cursedbelt 0.0.0

package/dist/server/db/plumbingTypes.d.ts

@@ -0,0 +1,117 @@
+/**
+ * TypeScript row interfaces for the *plumbing* tables — the structural, non-business
+ * tables cursedbelt owns: sessions, config, logs, metrics, jobs, the migration
+ * sentinel. These get Kysely-typed access (see `./kysely`) so the toolkit's own
+ * queries are type-checked.
+ *
+ * Business / feature tables (notes, lists, shares, …) deliberately stay OUT of this
+ * schema: they keep raw `db.query()` + flexible `data JSON`, so the Kysely schema is
+ * not coupled to every feature table. Shapes mirror the canonical DDL (task 22,
+ * `0001_initial`). INTEGER booleans are kept as `number` (SQLite has no real bool).
+ */
+export interface AuthSessionRow {
+    session_id: string;
+    user_id: string;
+    created_at: string;
+    last_seen_at: string;
+    refresh_expires_at: string;
+    access_expires_at: string | null;
+    /** 0 | 1 — the `/f` GET-only restriction, enforced + audited per session. */
+    get_only: number;
+    /** 0 | 1 */
+    disabled: number;
+    disabled_at: string | null;
+    disabled_by: string | null;
+    user_agent: string | null;
+    ip: string | null;
+}
+export interface AppConfigRow {
+    key: string;
+    value: string;
+    updated_at: string;
+    updated_by: string | null;
+}
+export interface EventLogRow {
+    id: string;
+    correlation_id: string | null;
+    event_name: string;
+    /** info | warn | error (free text, defaults to 'info'). */
+    type: string;
+    message: string | null;
+    /** JSON blob of structured detail. */
+    details: string | null;
+    duration_ms: number | null;
+    user_id: string | null;
+    created_at: string;
+}
+export interface RequestMetricRow {
+    id: string;
+    /** Epoch ms. */
+    ts: number;
+    method: string | null;
+    route: string | null;
+    status: number | null;
+    duration_ms: number | null;
+    bytes_out: number | null;
+    user_id: string | null;
+}
+export interface SystemSampleRow {
+    id: string;
+    /** Epoch ms. */
+    ts: number;
+    rss: number | null;
+    heap_used: number | null;
+    heap_total: number | null;
+    os_used: number | null;
+    os_total: number | null;
+    uptime_s: number | null;
+    event_loop_lag_ms: number | null;
+    ws_clients: number | null;
+    req_count: number | null;
+    err_count: number | null;
+    avg_duration_ms: number | null;
+}
+export interface EmailFailureRow {
+    id: string;
+    created_at: string;
+    recipient: string;
+    subject: string;
+    /** Defaults to 'send_error'. */
+    reason: string;
+    error_name: string | null;
+    error_code: string | null;
+    error_message: string | null;
+    details: string | null;
+}
+export interface JobStateRow {
+    name: string;
+    last_run_at: string | null;
+    /** JSON blob. */
+    meta: string | null;
+}
+export interface JobRunRow {
+    id: string;
+    job_name: string;
+    started_at: string;
+    ended_at: string | null;
+    /** running | ok | error (defaults to 'running'). */
+    status: string;
+    error: string | null;
+}
+export interface MigrationRow {
+    name: string;
+    applied_at: string;
+}
+/** The Kysely database schema for cursedbelt plumbing tables. */
+export interface PlumbingSchema {
+    auth_sessions: AuthSessionRow;
+    app_config: AppConfigRow;
+    event_logs: EventLogRow;
+    request_metrics: RequestMetricRow;
+    system_samples: SystemSampleRow;
+    email_failures: EmailFailureRow;
+    job_state: JobStateRow;
+    job_runs: JobRunRow;
+    _migrations: MigrationRow;
+}
+//# sourceMappingURL=plumbingTypes.d.ts.map

package/dist/server/db/plumbingTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plumbingTypes.d.ts","sourceRoot":"","sources":["../../../src/server/db/plumbingTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sCAAsC;IACtC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,cAAc,CAAC;IAC9B,UAAU,EAAE,YAAY,CAAC;IACzB,UAAU,EAAE,WAAW,CAAC;IACxB,eAAe,EAAE,gBAAgB,CAAC;IAClC,cAAc,EAAE,eAAe,CAAC;IAChC,cAAc,EAAE,eAAe,CAAC;IAChC,SAAS,EAAE,WAAW,CAAC;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,WAAW,EAAE,YAAY,CAAC;CAC3B"}

package/dist/server/db/plumbingTypes.js

@@ -0,0 +1,13 @@
+/**
+ * TypeScript row interfaces for the *plumbing* tables — the structural, non-business
+ * tables cursedbelt owns: sessions, config, logs, metrics, jobs, the migration
+ * sentinel. These get Kysely-typed access (see `./kysely`) so the toolkit's own
+ * queries are type-checked.
+ *
+ * Business / feature tables (notes, lists, shares, …) deliberately stay OUT of this
+ * schema: they keep raw `db.query()` + flexible `data JSON`, so the Kysely schema is
+ * not coupled to every feature table. Shapes mirror the canonical DDL (task 22,
+ * `0001_initial`). INTEGER booleans are kept as `number` (SQLite has no real bool).
+ */
+export {};
+//# sourceMappingURL=plumbingTypes.js.map

package/dist/server/db/plumbingTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plumbingTypes.js","sourceRoot":"","sources":["../../../src/server/db/plumbingTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/server/errors.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The canonical server error + error-envelope mapping for cursedbelt apps.
+ *
+ * Every API failure — thrown deep in a handler or surfaced by middleware — is
+ * shaped into ONE wire contract: `{ error: { message, code?, context? } }`.
+ * Clients parse exactly this shape (field-level form errors ride `context.errors`),
+ * so there is no per-route error drift.
+ *
+ * `ApiError` is the throwable: `throw new ApiError(404, 'not found')`. The
+ * {@link errorEnvelope} Hono `onError` handler turns it (and any other thrown
+ * value) into the envelope + the right HTTP status.
+ */
+/** The canonical error wire shape returned by every cursedbelt endpoint. */
+export interface ErrorEnvelope {
+    error: {
+        message: string;
+        /** Stable machine code (e.g. `rate_limited`, `validation_failed`). */
+        code?: string;
+        /** Structured detail — e.g. `{ errors: [...] }` for field-level validation. */
+        context?: Record<string, unknown>;
+    };
+}
+export interface ApiErrorOptions {
+    /** Stable machine code carried into the envelope. */
+    code?: string;
+    /** Structured detail carried into the envelope (e.g. `{ errors }`). */
+    context?: Record<string, unknown>;
+    /** Underlying cause, preserved for server-side logging (never serialized). */
+    cause?: unknown;
+}
+/**
+ * A throwable HTTP error carrying its status + canonical-envelope fields. Throw it
+ * anywhere in a handler/middleware; {@link errorEnvelope} maps it to the response.
+ */
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly code?: string;
+    readonly context?: Record<string, unknown>;
+    constructor(status: number, message: string, options?: ApiErrorOptions);
+}
+/** Type guard for {@link ApiError}. */
+export declare const isApiError: (value: unknown) => value is ApiError;
+/**
+ * Map any thrown value to the canonical envelope. `ApiError` contributes its
+ * `code`/`context`; a plain `Error` contributes its message; anything else is
+ * stringified. Undefined fields are omitted so the wire shape stays minimal.
+ *
+ * Note: this preserves the real message. The {@link errorEnvelope} middleware is
+ * what decides whether to *expose* it — unexpected 5xx errors are sanitized there.
+ */
+export declare function toErrorEnvelope(err: unknown): ErrorEnvelope;
+//# sourceMappingURL=errors.d.ts.map

package/dist/server/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAC;QAChB,sEAAsE;QACtE,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,+EAA+E;QAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE/B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB;CAO3E;AAED,uCAAuC;AACvC,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,QAAqC,CAAC;AAE3F;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAS3D"}

package/dist/server/errors.js

@@ -0,0 +1,52 @@
+/**
+ * The canonical server error + error-envelope mapping for cursedbelt apps.
+ *
+ * Every API failure — thrown deep in a handler or surfaced by middleware — is
+ * shaped into ONE wire contract: `{ error: { message, code?, context? } }`.
+ * Clients parse exactly this shape (field-level form errors ride `context.errors`),
+ * so there is no per-route error drift.
+ *
+ * `ApiError` is the throwable: `throw new ApiError(404, 'not found')`. The
+ * {@link errorEnvelope} Hono `onError` handler turns it (and any other thrown
+ * value) into the envelope + the right HTTP status.
+ */
+/**
+ * A throwable HTTP error carrying its status + canonical-envelope fields. Throw it
+ * anywhere in a handler/middleware; {@link errorEnvelope} maps it to the response.
+ */
+export class ApiError extends Error {
+    status;
+    code;
+    context;
+    constructor(status, message, options = {}) {
+        super(message, options.cause !== undefined ? { cause: options.cause } : undefined);
+        this.name = 'ApiError';
+        this.status = status;
+        this.code = options.code;
+        this.context = options.context;
+    }
+}
+/** Type guard for {@link ApiError}. */
+export const isApiError = (value) => value instanceof ApiError;
+/**
+ * Map any thrown value to the canonical envelope. `ApiError` contributes its
+ * `code`/`context`; a plain `Error` contributes its message; anything else is
+ * stringified. Undefined fields are omitted so the wire shape stays minimal.
+ *
+ * Note: this preserves the real message. The {@link errorEnvelope} middleware is
+ * what decides whether to *expose* it — unexpected 5xx errors are sanitized there.
+ */
+export function toErrorEnvelope(err) {
+    if (isApiError(err)) {
+        const error = { message: err.message };
+        if (err.code !== undefined)
+            error.code = err.code;
+        if (err.context !== undefined)
+            error.context = err.context;
+        return { error };
+    }
+    if (err instanceof Error)
+        return { error: { message: err.message } };
+    return { error: { message: String(err) } };
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsBH;;;GAGG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,MAAM,CAAS;IACf,IAAI,CAAU;IACd,OAAO,CAA2B;IAE3C,YAAY,MAAc,EAAE,OAAe,EAAE,UAA2B,EAAE;QACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,KAAK,YAAY,QAAQ,CAAC;AAE3F;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAA2B,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QAClD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC7C,CAAC"}

package/dist/server/index.d.ts

@@ -0,0 +1,23 @@
+export { ChunkStore, type ChunkStoreOpts, CTGR_WIRE_VERSION, type CtgrDecoded, type CtgrMethod, decodeRequest, type EncodedRequest, type EncodeOpts, encodeRequest, type UploadedFile, } from '../ctgr';
+export { type CreateAppOpts, createApp, type ServeBunOpts, serveBun } from './app';
+export { type AppJwtPayload, AUTH_COOKIE_NAME, type AuthEnv, type AuthUser, type AuthVariables, type CreateSessionInput, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type CsrfOptions, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, createLoginThrottle, createSessionStore, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, type LoginThrottle, type LoginThrottleOptions, needsRehash, type Session, type SessionStore, type SessionStoreOptions, signToken, type TokenPurpose, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
+export type { CursedbeltEnv, CursedbeltVariables } from './context';
+export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
+export { createKysely, type PlumbingDb } from './db/kysely';
+export type { AppConfigRow, AuthSessionRow, EmailFailureRow, EventLogRow, JobRunRow, JobStateRow, MigrationRow, PlumbingSchema, RequestMetricRow, SystemSampleRow, } from './db/plumbingTypes';
+export { ApiError, type ApiErrorOptions, type ErrorEnvelope, isApiError, toErrorEnvelope, } from './errors';
+export { type CreateJobRunnerOptions, createFireQueue, createJobRunner, createPollingJob, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, defaultJobLogger, type FireQueue, type FireQueueOpts, type JobContext, type JobDef, type JobLogger, type JobRunner, type JobRunRecord, JobTimeoutError, type PollingJob, type PollingJobOpts, } from './jobs';
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ffmpegTimeToSeconds, isFfmpegAvailable, isFfprobeAvailable, type ProbeResult, parseFfmpegProgress, parseFfprobe, probeMedia, renderImage, trimVideo, type VideoCodecPlan, videoCodecPlan, } from './media-bun';
+export { createMetricsBuffer, type MetricRow, type MetricsBuffer, type MetricsBufferOptions, } from './metrics/metricsBuffer';
+export { normalizeRoute } from './metrics/normalizeRoute';
+export { correlationId } from './middleware/correlationId';
+export { errorEnvelope } from './middleware/errorEnvelope';
+export { clientIp, createRateLimiter, type RateLimitOpts } from './middleware/rateLimit';
+export { type RequestLoggerOpts, requestLogger } from './middleware/requestLogger';
+export { type CspDirectives, type SecurityHeadersOpts, securityHeaders, } from './middleware/securityHeaders';
+export { type FieldError, toFieldErrors, VALIDATION_ERROR_CODE, validationEnvelope, type ZValidatorTarget, zValidator, } from './middleware/zValidator';
+export { addColumnIfMissing, applyRecommendedPragmas, columnExists, type PragmaOptions, runMigrations, } from './migration/runner';
+export type { Migration } from './migration/types';
+export { applyFtsSchema, type BackupInfo, buildFtsSchema, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, isReadOnlySql, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, sanitizeFtsQuery, } from './sqlite';
+export { computePresence, createEventBus, createWsHub, type EventBus, type EventBusData, joinRoom, leaveRoom, type PresenceEntry, type PresenceState, ROOM_META_KEY, roomOf, type WsChannel, type WsClient, type WsData, type WsHandshake, type WsHub, type WsHubOpts, type WsMessage, } from './ws';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGnF,OAAO,EACL,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,WAAW,EAChB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,WAAW,EACX,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,YAAY,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEnF,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EACV,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,QAAQ,EACR,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,sBAAsB,EAC3B,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,QAAQ,CAAC;AAKhB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,WAAW,EAChB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,KAAK,UAAU,EACf,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,aAAa,EACb,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,QAAQ,EACR,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,aAAa,EACb,MAAM,EACN,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,MAAM,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,46 @@
+// cursedbelt server toolkit — native Hono on Bun.serve. Consumed by ca + ru.
+//
+// HTTP app + middleware + the canonical error envelope + a versioned SQLite
+// migration runner + Kysely-typed access for the plumbing tables. Business routes,
+// auth model, sharing, jobs, and `data JSON` tables stay in the apps; cursedbelt
+// owns the plumbing.
+// ── ctgr (isomorphic codec re-exports + the Hono GET-tunnel transport) ───────
+export { ChunkStore, CTGR_WIRE_VERSION, decodeRequest, encodeRequest, } from '../ctgr';
+// ── HTTP app ────────────────────────────────────────────────────────────────
+export { createApp, serveBun } from './app';
+// ── Auth toolkit (task 26): jose JWT, cookies, CSRF, getOnly, session store, ──
+//    login throttle, argon2id passwords, TOTP, vault crypto, the composed middleware.
+export { AUTH_COOKIE_NAME, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, createLoginThrottle, createSessionStore, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, needsRehash, signToken, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
+export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
+// ── Kysely-typed plumbing tables ────────────────────────────────────────────
+export { createKysely } from './db/kysely';
+// ── Errors ──────────────────────────────────────────────────────────────────
+export { ApiError, isApiError, toErrorEnvelope, } from './errors';
+// ── Jobs & scheduler (task 29): plainjob-backed cron runner + restart-aware ───
+//    pollers + the due-row fire queue. App job *definitions* stay business.
+export { createFireQueue, createJobRunner, createPollingJob, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, defaultJobLogger, JobTimeoutError, } from './jobs';
+// ── Media adapter (task 19): image rendering via sharp (lazy/optional peer) + ──
+//    video trim / probe / thumbnail via native ffmpeg. Also at the dedicated
+//    `cursedbelt/server/media` entry; sharp is imported lazily inside renderImage,
+//    so importing this barrel never loads the native binary.
+export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ffmpegTimeToSeconds, isFfmpegAvailable, isFfprobeAvailable, parseFfmpegProgress, parseFfprobe, probeMedia, renderImage, trimVideo, videoCodecPlan, } from './media-bun';
+// ── Metrics ───────────────────────────────────────────────────────────────────
+export { createMetricsBuffer, } from './metrics/metricsBuffer';
+export { normalizeRoute } from './metrics/normalizeRoute';
+// ── Middleware ────────────────────────────────────────────────────────────────
+export { correlationId } from './middleware/correlationId';
+export { errorEnvelope } from './middleware/errorEnvelope';
+export { clientIp, createRateLimiter } from './middleware/rateLimit';
+export { requestLogger } from './middleware/requestLogger';
+export { securityHeaders, } from './middleware/securityHeaders';
+// ── zod validation toolkit ────────────────────────────────────────────────────
+export { toFieldErrors, VALIDATION_ERROR_CODE, validationEnvelope, zValidator, } from './middleware/zValidator';
+// ── Migration runner ──────────────────────────────────────────────────────────
+export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations, } from './migration/runner';
+// ── SQLite toolkit extras (task 30): FTS5 ranked search + DDL generator, the ───
+//    read-only DB viewer middleware, the VACUUM-INTO backup service, DB health probes.
+export { applyFtsSchema, buildFtsSchema, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, isReadOnlySql, sanitizeFtsQuery, } from './sqlite';
+// ── WebSocket hub (task 28): Bun-native upgrade, channel registry, heartbeat, ──
+//    presence-as-a-view, room helpers, and the push-only event-bus subset (ru).
+export { computePresence, createEventBus, createWsHub, joinRoom, leaveRoom, ROOM_META_KEY, roomOf, } from './ws';
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,mFAAmF;AACnF,iFAAiF;AACjF,qBAAqB;AAErB,gFAAgF;AAChF,OAAO,EACL,UAAU,EAEV,iBAAiB,EAGjB,aAAa,EAGb,aAAa,GAEd,MAAM,SAAS,CAAC;AACjB,+EAA+E;AAC/E,OAAO,EAAsB,SAAS,EAAqB,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnF,iFAAiF;AACjF,sFAAsF;AACtF,OAAO,EAEL,gBAAgB,EAKhB,gBAAgB,EAChB,gBAAgB,EAEhB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAGlB,WAAW,EAIX,SAAS,EAET,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnF,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAmB,MAAM,aAAa,CAAC;AAa5D,+EAA+E;AAC/E,OAAO,EACL,QAAQ,EAGR,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,iFAAiF;AACjF,4EAA4E;AAC5E,OAAO,EAEL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAQhB,eAAe,GAGhB,MAAM,QAAQ,CAAC;AAChB,kFAAkF;AAClF,6EAA6E;AAC7E,mFAAmF;AACnF,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAElB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EAET,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,iFAAiF;AACjF,OAAO,EACL,mBAAmB,GAIpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAA0B,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAGL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,iFAAiF;AACjF,OAAO,EAEL,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAElB,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EAEZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,kFAAkF;AAClF,uFAAuF;AACvF,OAAO,EACL,cAAc,EAEd,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAO5B,aAAa,EAQb,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,kFAAkF;AAClF,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EAGX,QAAQ,EACR,SAAS,EAGT,aAAa,EACb,MAAM,GAQP,MAAM,MAAM,CAAC"}

package/dist/server/jobs/fireQueue.d.ts

@@ -0,0 +1,13 @@
+import { type FireQueue, type FireQueueOpts } from './types';
+/**
+ * The "select due rows → deliver each → mark sent" pattern, as a {@link PollingJob}.
+ * This is ca's `event_reminders` / `alarms` delivery loop generalized: each poll
+ * pulls the due rows, delivers them one at a time, and marks each sent only after a
+ * successful delivery. A failed `deliver` routes to `onError` and is logged, and
+ * the loop CONTINUES with the next item — one bad row never stalls the queue.
+ *
+ * Because it fires once on boot (default), any rows that came due while the process
+ * was down are delivered on the first poll after restart.
+ */
+export declare function createFireQueue<T>(opts: FireQueueOpts<T>): FireQueue;
+//# sourceMappingURL=fireQueue.d.ts.map

package/dist/server/jobs/fireQueue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fireQueue.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/fireQueue.ts"],"names":[],"mappings":"AAEA,OAAO,EAA4B,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAEvF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,SAAS,CAsBpE"}

package/dist/server/jobs/fireQueue.js

@@ -0,0 +1,38 @@
+import { defaultJobLogger } from './logger';
+import { createPollingJob } from './polling';
+import { DEFAULT_FIRE_INTERVAL_MS } from './types';
+/**
+ * The "select due rows → deliver each → mark sent" pattern, as a {@link PollingJob}.
+ * This is ca's `event_reminders` / `alarms` delivery loop generalized: each poll
+ * pulls the due rows, delivers them one at a time, and marks each sent only after a
+ * successful delivery. A failed `deliver` routes to `onError` and is logged, and
+ * the loop CONTINUES with the next item — one bad row never stalls the queue.
+ *
+ * Because it fires once on boot (default), any rows that came due while the process
+ * was down are delivered on the first poll after restart.
+ */
+export function createFireQueue(opts) {
+    const logger = opts.logger ?? defaultJobLogger;
+    return createPollingJob({
+        name: opts.name,
+        db: opts.db,
+        intervalMs: opts.intervalMs ?? DEFAULT_FIRE_INTERVAL_MS,
+        runOnBoot: opts.runOnBoot,
+        logger,
+        async run({ db, signal }) {
+            for (const item of opts.getDue(db)) {
+                if (signal.aborted)
+                    break;
+                try {
+                    await opts.deliver(item, db);
+                    opts.markSent(item, db);
+                }
+                catch (err) {
+                    opts.onError?.(item, err);
+                    logger.error(`[fireQueue] ${opts.name} delivery failed`, err);
+                }
+            }
+        },
+    });
+}
+//# sourceMappingURL=fireQueue.js.map

package/dist/server/jobs/fireQueue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fireQueue.js","sourceRoot":"","sources":["../../../src/server/jobs/fireQueue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAsC,MAAM,SAAS,CAAC;AAEvF;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAI,IAAsB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAE/C,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,wBAAwB;QACvD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM;QACN,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnC,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM;gBAC1B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC1B,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,IAAI,kBAAkB,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/server/jobs/index.d.ts

@@ -0,0 +1,7 @@
+export { createFireQueue } from './fireQueue';
+export { defaultJobLogger } from './logger';
+export { createPollingJob } from './polling';
+export { createJobRunner } from './runner';
+export { JobTimeoutError } from './timeout';
+export { type CreateJobRunnerOptions, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, type FireQueue, type FireQueueOpts, type JobContext, type JobDef, type JobLogger, type JobRunner, type JobRunRecord, type PollingJob, type PollingJobOpts, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/jobs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC"}

package/dist/server/jobs/index.js

@@ -0,0 +1,11 @@
+// cursedbelt jobs & scheduler — the in-process scheduled-work engine shared by
+// ca + ru. cursedbelt owns the mechanism (durable cron scheduling via plainjob,
+// restart-aware pollers, the due-row fire queue, run auditing); app job
+// *definitions* stay business and consume these primitives.
+export { createFireQueue } from './fireQueue';
+export { defaultJobLogger } from './logger';
+export { createPollingJob } from './polling';
+export { createJobRunner } from './runner';
+export { JobTimeoutError } from './timeout';
+export { DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, } from './types';
+//# sourceMappingURL=index.js.map

package/dist/server/jobs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,4DAA4D;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAEL,wBAAwB,EACxB,sBAAsB,GAUvB,MAAM,SAAS,CAAC"}

package/dist/server/jobs/logger.d.ts

@@ -0,0 +1,11 @@
+import type { JobLogger } from './types';
+/**
+ * The default job logger: warn/info/error go to the console, `debug` is a no-op.
+ *
+ * The underlying plainjob worker logs at `debug` on *every* poll ("checking for
+ * scheduled jobs", once per second by default), so a console `debug` would spam.
+ * Silencing it here keeps the default quiet while still surfacing real problems.
+ * Inject your own {@link JobLogger} (e.g. the app logger) to capture debug.
+ */
+export declare const defaultJobLogger: JobLogger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/server/jobs/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzC;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAK9B,CAAC"}

package/dist/server/jobs/logger.js

@@ -0,0 +1,15 @@
+/**
+ * The default job logger: warn/info/error go to the console, `debug` is a no-op.
+ *
+ * The underlying plainjob worker logs at `debug` on *every* poll ("checking for
+ * scheduled jobs", once per second by default), so a console `debug` would spam.
+ * Silencing it here keeps the default quiet while still surfacing real problems.
+ * Inject your own {@link JobLogger} (e.g. the app logger) to capture debug.
+ */
+export const defaultJobLogger = {
+    error: (message, ...meta) => console.error(message, ...meta),
+    warn: (message, ...meta) => console.warn(message, ...meta),
+    info: (message, ...meta) => console.info(message, ...meta),
+    debug: () => { },
+};
+//# sourceMappingURL=logger.js.map

package/dist/server/jobs/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/server/jobs/logger.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IAC5D,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IAC1D,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IAC1D,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC"}

package/dist/server/jobs/plainjobAdapter.d.ts

@@ -0,0 +1,20 @@
+import type { Database } from 'bun:sqlite';
+import type { Connection } from 'plainjob';
+/**
+ * A plainjob {@link Connection} over a `bun:sqlite` Database, with two deliberate
+ * deviations from plainjob's own `bun()` adapter:
+ *
+ *  1. **Named-parameter binding fix.** plainjob binds its prepared statements with
+ *     *bare* object keys (`{ type, cronExpression }`). On Bun ≥ 1.3 `bun:sqlite`
+ *     requires the sigil — bare keys silently bind NULL (→ `NOT NULL constraint
+ *     failed`). This adapter rewrites each object key to `@key` (leaving keys that
+ *     already carry an `@ $ :` sigil, and non-object/positional params, untouched),
+ *     so plainjob runs unmodified on current Bun. Remove once plainjob ships a fix.
+ *
+ *  2. **`close()` is a no-op.** plainjob's queue and the app share ONE connection;
+ *     `queue.close()` would otherwise close the app's database out from under it.
+ *     Closing is the app's job — the runner only stops the queue's maintenance
+ *     timer (which `queue.close()` still does). The DB outlives the runner.
+ */
+export declare function createPlainjobConnection(database: Database): Connection;
+//# sourceMappingURL=plainjobAdapter.d.ts.map

package/dist/server/jobs/plainjobAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plainjobAdapter.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/plainjobAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAkCvE"}

package/dist/server/jobs/plainjobAdapter.js

@@ -0,0 +1,49 @@
+/**
+ * A plainjob {@link Connection} over a `bun:sqlite` Database, with two deliberate
+ * deviations from plainjob's own `bun()` adapter:
+ *
+ *  1. **Named-parameter binding fix.** plainjob binds its prepared statements with
+ *     *bare* object keys (`{ type, cronExpression }`). On Bun ≥ 1.3 `bun:sqlite`
+ *     requires the sigil — bare keys silently bind NULL (→ `NOT NULL constraint
+ *     failed`). This adapter rewrites each object key to `@key` (leaving keys that
+ *     already carry an `@ $ :` sigil, and non-object/positional params, untouched),
+ *     so plainjob runs unmodified on current Bun. Remove once plainjob ships a fix.
+ *
+ *  2. **`close()` is a no-op.** plainjob's queue and the app share ONE connection;
+ *     `queue.close()` would otherwise close the app's database out from under it.
+ *     Closing is the app's job — the runner only stops the queue's maintenance
+ *     timer (which `queue.close()` still does). The DB outlives the runner.
+ */
+export function createPlainjobConnection(database) {
+    const prefixKeys = (params) => params.map((param) => {
+        if (!param || typeof param !== 'object' || Array.isArray(param))
+            return param;
+        return Object.fromEntries(Object.entries(param).map(([key, value]) => [
+            /^[@$:]/.test(key) ? key : `@${key}`,
+            value,
+        ]));
+    });
+    return {
+        driver: 'bun:sqlite',
+        filename: database.filename,
+        pragma: (stmt) => {
+            database.exec(`PRAGMA ${stmt};`);
+        },
+        exec: (stmt) => {
+            database.exec(stmt);
+        },
+        transaction: database.transaction.bind(database),
+        prepare: (sql) => {
+            const stmt = database.query(sql);
+            return {
+                run: (...params) => stmt.run(...prefixKeys(params)),
+                get: (...params) => stmt.get(...prefixKeys(params)),
+                all: (...params) => stmt.all(...prefixKeys(params)),
+            };
+        },
+        close: () => {
+            // Intentionally empty — the app owns the shared DB's lifecycle.
+        },
+    };
+}
+//# sourceMappingURL=plainjobAdapter.js.map

package/dist/server/jobs/plainjobAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plainjobAdapter.js","sourceRoot":"","sources":["../../../src/server/jobs/plainjobAdapter.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAkB;IACzD,MAAM,UAAU,GAAG,CAAC,MAAiB,EAAa,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9E,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE;YACpC,KAAK;SACN,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvB,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE;YACrB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAA8B;QAC7E,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO;gBACL,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,UAAU,CAAC,MAAM,CAAa,CAAC;gBAC3E,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,UAAU,CAAC,MAAM,CAAa,CAAC;gBAC3E,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAI,UAAU,CAAC,MAAM,CAAa,CAAC;aAC5E,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,gEAAgE;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/jobs/polling.d.ts

@@ -0,0 +1,18 @@
+import type { PollingJob, PollingJobOpts } from './types';
+/**
+ * A periodic, restart-aware poller — the engine behind ca's `setInterval`
+ * scheduler, alarm check, and metrics flush. On each tick it runs the handler and,
+ * on success, upserts `job_state.last_run_at` so the *last successful* time
+ * survives a restart (the `runOnBoot` + `last_run_at` pair is how a missed daily
+ * job catches up: fire on boot, and the handler skips if it already ran recently).
+ *
+ * Hardening over a bare `setInterval`:
+ *  - the timer is `unref()`'d, so a poller never keeps the process alive on its own;
+ *  - ticks are non-reentrant — a slow run can't pile up overlapping fires;
+ *  - {@link PollingJob.stop} aborts the in-flight run's context signal;
+ *  - a thrown handler is logged and does NOT advance `last_run_at`.
+ *
+ * `job_state` must already exist (the app's migration runner builds it).
+ */
+export declare function createPollingJob(opts: PollingJobOpts): PollingJob;
+//# sourceMappingURL=polling.d.ts.map

package/dist/server/jobs/polling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/polling.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CA8CjE"}