better-ship 0.6.0 → 0.8.0

package/dist/{application-DjsQtpgw.js → application-DYfcAy-Q.js}

@@ -1,4 +1,4 @@
-import { N as AppError, a as createLogger, g as DatabaseError, h as unreachable } from "./core-Cx5SeyKV.js";
+import { E as DatabaseError, T as unreachable, U as AppError, a as createLogger } from "./core-DC_4pOrI.js";
 import { panic } from "better-result";
 
 //#region src/application/message-already-processed.error.ts
@@ -128,4 +128,4 @@ var UnitOfWorkAlreadyActiveError = class extends AppError {
 
 //#endregion
 export { MessageAlreadyProcessedError as i, UnitOfWork as n, MessageBus as r, UnitOfWorkAlreadyActiveError as t };
-//# sourceMappingURL=application-DjsQtpgw.js.map
+//# sourceMappingURL=application-DYfcAy-Q.js.map

package/dist/{application-DjsQtpgw.js.map → application-DYfcAy-Q.js.map}

@@ -1 +1 @@
-{"version":3,"file":"application-DjsQtpgw.js","names":[],"sources":["../src/application/message-already-processed.error.ts","../src/application/message-bus.ts","../src/application/unit-of-work.ts","../src/application/unit-of-work.errors.ts"],"sourcesContent":["import { AppError, DatabaseError, type MessageId } from '@/core'\n\n/** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */\nexport class MessageAlreadyProcessedError extends AppError {\n  readonly _tag = 'MessageAlreadyProcessedError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly messageId: MessageId,\n    options?: { readonly cause: unknown },\n  ) {\n    super(`message ${messageId} already processed`, options)\n  }\n\n  /** Recognize only the processed-message primary key; preserve other failures unchanged at the call site. */\n  static from(cause: unknown, messageId: MessageId): MessageAlreadyProcessedError | undefined {\n    if (cause instanceof MessageAlreadyProcessedError) return cause\n    if (!(cause instanceof DatabaseError)) return undefined\n    const details = cause.details\n    const duplicate =\n      details.database === 'd1'\n        ? details.kind === 'unique' &&\n          details.table === 'processed_messages' &&\n          details.column === 'message_id'\n        : details.code === '23505' &&\n          details.table_name === 'processed_messages' &&\n          details.constraint_name === 'processed_messages_pkey'\n    if (!duplicate) return undefined\n    return new MessageAlreadyProcessedError(messageId, { cause })\n  }\n}\n","import { panic } from 'better-result'\n\nimport {\n  createLogger,\n  unreachable,\n  type DomainCommand,\n  type DomainEvent,\n  type DomainMessage,\n  type DomainQuery,\n} from '@/core'\n\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { Handlers, MessageResult, RegistryMessage } from './registry.ts'\n\nconst logger = createLogger('message-bus')\n\n/** The port an entrypoint dispatches through. `AppDeps` names this as `IMessageBus<typeof registry>`. */\nexport interface IMessageBus<TRegistry extends Handlers<never>> {\n  handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>>\n}\n\n/**\n * Routes one message to its slot. The bus opens no transaction and keeps no outbox:\n * a handler that writes opens the unit of work itself.\n */\nexport class MessageBus<Deps, TRegistry extends Handlers<Deps>> implements IMessageBus<TRegistry> {\n  constructor(\n    private readonly deps: Deps,\n    private readonly registry: TRegistry,\n  ) {}\n\n  /** Resolves to the handler's own value for a command or query, and to void for an event. */\n  async handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>> {\n    // SAFETY: the slot for this name is what `MessageResult` names, and dispatch returns its value.\n    return (await this.dispatch(message)) as MessageResult<TMessage, TRegistry>\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- one table holds every slot's value; `handle` names it.\n  private dispatch(message: DomainMessage): Promise<unknown> {\n    if (message.type === 'command') return this.handleCommand(message)\n    if (message.type === 'query') return this.handleQuery(message)\n    if (message.type === 'event') return this.handleEvent(message)\n    // A message parsed at a boundary cannot reach here; one that does must not resolve silently.\n    return unreachable(message)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleCommand(command: DomainCommand): Promise<unknown> {\n    // `satisfies` proved the registry complete, so a missing slot is a broken registry object.\n    const handler = this.registry.commands[command.name]\n    if (handler === undefined) return panic(`No handler for command ${command.name}`)\n    logger.debug('handling_command', { name: command.name, id: command.id })\n    return handler(command, this.deps)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleQuery(query: DomainQuery): Promise<unknown> {\n    const handler = this.registry.queries[query.name]\n    if (handler === undefined) return panic(`No handler for query ${query.name}`)\n    return handler(query, this.deps)\n  }\n\n  /**\n   * Every subscriber runs to completion. One failure is rethrown as is. Several are thrown as\n   * one `AggregateError`. A `MessageAlreadyProcessedError` means that subscriber already committed on\n   * an earlier delivery, so it counts as delivered.\n   */\n  private async handleEvent(event: DomainEvent): Promise<void> {\n    const subscriptions = this.registry.events[event.name] ?? []\n    const outcomes = await Promise.allSettled(\n      subscriptions.map((subscription) => subscription(event, this.deps)),\n    )\n    const failures: unknown[] = []\n    for (const [subscriber, outcome] of outcomes.entries()) {\n      if (outcome.status === 'fulfilled') continue\n      if (outcome.reason instanceof MessageAlreadyProcessedError) {\n        // The bus swallows this error, so this line is the only record that the skip happened.\n        logger.info('duplicate_subscriber_ignored', { event: event.name, id: event.id, subscriber })\n        continue\n      }\n      failures.push(outcome.reason)\n    }\n    if (failures.length === 1) throw failures[0]\n    if (failures.length > 1) {\n      throw new AggregateError(failures, `${event.name}: ${failures.length} subscribers failed`)\n    }\n  }\n}\n","import type { MessageId } from '@/core'\n\nimport type { IEventCollector } from './event-collector.ts'\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { IMessageStore } from './message-store.ts'\nimport type { IOutboxRelay } from './outbox-relay.ts'\nimport type { ITransaction } from './transaction.ts'\n\n/**\n * Commits the processed-message record, repository writes, and emitted events together before resolving.\n * An existing record rejects with `MessageAlreadyProcessedError`; external effects must run through the outbox after commit.\n * Nested calls reject with `UnitOfWorkAlreadyActiveError`; independent concurrent calls are allowed.\n */\nexport interface IUnitOfWork<Repos> {\n  run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T>\n}\n\nexport type UnitOfWorkDeps<Tx, Repos> = {\n  readonly transaction: ITransaction<Tx>\n  /** The processed-messages and outbox repository for this transaction. */\n  readonly messageStore: (tx: Tx) => IMessageStore\n  /** Repositories participate in the current transaction. */\n  readonly createRepositories: (tx: Tx) => Repos\n  readonly eventCollector: IEventCollector\n  readonly relay: IOutboxRelay\n}\n\n/** The unit of work: the boundary, the repositories, the events. Every database call is a port. */\nexport class UnitOfWork<Tx, Repos> implements IUnitOfWork<Repos> {\n  constructor(private readonly deps: UnitOfWorkDeps<Tx, Repos>) {}\n\n  async run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T> {\n    const { transaction, messageStore, createRepositories, eventCollector, relay } = this.deps\n    let written = 0\n\n    let value: T\n    try {\n      value = await transaction.transaction(async (tx) => {\n        const store = messageStore(tx)\n        await store.claim(messageId)\n        const repos = createRepositories(tx)\n        const result = await work(repos)\n        const pending = eventCollector.collect()\n        await store.persistEvents(pending)\n        written = pending.length\n        return result\n      })\n    } catch (error) {\n      throw MessageAlreadyProcessedError.from(error, messageId) ?? error\n    }\n\n    if (written > 0) relay.wake()\n    return value\n  }\n}\n","import { AppError } from '@/core'\n\n/** A boundary was opened inside another. One message, one atomic scope. */\nexport class UnitOfWorkAlreadyActiveError extends AppError {\n  readonly _tag = 'UnitOfWorkAlreadyActiveError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('a unit of work is already active')\n  }\n}\n"],"mappings":";;;;;AAGA,IAAa,+BAAb,MAAa,qCAAqC,SAAS;CAK9C;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,WACT,SACA;EACA,MAAM,WAAW,UAAU,qBAAqB,OAAO;EAH9C;CAIX;;CAGA,OAAO,KAAK,OAAgB,WAAgE;EAC1F,IAAI,iBAAiB,8BAA8B,OAAO;EAC1D,IAAI,EAAE,iBAAiB,gBAAgB,OAAO;EAC9C,MAAM,UAAU,MAAM;EAStB,IAAI,EAPF,QAAQ,aAAa,OACjB,QAAQ,SAAS,YACjB,QAAQ,UAAU,wBAClB,QAAQ,WAAW,eACnB,QAAQ,SAAS,WACjB,QAAQ,eAAe,wBACvB,QAAQ,oBAAoB,4BAClB,OAAO;EACvB,OAAO,IAAI,6BAA6B,WAAW,EAAE,MAAM,CAAC;CAC9D;AACF;;;;AChBA,MAAM,SAAS,aAAa,aAAa;;;;;AAazC,IAAa,aAAb,MAAkG;CAE7E;CACA;CAFnB,YACE,AAAiB,MACjB,AAAiB,UACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,OACJ,SAC6C;EAE7C,OAAQ,MAAM,KAAK,SAAS,OAAO;CACrC;CAGA,AAAQ,SAAS,SAA0C;EACzD,IAAI,QAAQ,SAAS,WAAW,OAAO,KAAK,cAAc,OAAO;EACjE,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAC7D,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAE7D,OAAO,YAAY,OAAO;CAC5B;CAGA,AAAQ,cAAc,SAA0C;EAE9D,MAAM,UAAU,KAAK,SAAS,SAAS,QAAQ;EAC/C,IAAI,YAAY,QAAW,OAAO,MAAM,0BAA0B,QAAQ,MAAM;EAChF,OAAO,MAAM,oBAAoB;GAAE,MAAM,QAAQ;GAAM,IAAI,QAAQ;EAAG,CAAC;EACvE,OAAO,QAAQ,SAAS,KAAK,IAAI;CACnC;CAGA,AAAQ,YAAY,OAAsC;EACxD,MAAM,UAAU,KAAK,SAAS,QAAQ,MAAM;EAC5C,IAAI,YAAY,QAAW,OAAO,MAAM,wBAAwB,MAAM,MAAM;EAC5E,OAAO,QAAQ,OAAO,KAAK,IAAI;CACjC;;;;;;CAOA,MAAc,YAAY,OAAmC;EAC3D,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,SAAS,CAAC;EAC3D,MAAM,WAAW,MAAM,QAAQ,WAC7B,cAAc,KAAK,iBAAiB,aAAa,OAAO,KAAK,IAAI,CAAC,CACpE;EACA,MAAM,WAAsB,CAAC;EAC7B,KAAK,MAAM,CAAC,YAAY,YAAY,SAAS,QAAQ,GAAG;GACtD,IAAI,QAAQ,WAAW,aAAa;GACpC,IAAI,QAAQ,kBAAkB,8BAA8B;IAE1D,OAAO,KAAK,gCAAgC;KAAE,OAAO,MAAM;KAAM,IAAI,MAAM;KAAI;IAAW,CAAC;IAC3F;GACF;GACA,SAAS,KAAK,QAAQ,MAAM;EAC9B;EACA,IAAI,SAAS,WAAW,GAAG,MAAM,SAAS;EAC1C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,GAAG,MAAM,KAAK,IAAI,SAAS,OAAO,oBAAoB;CAE7F;AACF;;;;;AC/DA,IAAa,aAAb,MAAiE;CAClC;CAA7B,YAAY,AAAiB,MAAiC;EAAjC;CAAkC;CAE/D,MAAM,IAAO,WAAsB,MAAgD;EACjF,MAAM,EAAE,aAAa,cAAc,oBAAoB,gBAAgB,UAAU,KAAK;EACtF,IAAI,UAAU;EAEd,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,YAAY,YAAY,OAAO,OAAO;IAClD,MAAM,QAAQ,aAAa,EAAE;IAC7B,MAAM,MAAM,MAAM,SAAS;IAE3B,MAAM,SAAS,MAAM,KADP,mBAAmB,EACH,CAAC;IAC/B,MAAM,UAAU,eAAe,QAAQ;IACvC,MAAM,MAAM,cAAc,OAAO;IACjC,UAAU,QAAQ;IAClB,OAAO;GACT,CAAC;EACH,SAAS,OAAO;GACd,MAAM,6BAA6B,KAAK,OAAO,SAAS,KAAK;EAC/D;EAEA,IAAI,UAAU,GAAG,MAAM,KAAK;EAC5B,OAAO;CACT;AACF;;;;;ACnDA,IAAa,+BAAb,cAAkD,SAAS;CACzD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,kCAAkC;CAC1C;AACF"}
+{"version":3,"file":"application-DYfcAy-Q.js","names":[],"sources":["../src/application/message-already-processed.error.ts","../src/application/message-bus.ts","../src/application/unit-of-work.ts","../src/application/unit-of-work.errors.ts"],"sourcesContent":["import { AppError, DatabaseError, type MessageId } from '@/core'\n\n/** The message's effects already committed. A caller can skip duplicate delivery without repeating those effects. */\nexport class MessageAlreadyProcessedError extends AppError {\n  readonly _tag = 'MessageAlreadyProcessedError'\n  readonly classification = 'terminal'\n\n  constructor(\n    readonly messageId: MessageId,\n    options?: { readonly cause: unknown },\n  ) {\n    super(`message ${messageId} already processed`, options)\n  }\n\n  /** Recognize only the processed-message primary key; preserve other failures unchanged at the call site. */\n  static from(cause: unknown, messageId: MessageId): MessageAlreadyProcessedError | undefined {\n    if (cause instanceof MessageAlreadyProcessedError) return cause\n    if (!(cause instanceof DatabaseError)) return undefined\n    const details = cause.details\n    const duplicate =\n      details.database === 'd1'\n        ? details.kind === 'unique' &&\n          details.table === 'processed_messages' &&\n          details.column === 'message_id'\n        : details.code === '23505' &&\n          details.table_name === 'processed_messages' &&\n          details.constraint_name === 'processed_messages_pkey'\n    if (!duplicate) return undefined\n    return new MessageAlreadyProcessedError(messageId, { cause })\n  }\n}\n","import { panic } from 'better-result'\n\nimport {\n  createLogger,\n  unreachable,\n  type DomainCommand,\n  type DomainEvent,\n  type DomainMessage,\n  type DomainQuery,\n} from '@/core'\n\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { Handlers, MessageResult, RegistryMessage } from './registry.ts'\n\nconst logger = createLogger('message-bus')\n\n/** The port an entrypoint dispatches through. `AppDeps` names this as `IMessageBus<typeof registry>`. */\nexport interface IMessageBus<TRegistry extends Handlers<never>> {\n  handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>>\n}\n\n/**\n * Routes one message to its slot. The bus opens no transaction and keeps no outbox:\n * a handler that writes opens the unit of work itself.\n */\nexport class MessageBus<Deps, TRegistry extends Handlers<Deps>> implements IMessageBus<TRegistry> {\n  constructor(\n    private readonly deps: Deps,\n    private readonly registry: TRegistry,\n  ) {}\n\n  /** Resolves to the handler's own value for a command or query, and to void for an event. */\n  async handle<TMessage extends DomainMessage & RegistryMessage<TRegistry>>(\n    message: TMessage,\n  ): Promise<MessageResult<TMessage, TRegistry>> {\n    // SAFETY: the slot for this name is what `MessageResult` names, and dispatch returns its value.\n    return (await this.dispatch(message)) as MessageResult<TMessage, TRegistry>\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- one table holds every slot's value; `handle` names it.\n  private dispatch(message: DomainMessage): Promise<unknown> {\n    if (message.type === 'command') return this.handleCommand(message)\n    if (message.type === 'query') return this.handleQuery(message)\n    if (message.type === 'event') return this.handleEvent(message)\n    // A message parsed at a boundary cannot reach here; one that does must not resolve silently.\n    return unreachable(message)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleCommand(command: DomainCommand): Promise<unknown> {\n    // `satisfies` proved the registry complete, so a missing slot is a broken registry object.\n    const handler = this.registry.commands[command.name]\n    if (handler === undefined) return panic(`No handler for command ${command.name}`)\n    logger.debug('handling_command', { name: command.name, id: command.id })\n    return handler(command, this.deps)\n  }\n\n  // oxlint-disable-next-line anti-slop/no-unknown-returns -- see dispatch.\n  private handleQuery(query: DomainQuery): Promise<unknown> {\n    const handler = this.registry.queries[query.name]\n    if (handler === undefined) return panic(`No handler for query ${query.name}`)\n    return handler(query, this.deps)\n  }\n\n  /**\n   * Every subscriber runs to completion. One failure is rethrown as is. Several are thrown as\n   * one `AggregateError`. A `MessageAlreadyProcessedError` means that subscriber already committed on\n   * an earlier delivery, so it counts as delivered.\n   */\n  private async handleEvent(event: DomainEvent): Promise<void> {\n    const subscriptions = this.registry.events[event.name] ?? []\n    const outcomes = await Promise.allSettled(\n      subscriptions.map((subscription) => subscription(event, this.deps)),\n    )\n    const failures: unknown[] = []\n    for (const [subscriber, outcome] of outcomes.entries()) {\n      if (outcome.status === 'fulfilled') continue\n      if (outcome.reason instanceof MessageAlreadyProcessedError) {\n        // The bus swallows this error, so this line is the only record that the skip happened.\n        logger.info('duplicate_subscriber_ignored', { event: event.name, id: event.id, subscriber })\n        continue\n      }\n      failures.push(outcome.reason)\n    }\n    if (failures.length === 1) throw failures[0]\n    if (failures.length > 1) {\n      throw new AggregateError(failures, `${event.name}: ${failures.length} subscribers failed`)\n    }\n  }\n}\n","import type { MessageId } from '@/core'\n\nimport type { IEventCollector } from './event-collector.ts'\nimport { MessageAlreadyProcessedError } from './message-already-processed.error.ts'\nimport type { IMessageStore } from './message-store.ts'\nimport type { IOutboxRelay } from './outbox-relay.ts'\nimport type { ITransaction } from './transaction.ts'\n\n/**\n * Commits the processed-message record, repository writes, and emitted events together before resolving.\n * An existing record rejects with `MessageAlreadyProcessedError`; external effects must run through the outbox after commit.\n * Nested calls reject with `UnitOfWorkAlreadyActiveError`; independent concurrent calls are allowed.\n */\nexport interface IUnitOfWork<Repos> {\n  run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T>\n}\n\nexport type UnitOfWorkDeps<Tx, Repos> = {\n  readonly transaction: ITransaction<Tx>\n  /** The processed-messages and outbox repository for this transaction. */\n  readonly messageStore: (tx: Tx) => IMessageStore\n  /** Repositories participate in the current transaction. */\n  readonly createRepositories: (tx: Tx) => Repos\n  readonly eventCollector: IEventCollector\n  readonly relay: IOutboxRelay\n}\n\n/** The unit of work: the boundary, the repositories, the events. Every database call is a port. */\nexport class UnitOfWork<Tx, Repos> implements IUnitOfWork<Repos> {\n  constructor(private readonly deps: UnitOfWorkDeps<Tx, Repos>) {}\n\n  async run<T>(messageId: MessageId, work: (repos: Repos) => Promise<T>): Promise<T> {\n    const { transaction, messageStore, createRepositories, eventCollector, relay } = this.deps\n    let written = 0\n\n    let value: T\n    try {\n      value = await transaction.transaction(async (tx) => {\n        const store = messageStore(tx)\n        await store.claim(messageId)\n        const repos = createRepositories(tx)\n        const result = await work(repos)\n        const pending = eventCollector.collect()\n        await store.persistEvents(pending)\n        written = pending.length\n        return result\n      })\n    } catch (error) {\n      throw MessageAlreadyProcessedError.from(error, messageId) ?? error\n    }\n\n    if (written > 0) relay.wake()\n    return value\n  }\n}\n","import { AppError } from '@/core'\n\n/** A boundary was opened inside another. One message, one atomic scope. */\nexport class UnitOfWorkAlreadyActiveError extends AppError {\n  readonly _tag = 'UnitOfWorkAlreadyActiveError'\n  readonly classification = 'terminal'\n\n  constructor() {\n    super('a unit of work is already active')\n  }\n}\n"],"mappings":";;;;;AAGA,IAAa,+BAAb,MAAa,qCAAqC,SAAS;CAK9C;CAJX,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,YACE,AAAS,WACT,SACA;EACA,MAAM,WAAW,UAAU,qBAAqB,OAAO;EAH9C;CAIX;;CAGA,OAAO,KAAK,OAAgB,WAAgE;EAC1F,IAAI,iBAAiB,8BAA8B,OAAO;EAC1D,IAAI,EAAE,iBAAiB,gBAAgB,OAAO;EAC9C,MAAM,UAAU,MAAM;EAStB,IAAI,EAPF,QAAQ,aAAa,OACjB,QAAQ,SAAS,YACjB,QAAQ,UAAU,wBAClB,QAAQ,WAAW,eACnB,QAAQ,SAAS,WACjB,QAAQ,eAAe,wBACvB,QAAQ,oBAAoB,4BAClB,OAAO;EACvB,OAAO,IAAI,6BAA6B,WAAW,EAAE,MAAM,CAAC;CAC9D;AACF;;;;AChBA,MAAM,SAAS,aAAa,aAAa;;;;;AAazC,IAAa,aAAb,MAAkG;CAE7E;CACA;CAFnB,YACE,AAAiB,MACjB,AAAiB,UACjB;EAFiB;EACA;CAChB;;CAGH,MAAM,OACJ,SAC6C;EAE7C,OAAQ,MAAM,KAAK,SAAS,OAAO;CACrC;CAGA,AAAQ,SAAS,SAA0C;EACzD,IAAI,QAAQ,SAAS,WAAW,OAAO,KAAK,cAAc,OAAO;EACjE,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAC7D,IAAI,QAAQ,SAAS,SAAS,OAAO,KAAK,YAAY,OAAO;EAE7D,OAAO,YAAY,OAAO;CAC5B;CAGA,AAAQ,cAAc,SAA0C;EAE9D,MAAM,UAAU,KAAK,SAAS,SAAS,QAAQ;EAC/C,IAAI,YAAY,QAAW,OAAO,MAAM,0BAA0B,QAAQ,MAAM;EAChF,OAAO,MAAM,oBAAoB;GAAE,MAAM,QAAQ;GAAM,IAAI,QAAQ;EAAG,CAAC;EACvE,OAAO,QAAQ,SAAS,KAAK,IAAI;CACnC;CAGA,AAAQ,YAAY,OAAsC;EACxD,MAAM,UAAU,KAAK,SAAS,QAAQ,MAAM;EAC5C,IAAI,YAAY,QAAW,OAAO,MAAM,wBAAwB,MAAM,MAAM;EAC5E,OAAO,QAAQ,OAAO,KAAK,IAAI;CACjC;;;;;;CAOA,MAAc,YAAY,OAAmC;EAC3D,MAAM,gBAAgB,KAAK,SAAS,OAAO,MAAM,SAAS,CAAC;EAC3D,MAAM,WAAW,MAAM,QAAQ,WAC7B,cAAc,KAAK,iBAAiB,aAAa,OAAO,KAAK,IAAI,CAAC,CACpE;EACA,MAAM,WAAsB,CAAC;EAC7B,KAAK,MAAM,CAAC,YAAY,YAAY,SAAS,QAAQ,GAAG;GACtD,IAAI,QAAQ,WAAW,aAAa;GACpC,IAAI,QAAQ,kBAAkB,8BAA8B;IAE1D,OAAO,KAAK,gCAAgC;KAAE,OAAO,MAAM;KAAM,IAAI,MAAM;KAAI;IAAW,CAAC;IAC3F;GACF;GACA,SAAS,KAAK,QAAQ,MAAM;EAC9B;EACA,IAAI,SAAS,WAAW,GAAG,MAAM,SAAS;EAC1C,IAAI,SAAS,SAAS,GACpB,MAAM,IAAI,eAAe,UAAU,GAAG,MAAM,KAAK,IAAI,SAAS,OAAO,oBAAoB;CAE7F;AACF;;;;;AC/DA,IAAa,aAAb,MAAiE;CAClC;CAA7B,YAAY,AAAiB,MAAiC;EAAjC;CAAkC;CAE/D,MAAM,IAAO,WAAsB,MAAgD;EACjF,MAAM,EAAE,aAAa,cAAc,oBAAoB,gBAAgB,UAAU,KAAK;EACtF,IAAI,UAAU;EAEd,IAAI;EACJ,IAAI;GACF,QAAQ,MAAM,YAAY,YAAY,OAAO,OAAO;IAClD,MAAM,QAAQ,aAAa,EAAE;IAC7B,MAAM,MAAM,MAAM,SAAS;IAE3B,MAAM,SAAS,MAAM,KADP,mBAAmB,EACH,CAAC;IAC/B,MAAM,UAAU,eAAe,QAAQ;IACvC,MAAM,MAAM,cAAc,OAAO;IACjC,UAAU,QAAQ;IAClB,OAAO;GACT,CAAC;EACH,SAAS,OAAO;GACd,MAAM,6BAA6B,KAAK,OAAO,SAAS,KAAK;EAC/D;EAEA,IAAI,UAAU,GAAG,MAAM,KAAK;EAC5B,OAAO;CACT;AACF;;;;;ACnDA,IAAa,+BAAb,cAAkD,SAAS;CACzD,AAAS,OAAO;CAChB,AAAS,iBAAiB;CAE1B,cAAc;EACZ,MAAM,kCAAkC;CAC1C;AACF"}

package/dist/application.d.ts

@@ -1,3 +1,3 @@
-import { F as DomainQuery, I as MessageId, M as DomainCommand, N as DomainEvent, P as DomainMessage } from "./index-BStnggQO.js";
-import { _ as RegistryMessage, a as UnitOfWorkDeps, b as EventHandler, c as IOutboxRelay, d as CommandRegistry, f as EventRegistry, g as QueryRegistry, h as MessageResult, i as UnitOfWork, l as IMessageBus, m as MessageRegistry, n as MessageAlreadyProcessedError, o as IEventCollector, p as Handlers, r as IUnitOfWork, s as ITransaction, t as UnitOfWorkAlreadyActiveError, u as MessageBus, v as IMessageStore, x as QueryHandler, y as CommandHandler } from "./index-DWIRrJMP.js";
+import { G as DomainMessage, K as DomainQuery, U as DomainCommand, W as DomainEvent, q as MessageId } from "./index-6XMPJu7u.js";
+import { _ as RegistryMessage, a as UnitOfWorkDeps, b as EventHandler, c as IOutboxRelay, d as CommandRegistry, f as EventRegistry, g as QueryRegistry, h as MessageResult, i as UnitOfWork, l as IMessageBus, m as MessageRegistry, n as MessageAlreadyProcessedError, o as IEventCollector, p as Handlers, r as IUnitOfWork, s as ITransaction, t as UnitOfWorkAlreadyActiveError, u as MessageBus, v as IMessageStore, x as QueryHandler, y as CommandHandler } from "./index-_Cihfq1J.js";
 export { type CommandHandler, type CommandRegistry, type DomainCommand, type DomainEvent, type DomainMessage, type DomainQuery, type EventHandler, type EventRegistry, type Handlers, type IEventCollector, type IMessageBus, type IMessageStore, type IOutboxRelay, type ITransaction, type IUnitOfWork, MessageAlreadyProcessedError, MessageBus, type MessageId, type MessageRegistry, type MessageResult, type QueryHandler, type QueryRegistry, type RegistryMessage, UnitOfWork, UnitOfWorkAlreadyActiveError, type UnitOfWorkDeps };

package/dist/application.js

@@ -1,3 +1,3 @@
-import { i as MessageAlreadyProcessedError, n as UnitOfWork, r as MessageBus, t as UnitOfWorkAlreadyActiveError } from "./application-DjsQtpgw.js";
+import { i as MessageAlreadyProcessedError, n as UnitOfWork, r as MessageBus, t as UnitOfWorkAlreadyActiveError } from "./application-DYfcAy-Q.js";
 
 export { MessageAlreadyProcessedError, MessageBus, UnitOfWork, UnitOfWorkAlreadyActiveError };

package/dist/better-auth/apple-client-secret.d.ts

@@ -1,4 +1,4 @@
-import { vt as AppError } from "../index-BStnggQO.js";
+import { kt as AppError } from "../index-6XMPJu7u.js";
 //#region src/infrastructure/better-auth/apple-client-secret.d.ts
 /** Apple sends its OAuth callback from this origin. Include it in trustedOrigins when enabling Apple. */
 export declare const APPLE_ORIGIN = "https://appleid.apple.com";

package/dist/better-auth/apple-client-secret.js

@@ -1,4 +1,4 @@
-import { N as AppError, a as createLogger } from "../core-Cx5SeyKV.js";
+import { U as AppError, a as createLogger } from "../core-DC_4pOrI.js";
 import { SignJWT, importPKCS8 } from "jose";
 
 //#region src/infrastructure/better-auth/apple-client-secret.ts

package/dist/better-auth/auth-client.js

@@ -1,4 +1,4 @@
-import { j as RateLimitError } from "../core-Cx5SeyKV.js";
+import { V as RateLimitError } from "../core-DC_4pOrI.js";
 import { createAuthClient } from "better-auth/client";
 
 //#region src/infrastructure/better-auth/auth-client.ts

package/dist/better-auth/rate-limit.d.ts

@@ -1,4 +1,4 @@
-import { vt as AppError } from "../index-BStnggQO.js";
+import { kt as AppError } from "../index-6XMPJu7u.js";
 import { BetterAuthRateLimitStorage } from "better-auth";
 //#region src/infrastructure/better-auth/rate-limit.d.ts
 /** Each rule must match its binding's deployed limit and period. Cloudflare accepts only 10 or 60 seconds. */

package/dist/better-auth/rate-limit.js

@@ -1,4 +1,4 @@
-import { N as AppError, a as createLogger } from "../core-Cx5SeyKV.js";
+import { U as AppError, a as createLogger } from "../core-DC_4pOrI.js";
 
 //#region src/infrastructure/better-auth/rate-limit.ts
 /** A binding failure with no known retry classification. The cause preserves the original failure. */

package/dist/better-auth.d.ts

@@ -1,4 +1,4 @@
-import { CloudflareTurnstileOptions, LastLoginMethodOptions, anonymous, bearer, captcha, deviceAuthorization, lastLoginMethod, magicLink, openAPI } from "better-auth/plugins";
+import { CloudflareTurnstileOptions, EmailOTPOptions, LastLoginMethodOptions, anonymous, bearer, captcha, deviceAuthorization, emailOTP, lastLoginMethod, magicLink, openAPI } from "better-auth/plugins";
 import { BetterAuthOptions, BetterAuthPlugin, BetterAuthRateLimitStorage, DBAdapterInstance } from "better-auth";
 //#region src/infrastructure/better-auth/options.d.ts
 /**
@@ -35,6 +35,7 @@ export declare const authDefaults: {
 /** Configure built-in plugins with native options. Runtime auth requires captcha; lastLoginMethod is enabled unless explicitly disabled. */
 export type AuthPluginOptions = {
   readonly magicLink?: Parameters<typeof magicLink>[0];
+  readonly emailOTP?: EmailOTPOptions;
   readonly anonymous?: NonNullable<Parameters<typeof anonymous>[0]>;
   readonly captcha?: Omit<CloudflareTurnstileOptions, 'provider'>;
   readonly lastLoginMethod?: false | NonNullable<Parameters<typeof lastLoginMethod>[0]>;
@@ -61,6 +62,7 @@ export type AuthConfig = Omit<BetterAuthOptions, 'database' | 'plugins' | 'rateL
 });
 type PluginTypes = {
   magicLink: ReturnType<typeof magicLink>;
+  emailOTP: ReturnType<typeof emailOTP>;
   anonymous: ReturnType<typeof anonymous>;
   captcha: ReturnType<typeof captcha>;
   lastLoginMethod: ReturnType<typeof lastLoginMethod<{}>>;
@@ -72,7 +74,7 @@ type LastLoginPlugin<Options extends AuthPluginOptions> = Options extends {
   readonly lastLoginMethod: infer Settings extends LastLoginMethodOptions;
 } ? ReturnType<typeof lastLoginMethod<Settings>> : PluginTypes['lastLoginMethod'];
 type SelectedPlugin<Options extends AuthPluginOptions, Key extends keyof PluginTypes> = Options extends Record<Key, false | undefined> ? [] : Options extends Record<Key, NonNullable<AuthPluginOptions[Key]>> ? [Key extends 'lastLoginMethod' ? LastLoginPlugin<Options> : PluginTypes[Key]] : Key extends 'lastLoginMethod' ? [PluginTypes[Key]] : [];
-type SelectedPlugins<Options extends AuthPluginOptions> = [...SelectedPlugin<Options, 'captcha'>, ...SelectedPlugin<Options, 'lastLoginMethod'>, ...SelectedPlugin<Options, 'openAPI'>, ...SelectedPlugin<Options, 'magicLink'>, ...SelectedPlugin<Options, 'anonymous'>, ...SelectedPlugin<Options, 'deviceAuthorization'>, ...SelectedPlugin<Options, 'bearer'>];
+type SelectedPlugins<Options extends AuthPluginOptions> = [...SelectedPlugin<Options, 'captcha'>, ...SelectedPlugin<Options, 'lastLoginMethod'>, ...SelectedPlugin<Options, 'openAPI'>, ...SelectedPlugin<Options, 'magicLink'>, ...SelectedPlugin<Options, 'emailOTP'>, ...SelectedPlugin<Options, 'anonymous'>, ...SelectedPlugin<Options, 'deviceAuthorization'>, ...SelectedPlugin<Options, 'bearer'>];
 type ConfiguredPlugins<Config extends AuthConfig> = SelectedPlugins<Config['integrations']>;
 type MergeOptions<Defaults, Overrides> = Omit<Defaults, keyof Overrides> & Overrides;
 type SessionOptions<Config extends AuthConfig> = MergeOptions<typeof authDefaults.session, NonNullable<Config['session']>>;

package/dist/better-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth.d.ts","names":[],"sources":["../src/infrastructure/better-auth/options.ts"],"mappings":";;;;;;qBAmCa;;;;;;IAQE;IAAY;;;;;;;;;;;;;;;;;MASV;;;;;YAKL;WACD,YAAY,kBAAkB;WAC9B,YAAY,YAAY,kBAAkB;WAC1C,UAAU,KAAK;WACf,0BAA0B,YAAY,kBAAkB;WACxD,UAAU,YAAY,kBAAkB;WACxC,SAAS,YAAY,kBAAkB;WACvC,sBAAsB,YAAY,kBAAkB;;;;;;YAOnD,aAAa,KAAK;WACnB,YAAY,KACnB,YAAY;;WAKC;WACA,kBAAkB;WAClB,cAAc;aACZ,SAAS,KAAK;;;WAIhB;WACA;WACA,cAAc;;KAI1B;EACH,WAAW,kBAAkB;EAC7B,WAAW,kBAAkB;EAC7B,SAAS,kBAAkB;EAC3B,iBAAiB,kBAAkB;EACnC,SAAS,kBAAkB;EAC3B,QAAQ,kBAAkB;EAC1B,qBAAqB,kBAAkB;;KAGpC,gBAAgB,gBAAgB,qBAAqB;WAC/C,uBAAuB,iBAAiB;IAE/C,kBAAkB,gBAAgB,aAClC;KAEC,eAAe,gBAAgB,mBAAmB,kBAAkB,eACvE,gBAAgB,OAAO,+BAEnB,gBAAgB,OAAO,KAAK,YAAY,kBAAkB,UACvD,gCAAgC,gBAAgB,WAAW,YAAY,QACxE,iCACG,YAAY;KAGlB,gBAAgB,gBAAgB,yBAChC,eAAe,wBACf,eAAe,gCACf,eAAe,wBACf,eAAe,0BACf,eAAe,0BACf,eAAe,oCACf,eAAe;KAGf,kBAAkB,eAAe,cAAc,gBAAgB;KAE/D,aAAa,UAAU,aAAa,KAAK,gBAAgB,aAAa;KAEtE,eAAe,eAAe,cAAc,oBACxC,aAAa,SACpB,YAAY;KAGT,kBAAkB,eAAe,YAAY,gBAAgB,sBAAsB,KACtF;EAGA,UAAU;EACV,YAAY,oBAAoB,aAAa,YAAY,YAAY;EACrE,WAAW,YAAY;EACvB,SAAS,KAAK,eAAe;IAC3B,aAAa,oBACJ,aAAa,QAAQ,aAC5B,YAAY,YAAY;;EAG5B,UAAU,oBAAoB,aAAa,UAAU,YAAY;IAC/D,UAAU,oBACD,aAAa,SAAS,UAC7B,YAAY,YAAY;IAE1B,WAAW,oBACF,aAAa,SAAS,WAC7B,YAAY,YAAY;;EAG5B,aAAa,kBAAkB,YAAY;;;YAIjC,kCACJ,eAAe,kBACf,gBAAgB,yBAEtB,UAAU,mBACV,QAAQ,QACR,oBAAoB,YACjB,kBAAkB,QAAQ;;;;;qBA4BlB,yBAAyB"}
+{"version":3,"file":"better-auth.d.ts","names":[],"sources":["../src/infrastructure/better-auth/options.ts"],"mappings":";;;;;;qBAuCa;;;;;;IAQE;IAAY;;;;;;;;;;;;;;;;;MASV;;;;;YAKL;WACD,YAAY,kBAAkB;WAC9B,WAAW;WACX,YAAY,YAAY,kBAAkB;WAC1C,UAAU,KAAK;WACf,0BAA0B,YAAY,kBAAkB;WACxD,UAAU,YAAY,kBAAkB;WACxC,SAAS,YAAY,kBAAkB;WACvC,sBAAsB,YAAY,kBAAkB;;;;;;YAOnD,aAAa,KAAK;WACnB,YAAY,KACnB,YAAY;;WAKC;WACA,kBAAkB;WAClB,cAAc;aACZ,SAAS,KAAK;;;WAIhB;WACA;WACA,cAAc;;KAI1B;EACH,WAAW,kBAAkB;EAC7B,UAAU,kBAAkB;EAC5B,WAAW,kBAAkB;EAC7B,SAAS,kBAAkB;EAC3B,iBAAiB,kBAAkB;EACnC,SAAS,kBAAkB;EAC3B,QAAQ,kBAAkB;EAC1B,qBAAqB,kBAAkB;;KAGpC,gBAAgB,gBAAgB,qBAAqB;WAC/C,uBAAuB,iBAAiB;IAE/C,kBAAkB,gBAAgB,aAClC;KAEC,eAAe,gBAAgB,mBAAmB,kBAAkB,eACvE,gBAAgB,OAAO,+BAEnB,gBAAgB,OAAO,KAAK,YAAY,kBAAkB,UACvD,gCAAgC,gBAAgB,WAAW,YAAY,QACxE,iCACG,YAAY;KAGlB,gBAAgB,gBAAgB,yBAChC,eAAe,wBACf,eAAe,gCACf,eAAe,wBACf,eAAe,0BACf,eAAe,yBACf,eAAe,0BACf,eAAe,oCACf,eAAe;KAGf,kBAAkB,eAAe,cAAc,gBAAgB;KAE/D,aAAa,UAAU,aAAa,KAAK,gBAAgB,aAAa;KAEtE,eAAe,eAAe,cAAc,oBACxC,aAAa,SACpB,YAAY;KAGT,kBAAkB,eAAe,YAAY,gBAAgB,sBAAsB,KACtF;EAGA,UAAU;EACV,YAAY,oBAAoB,aAAa,YAAY,YAAY;EACrE,WAAW,YAAY;EACvB,SAAS,KAAK,eAAe;IAC3B,aAAa,oBACJ,aAAa,QAAQ,aAC5B,YAAY,YAAY;;EAG5B,UAAU,oBAAoB,aAAa,UAAU,YAAY;IAC/D,UAAU,oBACD,aAAa,SAAS,UAC7B,YAAY,YAAY;IAE1B,WAAW,oBACF,aAAa,SAAS,WAC7B,YAAY,YAAY;;EAG5B,aAAa,kBAAkB,YAAY;;;YAIjC,kCACJ,eAAe,kBACf,gBAAgB,yBAEtB,UAAU,mBACV,QAAQ,QACR,oBAAoB,YACjB,kBAAkB,QAAQ;;;;;qBA0ClB,yBAAyB"}

package/dist/better-auth.js

@@ -1,15 +1,20 @@
-import { a as createLogger } from "./core-Cx5SeyKV.js";
+import { a as createLogger } from "./core-DC_4pOrI.js";
 import { v7 } from "uuid";
 import { isAPIError } from "better-auth/api";
-import { anonymous, bearer, captcha, deviceAuthorization, lastLoginMethod, magicLink, openAPI } from "better-auth/plugins";
+import { anonymous, bearer, captcha, deviceAuthorization, emailOTP, lastLoginMethod, magicLink, openAPI } from "better-auth/plugins";
 
 //#region src/infrastructure/better-auth/options.ts
 const logger = createLogger("auth");
-const MAGIC_LINK_CAPTCHA_ENDPOINTS = [
+const DEFAULT_CAPTCHA_ENDPOINTS = [
 	"/sign-up/email",
 	"/sign-in/email",
-	"/request-password-reset",
-	"/sign-in/magic-link"
+	"/request-password-reset"
+];
+const MAGIC_LINK_CAPTCHA_ENDPOINT = "/sign-in/magic-link";
+const EMAIL_OTP_CAPTCHA_ENDPOINTS = [
+	"/email-otp/send-verification-otp",
+	"/email-otp/request-password-reset",
+	"/forget-password/email-otp"
 ];
 /**
 * Shared policy from Porte and Typist. The factory merges application overrides into these defaults.
@@ -47,7 +52,12 @@ function buildPlugins(options) {
 	const plugins = [];
 	if (options.captcha !== void 0) {
 		const captchaOptions = { ...options.captcha };
-		if (options.magicLink !== void 0 && captchaOptions.endpoints === void 0) captchaOptions.endpoints = [...MAGIC_LINK_CAPTCHA_ENDPOINTS];
+		if (captchaOptions.endpoints === void 0) {
+			const endpoints = [...DEFAULT_CAPTCHA_ENDPOINTS];
+			if (options.magicLink !== void 0) endpoints.push(MAGIC_LINK_CAPTCHA_ENDPOINT);
+			if (options.emailOTP !== void 0) endpoints.push(...EMAIL_OTP_CAPTCHA_ENDPOINTS);
+			if (endpoints.length > DEFAULT_CAPTCHA_ENDPOINTS.length) captchaOptions.endpoints = endpoints;
+		}
 		plugins.push(captcha({
 			...captchaOptions,
 			provider: "cloudflare-turnstile"
@@ -59,6 +69,12 @@ function buildPlugins(options) {
 		expiresIn: 300,
 		...options.magicLink
 	}));
+	if (options.emailOTP !== void 0) plugins.push(emailOTP({
+		expiresIn: 300,
+		storeOTP: "encrypted",
+		resendStrategy: "reuse",
+		...options.emailOTP
+	}));
 	if (options.anonymous !== void 0) plugins.push(anonymous(options.anonymous));
 	if (options.deviceAuthorization !== void 0) plugins.push(deviceAuthorization(options.deviceAuthorization));
 	if (options.bearer !== void 0) plugins.push(bearer(options.bearer));

package/dist/better-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"better-auth.js","names":["uuidv7"],"sources":["../src/infrastructure/better-auth/options.ts"],"sourcesContent":["import type {\n  BetterAuthOptions,\n  BetterAuthPlugin,\n  BetterAuthRateLimitStorage,\n  DBAdapterInstance,\n} from 'better-auth'\nimport { isAPIError } from 'better-auth/api'\nimport {\n  anonymous,\n  bearer,\n  captcha,\n  deviceAuthorization,\n  lastLoginMethod,\n  magicLink,\n  openAPI,\n  type CloudflareTurnstileOptions,\n  type LastLoginMethodOptions,\n} from 'better-auth/plugins'\nimport { v7 as uuidv7 } from 'uuid'\n\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('auth')\n\n// Better Auth does not export its default captcha paths; keep them when adding magic-link requests.\nconst MAGIC_LINK_CAPTCHA_ENDPOINTS = [\n  '/sign-up/email',\n  '/sign-in/email',\n  '/request-password-reset',\n  '/sign-in/magic-link',\n]\n\n/**\n * Shared policy from Porte and Typist. The factory merges application overrides into these defaults.\n */\nexport const authDefaults = {\n  onAPIError: {\n    throw: false,\n    onError(error) {\n      if (isAPIError(error) && error.statusCode < 500) return\n      logger.error('auth_operation_failed', { error })\n    },\n  },\n  rateLimit: { window: 60, max: 100 },\n  session: {\n    expiresIn: 60 * 60 * 24 * 7,\n    updateAge: 60 * 60 * 24,\n    freshAge: 60 * 60 * 24,\n    cookieCache: { enabled: true, maxAge: 300 },\n  },\n  advanced: {\n    database: { generateId: () => uuidv7(), joins: true },\n    ipAddress: { ipAddressHeaders: ['cf-connecting-ip', 'x-forwarded-for'] },\n  },\n} satisfies BetterAuthOptions\n\n/** Configure built-in plugins with native options. Runtime auth requires captcha; lastLoginMethod is enabled unless explicitly disabled. */\nexport type AuthPluginOptions = {\n  readonly magicLink?: Parameters<typeof magicLink>[0]\n  readonly anonymous?: NonNullable<Parameters<typeof anonymous>[0]>\n  readonly captcha?: Omit<CloudflareTurnstileOptions, 'provider'>\n  readonly lastLoginMethod?: false | NonNullable<Parameters<typeof lastLoginMethod>[0]>\n  readonly openAPI?: NonNullable<Parameters<typeof openAPI>[0]>\n  readonly bearer?: NonNullable<Parameters<typeof bearer>[0]>\n  readonly deviceAuthorization?: NonNullable<Parameters<typeof deviceAuthorization>[0]>\n}\n\n/**\n * Runtime auth requires rate limiting and Turnstile credentials. Schema generation omits both.\n * Both modes select plugins through `integrations`, so schema generation must repeat the runtime selection.\n */\nexport type AuthConfig = Omit<BetterAuthOptions, 'database' | 'plugins' | 'rateLimit'> & {\n  readonly rateLimit?: Omit<\n    NonNullable<BetterAuthOptions['rateLimit']>,\n    'enabled' | 'storage' | 'customStorage'\n  >\n} & (\n    | {\n        readonly mode?: 'runtime'\n        readonly rateLimitStorage: BetterAuthRateLimitStorage\n        readonly integrations: AuthPluginOptions & {\n          readonly captcha: Omit<CloudflareTurnstileOptions, 'provider'>\n        }\n      }\n    | {\n        readonly mode: 'schema'\n        readonly rateLimitStorage?: never\n        readonly integrations: AuthPluginOptions\n      }\n  )\n\ntype PluginTypes = {\n  magicLink: ReturnType<typeof magicLink>\n  anonymous: ReturnType<typeof anonymous>\n  captcha: ReturnType<typeof captcha>\n  lastLoginMethod: ReturnType<typeof lastLoginMethod<{}>>\n  openAPI: ReturnType<typeof openAPI>\n  bearer: ReturnType<typeof bearer>\n  deviceAuthorization: ReturnType<typeof deviceAuthorization>\n}\n\ntype LastLoginPlugin<Options extends AuthPluginOptions> = Options extends {\n  readonly lastLoginMethod: infer Settings extends LastLoginMethodOptions\n}\n  ? ReturnType<typeof lastLoginMethod<Settings>>\n  : PluginTypes['lastLoginMethod']\n\ntype SelectedPlugin<Options extends AuthPluginOptions, Key extends keyof PluginTypes> =\n  Options extends Record<Key, false | undefined>\n    ? []\n    : Options extends Record<Key, NonNullable<AuthPluginOptions[Key]>>\n      ? [Key extends 'lastLoginMethod' ? LastLoginPlugin<Options> : PluginTypes[Key]]\n      : Key extends 'lastLoginMethod'\n        ? [PluginTypes[Key]]\n        : []\n\ntype SelectedPlugins<Options extends AuthPluginOptions> = [\n  ...SelectedPlugin<Options, 'captcha'>,\n  ...SelectedPlugin<Options, 'lastLoginMethod'>,\n  ...SelectedPlugin<Options, 'openAPI'>,\n  ...SelectedPlugin<Options, 'magicLink'>,\n  ...SelectedPlugin<Options, 'anonymous'>,\n  ...SelectedPlugin<Options, 'deviceAuthorization'>,\n  ...SelectedPlugin<Options, 'bearer'>,\n]\n\ntype ConfiguredPlugins<Config extends AuthConfig> = SelectedPlugins<Config['integrations']>\n\ntype MergeOptions<Defaults, Overrides> = Omit<Defaults, keyof Overrides> & Overrides\n\ntype SessionOptions<Config extends AuthConfig> = MergeOptions<\n  typeof authDefaults.session,\n  NonNullable<Config['session']>\n>\n\ntype ConfiguredOptions<Config extends AuthConfig, Plugins extends BetterAuthPlugin[]> = Omit<\n  Config,\n  'mode' | 'integrations' | 'rateLimitStorage' | 'rateLimit' | 'session' | 'advanced' | 'onAPIError'\n> & {\n  database: DBAdapterInstance\n  onAPIError: MergeOptions<typeof authDefaults.onAPIError, NonNullable<Config['onAPIError']>>\n  rateLimit: NonNullable<BetterAuthOptions['rateLimit']>\n  session: Omit<SessionOptions<Config>, 'cookieCache'> & {\n    cookieCache: MergeOptions<\n      typeof authDefaults.session.cookieCache,\n      NonNullable<NonNullable<Config['session']>['cookieCache']>\n    >\n  }\n  advanced: MergeOptions<typeof authDefaults.advanced, NonNullable<Config['advanced']>> & {\n    database: MergeOptions<\n      typeof authDefaults.advanced.database,\n      NonNullable<NonNullable<Config['advanced']>['database']>\n    >\n    ipAddress: MergeOptions<\n      typeof authDefaults.advanced.ipAddress,\n      NonNullable<NonNullable<Config['advanced']>['ipAddress']>\n    >\n  }\n  plugins: [...ConfiguredPlugins<Config>, ...Plugins]\n}\n\n/** A required database adapter and application config produce options with inferred plugin and session types. */\nexport type BetterAuthOptionsFactory = <\n  const Config extends AuthConfig,\n  const Plugins extends BetterAuthPlugin[] = [],\n>(\n  database: DBAdapterInstance,\n  config: Config,\n  additionalPlugins?: Plugins,\n) => ConfiguredOptions<Config, Plugins>\n\nfunction buildPlugins<const Options extends AuthPluginOptions>(\n  options: Options,\n): SelectedPlugins<Options> {\n  const plugins: BetterAuthPlugin[] = []\n  if (options.captcha !== undefined) {\n    const captchaOptions = { ...options.captcha }\n    if (options.magicLink !== undefined && captchaOptions.endpoints === undefined)\n      captchaOptions.endpoints = [...MAGIC_LINK_CAPTCHA_ENDPOINTS]\n    plugins.push(captcha({ ...captchaOptions, provider: 'cloudflare-turnstile' }))\n  }\n  if (options.lastLoginMethod !== false) plugins.push(lastLoginMethod(options.lastLoginMethod))\n  if (options.openAPI !== undefined) plugins.push(openAPI(options.openAPI))\n  if (options.magicLink !== undefined)\n    plugins.push(magicLink({ expiresIn: 300, ...options.magicLink }))\n  if (options.anonymous !== undefined) plugins.push(anonymous(options.anonymous))\n  if (options.deviceAuthorization !== undefined)\n    plugins.push(deviceAuthorization(options.deviceAuthorization))\n  if (options.bearer !== undefined) plugins.push(bearer(options.bearer))\n  // SAFETY: Each branch adds exactly the plugin selected by the corresponding configuration key.\n  return plugins as SelectedPlugins<Options>\n}\n\n/**\n * Build native Better Auth options with shared defaults and configured plugins; both arguments are required.\n * Pass Stripe and other plugins in the third argument. Put tanstackStartCookies() last.\n */\nexport const createBetterAuthOptions: BetterAuthOptionsFactory = (\n  database,\n  config,\n  additionalPlugins,\n) => {\n  const { mode, integrations, rateLimitStorage, ...options } = config\n  const result: BetterAuthOptions = {\n    ...options,\n    database,\n    onAPIError: { ...authDefaults.onAPIError, ...options.onAPIError },\n    rateLimit:\n      mode === 'schema'\n        ? { enabled: false }\n        : {\n            ...authDefaults.rateLimit,\n            ...options.rateLimit,\n            enabled: true,\n            customStorage: rateLimitStorage,\n          },\n    session: {\n      ...authDefaults.session,\n      ...options.session,\n      cookieCache: { ...authDefaults.session.cookieCache, ...options.session?.cookieCache },\n    },\n    advanced: {\n      ...authDefaults.advanced,\n      ...options.advanced,\n      database: { ...authDefaults.advanced.database, ...options.advanced?.database },\n      ipAddress: { ...authDefaults.advanced.ipAddress, ...options.advanced?.ipAddress },\n    },\n    plugins: [...buildPlugins(integrations), ...(additionalPlugins ?? [])],\n  }\n  // SAFETY: The factory preserves configured field schemas and plugins while merging only the documented default fields.\n  return result as ConfiguredOptions<typeof config, Exclude<typeof additionalPlugins, undefined>>\n}\n"],"mappings":";;;;;;AAsBA,MAAM,SAAS,aAAa,MAAM;AAGlC,MAAM,+BAA+B;CACnC;CACA;CACA;CACA;AACF;;;;AAKA,MAAa,eAAe;CAC1B,YAAY;EACV,OAAO;EACP,QAAQ,OAAO;GACb,IAAI,WAAW,KAAK,KAAK,MAAM,aAAa,KAAK;GACjD,OAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC;EACjD;CACF;CACA,WAAW;EAAE,QAAQ;EAAI,KAAK;CAAI;CAClC,SAAS;EACP,WAAW;EACX,WAAW;EACX,UAAU;EACV,aAAa;GAAE,SAAS;GAAM,QAAQ;EAAI;CAC5C;CACA,UAAU;EACR,UAAU;GAAE,kBAAkBA,GAAO;GAAG,OAAO;EAAK;EACpD,WAAW,EAAE,kBAAkB,CAAC,oBAAoB,iBAAiB,EAAE;CACzE;AACF;AAqHA,SAAS,aACP,SAC0B;CAC1B,MAAM,UAA8B,CAAC;CACrC,IAAI,QAAQ,YAAY,QAAW;EACjC,MAAM,iBAAiB,EAAE,GAAG,QAAQ,QAAQ;EAC5C,IAAI,QAAQ,cAAc,UAAa,eAAe,cAAc,QAClE,eAAe,YAAY,CAAC,GAAG,4BAA4B;EAC7D,QAAQ,KAAK,QAAQ;GAAE,GAAG;GAAgB,UAAU;EAAuB,CAAC,CAAC;CAC/E;CACA,IAAI,QAAQ,oBAAoB,OAAO,QAAQ,KAAK,gBAAgB,QAAQ,eAAe,CAAC;CAC5F,IAAI,QAAQ,YAAY,QAAW,QAAQ,KAAK,QAAQ,QAAQ,OAAO,CAAC;CACxE,IAAI,QAAQ,cAAc,QACxB,QAAQ,KAAK,UAAU;EAAE,WAAW;EAAK,GAAG,QAAQ;CAAU,CAAC,CAAC;CAClE,IAAI,QAAQ,cAAc,QAAW,QAAQ,KAAK,UAAU,QAAQ,SAAS,CAAC;CAC9E,IAAI,QAAQ,wBAAwB,QAClC,QAAQ,KAAK,oBAAoB,QAAQ,mBAAmB,CAAC;CAC/D,IAAI,QAAQ,WAAW,QAAW,QAAQ,KAAK,OAAO,QAAQ,MAAM,CAAC;CAErE,OAAO;AACT;;;;;AAMA,MAAa,2BACX,UACA,QACA,sBACG;CACH,MAAM,EAAE,MAAM,cAAc,kBAAkB,GAAG,YAAY;CA4B7D,OAAO;EA1BL,GAAG;EACH;EACA,YAAY;GAAE,GAAG,aAAa;GAAY,GAAG,QAAQ;EAAW;EAChE,WACE,SAAS,WACL,EAAE,SAAS,MAAM,IACjB;GACE,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,SAAS;GACT,eAAe;EACjB;EACN,SAAS;GACP,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,aAAa;IAAE,GAAG,aAAa,QAAQ;IAAa,GAAG,QAAQ,SAAS;GAAY;EACtF;EACA,UAAU;GACR,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,UAAU;IAAE,GAAG,aAAa,SAAS;IAAU,GAAG,QAAQ,UAAU;GAAS;GAC7E,WAAW;IAAE,GAAG,aAAa,SAAS;IAAW,GAAG,QAAQ,UAAU;GAAU;EAClF;EACA,SAAS,CAAC,GAAG,aAAa,YAAY,GAAG,GAAI,qBAAqB,CAAC,CAAE;CAG3D;AACd"}
+{"version":3,"file":"better-auth.js","names":["uuidv7"],"sources":["../src/infrastructure/better-auth/options.ts"],"sourcesContent":["import type {\n  BetterAuthOptions,\n  BetterAuthPlugin,\n  BetterAuthRateLimitStorage,\n  DBAdapterInstance,\n} from 'better-auth'\nimport { isAPIError } from 'better-auth/api'\nimport {\n  anonymous,\n  bearer,\n  captcha,\n  deviceAuthorization,\n  emailOTP,\n  lastLoginMethod,\n  magicLink,\n  openAPI,\n  type CloudflareTurnstileOptions,\n  type EmailOTPOptions,\n  type LastLoginMethodOptions,\n} from 'better-auth/plugins'\nimport { v7 as uuidv7 } from 'uuid'\n\nimport { createLogger } from '@/core'\n\nconst logger = createLogger('auth')\n\n// Better Auth does not export its default captcha paths; keep them when adding email delivery endpoints.\nconst DEFAULT_CAPTCHA_ENDPOINTS = ['/sign-up/email', '/sign-in/email', '/request-password-reset']\nconst MAGIC_LINK_CAPTCHA_ENDPOINT = '/sign-in/magic-link'\n// Every OTP endpoint that sends an email, including the deprecated password-reset alias.\nconst EMAIL_OTP_CAPTCHA_ENDPOINTS = [\n  '/email-otp/send-verification-otp',\n  '/email-otp/request-password-reset',\n  '/forget-password/email-otp',\n]\n\n/**\n * Shared policy from Porte and Typist. The factory merges application overrides into these defaults.\n */\nexport const authDefaults = {\n  onAPIError: {\n    throw: false,\n    onError(error) {\n      if (isAPIError(error) && error.statusCode < 500) return\n      logger.error('auth_operation_failed', { error })\n    },\n  },\n  rateLimit: { window: 60, max: 100 },\n  session: {\n    expiresIn: 60 * 60 * 24 * 7,\n    updateAge: 60 * 60 * 24,\n    freshAge: 60 * 60 * 24,\n    cookieCache: { enabled: true, maxAge: 300 },\n  },\n  advanced: {\n    database: { generateId: () => uuidv7(), joins: true },\n    ipAddress: { ipAddressHeaders: ['cf-connecting-ip', 'x-forwarded-for'] },\n  },\n} satisfies BetterAuthOptions\n\n/** Configure built-in plugins with native options. Runtime auth requires captcha; lastLoginMethod is enabled unless explicitly disabled. */\nexport type AuthPluginOptions = {\n  readonly magicLink?: Parameters<typeof magicLink>[0]\n  readonly emailOTP?: EmailOTPOptions\n  readonly anonymous?: NonNullable<Parameters<typeof anonymous>[0]>\n  readonly captcha?: Omit<CloudflareTurnstileOptions, 'provider'>\n  readonly lastLoginMethod?: false | NonNullable<Parameters<typeof lastLoginMethod>[0]>\n  readonly openAPI?: NonNullable<Parameters<typeof openAPI>[0]>\n  readonly bearer?: NonNullable<Parameters<typeof bearer>[0]>\n  readonly deviceAuthorization?: NonNullable<Parameters<typeof deviceAuthorization>[0]>\n}\n\n/**\n * Runtime auth requires rate limiting and Turnstile credentials. Schema generation omits both.\n * Both modes select plugins through `integrations`, so schema generation must repeat the runtime selection.\n */\nexport type AuthConfig = Omit<BetterAuthOptions, 'database' | 'plugins' | 'rateLimit'> & {\n  readonly rateLimit?: Omit<\n    NonNullable<BetterAuthOptions['rateLimit']>,\n    'enabled' | 'storage' | 'customStorage'\n  >\n} & (\n    | {\n        readonly mode?: 'runtime'\n        readonly rateLimitStorage: BetterAuthRateLimitStorage\n        readonly integrations: AuthPluginOptions & {\n          readonly captcha: Omit<CloudflareTurnstileOptions, 'provider'>\n        }\n      }\n    | {\n        readonly mode: 'schema'\n        readonly rateLimitStorage?: never\n        readonly integrations: AuthPluginOptions\n      }\n  )\n\ntype PluginTypes = {\n  magicLink: ReturnType<typeof magicLink>\n  emailOTP: ReturnType<typeof emailOTP>\n  anonymous: ReturnType<typeof anonymous>\n  captcha: ReturnType<typeof captcha>\n  lastLoginMethod: ReturnType<typeof lastLoginMethod<{}>>\n  openAPI: ReturnType<typeof openAPI>\n  bearer: ReturnType<typeof bearer>\n  deviceAuthorization: ReturnType<typeof deviceAuthorization>\n}\n\ntype LastLoginPlugin<Options extends AuthPluginOptions> = Options extends {\n  readonly lastLoginMethod: infer Settings extends LastLoginMethodOptions\n}\n  ? ReturnType<typeof lastLoginMethod<Settings>>\n  : PluginTypes['lastLoginMethod']\n\ntype SelectedPlugin<Options extends AuthPluginOptions, Key extends keyof PluginTypes> =\n  Options extends Record<Key, false | undefined>\n    ? []\n    : Options extends Record<Key, NonNullable<AuthPluginOptions[Key]>>\n      ? [Key extends 'lastLoginMethod' ? LastLoginPlugin<Options> : PluginTypes[Key]]\n      : Key extends 'lastLoginMethod'\n        ? [PluginTypes[Key]]\n        : []\n\ntype SelectedPlugins<Options extends AuthPluginOptions> = [\n  ...SelectedPlugin<Options, 'captcha'>,\n  ...SelectedPlugin<Options, 'lastLoginMethod'>,\n  ...SelectedPlugin<Options, 'openAPI'>,\n  ...SelectedPlugin<Options, 'magicLink'>,\n  ...SelectedPlugin<Options, 'emailOTP'>,\n  ...SelectedPlugin<Options, 'anonymous'>,\n  ...SelectedPlugin<Options, 'deviceAuthorization'>,\n  ...SelectedPlugin<Options, 'bearer'>,\n]\n\ntype ConfiguredPlugins<Config extends AuthConfig> = SelectedPlugins<Config['integrations']>\n\ntype MergeOptions<Defaults, Overrides> = Omit<Defaults, keyof Overrides> & Overrides\n\ntype SessionOptions<Config extends AuthConfig> = MergeOptions<\n  typeof authDefaults.session,\n  NonNullable<Config['session']>\n>\n\ntype ConfiguredOptions<Config extends AuthConfig, Plugins extends BetterAuthPlugin[]> = Omit<\n  Config,\n  'mode' | 'integrations' | 'rateLimitStorage' | 'rateLimit' | 'session' | 'advanced' | 'onAPIError'\n> & {\n  database: DBAdapterInstance\n  onAPIError: MergeOptions<typeof authDefaults.onAPIError, NonNullable<Config['onAPIError']>>\n  rateLimit: NonNullable<BetterAuthOptions['rateLimit']>\n  session: Omit<SessionOptions<Config>, 'cookieCache'> & {\n    cookieCache: MergeOptions<\n      typeof authDefaults.session.cookieCache,\n      NonNullable<NonNullable<Config['session']>['cookieCache']>\n    >\n  }\n  advanced: MergeOptions<typeof authDefaults.advanced, NonNullable<Config['advanced']>> & {\n    database: MergeOptions<\n      typeof authDefaults.advanced.database,\n      NonNullable<NonNullable<Config['advanced']>['database']>\n    >\n    ipAddress: MergeOptions<\n      typeof authDefaults.advanced.ipAddress,\n      NonNullable<NonNullable<Config['advanced']>['ipAddress']>\n    >\n  }\n  plugins: [...ConfiguredPlugins<Config>, ...Plugins]\n}\n\n/** A required database adapter and application config produce options with inferred plugin and session types. */\nexport type BetterAuthOptionsFactory = <\n  const Config extends AuthConfig,\n  const Plugins extends BetterAuthPlugin[] = [],\n>(\n  database: DBAdapterInstance,\n  config: Config,\n  additionalPlugins?: Plugins,\n) => ConfiguredOptions<Config, Plugins>\n\nfunction buildPlugins<const Options extends AuthPluginOptions>(\n  options: Options,\n): SelectedPlugins<Options> {\n  const plugins: BetterAuthPlugin[] = []\n  if (options.captcha !== undefined) {\n    const captchaOptions = { ...options.captcha }\n    if (captchaOptions.endpoints === undefined) {\n      const endpoints = [...DEFAULT_CAPTCHA_ENDPOINTS]\n      if (options.magicLink !== undefined) endpoints.push(MAGIC_LINK_CAPTCHA_ENDPOINT)\n      if (options.emailOTP !== undefined) endpoints.push(...EMAIL_OTP_CAPTCHA_ENDPOINTS)\n      if (endpoints.length > DEFAULT_CAPTCHA_ENDPOINTS.length) captchaOptions.endpoints = endpoints\n    }\n    plugins.push(captcha({ ...captchaOptions, provider: 'cloudflare-turnstile' }))\n  }\n  if (options.lastLoginMethod !== false) plugins.push(lastLoginMethod(options.lastLoginMethod))\n  if (options.openAPI !== undefined) plugins.push(openAPI(options.openAPI))\n  if (options.magicLink !== undefined)\n    plugins.push(magicLink({ expiresIn: 300, ...options.magicLink }))\n  // Encrypted storage keeps resend reuse possible; an unsalted hash of a six-digit code protects nothing.\n  if (options.emailOTP !== undefined)\n    plugins.push(\n      emailOTP({\n        expiresIn: 300,\n        storeOTP: 'encrypted',\n        resendStrategy: 'reuse',\n        ...options.emailOTP,\n      }),\n    )\n  if (options.anonymous !== undefined) plugins.push(anonymous(options.anonymous))\n  if (options.deviceAuthorization !== undefined)\n    plugins.push(deviceAuthorization(options.deviceAuthorization))\n  if (options.bearer !== undefined) plugins.push(bearer(options.bearer))\n  // SAFETY: Each branch adds exactly the plugin selected by the corresponding configuration key.\n  return plugins as SelectedPlugins<Options>\n}\n\n/**\n * Build native Better Auth options with shared defaults and configured plugins; both arguments are required.\n * Pass Stripe and other plugins in the third argument. Put tanstackStartCookies() last.\n */\nexport const createBetterAuthOptions: BetterAuthOptionsFactory = (\n  database,\n  config,\n  additionalPlugins,\n) => {\n  const { mode, integrations, rateLimitStorage, ...options } = config\n  const result: BetterAuthOptions = {\n    ...options,\n    database,\n    onAPIError: { ...authDefaults.onAPIError, ...options.onAPIError },\n    rateLimit:\n      mode === 'schema'\n        ? { enabled: false }\n        : {\n            ...authDefaults.rateLimit,\n            ...options.rateLimit,\n            enabled: true,\n            customStorage: rateLimitStorage,\n          },\n    session: {\n      ...authDefaults.session,\n      ...options.session,\n      cookieCache: { ...authDefaults.session.cookieCache, ...options.session?.cookieCache },\n    },\n    advanced: {\n      ...authDefaults.advanced,\n      ...options.advanced,\n      database: { ...authDefaults.advanced.database, ...options.advanced?.database },\n      ipAddress: { ...authDefaults.advanced.ipAddress, ...options.advanced?.ipAddress },\n    },\n    plugins: [...buildPlugins(integrations), ...(additionalPlugins ?? [])],\n  }\n  // SAFETY: The factory preserves configured field schemas and plugins while merging only the documented default fields.\n  return result as ConfiguredOptions<typeof config, Exclude<typeof additionalPlugins, undefined>>\n}\n"],"mappings":";;;;;;AAwBA,MAAM,SAAS,aAAa,MAAM;AAGlC,MAAM,4BAA4B;CAAC;CAAkB;CAAkB;AAAyB;AAChG,MAAM,8BAA8B;AAEpC,MAAM,8BAA8B;CAClC;CACA;CACA;AACF;;;;AAKA,MAAa,eAAe;CAC1B,YAAY;EACV,OAAO;EACP,QAAQ,OAAO;GACb,IAAI,WAAW,KAAK,KAAK,MAAM,aAAa,KAAK;GACjD,OAAO,MAAM,yBAAyB,EAAE,MAAM,CAAC;EACjD;CACF;CACA,WAAW;EAAE,QAAQ;EAAI,KAAK;CAAI;CAClC,SAAS;EACP,WAAW;EACX,WAAW;EACX,UAAU;EACV,aAAa;GAAE,SAAS;GAAM,QAAQ;EAAI;CAC5C;CACA,UAAU;EACR,UAAU;GAAE,kBAAkBA,GAAO;GAAG,OAAO;EAAK;EACpD,WAAW,EAAE,kBAAkB,CAAC,oBAAoB,iBAAiB,EAAE;CACzE;AACF;AAwHA,SAAS,aACP,SAC0B;CAC1B,MAAM,UAA8B,CAAC;CACrC,IAAI,QAAQ,YAAY,QAAW;EACjC,MAAM,iBAAiB,EAAE,GAAG,QAAQ,QAAQ;EAC5C,IAAI,eAAe,cAAc,QAAW;GAC1C,MAAM,YAAY,CAAC,GAAG,yBAAyB;GAC/C,IAAI,QAAQ,cAAc,QAAW,UAAU,KAAK,2BAA2B;GAC/E,IAAI,QAAQ,aAAa,QAAW,UAAU,KAAK,GAAG,2BAA2B;GACjF,IAAI,UAAU,SAAS,0BAA0B,QAAQ,eAAe,YAAY;EACtF;EACA,QAAQ,KAAK,QAAQ;GAAE,GAAG;GAAgB,UAAU;EAAuB,CAAC,CAAC;CAC/E;CACA,IAAI,QAAQ,oBAAoB,OAAO,QAAQ,KAAK,gBAAgB,QAAQ,eAAe,CAAC;CAC5F,IAAI,QAAQ,YAAY,QAAW,QAAQ,KAAK,QAAQ,QAAQ,OAAO,CAAC;CACxE,IAAI,QAAQ,cAAc,QACxB,QAAQ,KAAK,UAAU;EAAE,WAAW;EAAK,GAAG,QAAQ;CAAU,CAAC,CAAC;CAElE,IAAI,QAAQ,aAAa,QACvB,QAAQ,KACN,SAAS;EACP,WAAW;EACX,UAAU;EACV,gBAAgB;EAChB,GAAG,QAAQ;CACb,CAAC,CACH;CACF,IAAI,QAAQ,cAAc,QAAW,QAAQ,KAAK,UAAU,QAAQ,SAAS,CAAC;CAC9E,IAAI,QAAQ,wBAAwB,QAClC,QAAQ,KAAK,oBAAoB,QAAQ,mBAAmB,CAAC;CAC/D,IAAI,QAAQ,WAAW,QAAW,QAAQ,KAAK,OAAO,QAAQ,MAAM,CAAC;CAErE,OAAO;AACT;;;;;AAMA,MAAa,2BACX,UACA,QACA,sBACG;CACH,MAAM,EAAE,MAAM,cAAc,kBAAkB,GAAG,YAAY;CA4B7D,OAAO;EA1BL,GAAG;EACH;EACA,YAAY;GAAE,GAAG,aAAa;GAAY,GAAG,QAAQ;EAAW;EAChE,WACE,SAAS,WACL,EAAE,SAAS,MAAM,IACjB;GACE,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,SAAS;GACT,eAAe;EACjB;EACN,SAAS;GACP,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,aAAa;IAAE,GAAG,aAAa,QAAQ;IAAa,GAAG,QAAQ,SAAS;GAAY;EACtF;EACA,UAAU;GACR,GAAG,aAAa;GAChB,GAAG,QAAQ;GACX,UAAU;IAAE,GAAG,aAAa,SAAS;IAAU,GAAG,QAAQ,UAAU;GAAS;GAC7E,WAAW;IAAE,GAAG,aAAa,SAAS;IAAW,GAAG,QAAQ,UAAU;GAAU;EAClF;EACA,SAAS,CAAC,GAAG,aAAa,YAAY,GAAG,GAAI,qBAAqB,CAAC,CAAE;CAG3D;AACd"}

package/dist/cloudflare/auth-secondary-storage.d.ts

@@ -1,4 +1,4 @@
-import { vt as AppError } from "../index-BStnggQO.js";
+import { kt as AppError } from "../index-6XMPJu7u.js";
 import { DurableObject } from "cloudflare:workers";
 //#region src/infrastructure/cloudflare/auth-secondary-storage.d.ts
 /** The supplied TTL cannot produce a valid expiry timestamp. Retrying the same input cannot fix it. */

package/dist/cloudflare/auth-secondary-storage.js

@@ -1,4 +1,4 @@
-import { N as AppError } from "../core-Cx5SeyKV.js";
+import { U as AppError } from "../core-DC_4pOrI.js";
 import { DurableObject } from "cloudflare:workers";
 
 //#region src/infrastructure/cloudflare/auth-secondary-storage.ts

package/dist/cloudflare/queue.d.ts

@@ -0,0 +1,175 @@
+import { At as FailureClassification, U as DomainCommand, W as DomainEvent, kt as AppError } from "../index-6XMPJu7u.js";
+import { z } from "zod";
+//#region src/infrastructure/cloudflare/queue/queue-message.d.ts
+/** A message a queue carries: a command from outside the request, or an event from the outbox. */
+type QueueMessage = DomainCommand | DomainEvent;
+//#endregion
+//#region src/infrastructure/cloudflare/queue/queue-client.d.ts
+/** Cloudflare's delivery delay, in seconds. */
+type QueueSendOptions = {
+  readonly delaySeconds: number;
+};
+/** The two calls the client makes on a queue binding. */
+type QueueBinding<Body> = Pick<Queue<Body>, 'send' | 'sendBatch'>;
+/**
+ * The lanes and the dead letter of one application. A lane is a queue with its own consumer
+ * settings; `laneOf` is the product's routing rule, written once at the composition root.
+ */
+type QueueClientOptions<TMessage extends QueueMessage, Lane extends string> = {
+  readonly queues: Readonly<Record<Lane, QueueBinding<TMessage>>>;
+  /** Where the consumer parks poison bodies. Cloudflare also routes exhausted retries here. */
+  readonly deadLetter: Pick<Queue, 'send'>;
+  readonly laneOf: (message: TMessage) => Lane;
+};
+/** The port an entrypoint, a relay, or a consumer sends through. */
+interface IQueueClient<TMessage extends QueueMessage> {
+  send(message: TMessage, options?: QueueSendOptions): Promise<void>;
+  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>;
+  /** Sends every message within the limits and returns the oversized ones. */
+  sendBatchPartial(messages: ReadonlyArray<TMessage>): Promise<ReadonlyArray<TMessage>>;
+  /** Parks a delivered message's body as it arrived. */
+  sendToDlq(message: Message): Promise<void>;
+}
+/**
+ * Sends messages to the application's queues. Checks the size limits before a send, retries a
+ * transient binding failure a bounded number of times, and converts the final failure to `QueueSendError`.
+ */
+export declare class QueueClient<TMessage extends QueueMessage, Lane extends string> implements IQueueClient<TMessage> {
+  private readonly options;
+  constructor(options: QueueClientOptions<TMessage, Lane>);
+  /** @throws OversizedMessageError before the send. @throws QueueSendError after the retries. */
+  send(message: TMessage, options?: QueueSendOptions): Promise<void>;
+  /** Rejects the whole batch before any send when one message is oversized. */
+  sendBatch(messages: ReadonlyArray<TMessage>): Promise<void>;
+  sendBatchPartial(messages: ReadonlyArray<TMessage>): Promise<ReadonlyArray<TMessage>>;
+  sendToDlq(message: Message): Promise<void>;
+  /** Each lane's chunks retry on their own, so one failed chunk does not resend the others. */
+  private sendSizedBatch;
+  private queueFor;
+  private callQueue;
+}
+//#endregion
+//#region src/infrastructure/cloudflare/queue/queue-consumer.d.ts
+/** Wraps one dispatch: an error-tracking scope, an analytics context. The default runs it as is. */
+type DispatchWrapper<TMessage extends QueueMessage> = (message: TMessage, attempt: number, run: () => Promise<void>) => Promise<void>;
+/** The one call the consumer makes on the bus. */
+type DispatchBus<TMessage extends QueueMessage> = {
+  handle(message: TMessage): Promise<unknown>;
+};
+/**
+ * Parses and dispatches each queue message, then selects acknowledgement or retry.
+ * Cloudflare owns the retry limit and sends exhausted messages to the configured dead letter.
+ * The consumer logs each failure once; handlers do not.
+ */
+export declare class QueueConsumer<TMessage extends QueueMessage> {
+  private readonly bus;
+  private readonly queueClient;
+  private readonly schema;
+  private readonly wrapDispatch;
+  /**
+   * @param bus - Where a parsed message goes.
+   * @param queueClient - Parks an unparseable body in the dead letter.
+   * @param schema - What a body may be: the application's `messages.queueSchema`.
+   * @param wrapDispatch - Wraps one dispatch in the application's context. Default: run it as is.
+   */
+  constructor(bus: DispatchBus<TMessage>, queueClient: Pick<IQueueClient<TMessage>, 'sendToDlq'>, schema: z.ZodType<TMessage>, wrapDispatch?: DispatchWrapper<TMessage>);
+  /** Every message settles on its own. A settlement that throws rejects the batch after its siblings settle. */
+  processBatch(batch: MessageBatch): Promise<void>;
+  private processMessage;
+  /** Returns null on failure; the caller owns the single log point. */
+  private parseMessage;
+  /** Park an unparseable message in the dead letter, then acknowledge its source delivery. */
+  private parkPoison;
+  /**
+   * Retry declared transient and unknown failures so Cloudflare can enforce the attempt ceiling.
+   * Acknowledge only declared terminal failures.
+   */
+  private handleFailure;
+}
+//#endregion
+//#region src/infrastructure/cloudflare/queue/queue-limits.d.ts
+/**
+ * The Cloudflare Queues producer limits with metadata headroom, checked before each send so a
+ * violation never reaches the binding. The dead letter has the same per-message limit.
+ * https://developers.cloudflare.com/queues/platform/limits/
+ */
+export declare const QUEUE_LIMITS: {
+  readonly messageBytes: 127000;
+  readonly batchBytes: 250000;
+  readonly batchCount: 100;
+};
+/** The size the binding measures: the JSON encoding of the body, in UTF-8 bytes. */
+export declare function messageByteLength(message: QueueMessage): number;
+/** A message with its measured size. */
+type SizedMessage<TMessage> = {
+  readonly message: TMessage;
+  readonly bytes: number;
+};
+/** Measure every message once. */
+export declare function sizeMessages<TMessage extends QueueMessage>(messages: ReadonlyArray<TMessage>): SizedMessage<TMessage>[];
+/** Whether one message is over the per-message limit. */
+export declare function isOversized(sized: SizedMessage<QueueMessage>): boolean;
+/** Split a batch at the message-count and byte limits, keeping the order. */
+export declare function chunkByLimits<TMessage>(sized: ReadonlyArray<SizedMessage<TMessage>>): TMessage[][];
+//#endregion
+//#region src/infrastructure/cloudflare/queue/queue.errors.d.ts
+/** The Queue binding calls the client makes. Each is safe to repeat. */
+type QueueOperation = 'send' | 'send_batch' | 'send_dlq';
+/** Classify a raw Queue binding failure: the code table first, then Cloudflare's signals, then transport. */
+export declare function classifyQueueError(cause: unknown): FailureClassification;
+/** A send through a Queue binding failed. The classification says whether an immediate retry may help. */
+export declare class QueueSendError extends AppError {
+  readonly _tag = "QueueSendError";
+  readonly classification: FailureClassification;
+  readonly operation: QueueOperation;
+  constructor(args: {
+    readonly operation: QueueOperation;
+    readonly cause: unknown;
+  });
+}
+/**
+ * A message over the per-message cap can never be sent on any queue; the dead letter has the
+ * same cap. The client detects it before the send, so it never comes from a platform error.
+ */
+export declare class OversizedMessageError extends AppError {
+  readonly _tag = "OversizedMessageError";
+  readonly classification = "terminal";
+  readonly messageName: string;
+  readonly bytes: number;
+  readonly limit: number;
+  constructor(args: {
+    readonly messageName: string;
+    readonly bytes: number;
+    readonly limit: number;
+  });
+}
+/**
+ * The dead letter did not accept an unparseable message. Always transient, whatever the send
+ * failure was, so the source delivery retries instead of acknowledging and losing the body.
+ */
+export declare class DeadLetterUnavailableError extends AppError {
+  readonly _tag = "DeadLetterUnavailableError";
+  readonly classification = "transient";
+  constructor(cause: unknown);
+}
+//#endregion
+//#region src/infrastructure/cloudflare/queue/redelivery-policy.d.ts
+/** How the consumer settles one failed message: acknowledge it, or have Cloudflare redeliver it after a delay. */
+type RedeliveryDecision = {
+  readonly action: 'ack';
+  readonly classification: 'terminal';
+} | {
+  readonly action: 'retry';
+  readonly classification: Exclude<FailureClassification, 'terminal'>;
+  readonly delaySeconds: number;
+};
+/**
+ * Decide whether the consumer acknowledges a failed message or asks Cloudflare to redeliver it.
+ * A terminal failure acknowledges. Transient and unknown failures redeliver: after the advertised
+ * wait plus a spread when the error carries one, else with exponential equal-jitter backoff.
+ * An `AggregateError` from event delivery redelivers when any member does, after the longest wait.
+ */
+export declare function decideRedelivery(cause: unknown, attempt: number): RedeliveryDecision;
+//#endregion
+export type { DispatchBus, DispatchWrapper, IQueueClient, QueueBinding, QueueClientOptions, QueueMessage, QueueOperation, QueueSendOptions, RedeliveryDecision, SizedMessage };
+//# sourceMappingURL=queue.d.ts.map

package/dist/cloudflare/queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.d.ts","names":[],"sources":["../../src/infrastructure/cloudflare/queue/queue-message.ts","../../src/infrastructure/cloudflare/queue/queue-client.ts","../../src/infrastructure/cloudflare/queue/queue-consumer.ts","../../src/infrastructure/cloudflare/queue/queue-limits.ts","../../src/infrastructure/cloudflare/queue/queue.errors.ts","../../src/infrastructure/cloudflare/queue/redelivery-policy.ts"],"mappings":";;;;KAGY,eAAe,gBAAgB;;;;KCa/B;WAA8B;;;KAG9B,aAAa,QAAQ,KAAK,MAAM;;;;;KAMhC,mBAAmB,iBAAiB,cAAc;WACnD,QAAQ,SAAS,OAAO,MAAM,aAAa;;WAE3C,YAAY,KAAK;WACjB,SAAS,SAAS,aAAa;;;UAIzB,aAAa,iBAAiB;EAC7C,KAAK,SAAS,UAAU,UAAU,mBAAmB;EACrD,UAAU,UAAU,cAAc,YAAY;;EAE9C,iBAAiB,UAAU,cAAc,YAAY,QAAQ,cAAc;;EAE3E,UAAU,SAAS,UAAU;;;;;;qBA8BlB,YACX,iBAAiB,cACjB,gCACW,aAAa;mBACK;EAA7B,YAA6B,SAAS,mBAAmB,UAAU;;EAG7D,KAAK,SAAS,UAAU,UAAU,mBAAmB;;EA4BrD,UAAU,UAAU,cAAc,YAAY;EAO9C,iBAAiB,UAAU,cAAc,YAAY,QAAQ,cAAc;EAM3E,UAAU,SAAS,UAAU;;UAQrB;UA4BN;UAIM;;;;;KChJJ,gBAAgB,iBAAiB,iBAC3C,SAAS,UACT,iBACA,WAAW,kBACR;;KAGO,YAAY,iBAAiB;EAEvC,OAAO,SAAS,WAAW;;;;;;;qBAQhB,cAAc,iBAAiB;mBAQvB;mBACA;mBACA;mBACA;;;;;;;EAJnB,YACmB,KAAK,YAAY,WACjB,aAAa,KAAK,aAAa,yBAC/B,QAAQ,EAAE,QAAQ,WAClB,eAAc,gBAAgB;;EAI3C,aAAa,OAAO,eAAe;UAc3B;;UA0BA;;UAMA;;;;;UAaN;;;;;;;;;qBCjGG;WACX;WACA;WACA;;;wBAIc,kBAAkB,SAAS;;KAK/B,aAAa;WAAuB,SAAS;WAAmB;;;wBAG5D,aAAa,iBAAiB,cAC5C,UAAU,cAAc,YACvB,aAAa;;wBAKA,YAAY,OAAO,aAAa;;wBAKhC,cAAc,UAC5B,OAAO,cAAc,aAAa,aACjC;;;;KCjCS;;wBA4CI,mBAAmB,iBAAiB;;qBASvC,uBAAuB;WACzB;WACA,gBAAgB;WAChB,WAAW;EAEpB,YAAY;aAAiB,WAAW;aAAyB;;;;;;;qBAWtD,8BAA8B;WAChC;WACA;WACA;WACA;WACA;EAET,YAAY;aACD;aACA;aACA;;;;;;;qBAeA,mCAAmC;WACrC;WACA;EAET,YAAY;;;;;KCrFF;WACG;WAAwB;;WAExB;WACA,gBAAgB,QAAQ;WACxB;;;;;;;;wBASC,iBAAiB,gBAAgB,kBAAkB"}