-method.ts

@@ -0,0 +1,13 @@
+import { getRequestHeaders } from '@tanstack/react-start/server'
+import { parseCookies } from 'better-auth/cookies'
+
+// Better Auth keeps the plugin default private; this is the value LastLoginMethodOptions.cookieName documents.
+const DEFAULT_COOKIE_NAME = 'better-auth.last_used_login_method'
+
+/**
+ * Read the method this browser last signed in with from the current request, for the sign-in loader on the server.
+ * Pass `cookieName` only when `integrations.lastLoginMethod.cookieName` is set. Returns `null` when the cookie is absent.
+ */
+export function getLastUsedLoginMethod(cookieName = DEFAULT_COOKIE_NAME): string | null {
+  return parseCookies(getRequestHeaders().get('cookie') ?? '').get(cookieName) ?? null
+}

package/src/infrastructure/unit-of-work-context.ts

@@ -3,9 +3,10 @@ import { AsyncLocalStorage } from 'node:async_hooks'
 import { panic } from 'better-result'
 import type { BatchItem } from 'drizzle-orm/batch'
 
-import { UnitOfWorkAlreadyActiveError, type Event, type IEventCollector } from '@/application'
+import { UnitOfWorkAlreadyActiveError, type IEventCollector } from '@/application'
+import type { DomainEvent } from '@/core'
 
-type UnitOfWorkContext = { readonly events: Event[] } & (
+type UnitOfWorkContext = { readonly events: DomainEvent[] } & (
   | { readonly database: 'd1'; readonly statements: BatchItem<'sqlite'>[] }
   | { readonly database: 'postgres' }
 )

package/dist/application-DEerezCl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"application-DEerezCl.js","names":[],"sources":["../src/application/message-already-processed.error.ts","../src/application/message-bus.ts","../src/application/unit-of-work.ts","../src/application/unit-of-work.errors.ts"],"sourcesContent":["import { AppError, DatabaseError } from '@/core'\n\nimport type { MessageId } from './messages.ts'\n\n/** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */\nexport class MessageAlreadyProcessedError extends AppError {\n  readonly _tag = 'MessageAlreadyProcessedError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly messageId: MessageId,\n    options?: { readonly cause: unknown },\n  ) {\n    super(`message ${messageId} already processed`, options)\n  }\n\n  /** Recognize only the processed-message primary key; preserve other failures unchanged at the call site. */\n  static from(cause: unknown, messageId: MessageId): MessageAlreadyProcessedError | undefined {\n    if (cause instanceof MessageAlreadyProcessedError) return cause\n    if (!(cause instanceof DatabaseError)) return undefined\n    const details = cause.details\n    const duplicate =\n      details.database === 'd1'\n        ? details.kind === 'unique' &&\n          details.table === 'processed_messages' &&\n          details.column === 'message_id'\n        : details.code === '23505' &&\n          details.table_name === 'processed_messages' &&\n          details.constraint_name === 'processed_messages_pkey'\n    if (!duplicate) return undefined\n    return new MessageAlreadyProcessedError(messageId, { cause })\n  }\n}\n","import { panic } from 'better-result'\n\nimport { createLogger, unreachable } from '@/core'\n\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { Command, Event, Message, Query } from './messages.ts'\nimport type { Handlers, MessageResult, RegistryMessage } from './registry.ts'\n\nconst logger = createLogger('message-bus')\n\n/** The port an entrypoint dispatches through. `AppDeps` names this as `IMessageBus<typeof registry>`. */\nexport interface IMessageBus<TRegistry extends Handlers<never>> {\n  handle<TMessage extends Message & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>>\n}\n\n/**\n * Routes one message to its slot. The bus opens no transaction and keeps no outbox:\n * a handler that writes opens the unit of work itself.\n */\nexport class MessageBus<Deps, TRegistry extends Handlers<Deps>> implements IMessageBus<TRegistry> {\n  constructor(\n    private readonly deps: Deps,\n    private readonly registry: TRegistry,\n  ) {}\n\n  /** Resolves to the handler's own value for a command or query, and to void for an event. */\n  async handle<TMessage extends Message & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>> {\n    // SAFETY: the slot for this name is what `MessageResult` names, and dispatch returns its value.\n    return (await this.dispatch(message)) as MessageResult<TMessage, TRegistry>\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- one table holds every slot's value; `handle` names it.\n  private dispatch(message: Message): Promise<unknown> {\n    if (message.type === 'command') return this.handleCommand(message)\n    if (message.type === 'query') return this.handleQuery(message)\n    if (message.type === 'event') return this.handleEvent(message)\n    // A message parsed at a boundary cannot reach here; one that does must not resolve silently.\n    return unreachable(message)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleCommand(command: Command): Promise<unknown> {\n    // `satisfies` proved the registry complete, so a missing slot is a broken registry object.\n    const handler = this.registry.commands[command.name]\n    if (handler === undefined) return panic(`No handler for command ${command.name}`)\n    logger.debug('handling_command', { name: command.name, id: command.id })\n    return handler(command, this.deps)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleQuery(query: Query): Promise<unknown> {\n    const handler = this.registry.queries[query.name]\n    if (handler === undefined) return panic(`No handler for query ${query.name}`)\n    return handler(query, this.deps)\n  }\n\n  /**\n   * Every subscriber runs to completion. One failure is rethrown as is. Several are thrown as\n   * one `AggregateError`. A `MessageAlreadyProcessedError` means that subscriber already committed on\n   * an earlier delivery, so it counts as delivered.\n   */\n  private async handleEvent(event: Event): Promise<void> {\n    const subscriptions = this.registry.events[event.name] ?? []\n    const outcomes = await Promise.allSettled(\n      subscriptions.map((subscription) => subscription(event, this.deps)),\n    )\n    const failures: unknown[] = []\n    for (const [subscriber, outcome] of outcomes.entries()) {\n      if (outcome.status === 'fulfilled') continue\n      if (outcome.reason instanceof MessageAlreadyProcessedError) {\n        // The bus swallows this error, so this line is the only record that the skip happened.\n        logger.info('duplicate_subscriber_ignored', { event: event.name, id: event.id, subscriber })\n        continue\n      }\n      failures.push(outcome.reason)\n    }\n    if (failures.length === 1) throw failures[0]\n    if (failures.length > 1) {\n      throw new AggregateError(failures, `${event.name}: ${failures.length} subscribers failed`)\n    }\n  }\n}\n","import type { IEventCollector } from './event-collector.ts'\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { IMessageStore } from './message-store.ts'\nimport type { MessageId } from './messages.ts'\nimport type { IOutboxRelay } from './outbox-relay.ts'\nimport type { ITransaction } from './transaction.ts'\n\n/**\n * Commits the processed-message record, repository writes, and emitted events together before resolving.\n * An existing record rejects with `MessageAlreadyProcessedError`; external effects must run through the outbox after commit.\n * Nested calls reject with `UnitOfWorkAlreadyActiveError`; independent concurrent calls are allowed.\n */\nexport interface IUnitOfWork<Repos> {\n  run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T>\n}\n\nexport type UnitOfWorkDeps<Tx, Repos> = {\n  readonly transaction: ITransaction<Tx>\n  /** The processed-messages and outbox repository for this transaction. */\n  readonly messageStore: (tx: Tx) => IMessageStore\n  /** Repositories participate in the current transaction. */\n  readonly createRepositories: (tx: Tx) => Repos\n  readonly eventCollector: IEventCollector\n  readonly relay: IOutboxRelay\n}\n\n/** The unit of work: the boundary, the repositories, the events. Every database call is a port. */\nexport class UnitOfWork<Tx, Repos> implements IUnitOfWork<Repos> {\n  constructor(private readonly deps: UnitOfWorkDeps<Tx, Repos>) {}\n\n  async run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T> {\n    const { transaction, messageStore, createRepositories, eventCollector, relay } = this.deps\n    let written = 0\n\n    let value: T\n    try {\n      value = await transaction.transaction(async (tx) => {\n        const store = messageStore(tx)\n        await store.claim(messageId)\n        const repos = createRepositories(tx)\n        const result = await work(repos)\n        const pending = eventCollector.collect()\n        await store.persistEvents(pending)\n        written = pending.length\n        return result\n      })\n    } catch (error) {\n      throw MessageAlreadyProcessedError.from(error, messageId) ?? error\n    }\n\n    if (written > 0) relay.wake()\n    return value\n  }\n}\n","import { AppError } from '@/core'\n\n/** A boundary was opened inside another. One message, one atomic scope. */\nexport class UnitOfWorkAlreadyActiveError extends AppError {\n  readonly _tag = 'UnitOfWorkAlreadyActiveError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('a unit of work is already active')\n  }\n}\n"],"mappings":";;;;;AAKA,IAAa,+BAAb,MAAa,qCAAqC,SAAS;CAK9C;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,WACT,SACA;EACA,MAAM,WAAW,UAAU,qBAAqB,OAAO;EAH9C;CAIX;;CAGA,OAAO,KAAK,OAAgB,WAAgE;EAC1F,IAAI,iBAAiB,8BAA8B,OAAO;EAC1D,IAAI,EAAE,iBAAiB,gBAAgB,OAAO;EAC9C,MAAM,UAAU,MAAM;EAStB,IAAI,EAPF,QAAQ,aAAa,OACjB,QAAQ,SAAS,YACjB,QAAQ,UAAU,wBAClB,QAAQ,WAAW,eACnB,QAAQ,SAAS,WACjB,QAAQ,eAAe,wBACvB,QAAQ,oBAAoB,4BAClB,OAAO;EACvB,OAAO,IAAI,6BAA6B,WAAW,EAAE,MAAM,CAAC;CAC9D;AACF;;;;ACxBA,MAAM,SAAS,aAAa,aAAa;;;;;AAazC,IAAa,aAAb,MAAkG;CAE7E;CACA;CAFnB,YACE,AAAiB,MACjB,AAAiB,UACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,OACJ,SAC6C;EAE7C,OAAQ,MAAM,KAAK,SAAS,OAAO;CACrC;CAGA,AAAQ,SAAS,SAAoC;EACnD,IAAI,QAAQ,SAAS,WAAW,OAAO,KAAK,cAAc,OAAO;EACjE,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAC7D,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAE7D,OAAO,YAAY,OAAO;CAC5B;CAGA,AAAQ,cAAc,SAAoC;EAExD,MAAM,UAAU,KAAK,SAAS,SAAS,QAAQ;EAC/C,IAAI,YAAY,QAAW,OAAO,MAAM,0BAA0B,QAAQ,MAAM;EAChF,OAAO,MAAM,oBAAoB;GAAE,MAAM,QAAQ;GAAM,IAAI,QAAQ;EAAG,CAAC;EACvE,OAAO,QAAQ,SAAS,KAAK,IAAI;CACnC;CAGA,AAAQ,YAAY,OAAgC;EAClD,MAAM,UAAU,KAAK,SAAS,QAAQ,MAAM;EAC5C,IAAI,YAAY,QAAW,OAAO,MAAM,wBAAwB,MAAM,MAAM;EAC5E,OAAO,QAAQ,OAAO,KAAK,IAAI;CACjC;;;;;;CAOA,MAAc,YAAY,OAA6B;EACrD,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,SAAS,CAAC;EAC3D,MAAM,WAAW,MAAM,QAAQ,WAC7B,cAAc,KAAK,iBAAiB,aAAa,OAAO,KAAK,IAAI,CAAC,CACpE;EACA,MAAM,WAAsB,CAAC;EAC7B,KAAK,MAAM,CAAC,YAAY,YAAY,SAAS,QAAQ,GAAG;GACtD,IAAI,QAAQ,WAAW,aAAa;GACpC,IAAI,QAAQ,kBAAkB,8BAA8B;IAE1D,OAAO,KAAK,gCAAgC;KAAE,OAAO,MAAM;KAAM,IAAI,MAAM;KAAI;IAAW,CAAC;IAC3F;GACF;GACA,SAAS,KAAK,QAAQ,MAAM;EAC9B;EACA,IAAI,SAAS,WAAW,GAAG,MAAM,SAAS;EAC1C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,GAAG,MAAM,KAAK,IAAI,SAAS,OAAO,oBAAoB;CAE7F;AACF;;;;;AC1DA,IAAa,aAAb,MAAiE;CAClC;CAA7B,YAAY,AAAiB,MAAiC;EAAjC;CAAkC;CAE/D,MAAM,IAAO,WAAsB,MAAgD;EACjF,MAAM,EAAE,aAAa,cAAc,oBAAoB,gBAAgB,UAAU,KAAK;EACtF,IAAI,UAAU;EAEd,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,YAAY,YAAY,OAAO,OAAO;IAClD,MAAM,QAAQ,aAAa,EAAE;IAC7B,MAAM,MAAM,MAAM,SAAS;IAE3B,MAAM,SAAS,MAAM,KADP,mBAAmB,EACH,CAAC;IAC/B,MAAM,UAAU,eAAe,QAAQ;IACvC,MAAM,MAAM,cAAc,OAAO;IACjC,UAAU,QAAQ;IAClB,OAAO;GACT,CAAC;EACH,SAAS,OAAO;GACd,MAAM,6BAA6B,KAAK,OAAO,SAAS,KAAK;EAC/D;EAEA,IAAI,UAAU,GAAG,MAAM,KAAK;EAC5B,OAAO;CACT;AACF;;;;;AClDA,IAAa,+BAAb,cAAkD,SAAS;CACzD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,kCAAkC;CAC1C;AACF"}

package/dist/core-CnwWj4MY.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core-CnwWj4MY.js","names":[],"sources":["../src/core/app-error.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/request.errors.ts","../src/core/problem-details.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/failure-classification.ts","../src/core/transport-classification.ts","../src/core/logger.ts"],"sourcesContent":["import type { FailureClassification } from './failure-classification.ts'\n\n/**\n * The base of every expected failure. A subclass declares its tag and its classification,\n * so no boundary has to guess what kind of failure it holds. A boundary tells our errors from\n * raw throws with `instanceof AppError`; a value that fails it was never judged.\n *\n * A `readonly` field with a literal initializer keeps the literal type, so\n * `readonly _tag = 'StoreUnavailable'` is enough for `Result` unions and `matchError`.\n */\nexport abstract class AppError extends Error {\n  abstract readonly _tag: string\n  abstract readonly classification: FailureClassification\n\n  override get name(): string {\n    return this._tag\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A protected operation requires a session that the caller did not provide. */\nexport class AuthenticationError extends AppError {\n  readonly _tag = 'AuthenticationError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Authentication required')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** HTTP 429 with a retry delay in seconds. A null delay means the response supplies no valid duration. */\nexport class RateLimitError extends AppError {\n  readonly _tag = 'RateLimitError'\n  readonly classification = 'transient'\n  readonly status = 429\n\n  constructor(readonly retryAfter: number | null) {\n    super('Too many requests')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** A presented session cookie no longer resolves; the application owns cleanup and redirect policy. */\nexport class StaleSessionError extends AppError {\n  readonly _tag = 'StaleSessionError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Session is no longer valid. Sign in again.')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** The authenticated caller cannot perform this operation. Ported from Porte's auth.errors.ts. */\nexport class NotAuthorizedError extends AppError {\n  readonly _tag = 'NotAuthorizedError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Not allowed')\n  }\n}\n","import { AppError } from './app-error.ts'\n\n/** Safe public replacement for an unknown failure, ported from Porte's internal.errors.ts. */\nexport class InternalServerError extends AppError {\n  readonly _tag = 'InternalServerError'\n  readonly classification = 'unknown'\n\n  constructor() {\n    super('Something went wrong')\n  }\n}\n\n/** Safe public replacement for a classified transient failure. */\nexport class ServiceUnavailableError extends AppError {\n  readonly _tag = 'ServiceUnavailableError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('Try again shortly')\n  }\n}\n","import { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport type { ValidationProblemError } from './problem-details.ts'\n\n/** One invalid value as a validator reports it: a message and a path of keys. */\nexport type ValidationIssue = {\n  readonly message: string\n  readonly path: readonly PropertyKey[]\n}\n\n/** Invalid user input, one entry per invalid value in the RFC 9457 shape. Technical failures use another error. */\nexport class ValidationError extends AppError {\n  readonly _tag = 'ValidationError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly errors: readonly ValidationProblemError[],\n    message = 'The request was not valid',\n  ) {\n    super(message)\n  }\n\n  /** Convert a Zod error. Each issue path becomes a JSON Pointer. */\n  static fromZod(error: z.ZodError, message?: string): ValidationError {\n    return ValidationError.fromIssues(error.issues, message)\n  }\n\n  /** Convert issues from any validator, such as issues TanStack serialized into an error message. */\n  static fromIssues(issues: readonly ValidationIssue[], message?: string): ValidationError {\n    return new ValidationError(\n      issues.map((issue) => ({ detail: issue.message, pointer: jsonPointer(issue.path) })),\n      message,\n    )\n  }\n}\n\n/** The server cannot parse the request syntax. */\nexport class MalformedRequestError extends AppError {\n  readonly _tag = 'MalformedRequestError'\n  readonly classification = 'terminal'\n\n  constructor(args: { cause: unknown }) {\n    super('The request was malformed', args)\n  }\n}\n\n/** No resource matches the requested HTTP path. */\nexport class ResourceNotFoundError extends AppError {\n  readonly _tag = 'ResourceNotFoundError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('Resource not found')\n  }\n}\n\n/** A WebSocket route received a request without an upgrade. */\nexport class UpgradeRequiredError extends AppError {\n  readonly _tag = 'UpgradeRequiredError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('WebSocket upgrade required')\n  }\n}\n\n/** The requested operation did not answer before its deadline. */\nexport class RequestTimeoutError extends AppError {\n  readonly _tag = 'RequestTimeoutError'\n  readonly classification = 'transient'\n\n  constructor() {\n    super('The request timed out')\n  }\n}\n\nconst readablePathSchema = z.array(z.union([z.string(), z.number()]))\n\n// A symbol step cannot be shown, so the pointer keeps only the steps a person can read.\nfunction jsonPointer(path: readonly PropertyKey[]): string {\n  const parsed = readablePathSchema.safeParse(path)\n  const steps = parsed.success ? parsed.data : []\n  if (steps.length === 0) return '#'\n  return `#/${steps.map((step) => String(step).replaceAll('~', '~0').replaceAll('/', '~1')).join('/')}`\n}\n","import { z } from 'zod'\n\n/**\n * The standard RFC 9457 body for a failed HTTP response.\n * The HTTP response status remains authoritative; extensions may add problem-specific data.\n * @see https://http.dev/problem-details\n */\nexport const ProblemDetailsSchema = z.looseObject({\n  /**\n   * Stable URI for the problem type; use `about:blank` when the HTTP status is sufficient.\n   * @example \"about:blank\"\n   */\n  type: z.string(),\n  /**\n   * Stable human-readable name for the problem type.\n   * @example \"Service Unavailable\"\n   */\n  title: z.string(),\n  /**\n   * Safe human-readable explanation for this occurrence; clients must not parse it.\n   * @example \"The service is unavailable.\"\n   */\n  detail: z.string().optional(),\n  /**\n   * URI reference for this occurrence; omit it when no correlation resource exists.\n   * @example \"/problems/occurrences/01K5F6Y7\"\n   */\n  instance: z.string().optional(),\n})\n\n/** An RFC 9457 problem body for a failed HTTP response. */\nexport type ProblemDetails = z.infer<typeof ProblemDetailsSchema>\n\n/** One invalid value in a `422` validation problem. */\nexport const ValidationProblemErrorSchema = z.object({\n  /**\n   * Safe explanation of why this value is invalid.\n   * @example \"Must be a positive integer.\"\n   */\n  detail: z.string(),\n  /**\n   * RFC 6901 JSON Pointer fragment for the invalid value.\n   * @example \"#/age\"\n   */\n  pointer: z.string().regex(/^#(?:\\/(?:[^~]|~[01])*)*$/u),\n})\n\n/** One invalid value in a `422` validation problem. */\nexport type ValidationProblemError = z.infer<typeof ValidationProblemErrorSchema>\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport const ValidationProblemDetailsSchema = ProblemDetailsSchema.extend({\n  errors: z.array(ValidationProblemErrorSchema).min(1),\n})\n\n/** An RFC 9457 validation problem with one or more invalid content values. */\nexport type ValidationProblemDetails = z.infer<typeof ValidationProblemDetailsSchema>\n","import { panic } from 'better-result'\nimport { z } from 'zod'\n\nimport { AppError } from './app-error.ts'\nimport { AuthenticationError } from './authentication.error.ts'\nimport { InternalServerError, ServiceUnavailableError } from './internal.errors.ts'\nimport { NotAuthorizedError } from './not-authorized.error.ts'\nimport { ValidationProblemErrorSchema } from './problem-details.ts'\nimport { RateLimitError } from './rate-limit.error.ts'\nimport {\n  MalformedRequestError,\n  RequestTimeoutError,\n  ResourceNotFoundError,\n  UpgradeRequiredError,\n  ValidationError,\n} from './request.errors.ts'\nimport { StaleSessionError } from './stale-session.error.ts'\n\ntype PublicFields = z.ZodObject\n\n/**\n * One public error: its class, its HTTP status, and the extra properties a client may read.\n * `fields` strips the thrown error on the server and parses the payload in the browser.\n */\nexport type ErrorEntry<Tag extends string, Fields extends PublicFields = PublicFields> = {\n  readonly error: abstract new (...args: never[]) => AppError & { readonly _tag: Tag }\n  readonly status: number\n  readonly fields?: Fields\n}\n\ntype AnyErrorEntry = ErrorEntry<string>\n\n/** Entries keyed by tag. The compiler rejects a key that differs from the class's `_tag`. */\nexport type ErrorEntries<Entries> = {\n  readonly [Tag in keyof Entries & string]: ErrorEntry<Tag>\n}\n\ntype EntryPayload<Tag extends string, Entry> = Entry extends {\n  readonly fields: infer Fields extends z.ZodType\n}\n  ? { readonly _tag: Tag; readonly message: string } & z.output<Fields>\n  : { readonly _tag: Tag; readonly message: string }\n\ntype PayloadOfEntries<Entries> = {\n  [Tag in keyof Entries & string]: EntryPayload<Tag, Entries[Tag]>\n}[keyof Entries & string]\n\n/** The HTTP status and public payload for one resolved failure. */\nexport type ResolvedError<Payload> = {\n  readonly status: number\n  readonly payload: Payload\n}\n\n/**\n * One application's public errors, shared by every transport boundary and the browser.\n * `resolve` and `fallback` serve boundaries. `parse` and `generic` serve screens.\n */\nexport type ErrorTable<Entries> = {\n  readonly entries: Entries\n  /** The discriminated union of every entry's `_tag`, `message`, and fields. */\n  readonly payloadSchema: z.ZodType<PayloadOfEntries<Entries>>\n  /** The `InternalServerError` payload, for screens that must show something. */\n  readonly generic: PayloadOfEntries<Entries>\n  /** Read a rejection value. Null means no known tag, so the request never reached the Worker. */\n  parse(cause: unknown): PayloadOfEntries<Entries> | null\n  /** Narrow a rejection value to one tag's payload, for a caller that acts on that one error. */\n  is<Tag extends keyof Entries & string>(\n    cause: unknown,\n    tag: Tag,\n  ): cause is Extract<PayloadOfEntries<Entries>, { readonly _tag: Tag }>\n  /** Match a local instance or a remote error by tag. Null means the failure is not public. */\n  resolve(cause: unknown): ResolvedError<PayloadOfEntries<Entries>> | null\n  /** The replacement for an unmapped failure: 503 when it declared itself transient, else 500. */\n  fallback(cause: unknown): ResolvedError<PayloadOfEntries<Entries>>\n}\n\n/** The union of payloads a table can produce. */\nexport type ErrorPayloadOf<Table> =\n  Table extends ErrorTable<infer Entries> ? PayloadOfEntries<Entries> : never\n\n/** The union of tags a table contains. */\nexport type ErrorTagOf<Table> =\n  Table extends ErrorTable<infer Entries> ? keyof Entries & string : never\n\nfunction entriesOf<const Entries extends ErrorEntries<Entries>>(entries: Entries): Entries {\n  return entries\n}\n\nconst ValidationFields = z.object({ errors: z.array(ValidationProblemErrorSchema) })\nconst RateLimitFields = z.object({ retryAfter: z.number().nullable() })\n\n/** The errors every application can throw, with their statuses. `defineErrors` includes them. */\nexport const sharedErrors = entriesOf({\n  MalformedRequestError: { error: MalformedRequestError, status: 400 },\n  AuthenticationError: { error: AuthenticationError, status: 401 },\n  StaleSessionError: { error: StaleSessionError, status: 401 },\n  NotAuthorizedError: { error: NotAuthorizedError, status: 403 },\n  ResourceNotFoundError: { error: ResourceNotFoundError, status: 404 },\n  ValidationError: { error: ValidationError, status: 422, fields: ValidationFields },\n  UpgradeRequiredError: { error: UpgradeRequiredError, status: 426 },\n  RateLimitError: { error: RateLimitError, status: 429, fields: RateLimitFields },\n  InternalServerError: { error: InternalServerError, status: 500 },\n  ServiceUnavailableError: { error: ServiceUnavailableError, status: 503 },\n  RequestTimeoutError: { error: RequestTimeoutError, status: 504 },\n})\n\ntype MergedEntries<Entries> = Omit<typeof sharedErrors, keyof Entries> & Entries\n\n// Workers RPC drops the prototype but keeps own properties and marks the error as remote.\nconst RemoteErrorSchema = z.object({\n  _tag: z.string(),\n  message: z.string(),\n  remote: z.literal(true),\n})\n\ntype Match = { readonly tag: string; readonly entry: AnyErrorEntry; readonly error: Error }\n\nfunction match(byTag: ReadonlyMap<string, AnyErrorEntry>, cause: unknown): Match | null {\n  if (cause instanceof AppError) {\n    const entry = byTag.get(cause._tag)\n    if (entry === undefined || !(cause instanceof entry.error)) return null\n    return { tag: cause._tag, entry, error: cause }\n  }\n  if (!(cause instanceof Error)) return null\n  const remote = RemoteErrorSchema.safeParse(cause)\n  if (!remote.success) return null\n  const entry = byTag.get(remote.data._tag)\n  return entry === undefined ? null : { tag: remote.data._tag, entry, error: cause }\n}\n\n/**\n * Build the application's error table. The shared entries are always included;\n * an entry with the same key replaces the shared one.\n */\nexport function defineErrors<const Entries extends ErrorEntries<Entries>>(\n  entries: Entries,\n): ErrorTable<MergedEntries<Entries>> {\n  type Payload = PayloadOfEntries<MergedEntries<Entries>>\n  const merged = { ...sharedErrors, ...entries }\n  const byTag: ReadonlyMap<string, AnyErrorEntry> = new Map(Object.entries<AnyErrorEntry>(merged))\n\n  const resolve = (cause: unknown): ResolvedError<Payload> | null => {\n    const found = match(byTag, cause)\n    if (found === null) return null\n    const fields = found.entry.fields?.safeParse(found.error)\n    if (fields !== undefined && !fields.success) return null\n    // SAFETY: The entry's own `fields` schema produced these properties, so the payload has the shape declared for this tag.\n    const payload = { _tag: found.tag, message: found.error.message, ...fields?.data } as Payload\n    return { status: found.entry.status, payload }\n  }\n\n  const resolveShared = (error: AppError): ResolvedError<Payload> =>\n    resolve(error) ?? panic(`Error table cannot resolve shared error ${error._tag}`)\n  const generic = resolveShared(new InternalServerError())\n  const unavailable = resolveShared(new ServiceUnavailableError())\n\n  const variants = [...byTag].map(([tag, entry]) =>\n    // oxlint-disable-next-line anti-slop/no-shape-in-symbol-names -- Zod names an object schema's property map `shape`.\n    z.strictObject({ _tag: z.literal(tag), message: z.string(), ...entry.fields?.shape }),\n  )\n  const [first, ...rest] = variants\n  if (first === undefined) return panic('Error table has no entries')\n  // Each variant is one entry's `_tag`, `message`, and fields, which is the union `PayloadOfEntries` describes.\n  const payloadSchema = z.discriminatedUnion('_tag', [first, ...rest]).pipe(z.custom<Payload>())\n\n  // No return annotation: TypeScript resolves the deferred payload union differently in that position.\n  const parse = (cause: unknown) => {\n    const parsed = payloadSchema.safeParse(cause)\n    return parsed.success ? parsed.data : null\n  }\n\n  return {\n    entries: merged,\n    payloadSchema,\n    generic: generic.payload,\n    parse,\n    is<Tag extends keyof MergedEntries<Entries> & string>(\n      cause: unknown,\n      tag: Tag,\n    ): cause is Extract<Payload, { readonly _tag: Tag }> {\n      const parsed = parse(cause)\n      return parsed !== null && parsed._tag === tag\n    },\n    resolve,\n    fallback: (cause) =>\n      cause instanceof AppError && cause.classification === 'transient' ? unavailable : generic,\n  }\n}\n","import { AppError } from './app-error.ts'\nimport type { FailureClassification } from './failure-classification.ts'\n\n/** SQLite reports these constraint categories through D1. */\nexport type D1ConstraintKind = 'unique' | 'not_null' | 'foreign_key' | 'check'\n\n/** Database evidence for callers that interpret a specific code or constraint. */\nexport type DatabaseFailure =\n  | {\n      readonly database: 'd1'\n      readonly code: string | undefined\n      readonly kind: D1ConstraintKind | undefined\n      readonly table: string | undefined\n      readonly column: string | undefined\n      readonly constraintName: string | undefined\n    }\n  | {\n      readonly database: 'postgres'\n      readonly code: string | undefined\n      readonly table_name: string | undefined\n      readonly column_name: string | undefined\n      readonly constraint_name: string | undefined\n    }\n\n/** Classification describes the failure; callers must separately establish whether repetition is safe. */\nexport class DatabaseError extends AppError {\n  readonly _tag = 'DatabaseError'\n\n  constructor(\n    readonly operation: string,\n    readonly classification: FailureClassification,\n    readonly details: DatabaseFailure,\n    options: { readonly cause: unknown },\n  ) {\n    super(`Database operation failed: ${operation}`, options)\n  }\n}\n","import { panic } from 'better-result'\n\n/**\n * Mark a line the types say cannot run. A union member without a branch stops compilation here.\n *\n * @throws Panic when a value outside the union arrives at runtime.\n */\nexport function unreachable(value: never): never {\n  return panic(`Unreachable: ${String(value)}`)\n}\n\n/**\n * Mark a body that is not written yet. A defect, not an expected failure.\n *\n * @param what - The behavior the body will provide, such as `invoice export`.\n * @throws Panic always.\n */\nexport function notImplemented(what: string): never {\n  return panic(`Not implemented: ${what}`)\n}\n","/**\n * What one failure is, before any policy decides what to do about it.\n *\n * `transient`: the world may differ on the next attempt. `terminal`: repeating gives the\n * same answer. `unknown`: nobody judged this error, so it came from outside unwrapped.\n */\nexport type FailureClassification = 'transient' | 'terminal' | 'unknown'\n\n/**\n * Who is asking to repeat the work.\n *\n * An immediate owner holds a caller and a socket open. A durable owner already stored the\n * work, so it can afford to try again on a failure nobody classified.\n */\nexport type RetryOwner = 'immediate' | 'durable'\n\n/** Decide whether one retry owner may repeat a failed operation. */\nexport function shouldRetryFailure(args: {\n  readonly classification: FailureClassification\n  readonly repeatSafe: boolean\n  readonly owner: RetryOwner\n}): boolean {\n  if (!args.repeatSafe) return false\n  if (args.classification === 'transient') return true\n  if (args.classification === 'terminal') return false\n  return args.owner === 'durable'\n}\n","/**\n * Messages that the platform-neutral transports raise for a failure that may pass.\n *\n * A boundary that knows its own runtime adds its own patterns before these.\n */\nconst TRANSIENT_TRANSPORT_PATTERNS = [\n  /network/,\n  /fetch failed/,\n  /timeout/,\n  /timed?\\s*out/,\n  /connection.*(lost|reset|refused|closed|aborted)/,\n  /econnreset/,\n  /econnrefused/,\n  /etimedout/,\n  /eai_again/,\n]\n\n/** Cancellation is a decision, not a failure to repeat. */\nexport function isAbortError(cause: unknown): boolean {\n  return cause instanceof Error && cause.name === 'AbortError'\n}\n\n/** Match known transient transport messages while excluding explicit cancellation. */\nexport function isTransientTransportError(cause: unknown): boolean {\n  if (!(cause instanceof Error) || isAbortError(cause)) return false\n  const message = cause.message.toLowerCase()\n  return TRANSIENT_TRANSPORT_PATTERNS.some((pattern) => pattern.test(message))\n}\n","/**\n * Module-scoped logging for every host.\n *\n * A logger emits one plain-data entry per log. The default sink hands it to `console` as an\n * entry object for a log service or as a colored line for a person, selected at startup.\n */\n\n/** A value a log entry may carry. Errors enter only through `Logger.error`. */\nexport type LogValue =\n  | string\n  | number\n  | boolean\n  | null\n  | undefined\n  | ReadonlyArray<LogValue>\n  | LogFields\n\n/** Named log values. */\nexport type LogFields = { readonly [key: string]: LogValue }\n\n/**\n * The supported log severity levels, in ascending order.\n *\n * A const object, not an enum, so a parsed environment value typed `'INFO'` is a `LogLevel`.\n */\nexport const LogLevel = {\n  DEBUG: 'DEBUG',\n  INFO: 'INFO',\n  WARN: 'WARN',\n  ERROR: 'ERROR',\n} as const\nexport type LogLevel = (typeof LogLevel)[keyof typeof LogLevel]\n\n/** An error as plain data, including diagnostics, causes, and aggregate members. */\nexport type SerializedError = {\n  readonly name: string\n  readonly message: string\n  readonly stack?: string\n  readonly fields?: LogFields\n  readonly cause?: SerializedError\n  readonly errors?: ReadonlyArray<SerializedError>\n}\n\n/** One log, as the sink receives it. Plain data, safe to stringify. */\nexport type LogEntry = {\n  readonly timestamp: string\n  readonly level: LogLevel\n  readonly module: string\n  readonly message: string\n  readonly details: LogFields\n  readonly userId?: string\n  /** Present on `Logger.error` entries that carried an error. */\n  readonly error?: SerializedError\n}\n\n/** The context an error log carries. */\nexport type ErrorLogContext = {\n  readonly error?: unknown\n  readonly userId?: string\n  readonly details?: LogFields\n}\n\n/** What a logger lets through: a level and everything above it, or nothing. */\nexport type LogThreshold = LogLevel | 'OFF'\n\n/** Overrides the application settings for one logger. */\nexport interface LoggerConfig {\n  readonly level?: LogThreshold\n}\n\n/** `json` writes the entry object. `pretty` writes one readable line for a person. */\nexport type LogFormat = 'json' | 'pretty'\n\n/**\n * The application settings, set once at the composition root.\n *\n * An omitted field keeps its default. An explicit `undefined` is a compile error, so the root\n * parses an environment value before passing it. The logger reads no environment itself.\n */\nexport interface LoggerSettings extends LoggerConfig {\n  readonly format?: LogFormat\n}\n\n// The production server setting, so a root that never configures still logs safely.\nconst DEFAULT_SETTINGS: Required<LoggerSettings> = {\n  level: LogLevel.INFO,\n  format: 'json',\n}\n\n// The application configures once at startup; loggers can exist before startup completes.\nlet settings = DEFAULT_SETTINGS\n\n/**\n * Set application settings, including for existing loggers. Per-logger overrides take priority.\n * Call at startup, never per request. An omitted field resets to INFO and JSON output.\n */\nexport function configureLogger(config: LoggerSettings): void {\n  settings = {\n    level: config.level ?? DEFAULT_SETTINGS.level,\n    format: config.format ?? DEFAULT_SETTINGS.format,\n  }\n}\n\n/** The error data sent to the configured error hook. */\nexport interface ErrorCaptureEntry {\n  readonly error: unknown\n  readonly distinctId: string | undefined\n  readonly context: LogFields\n}\n\n/** A function that forwards one logged error to an error service. */\nexport type LoggerErrorHook = (entry: ErrorCaptureEntry) => void\n\n/** Where every log entry goes. */\nexport type LogSink = (entry: LogEntry) => void\n\nlet errorHook: LoggerErrorHook | null = null\n\n/**\n * Register the function that receives each logged error.\n *\n * Set once at the process entry point. A later call replaces the earlier hook.\n */\nexport function setLoggerErrorHook(fn: LoggerErrorHook): void {\n  errorHook = fn\n}\n\n// One console method per level, so a host that filters by method can tell them apart.\nconst CONSOLE_METHOD = {\n  [LogLevel.DEBUG]: 'debug',\n  [LogLevel.INFO]: 'info',\n  [LogLevel.WARN]: 'warn',\n  [LogLevel.ERROR]: 'error',\n} as const satisfies Record<LogLevel, 'debug' | 'info' | 'warn' | 'error'>\n\n// Built from the code point so no raw control character sits in the source.\nconst ESC = String.fromCharCode(27)\nconst ANSI_RESET = `${ESC}[0m`\nconst ANSI_GRAY = `${ESC}[90m`\nconst ANSI_BLUE = `${ESC}[34m`\n\n// Severity reads at a glance: quiet levels stay dim, and an error is the only bold line.\nconst LEVEL_ANSI = {\n  DEBUG: `${ESC}[2;36m`,\n  INFO: ANSI_BLUE,\n  WARN: `${ESC}[33m`,\n  ERROR: `${ESC}[1;31m`,\n} satisfies Record<LogLevel, string>\n\nfunction prettyLine(entry: LogEntry): string {\n  // Node prints debug and info exactly like log, so the level must be in the text too.\n  const level = `[${entry.level}]`\n  const module = `[${entry.module}]`\n  // A browser console colors by method on its own; a terminal needs ANSI to do the same.\n  if ('window' in globalThis) return `${entry.timestamp} ${level} ${module} ${entry.message}`\n  const timestamp = `${ANSI_GRAY}${entry.timestamp}${ANSI_RESET}`\n  const coloredLevel = `${LEVEL_ANSI[entry.level]}${level}${ANSI_RESET}`\n  const coloredModule = `${ANSI_BLUE}${module}${ANSI_RESET}`\n  return `${timestamp} ${coloredLevel} ${coloredModule} ${entry.message}`\n}\n\n/**\n * JSON format writes the entry object. Pretty format writes one line, then the details,\n * the error, and the stack as separate console arguments.\n */\nexport const consoleSink: LogSink = (entry) => {\n  // Resolved per call, so a console replaced after import still receives the output.\n  const write = console[CONSOLE_METHOD[entry.level]]\n  if (settings.format === 'json') {\n    write(entry)\n    return\n  }\n  const line = prettyLine(entry)\n  const fields =\n    entry.userId === undefined ? entry.details : { ...entry.details, userId: entry.userId }\n  const details = Object.keys(fields).length === 0 ? [] : [fields]\n  if (entry.error === undefined) {\n    write(line, ...details)\n    return\n  }\n  // A stack inside an object prints as one quoted string; as its own argument it prints as lines.\n  const { stack, ...error } = entry.error\n  if (stack === undefined) write(line, ...details, error)\n  else write(line, ...details, error, `\\n${stack}`)\n}\n\nlet logSink: LogSink = consoleSink\n\n/**\n * Send every log entry somewhere other than `console`.\n *\n * Set once at the process entry point, never per module. A logger is created\n * by name and nothing else, so its destination is a fact about the process.\n */\nexport function setLogSink(fn: LogSink): void {\n  logSink = fn\n}\n\nconst LOG_LEVELS = Object.values(LogLevel)\nconst MAX_ERROR_DEPTH = 3\n\n/**\n * Diagnostics worth keeping off an error, named one by one.\n *\n * An allowlist rather than every own property: an error raised by a library we\n * do not control may hang a request or a user payload off itself, and a log is\n * the wrong place to discover that. `_tag` and `classification` are what every `AppError`\n * declares. `remote` and the three flags after it are the ones workerd sets itself.\n */\nconst KEPT_ERROR_FIELDS = [\n  '_tag',\n  'classification',\n  'code',\n  'operation',\n  'status',\n  'statusCode',\n  'remote',\n  'retryable',\n  'overloaded',\n  'durableObjectReset',\n] as const\n\ntype ErrorDiagnostics = Error & { readonly [K in (typeof KEPT_ERROR_FIELDS)[number]]?: LogValue }\n\ntype MutableSerializedError = { -readonly [K in keyof SerializedError]: SerializedError[K] }\n\nconst serializeError = (error: Error, depth = 0): SerializedError => {\n  if (depth > MAX_ERROR_DEPTH) return { name: 'Error', message: '[error nesting truncated]' }\n\n  // Every field is optional, so an `Error` is already one of these.\n  const carrier: ErrorDiagnostics = error\n  const kept = KEPT_ERROR_FIELDS.filter((key) => carrier[key] !== undefined)\n  const serialized: MutableSerializedError = { name: error.name, message: error.message }\n  if (error.stack !== undefined) serialized.stack = error.stack\n  if (kept.length > 0)\n    serialized.fields = Object.fromEntries(kept.map((key) => [key, carrier[key]]))\n  if (error.cause instanceof Error) serialized.cause = serializeError(error.cause, depth + 1)\n  else if (error.cause !== undefined)\n    serialized.cause = { name: 'Error', message: '[non-error cause]' }\n  if (error instanceof AggregateError) {\n    // oxlint-disable-next-line anti-slop/no-unknown-parameters -- AggregateError accepts arbitrary values; instanceof Error validates each member.\n    serialized.errors = error.errors.map((failure: unknown) =>\n      failure instanceof Error\n        ? serializeError(failure, depth + 1)\n        : { name: 'NonError', message: '[non-error aggregate member]' },\n    )\n  }\n  return serialized\n}\n\n/** Write module-scoped logs with application defaults and optional overrides. */\nexport class Logger {\n  private readonly config: LoggerConfig\n\n  /** Create a logger for one module. */\n  constructor(\n    private readonly module: string,\n    overrideConfig?: LoggerConfig,\n  ) {\n    this.config = { ...overrideConfig }\n  }\n\n  private log(\n    level: LogLevel,\n    message: string,\n    details: LogFields,\n    error?: SerializedError,\n    userId?: string,\n  ): void {\n    const threshold = this.config.level ?? settings.level\n    if (threshold === 'OFF') return\n    if (LOG_LEVELS.indexOf(level) < LOG_LEVELS.indexOf(threshold)) return\n\n    let entry: LogEntry = {\n      timestamp: new Date().toISOString(),\n      level,\n      module: this.module,\n      message,\n      details,\n    }\n    if (userId !== undefined) entry = { ...entry, userId }\n    logSink(error === undefined ? entry : { ...entry, error })\n  }\n\n  /** Write a debug log. */\n  debug(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.DEBUG, message, details)\n  }\n\n  /** Write an information log. */\n  info(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.INFO, message, details)\n  }\n\n  /** Write a warning log. */\n  warn(message: string, details: LogFields = {}): void {\n    this.log(LogLevel.WARN, message, details)\n  }\n\n  /**\n   * Write an error log and send the error to the configured hook.\n   *\n   * The details say which call this was, and the error says what went wrong\n   * inside it. Both the entry and the error hook receive the supplied user ID.\n   */\n  error(message: string, context: ErrorLogContext = {}): void {\n    const details = context.details ?? {}\n    const thrown = context.error\n    let error: SerializedError | undefined\n    if (thrown instanceof Error) {\n      error = serializeError(thrown)\n    } else if (thrown !== undefined) {\n      // Not an `Error`, so there is no name or stack to keep, only its JSON form.\n      let json: string\n      try {\n        json = JSON.stringify(thrown)\n      } catch {\n        json = '[non-serializable error]'\n      }\n      error = { name: 'NonError', message: json }\n    }\n    this.log(LogLevel.ERROR, message, details, error, context.userId)\n\n    if (errorHook !== null && thrown !== undefined) {\n      errorHook({ error: thrown, distinctId: context.userId, context: details })\n    }\n  }\n}\n\n/** Create a logger for one module. */\nexport function createLogger(module: string, config?: LoggerConfig): Logger {\n  return new Logger(module, config)\n}\n"],"mappings":";;;;;;;;;;;;AAUA,IAAsB,WAAtB,cAAuC,MAAM;CAI3C,IAAa,OAAe;EAC1B,OAAO,KAAK;CACd;AACF;;;;;ACdA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,yBAAyB;CACjC;AACF;;;;;ACPA,IAAa,iBAAb,cAAoC,SAAS;CAKtB;CAJrB,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAC1B,AAAS,SAAS;CAElB,YAAY,AAAS,YAA2B;EAC9C,MAAM,mBAAmB;EADN;CAErB;AACF;;;;;ACRA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4CAA4C;CACpD;AACF;;;;;ACPA,IAAa,qBAAb,cAAwC,SAAS;CAC/C,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,aAAa;CACrB;AACF;;;;;ACPA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,sBAAsB;CAC9B;AACF;;AAGA,IAAa,0BAAb,cAA6C,SAAS;CACpD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,mBAAmB;CAC3B;AACF;;;;;ACRA,IAAa,kBAAb,MAAa,wBAAwB,SAAS;CAKjC;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,QACT,UAAU,6BACV;EACA,MAAM,OAAO;EAHJ;CAIX;;CAGA,OAAO,QAAQ,OAAmB,SAAmC;EACnE,OAAO,gBAAgB,WAAW,MAAM,QAAQ,OAAO;CACzD;;CAGA,OAAO,WAAW,QAAoC,SAAmC;EACvF,OAAO,IAAI,gBACT,OAAO,KAAK,WAAW;GAAE,QAAQ,MAAM;GAAS,SAAS,YAAY,MAAM,IAAI;EAAE,EAAE,GACnF,OACF;CACF;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YAAY,MAA0B;EACpC,MAAM,6BAA6B,IAAI;CACzC;AACF;;AAGA,IAAa,wBAAb,cAA2C,SAAS;CAClD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,oBAAoB;CAC5B;AACF;;AAGA,IAAa,uBAAb,cAA0C,SAAS;CACjD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,4BAA4B;CACpC;AACF;;AAGA,IAAa,sBAAb,cAAyC,SAAS;CAChD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,uBAAuB;CAC/B;AACF;AAEA,MAAM,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAGpE,SAAS,YAAY,MAAsC;CACzD,MAAM,SAAS,mBAAmB,UAAU,IAAI;CAChD,MAAM,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;CAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;CAC/B,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;AACpG;;;;;;;;;AC9EA,MAAa,uBAAuB,EAAE,YAAY;;;;;CAKhD,MAAM,EAAE,OAAO;;;;;CAKf,OAAO,EAAE,OAAO;;;;;CAKhB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;;;;;CAK5B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;AAChC,CAAC;;AAMD,MAAa,+BAA+B,EAAE,OAAO;;;;;CAKnD,QAAQ,EAAE,OAAO;;;;;CAKjB,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4BAA4B;AACxD,CAAC;;AAMD,MAAa,iCAAiC,qBAAqB,OAAO,EACxE,QAAQ,EAAE,MAAM,4BAA4B,CAAC,CAAC,IAAI,CAAC,EACrD,CAAC;;;;AC+BD,SAAS,UAAuD,SAA2B;CACzF,OAAO;AACT;AAEA,MAAM,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,EAAE,CAAC;AACnF,MAAM,kBAAkB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC;;AAGtE,MAAa,eAAe,UAAU;CACpC,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,mBAAmB;EAAE,OAAO;EAAmB,QAAQ;CAAI;CAC3D,oBAAoB;EAAE,OAAO;EAAoB,QAAQ;CAAI;CAC7D,uBAAuB;EAAE,OAAO;EAAuB,QAAQ;CAAI;CACnE,iBAAiB;EAAE,OAAO;EAAiB,QAAQ;EAAK,QAAQ;CAAiB;CACjF,sBAAsB;EAAE,OAAO;EAAsB,QAAQ;CAAI;CACjE,gBAAgB;EAAE,OAAO;EAAgB,QAAQ;EAAK,QAAQ;CAAgB;CAC9E,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;CAC/D,yBAAyB;EAAE,OAAO;EAAyB,QAAQ;CAAI;CACvE,qBAAqB;EAAE,OAAO;EAAqB,QAAQ;CAAI;AACjE,CAAC;AAKD,MAAM,oBAAoB,EAAE,OAAO;CACjC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,QAAQ,IAAI;AACxB,CAAC;AAID,SAAS,MAAM,OAA2C,OAA8B;CACtF,IAAI,iBAAiB,UAAU;EAC7B,MAAM,QAAQ,MAAM,IAAI,MAAM,IAAI;EAClC,IAAI,UAAU,UAAa,EAAE,iBAAiB,MAAM,QAAQ,OAAO;EACnE,OAAO;GAAE,KAAK,MAAM;GAAM;GAAO,OAAO;EAAM;CAChD;CACA,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,MAAM,SAAS,kBAAkB,UAAU,KAAK;CAChD,IAAI,CAAC,OAAO,SAAS,OAAO;CAC5B,MAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,IAAI;CACxC,OAAO,UAAU,SAAY,OAAO;EAAE,KAAK,OAAO,KAAK;EAAM;EAAO,OAAO;CAAM;AACnF;;;;;AAMA,SAAgB,aACd,SACoC;CAEpC,MAAM,SAAS;EAAE,GAAG;EAAc,GAAG;CAAQ;CAC7C,MAAM,QAA4C,IAAI,IAAI,OAAO,QAAuB,MAAM,CAAC;CAE/F,MAAM,WAAW,UAAkD;EACjE,MAAM,QAAQ,MAAM,OAAO,KAAK;EAChC,IAAI,UAAU,MAAM,OAAO;EAC3B,MAAM,SAAS,MAAM,MAAM,QAAQ,UAAU,MAAM,KAAK;EACxD,IAAI,WAAW,UAAa,CAAC,OAAO,SAAS,OAAO;EAEpD,MAAM,UAAU;GAAE,MAAM,MAAM;GAAK,SAAS,MAAM,MAAM;GAAS,GAAG,QAAQ;EAAK;EACjF,OAAO;GAAE,QAAQ,MAAM,MAAM;GAAQ;EAAQ;CAC/C;CAEA,MAAM,iBAAiB,UACrB,QAAQ,KAAK,KAAK,MAAM,2CAA2C,MAAM,MAAM;CACjF,MAAM,UAAU,cAAc,IAAI,oBAAoB,CAAC;CACvD,MAAM,cAAc,cAAc,IAAI,wBAAwB,CAAC;CAM/D,MAAM,CAAC,OAAO,GAAG,QAJA,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,WAErC,EAAE,aAAa;EAAE,MAAM,EAAE,QAAQ,GAAG;EAAG,SAAS,EAAE,OAAO;EAAG,GAAG,MAAM,QAAQ;CAAM,CAAC,CAEtD;CAChC,IAAI,UAAU,QAAW,OAAO,MAAM,4BAA4B;CAElE,MAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAgB,CAAC;CAG7F,MAAM,SAAS,UAAmB;EAChC,MAAM,SAAS,cAAc,UAAU,KAAK;EAC5C,OAAO,OAAO,UAAU,OAAO,OAAO;CACxC;CAEA,OAAO;EACL,SAAS;EACT;EACA,SAAS,QAAQ;EACjB;EACA,GACE,OACA,KACmD;GACnD,MAAM,SAAS,MAAM,KAAK;GAC1B,OAAO,WAAW,QAAQ,OAAO,SAAS;EAC5C;EACA;EACA,WAAW,UACT,iBAAiB,YAAY,MAAM,mBAAmB,cAAc,cAAc;CACtF;AACF;;;;;AClKA,IAAa,gBAAb,cAAmC,SAAS;CAI/B;CACA;CACA;CALX,AAAS,OAAO;CAEhB,YACE,AAAS,WACT,AAAS,gBACT,AAAS,SACT,SACA;EACA,MAAM,8BAA8B,aAAa,OAAO;EAL/C;EACA;EACA;CAIX;AACF;;;;;;;;;AC7BA,SAAgB,YAAY,OAAqB;CAC/C,OAAO,MAAM,gBAAgB,OAAO,KAAK,GAAG;AAC9C;;;;;;;AAQA,SAAgB,eAAe,MAAqB;CAClD,OAAO,MAAM,oBAAoB,MAAM;AACzC;;;;;ACFA,SAAgB,mBAAmB,MAIvB;CACV,IAAI,CAAC,KAAK,YAAY,OAAO;CAC7B,IAAI,KAAK,mBAAmB,aAAa,OAAO;CAChD,IAAI,KAAK,mBAAmB,YAAY,OAAO;CAC/C,OAAO,KAAK,UAAU;AACxB;;;;;;;;;ACrBA,MAAM,+BAA+B;CACnC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,SAAgB,aAAa,OAAyB;CACpD,OAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;;AAGA,SAAgB,0BAA0B,OAAyB;CACjE,IAAI,EAAE,iBAAiB,UAAU,aAAa,KAAK,GAAG,OAAO;CAC7D,MAAM,UAAU,MAAM,QAAQ,YAAY;CAC1C,OAAO,6BAA6B,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;AAC7E;;;;;;;;;ACFA,MAAa,WAAW;CACtB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;AACT;AAsDA,MAAM,mBAA6C;CACjD,OAAO,SAAS;CAChB,QAAQ;AACV;AAGA,IAAI,WAAW;;;;;AAMf,SAAgB,gBAAgB,QAA8B;CAC5D,WAAW;EACT,OAAO,OAAO,SAAS,iBAAiB;EACxC,QAAQ,OAAO,UAAU,iBAAiB;CAC5C;AACF;AAeA,IAAI,YAAoC;;;;;;AAOxC,SAAgB,mBAAmB,IAA2B;CAC5D,YAAY;AACd;AAGA,MAAM,iBAAiB;EACpB,SAAS,QAAQ;EACjB,SAAS,OAAO;EAChB,SAAS,OAAO;EAChB,SAAS,QAAQ;AACpB;AAGA,MAAM,MAAM,OAAO,aAAa,EAAE;AAClC,MAAM,aAAa,GAAG,IAAI;AAC1B,MAAM,YAAY,GAAG,IAAI;AACzB,MAAM,YAAY,GAAG,IAAI;AAGzB,MAAM,aAAa;CACjB,OAAO,GAAG,IAAI;CACd,MAAM;CACN,MAAM,GAAG,IAAI;CACb,OAAO,GAAG,IAAI;AAChB;AAEA,SAAS,WAAW,OAAyB;CAE3C,MAAM,QAAQ,IAAI,MAAM,MAAM;CAC9B,MAAM,SAAS,IAAI,MAAM,OAAO;CAEhC,IAAI,YAAY,YAAY,OAAO,GAAG,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM;CAIlF,OAAO,GAAG,GAHW,YAAY,MAAM,YAAY,aAG/B,GAAG,GAFC,WAAW,MAAM,SAAS,QAAQ,aAEtB,GAAG,GADd,YAAY,SAAS,aACO,GAAG,MAAM;AAChE;;;;;AAMA,MAAa,eAAwB,UAAU;CAE7C,MAAM,QAAQ,QAAQ,eAAe,MAAM;CAC3C,IAAI,SAAS,WAAW,QAAQ;EAC9B,MAAM,KAAK;EACX;CACF;CACA,MAAM,OAAO,WAAW,KAAK;CAC7B,MAAM,SACJ,MAAM,WAAW,SAAY,MAAM,UAAU;EAAE,GAAG,MAAM;EAAS,QAAQ,MAAM;CAAO;CACxF,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM;CAC/D,IAAI,MAAM,UAAU,QAAW;EAC7B,MAAM,MAAM,GAAG,OAAO;EACtB;CACF;CAEA,MAAM,EAAE,OAAO,GAAG,UAAU,MAAM;CAClC,IAAI,UAAU,QAAW,MAAM,MAAM,GAAG,SAAS,KAAK;MACjD,MAAM,MAAM,GAAG,SAAS,OAAO,KAAK,OAAO;AAClD;AAEA,IAAI,UAAmB;;;;;;;AAQvB,SAAgB,WAAW,IAAmB;CAC5C,UAAU;AACZ;AAEA,MAAM,aAAa,OAAO,OAAO,QAAQ;AACzC,MAAM,kBAAkB;;;;;;;;;AAUxB,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAMA,MAAM,kBAAkB,OAAc,QAAQ,MAAuB;CACnE,IAAI,QAAQ,iBAAiB,OAAO;EAAE,MAAM;EAAS,SAAS;CAA4B;CAG1F,MAAM,UAA4B;CAClC,MAAM,OAAO,kBAAkB,QAAQ,QAAQ,QAAQ,SAAS,MAAS;CACzE,MAAM,aAAqC;EAAE,MAAM,MAAM;EAAM,SAAS,MAAM;CAAQ;CACtF,IAAI,MAAM,UAAU,QAAW,WAAW,QAAQ,MAAM;CACxD,IAAI,KAAK,SAAS,GAChB,WAAW,SAAS,OAAO,YAAY,KAAK,KAAK,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;CAC/E,IAAI,MAAM,iBAAiB,OAAO,WAAW,QAAQ,eAAe,MAAM,OAAO,QAAQ,CAAC;MACrF,IAAI,MAAM,UAAU,QACvB,WAAW,QAAQ;EAAE,MAAM;EAAS,SAAS;CAAoB;CACnE,IAAI,iBAAiB,gBAEnB,WAAW,SAAS,MAAM,OAAO,KAAK,YACpC,mBAAmB,QACf,eAAe,SAAS,QAAQ,CAAC,IACjC;EAAE,MAAM;EAAY,SAAS;CAA+B,CAClE;CAEF,OAAO;AACT;;AAGA,IAAa,SAAb,MAAoB;CAKC;CAJnB,AAAiB;;CAGjB,YACE,AAAiB,QACjB,gBACA;EAFiB;EAGjB,KAAK,SAAS,EAAE,GAAG,eAAe;CACpC;CAEA,AAAQ,IACN,OACA,SACA,SACA,OACA,QACM;EACN,MAAM,YAAY,KAAK,OAAO,SAAS,SAAS;EAChD,IAAI,cAAc,OAAO;EACzB,IAAI,WAAW,QAAQ,KAAK,IAAI,WAAW,QAAQ,SAAS,GAAG;EAE/D,IAAI,QAAkB;GACpB,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;GAClC;GACA,QAAQ,KAAK;GACb;GACA;EACF;EACA,IAAI,WAAW,QAAW,QAAQ;GAAE,GAAG;GAAO;EAAO;EACrD,QAAQ,UAAU,SAAY,QAAQ;GAAE,GAAG;GAAO;EAAM,CAAC;CAC3D;;CAGA,MAAM,SAAiB,UAAqB,CAAC,GAAS;EACpD,KAAK,IAAI,SAAS,OAAO,SAAS,OAAO;CAC3C;;CAGA,KAAK,SAAiB,UAAqB,CAAC,GAAS;EACnD,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CAC1C;;CAGA,KAAK,SAAiB,UAAqB,CAAC,GAAS;EACnD,KAAK,IAAI,SAAS,MAAM,SAAS,OAAO;CAC1C;;;;;;;CAQA,MAAM,SAAiB,UAA2B,CAAC,GAAS;EAC1D,MAAM,UAAU,QAAQ,WAAW,CAAC;EACpC,MAAM,SAAS,QAAQ;EACvB,IAAI;EACJ,IAAI,kBAAkB,OACpB,QAAQ,eAAe,MAAM;OACxB,IAAI,WAAW,QAAW;GAE/B,IAAI;GACJ,IAAI;IACF,OAAO,KAAK,UAAU,MAAM;GAC9B,QAAQ;IACN,OAAO;GACT;GACA,QAAQ;IAAE,MAAM;IAAY,SAAS;GAAK;EAC5C;EACA,KAAK,IAAI,SAAS,OAAO,SAAS,SAAS,OAAO,QAAQ,MAAM;EAEhE,IAAI,cAAc,QAAQ,WAAW,QACnC,UAAU;GAAE,OAAO;GAAQ,YAAY,QAAQ;GAAQ,SAAS;EAAQ,CAAC;CAE7E;AACF;;AAGA,SAAgB,aAAa,QAAgB,QAA+B;CAC1E,OAAO,IAAI,OAAO,QAAQ,MAAM;AAClC"}

package/dist/index-B9Y1hVh6.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-B9Y1hVh6.d.ts","names":[],"sources":["../src/core/failure-classification.ts","../src/core/app-error.ts","../src/core/authentication.error.ts","../src/core/rate-limit.error.ts","../src/core/stale-session.error.ts","../src/core/not-authorized.error.ts","../src/core/internal.errors.ts","../src/core/problem-details.ts","../src/core/request.errors.ts","../src/core/error-table.ts","../src/core/database.error.ts","../src/core/defects.ts","../src/core/transport-classification.ts","../src/core/logger.ts"],"mappings":";;;;;;;;KAMY;;;;;;;KAQA;;iBAGI,mBAAmB;WACxB,gBAAgB;WAChB;WACA,OAAO;;;;;;;;;;;;uBCVI,iBAAiB;oBACnB;oBACA,gBAAgB;MAErB;;;;;cCXF,4BAA4B;WAC9B;WACA;EAET;;;;;cCJW,uBAAuB;WAKb;WAJZ;WACA;WACA;EAET,YAAqB;;;;;cCLV,0BAA0B;WAC5B;WACA;EAET;;;;;cCJW,2BAA2B;WAC7B;WACA;EAET;;;;;cCJW,4BAA4B;WAC9B;WACA;EAET;;;cAMW,gCAAgC;WAClC;WACA;EAET;;;;;;;;;cCVW,sBAAoB,EAAA;;;;;GAqB/B,EAAA,KAAA;;KAGU,iBAAiB,EAAE,aAAa;;cAG/B,8BAA4B,EAAA;;;GAWvC,EAAA,KAAA;;KAGU,yBAAyB,EAAE,aAAa;;cAGvC,gCAA8B,EAAA;;;;;;;;;GAEzC,EAAA,KAAA;;KAGU,2BAA2B,EAAE,aAAa;;;;KClD1C;WACD;WACA,eAAe;;;cAIb,wBAAwB;WAKxB,iBAAiB;WAJnB;WACA;EAET,YACW,iBAAiB,0BAC1B;;SAMK,QAAQ,OAAO,EAAE,UAAU,mBAAmB;;SAK9C,WAAW,iBAAiB,mBAAmB,mBAAmB;;;cAS9D,8BAA8B;WAChC;WACA;EAET,YAAY;IAAQ;;;;cAMT,8BAA8B;WAChC;WACA;EAET;;;cAMW,6BAA6B;WAC/B;WACA;EAET;;;cAMW,4BAA4B;WAC9B;WACA;EAET;;;;KCtDG,eAAe,EAAE;;;;;KAMV,WAAW,oBAAoB,eAAe,eAAe;WAC9D,wBAAwB,kBAAkB;aAAsB,MAAM;;WACtE;WACA,SAAS;;;KAMR,aAAa,uBACb,aAAa,mBAAmB,WAAW;KAGlD,aAAa,oBAAoB,SAAS;WACpC,cAAc,eAAe,EAAE;;WAE3B,MAAM;WAAc;IAAoB,EAAE,OAAO;WACjD,MAAM;WAAc;;KAE9B,iBAAiB,cACnB,aAAa,mBAAmB,aAAa,KAAK,QAAQ,eACrD;;KAGI,cAAc;WACf;WACA,SAAS;;;;;;KAOR,WAAW;WACZ,SAAS;;WAET,eAAe,EAAE,QAAQ,iBAAiB;;WAE1C,SAAS,iBAAiB;;EAEnC,MAAM,iBAAiB,iBAAiB;;EAExC,GAAG,kBAAkB,kBACnB,gBACA,KAAK,MACJ,SAAS,QAAQ,iBAAiB;aAAqB,MAAM;;;EAEhE,QAAQ,iBAAiB,cAAc,iBAAiB;;EAExD,SAAS,iBAAiB,cAAc,iBAAiB;;;KAI/C,eAAe,SACzB,cAAc,iBAAiB,WAAW,iBAAiB;;KAGjD,WAAW,SACrB,cAAc,iBAAiB,iBAAiB;;cAUrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAcR,cAAc,WAAW,YAAY,oBAAoB,WAAW;;;;;iBA4BzD,mBAAmB,gBAAgB,aAAa,UAC9D,SAAS,UACR,WAAW,cAAc;;;;KCpIhB;;KAGA;WAEG;WACA;WACA,MAAM;WACN;WACA;WACA;;WAGA;WACA;WACA;WACA;WACA;;;cAIF,sBAAsB;WAItB;WACA,gBAAgB;WAChB,SAAS;WALX;EAET,YACW,mBACA,gBAAgB,uBAChB,SAAS,iBAClB;aAAoB;;;;;;;;;;iBCzBR,YAAY;;;;;;;iBAUZ,eAAe;;;;iBCCf,aAAa;;iBAKb,0BAA0B;;;;;;;;;;KCf9B,0DAMR,cAAc,YACd;;KAGQ;YAAwB,cAAc;;;;;;;cAOrC;WACX;WACA;WACA;WACA;;KAEU,mBAAmB,uBAAuB;;KAG1C;WACD;WACA;WACA;WACA,SAAS;WACT,QAAQ;WACR,SAAS,cAAc;;;KAItB;WACD;WACA,OAAO;WACP;WACA;WACA,SAAS;WACT;;WAEA,QAAQ;;;KAIP;WACD;WACA;WACA,UAAU;;;KAIT,eAAe;;UAGV;WACN,QAAQ;;;KAIP;;;;;;;UAQK,uBAAuB;WAC7B,SAAS;;;;;;iBAgBJ,gBAAgB,QAAQ;;UAQvB;WACN;WACA;WACA,SAAS;;;KAIR,mBAAmB,OAAO;;KAG1B,WAAW,OAAO;;;;;;iBASd,mBAAmB,IAAI;;;;;cA0C1B,aAAa;;;;;;;iBA6BV,WAAW,IAAI;;cAyDlB;mBAKQ;mBAJF;;EAGjB,YACmB,gBACjB,iBAAiB;UAKX;;EAuBR,MAAM,iBAAiB,UAAS;;EAKhC,KAAK,iBAAiB,UAAS;;EAK/B,KAAK,iBAAiB,UAAS;;;;;;;EAU/B,MAAM,iBAAiB,UAAS;;;iBAyBlB,aAAa,gBAAgB,SAAS,eAAe"}

package/dist/index-Bdyh3_xC.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-Bdyh3_xC.d.ts","names":[],"sources":["../src/application/messages.ts","../src/application/handlers.ts","../src/application/message-store.ts","../src/application/registry.ts","../src/application/message-bus.ts","../src/application/outbox-relay.ts","../src/application/transaction.ts","../src/application/event-collector.ts","../src/application/unit-of-work.ts","../src/application/message-already-processed.error.ts","../src/application/unit-of-work.errors.ts"],"mappings":";;;;;;;;;KAOY;;KAGA,QAAQ;WACT;WACA,MAAM;WACN,IAAI;;;KAIH,MAAM;WACP;WACA,MAAM;;;KAIL,MAAM;WACP;WACA,MAAM;WACN,IAAI;;;KAIH,UAAU,UAAU,QAAQ;;;;;;;KCxB5B,eAAe,iBAAiB,SAAS,MAAM,UACzD,SAAS,UACT,MAAM,SACH,QAAQ;;;;;KAMD,aAAa,eAAe,OAAO,WAAW,UACxD,OAAO,QACP,MAAM,cACH,QAAQ;;KAGD,aAAa,eAAe,OAAO,SAAS,OAAO,QAAQ,MAAM,SAAS;;;;;;;UCfrE;;EAEf,MAAM,WAAW,YAAY;;EAE7B,cAAc,QAAQ,cAAc,SAAS;;;;;KCNnC,gBAAgB,iBAAiB,SAAS,oBAC1C,KAAK,YAAY,YAAY,eAAe,GAAG;;KAI/C,cAAc,eAAe,OAAO,yBACpC,KAAK,UAAU,YAAY,aAAa,GAAG;;;;;KAO3C,cAAc,eAAe,OAAO,oBACpC,KAAK,UAAU,aAAa,cAAc,aAAa,GAAG;;;;;;KAQ1D,gBAAgB,iBAAiB,SAAS,aAAa,WAAW;WACnE,UAAU,gBAAgB,QAAQ,UAAU,UAAU;WACtD,SAAS,cAAc,QAAQ,UAAU,QAAQ;WACjD,QAAQ,cAAc,QAAQ,UAAU,QAAQ;;KAKtD,KAAK;EAAU,OAAO,SAAS,SAAS,MAAM,OAAO;;KACrD,aAAa;EAAU,OAAO,OAAO,OAAO,MAAM,OAAO;;;;;;KAMlD,SAAS;WACV,UAAU,SAAS,eAAe,KAAK;WACvC,SAAS,SAAS,eAAe,KAAK;WACtC,QAAQ,SAAS,QAAQ,eAAe,cAAc,aAAa;;KAGzE,YAAY,UAAU,WAAW,QAAQ,aAAa,SAAS;KAE/D,oBAAoB,UACvB,YAAY,aAAa,iBAAiB,oBAAoB,iBAC1D,WAAW,QAAQ,eAAe;;KAI5B,gBAAgB,kBAAkB,mBAC1C,YAAY,yBACZ,YAAY,wBACZ,oBAAoB;KAEnB,UAAU,QAAQ,wBAAwB,oBAAoB,SAC/D,QAAQ,WAAW,QAAQ,OAAO,QAAQ;;KAIlC,cACV,iBAAiB,SACjB,kBAAkB,mBAChB,iBAAiB,UACjB,UAAU,uBAAuB,oBACjC,iBAAiB,QACf,UAAU,sBAAsB;;;;UC5DrB,YAAY,kBAAkB;EAC7C,OAAO,iBAAiB,UAAU,gBAAgB,YAChD,SAAS,WACR,QAAQ,cAAc,UAAU;;;;;;cAOxB,WAAW,MAAM,kBAAkB,SAAS,kBAAkB,YAAY;mBAElE;mBACA;EAFnB,YACmB,MAAM,MACN,UAAU;;EAIvB,OAAO,iBAAiB,UAAU,gBAAgB,YACtD,SAAS,WACR,QAAQ,cAAc,UAAU;UAM3B;UASA;UASA;;;;;;UAWM;;;;;;;;;UC5DC;EACf;;;;;;;;;UCDe,aAAa;EAC5B,YAAY,GAAG,OAAO,IAAI,OAAO,QAAQ,KAAK,QAAQ;;;;;UCHvC;EACf,KAAK,OAAO;EACZ,WAAW,cAAc;;;;;;;;;UCOV,YAAY;EAC3B,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;KAGhE,eAAe,IAAI;WACpB,aAAa,aAAa;;WAE1B,eAAe,IAAI,OAAO;;WAE1B,qBAAqB,IAAI,OAAO;WAChC,gBAAgB;WAChB,OAAO;;;cAIL,WAAW,IAAI,kBAAkB,YAAY;mBAC3B;EAA7B,YAA6B,MAAM,eAAe,IAAI;EAEhD,IAAI,GAAG,WAAW,WAAW,OAAO,OAAO,UAAU,QAAQ,KAAK,QAAQ;;;;;cCzBrE,qCAAqC;WAKrC,WAAW;WAJb;WACA;EAET,YACW,WAAW,WACpB;aAAqB;;;SAMhB,KAAK,gBAAgB,WAAW,YAAY;;;;;cCdxC,qCAAqC;WACvC;WACA;EAET"}

package/dist/unit-of-work-context-C7vz5OYS.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unit-of-work-context-C7vz5OYS.js","names":[],"sources":["../src/infrastructure/unit-of-work-context.ts"],"sourcesContent":["import { AsyncLocalStorage } from 'node:async_hooks'\n\nimport { panic } from 'better-result'\nimport type { BatchItem } from 'drizzle-orm/batch'\n\nimport { UnitOfWorkAlreadyActiveError, type Event, type IEventCollector } from '@/application'\n\ntype UnitOfWorkContext = { readonly events: Event[] } & (\n  | { readonly database: 'd1'; readonly statements: BatchItem<'sqlite'>[] }\n  | { readonly database: 'postgres' }\n)\n\n// One async scope isolates events and D1 statements and rejects nesting across both adapters.\nconst storage = new AsyncLocalStorage<UnitOfWorkContext>()\n\n/** Reject nested transactions before database work starts; preserve independent concurrent execution. */\nexport async function runWithUnitOfWorkContext<T>(\n  database: UnitOfWorkContext['database'],\n  work: () => Promise<T>,\n): Promise<T> {\n  if (storage.getStore() !== undefined) throw new UnitOfWorkAlreadyActiveError()\n  const context: UnitOfWorkContext =\n    database === 'd1' ? { database, events: [], statements: [] } : { database, events: [] }\n  return storage.run(context, work)\n}\n\n/** Inject this shared scope into the unit of work and expose its emitter to application handlers. */\nexport const eventCollector: IEventCollector = {\n  emit(event) {\n    currentContext().events.push(event)\n  },\n  collect() {\n    return [...currentContext().events]\n  },\n}\n\n/** Queue one native D1 statement for the active batch; other contexts cannot accept D1 writes. */\nexport function stageD1Statement(statement: BatchItem<'sqlite'>): void {\n  d1Context().statements.push(statement)\n}\n\n/** Read the active D1 batch in staging order for commit. */\nexport function collectD1Statements(): ReadonlyArray<BatchItem<'sqlite'>> {\n  return [...d1Context().statements]\n}\n\nfunction d1Context(): Extract<UnitOfWorkContext, { database: 'd1' }> {\n  const context = currentContext()\n  if (context.database !== 'd1') return panic('D1 statements require a D1 unit of work')\n  return context\n}\n\nfunction currentContext(): UnitOfWorkContext {\n  return storage.getStore() ?? panic('operation requires an active unit of work')\n}\n"],"mappings":";;;;;AAaA,MAAM,UAAU,IAAI,kBAAqC;;AAGzD,eAAsB,yBACpB,UACA,MACY;CACZ,IAAI,QAAQ,SAAS,MAAM,QAAW,MAAM,IAAI,6BAA6B;CAC7E,MAAM,UACJ,aAAa,OAAO;EAAE;EAAU,QAAQ,CAAC;EAAG,YAAY,CAAC;CAAE,IAAI;EAAE;EAAU,QAAQ,CAAC;CAAE;CACxF,OAAO,QAAQ,IAAI,SAAS,IAAI;AAClC;;AAGA,MAAa,iBAAkC;CAC7C,KAAK,OAAO;EACV,eAAe,CAAC,CAAC,OAAO,KAAK,KAAK;CACpC;CACA,UAAU;EACR,OAAO,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM;CACpC;AACF;;AAGA,SAAgB,iBAAiB,WAAsC;CACrE,UAAU,CAAC,CAAC,WAAW,KAAK,SAAS;AACvC;;AAGA,SAAgB,sBAA0D;CACxE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,UAAU;AACnC;AAEA,SAAS,YAA4D;CACnE,MAAM,UAAU,eAAe;CAC/B,IAAI,QAAQ,aAAa,MAAM,OAAO,MAAM,yCAAyC;CACrF,OAAO;AACT;AAEA,SAAS,iBAAoC;CAC3C,OAAO,QAAQ,SAAS,KAAK,MAAM,2CAA2C;AAChF"}

package/dist/unit-of-work-context-ml9L9cyY.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"unit-of-work-context-ml9L9cyY.d.ts","names":[],"sources":["../src/infrastructure/drizzle-schema.ts","../src/infrastructure/unit-of-work-context.ts"],"mappings":";;;;;;;KAKY,gBAAgB;;;;cCsBf,gBAAgB"}