effect-jobs 0.1.0-alpha.0

package/dist/PostgreSqlSchema.js

@@ -0,0 +1,63 @@
+import { Data } from "effect";
+import { createHash } from "node:crypto";
+export class PostgreSqlConfigurationError extends Data.TaggedError("PostgreSqlConfigurationError") {
+}
+const identifier = (value, field) => {
+    if (!/^[a-z_][a-z0-9_]{0,62}$/.test(value)) {
+        throw new PostgreSqlConfigurationError({ field });
+    }
+    return value;
+};
+/** Configuration only; no database access. Names are PostgreSQL identifiers, not SQL. */
+export const tables = (options = {}) => {
+    const schema = identifier(options.schema ?? "public", "schema");
+    const jobsTable = identifier(options.jobsTable ?? "jobs", "jobsTable");
+    const payloadsTable = identifier(options.payloadsTable ?? "job_payloads", "payloadsTable");
+    if (jobsTable === payloadsTable) {
+        throw new PostgreSqlConfigurationError({ field: "payloadsTable" });
+    }
+    return Object.freeze({ schema, jobsTable, payloadsTable });
+};
+/** Quote only validated names; never interpolate producer/catalog values. */
+export const relations = (mapping) => {
+    const checked = tables(mapping);
+    return {
+        jobs: `"${checked.schema}"."${checked.jobsTable}"`,
+        payloads: `"${checked.schema}"."${checked.payloadsTable}"`
+    };
+};
+/** Schema-wide index names remain bounded without truncating away table identity. */
+export const indexPrefix = (mapping) => `${mapping.jobsTable.slice(0, 32)}_${createHash("sha256").update(mapping.jobsTable).digest("hex").slice(0, 16)}`;
+/** Application migration input. Runtime never invokes this DDL. Schema must already exist. */
+export const migration = (mapping = tables()) => {
+    const { jobs, payloads } = relations(mapping);
+    // Index names are table-local derivatives bounded below PostgreSQL's 63-byte limit.
+    const prefix = indexPrefix(mapping);
+    return `CREATE TABLE ${jobs} (
+  id text PRIMARY KEY,
+  operation text NOT NULL, operation_id text NOT NULL, slot text NOT NULL,
+  queue text NOT NULL, kind text NOT NULL, version integer NOT NULL,
+  policy jsonb NOT NULL, initial_available_at bigint,
+  state text NOT NULL CHECK (state IN ('Pending','Active','RetryScheduled','Completed','Dead','Isolated')),
+  available_at bigint NOT NULL, updated_at bigint NOT NULL,
+  attempts_made bigint NOT NULL DEFAULT 0 CHECK (attempts_made >= 0),
+  stalled_count bigint NOT NULL DEFAULT 0 CHECK (stalled_count >= 0),
+  lifecycle_version bigint NOT NULL DEFAULT 0 CHECK (lifecycle_version >= 0),
+  lease_token text, lease_expires_at bigint, completed_at bigint, last_failure_code text, cleanup_at bigint,
+  UNIQUE (operation, operation_id, slot), UNIQUE (lease_token),
+  CHECK ((state = 'Active') = (lease_token IS NOT NULL AND lease_expires_at IS NOT NULL)),
+  CHECK (state = 'Active' OR (lease_token IS NULL AND lease_expires_at IS NULL)),
+  CHECK ((state IN ('Completed','Dead')) = (completed_at IS NOT NULL))
+);
+CREATE TABLE ${payloads} (
+  job_id text PRIMARY KEY REFERENCES ${jobs}(id) ON DELETE CASCADE,
+  format_version integer NOT NULL,
+  payload bytea NOT NULL CHECK (octet_length(payload) BETWEEN 1 AND 65536),
+  projection bytea NOT NULL CHECK (octet_length(projection) BETWEEN 1 AND 65536)
+);
+CREATE INDEX "${prefix}_due" ON ${jobs} (queue, kind, version, available_at, id)
+  WHERE state IN ('Pending','RetryScheduled');
+CREATE INDEX "${prefix}_expired" ON ${jobs} (lease_expires_at, id) WHERE state = 'Active';
+CREATE INDEX "${prefix}_terminal" ON ${jobs} (cleanup_at, id) WHERE state IN ('Completed','Dead');`;
+};
+//# sourceMappingURL=PostgreSqlSchema.js.map

package/dist/PostgreSqlSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgreSqlSchema.js","sourceRoot":"","sources":["../src/PostgreSqlSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAO9B;CAAG;AAWL,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,KAA+C,EAAE,EAAE;IACpF,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,4BAA4B,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AACD,yFAAyF;AACzF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,GAAiB,EAAE,EAAU,EAAE;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,WAAW,CAAC,CAAA;IACtE,MAAM,aAAa,GAAG,UAAU,CAC9B,OAAO,CAAC,aAAa,IAAI,cAAc,EACvC,eAAe,CAChB,CAAA;IACD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,IAAI,4BAA4B,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAA;IACpE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAA;AAC5D,CAAC,CAAA;AACD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC/B,OAAO;QACL,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,SAAS,GAAG;QAClD,QAAQ,EAAE,IAAI,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,aAAa,GAAG;KAC3D,CAAA;AACH,CAAC,CAAA;AACD,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CACrD,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAClH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,GAAW,MAAM,EAAE,EAAU,EAAE;IAC9D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IAC7C,oFAAoF;IACpF,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACnC,OAAO,gBAAgB,IAAI;;;;;;;;;;;;;;;;eAgBd,QAAQ;uCACgB,IAAI;;;;;gBAK3B,MAAM,YAAY,IAAI;;gBAEtB,MAAM,gBAAgB,IAAI;gBAC1B,MAAM,iBAAiB,IAAI,wDAAwD,CAAA;AACnG,CAAC,CAAA"}

package/dist/PostgreSqlTransaction.d.ts

@@ -0,0 +1,42 @@
+import { Context } from "effect";
+import type { Effect } from "effect";
+declare const PostgreSqlFailure_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PostgreSqlFailure";
+} & Readonly<A>;
+/** Sanitized adapter failure. Never attach SQL, parameters or provider Causes. */
+export declare class PostgreSqlFailure extends PostgreSqlFailure_base<{
+    readonly commitKnowledge: "NotCommitted" | "Unknown";
+}> {
+}
+declare const PostgreSqlInvalidHandle_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PostgreSqlInvalidHandle";
+} & Readonly<A>;
+export declare class PostgreSqlInvalidHandle extends PostgreSqlInvalidHandle_base<{
+    readonly reason: "foreign-source" | "unqualified-handle" | "inactive-handle" | "active-transaction";
+}> {
+}
+export type PostgreSqlError = PostgreSqlFailure | PostgreSqlInvalidHandle;
+/** Only the owning adapter supplies this exact-connection query capability. */
+export interface TransactionQuery {
+    readonly query: (text: string, values?: ReadonlyArray<unknown>) => Effect.Effect<ReadonlyArray<Record<string, unknown>>, PostgreSqlError>;
+}
+/**
+ * Explicit trusted extension contract, NOT a structural SQL-client constructor.
+ * validate must prove private registration, source identity and active invocation.
+ * withTransaction delegates join-or-establish to the application's manager.
+ * ownedTransaction must reject ambient transactions, commit before returning, and
+ * report uncertain COMMIT/response delivery as Unknown. No automatic replay.
+ * A COMMIT command tag of ROLLBACK is a NotCommitted failure, not success.
+ * All acquisition/query/control/release paths must have finite application bounds.
+ * The application owns rollback, pool lifetime, readiness and migrations.
+ */
+export interface ApplicationAdapter {
+    readonly validate: (handle: unknown) => Effect.Effect<TransactionQuery, PostgreSqlError>;
+    readonly withTransaction: <A, E, R>(body: (handle: unknown) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | PostgreSqlError, R>;
+    readonly ownedTransaction: <A, E, R>(body: (query: TransactionQuery) => Effect.Effect<A, E, R>) => Effect.Effect<A, E | PostgreSqlError, R>;
+}
+declare const PostgreSqlApplication_base: Context.ServiceClass<PostgreSqlApplication, "effect-jobs/PostgreSqlApplication", ApplicationAdapter>;
+export declare class PostgreSqlApplication extends PostgreSqlApplication_base {
+}
+export {};
+//# sourceMappingURL=PostgreSqlTransaction.d.ts.map

package/dist/PostgreSqlTransaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgreSqlTransaction.d.ts","sourceRoot":"","sources":["../src/PostgreSqlTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,QAAQ,CAAA;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;;;;AAEpC,kFAAkF;AAClF,qBAAa,iBAAkB,SAAQ,uBAAsC;IAC3E,QAAQ,CAAC,eAAe,EAAE,cAAc,GAAG,SAAS,CAAA;CACrD,CAAC;CAAG;;;;AACL,qBAAa,uBAAwB,SAAQ,6BAA4C;IACvF,QAAQ,CAAC,MAAM,EACX,gBAAgB,GAChB,oBAAoB,GACpB,iBAAiB,GACjB,oBAAoB,CAAA;CACzB,CAAC;CAAG;AACL,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,uBAAuB,CAAA;AAEzE,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,CACd,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,KAC5B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;CAC5E;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAA;IACxF,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAChC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,CAAC,CAAA;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACjC,IAAI,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KACtD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,CAAC,CAAA;CAC9C;;AACD,qBAAa,qBAAsB,SAAQ,0BAGH;CAAG"}

package/dist/PostgreSqlTransaction.js

@@ -0,0 +1,9 @@
+import { Context, Data } from "effect";
+/** Sanitized adapter failure. Never attach SQL, parameters or provider Causes. */
+export class PostgreSqlFailure extends Data.TaggedError("PostgreSqlFailure") {
+}
+export class PostgreSqlInvalidHandle extends Data.TaggedError("PostgreSqlInvalidHandle") {
+}
+export class PostgreSqlApplication extends Context.Service()("effect-jobs/PostgreSqlApplication") {
+}
+//# sourceMappingURL=PostgreSqlTransaction.js.map

package/dist/PostgreSqlTransaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostgreSqlTransaction.js","sourceRoot":"","sources":["../src/PostgreSqlTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAGtC,kFAAkF;AAClF,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAEzE;CAAG;AACL,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAMrF;CAAG;AA8BL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,mCAAmC,CAAC;CAAG"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * effect-jobs package entrypoint.
+ * Use focused JobId/JobIdentity/JobPolicy/JobFailure/JobContract/JobTransaction
+ * subpaths. The root intentionally does not load an all-modules barrel.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAA"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * effect-jobs package entrypoint.
+ * Use focused JobId/JobIdentity/JobPolicy/JobFailure/JobContract/JobTransaction
+ * subpaths. The root intentionally does not load an all-modules barrel.
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAA"}

package/dist/internal/JobTransaction.d.ts

@@ -0,0 +1,16 @@
+import { Effect } from "effect";
+import type { EnqueueResult, JobIntegrityConflict, PreparedJob } from "../JobContract.js";
+import { JobsTransactionClosed, type JobsTransaction } from "../JobTransaction.js";
+/** Internal-only: never a package subpath or root export. */
+export declare const JobsTransactionTypeId: unique symbol;
+/** Qualified bridges call this only within the application's active transaction. */
+export declare const withJoinedTransaction: <A, E, R, BackendError, BackendRequirements>(insertOrCompare: (prepared: PreparedJob) => Effect.Effect<EnqueueResult, BackendError | JobIntegrityConflict, BackendRequirements>, body: (transaction: JobsTransaction<BackendError, BackendRequirements>) => Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+/** Only the definition/producer implementation calls this; no ambient store. */
+export declare const insertPrepared: <E, R>(transaction: JobsTransaction<E, R>, prepared: PreparedJob) => Effect.Effect<{
+    readonly _tag: "AlreadyPresent";
+    readonly jobId: import("../JobId.js").JobId;
+} | {
+    readonly _tag: "Inserted";
+    readonly jobId: import("../JobId.js").JobId;
+}, E | JobIntegrityConflict | JobsTransactionClosed, R>;
+//# sourceMappingURL=JobTransaction.d.ts.map

package/dist/internal/JobTransaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JobTransaction.d.ts","sourceRoot":"","sources":["../../src/internal/JobTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAElF,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,EAAE,OAAO,MAA8C,CAAA;AAEzF,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,mBAAmB,mBAC7D,CACf,QAAQ,EAAE,WAAW,KAClB,MAAM,CAAC,MAAM,CAChB,aAAa,EACb,YAAY,GAAG,oBAAoB,EACnC,mBAAmB,CACpB,QACK,CACJ,WAAW,EAAE,eAAe,CAAC,YAAY,EAAE,mBAAmB,CAAC,KAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CA0BrB,CAAA;AAEH,gFAAgF;AAChF,eAAO,MAAM,cAAc,GAAI,CAAC,EAAE,CAAC,eACpB,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,YACxB,WAAW;;;;;;uDAC0C,CAAA"}

package/dist/internal/JobTransaction.js

@@ -0,0 +1,21 @@
+import { Effect } from "effect";
+import { JobsTransactionClosed } from "../JobTransaction.js";
+/** Internal-only: never a package subpath or root export. */
+export const JobsTransactionTypeId = Symbol("effect-jobs/JobsTransaction");
+/** Qualified bridges call this only within the application's active transaction. */
+export const withJoinedTransaction = (insertOrCompare, body) => Effect.acquireUseRelease(Effect.sync(() => {
+    const lifetime = { active: true };
+    const transaction = Object.freeze({
+        [JobsTransactionTypeId]: Object.freeze({
+            insertOrCompare: (prepared) => Effect.suspend(() => lifetime.active
+                ? insertOrCompare(prepared)
+                : Effect.fail(new JobsTransactionClosed({ reason: "callback-exited" })))
+        })
+    });
+    return { lifetime, transaction };
+}), ({ transaction }) => Effect.suspend(() => body(transaction)).pipe(Effect.scoped), ({ lifetime }) => Effect.sync(() => {
+    lifetime.active = false;
+}));
+/** Only the definition/producer implementation calls this; no ambient store. */
+export const insertPrepared = (transaction, prepared) => transaction[JobsTransactionTypeId].insertOrCompare(prepared);
+//# sourceMappingURL=JobTransaction.js.map

package/dist/internal/JobTransaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JobTransaction.js","sourceRoot":"","sources":["../../src/internal/JobTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAE,qBAAqB,EAAwB,MAAM,sBAAsB,CAAA;AAElF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAkB,MAAM,CAAC,6BAA6B,CAAC,CAAA;AAEzF,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,eAMC,EACD,IAE2B,EACH,EAAE,CAC1B,MAAM,CAAC,iBAAiB,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;IACf,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IACjC,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,CAAC;QACZ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;YACrC,eAAe,EAAE,CAAC,QAAqB,EAAE,EAAE,CACzC,MAAM,CAAC,OAAO,CAIZ,GAAG,EAAE,CACL,QAAQ,CAAC,MAAM;gBACb,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAC1E;SACJ,CAAC;KACH,CAAC,CAAA;IACJ,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;AAClC,CAAC,CAAC,EACF,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAChF,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;IACf,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAA;AACzB,CAAC,CAAC,CACL,CAAA;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,WAAkC,EAClC,QAAqB,EACrB,EAAE,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA"}

package/dist/internal/codec/CanonicalJson.d.ts

@@ -0,0 +1,9 @@
+import { Effect } from "effect";
+import { JobPayloadCodecError } from "../../JobContract.js";
+export declare const canonicalText: (value: unknown, maximum: number, reason: "payload-too-large" | "projection-too-large", rootDepth?: number) => string;
+export declare const canonicalBytes: (value: unknown, maximum: number, reason: "payload-too-large" | "projection-too-large", rootDepth?: number) => Effect.Effect<Uint8Array<ArrayBuffer>, JobPayloadCodecError, never>;
+export declare const bytesEqual: (left: Uint8Array, right: Uint8Array) => boolean;
+/** Detect cycles/depth before Schema traverses plain decoded containers, without
+ * coercing domain objects (dates, etc.) whose encoded side is validated later. */
+export declare const checkDecodedContainers: (value: unknown) => Effect.Effect<void, JobPayloadCodecError, never>;
+//# sourceMappingURL=CanonicalJson.d.ts.map

package/dist/internal/codec/CanonicalJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CanonicalJson.d.ts","sourceRoot":"","sources":["../../../src/internal/codec/CanonicalJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,oBAAoB,EAA0B,MAAM,sBAAsB,CAAA;AAenF,eAAO,MAAM,aAAa,UACjB,OAAO,WACL,MAAM,UACP,mBAAmB,GAAG,sBAAsB,yBAEnD,MAsGF,CAAA;AAED,eAAO,MAAM,cAAc,UAClB,OAAO,WACL,MAAM,UACP,mBAAmB,GAAG,sBAAsB,4FAelD,CAAA;AAEJ,eAAO,MAAM,UAAU,SAAU,UAAU,SAAS,UAAU,KAAG,OACmB,CAAA;AAEpF;kFACkF;AAClF,eAAO,MAAM,sBAAsB,UAAW,OAAO,qDA2DjD,CAAA"}

package/dist/internal/codec/CanonicalJson.js

@@ -0,0 +1,184 @@
+import { Effect } from "effect";
+import { JobPayloadCodecError, maximumJobPayloadDepth } from "../../JobContract.js";
+const encoder = new TextEncoder();
+const validScalars = (value) => {
+    for (const scalar of value) {
+        const code = scalar.codePointAt(0);
+        if (code >= 0xd800 && code <= 0xdfff) {
+            return false;
+        }
+    }
+    return true;
+};
+// Serialization is a synchronous JS boundary. Only bounded operation-owned
+// errors escape it; accessors/toJSON and arbitrary object coercion are forbidden.
+export const canonicalText = (value, maximum, reason, rootDepth = 0) => {
+    const seen = new Set();
+    let length = 0;
+    const emit = (text) => {
+        length += encoder.encode(text).byteLength;
+        if (length > maximum) {
+            throw new JobPayloadCodecError({ reason });
+        }
+        return text;
+    };
+    const quote = (text) => {
+        if (text.length > maximum) {
+            throw new JobPayloadCodecError({ reason });
+        }
+        if (!validScalars(text)) {
+            throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+        }
+        return emit(JSON.stringify(text));
+    };
+    const visit = (item, depth) => {
+        if (depth > maximumJobPayloadDepth) {
+            throw new JobPayloadCodecError({ reason: "payload-too-deep" });
+        }
+        if (item === null) {
+            return emit("null");
+        }
+        switch (typeof item) {
+            case "boolean":
+                return emit(JSON.stringify(item));
+            case "string":
+                return quote(item);
+            case "number":
+                if (Number.isFinite(item)) {
+                    return emit(JSON.stringify(item));
+                }
+                break;
+            case "object": {
+                if (seen.has(item)) {
+                    break;
+                }
+                const array = Array.isArray(item);
+                if (!array &&
+                    Object.getPrototypeOf(item) !== Object.prototype &&
+                    Object.getPrototypeOf(item) !== null) {
+                    break;
+                }
+                seen.add(item);
+                const descriptors = Object.getOwnPropertyDescriptors(item);
+                const keys = Reflect.ownKeys(descriptors);
+                for (const key of keys) {
+                    if (array && key === "length") {
+                        continue;
+                    }
+                    const descriptor = descriptors[key];
+                    if (typeof key !== "string" ||
+                        !validScalars(key) ||
+                        !descriptor.enumerable ||
+                        !("value" in descriptor)) {
+                        throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                    }
+                }
+                let text;
+                if (array) {
+                    emit("[]");
+                    if (keys.length !== item.length + 1) {
+                        throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                    }
+                    const entries = [];
+                    for (let index = 0; index < item.length; index++) {
+                        if (index > 0) {
+                            emit(",");
+                        }
+                        const descriptor = descriptors[String(index)];
+                        if (descriptor === undefined) {
+                            throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                        }
+                        entries.push(visit(descriptor.value, depth + 1));
+                    }
+                    text = `[${entries.join(",")}]`;
+                }
+                else {
+                    emit("{}");
+                    text = `{${keys
+                        .sort()
+                        .map((key, index) => {
+                        if (index > 0) {
+                            emit(",");
+                        }
+                        return `${quote(key)}${emit(":")}${visit(descriptors[key].value, depth + 1)}`;
+                    })
+                        .join(",")}}`;
+                }
+                seen.delete(item);
+                return text;
+            }
+        }
+        throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+    };
+    return visit(value, rootDepth);
+};
+export const canonicalBytes = (value, maximum, reason, rootDepth = 0) => Effect.try({
+    try: () => {
+        const bytes = encoder.encode(canonicalText(value, maximum, reason, rootDepth));
+        if (bytes.byteLength > maximum) {
+            throw new JobPayloadCodecError({ reason });
+        }
+        return bytes;
+    },
+    catch: (error) => error instanceof JobPayloadCodecError
+        ? error
+        : new JobPayloadCodecError({ reason: "invalid-json-value" })
+});
+export const bytesEqual = (left, right) => left.length === right.length && left.every((byte, index) => byte === right[index]);
+/** Detect cycles/depth before Schema traverses plain decoded containers, without
+ * coercing domain objects (dates, etc.) whose encoded side is validated later. */
+export const checkDecodedContainers = (value) => Effect.try({
+    try: () => {
+        const seen = new Set();
+        const visit = (item, depth) => {
+            if (depth > maximumJobPayloadDepth) {
+                throw new JobPayloadCodecError({ reason: "payload-too-deep" });
+            }
+            if (typeof item === "number" && !Number.isFinite(item)) {
+                throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+            }
+            if (item === null || typeof item !== "object") {
+                return;
+            }
+            if (!Array.isArray(item) &&
+                Object.getPrototypeOf(item) !== Object.prototype &&
+                Object.getPrototypeOf(item) !== null) {
+                return;
+            }
+            if (seen.has(item)) {
+                throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+            }
+            seen.add(item);
+            const descriptors = Object.getOwnPropertyDescriptors(item);
+            if (Array.isArray(item)) {
+                if (Reflect.ownKeys(descriptors).length !== item.length + 1) {
+                    throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                }
+                for (let index = 0; index < item.length; index++) {
+                    if (!Object.hasOwn(descriptors, String(index))) {
+                        throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                    }
+                }
+            }
+            for (const key of Reflect.ownKeys(descriptors)) {
+                if (Array.isArray(item) && key === "length") {
+                    continue;
+                }
+                const descriptor = descriptors[key];
+                if (typeof key !== "string" ||
+                    !validScalars(key) ||
+                    !descriptor.enumerable ||
+                    !("value" in descriptor)) {
+                    throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                }
+                visit(descriptor.value, depth + 1);
+            }
+            seen.delete(item);
+        };
+        visit(value, 0);
+    },
+    catch: (error) => error instanceof JobPayloadCodecError
+        ? error
+        : new JobPayloadCodecError({ reason: "invalid-json-value" })
+});
+//# sourceMappingURL=CanonicalJson.js.map

package/dist/internal/codec/CanonicalJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CanonicalJson.js","sourceRoot":"","sources":["../../../src/internal/codec/CanonicalJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAEnF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AACjC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAW,EAAE;IAC9C,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAE,CAAA;QACnC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED,2EAA2E;AAC3E,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,KAAc,EACd,OAAe,EACf,MAAoD,EACpD,SAAS,GAAG,CAAC,EACL,EAAE;IACV,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAA;QACzC,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE;QACrC,IAAI,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IACnC,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAa,EAAU,EAAE;QACrD,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;YACnC,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC;QACD,QAAQ,OAAO,IAAI,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;YACnC,KAAK,QAAQ;gBACX,OAAO,KAAK,CAAC,IAAI,CAAC,CAAA;YACpB,KAAK,QAAQ;gBACX,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;gBACnC,CAAC;gBACD,MAAK;YACP,KAAK,QAAQ,EAAE,CAAC;gBACd,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAK;gBACP,CAAC;gBACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBACjC,IACE,CAAC,KAAK;oBACN,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS;oBAChD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EACpC,CAAC;oBACD,MAAK;gBACP,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBACd,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAA;gBAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;gBACzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,IAAI,KAAK,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBAC9B,SAAQ;oBACV,CAAC;oBACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAa,CAAE,CAAA;oBAC9C,IACE,OAAO,GAAG,KAAK,QAAQ;wBACvB,CAAC,YAAY,CAAC,GAAG,CAAC;wBAClB,CAAC,UAAU,CAAC,UAAU;wBACtB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EACxB,CAAC;wBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;oBAClE,CAAC;gBACH,CAAC;gBACD,IAAI,IAAY,CAAA;gBAChB,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,IAAI,CAAC,CAAA;oBACV,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpC,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;oBAClE,CAAC;oBACD,MAAM,OAAO,GAAkB,EAAE,CAAA;oBACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;wBACjD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;4BACd,IAAI,CAAC,GAAG,CAAC,CAAA;wBACX,CAAC;wBACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;wBAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;4BAC7B,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;wBAClE,CAAC;wBACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;oBAClD,CAAC;oBACD,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;gBACjC,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,CAAC,CAAA;oBACV,IAAI,GAAG,IAAK,IAAsB;yBAC/B,IAAI,EAAE;yBACN,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;wBAClB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;4BACd,IAAI,CAAC,GAAG,CAAC,CAAA;wBACX,CAAC;wBACD,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAE,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;oBAChF,CAAC,CAAC;yBACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;gBACjB,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACjB,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;IAClE,CAAC,CAAA;IACD,OAAO,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;AAChC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,KAAc,EACd,OAAe,EACf,MAAoD,EACpD,SAAS,GAAG,CAAC,EACb,EAAE,CACF,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9E,IAAI,KAAK,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5C,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,oBAAoB;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;CACjE,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAW,EAAE,CACzE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAEpF;kFACkF;AAClF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAa,EAAQ,EAAE;YACnD,IAAI,KAAK,GAAG,sBAAsB,EAAE,CAAC;gBACnC,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAChE,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAM;YACR,CAAC;YACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS;gBAChD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EACpC,CAAC;gBACD,OAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;YAClE,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACd,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;gBAClE,CAAC;gBACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;wBAC/C,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;oBAClE,CAAC;gBACH,CAAC;YACH,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAC5C,SAAQ;gBACV,CAAC;gBACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAa,CAAE,CAAA;gBAC9C,IACE,OAAO,GAAG,KAAK,QAAQ;oBACvB,CAAC,YAAY,CAAC,GAAG,CAAC;oBAClB,CAAC,UAAU,CAAC,UAAU;oBACtB,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EACxB,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;gBAClE,CAAC;gBACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC,CAAA;QACD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,oBAAoB;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;CACjE,CAAC,CAAA"}

package/dist/internal/codec/ProtectedProjection.d.ts

@@ -0,0 +1,12 @@
+import { Effect, Schema, SchemaAST } from "effect";
+import { JobPayloadCodecError } from "../../JobContract.js";
+/** No traversal may silently lose a marker across a transformation/custom shape.
+ * Scalar/domain transforms without protected mappings use their encoded AST. */
+export declare const prepareProjection: (schema: Schema.Top) => Effect.Effect<SchemaAST.AST, JobPayloadCodecError, never>;
+export declare const project: (ast: SchemaAST.AST, value: unknown) => Effect.Effect<{
+    data: unknown;
+    protected: {
+        [k: string]: unknown;
+    };
+}, JobPayloadCodecError, never>;
+//# sourceMappingURL=ProtectedProjection.d.ts.map

package/dist/internal/codec/ProtectedProjection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedProjection.d.ts","sourceRoot":"","sources":["../../../src/internal/codec/ProtectedProjection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClD,OAAO,EACL,oBAAoB,EAGrB,MAAM,sBAAsB,CAAA;AAM7B;gFACgF;AAChF,eAAO,MAAM,iBAAiB,WAAY,MAAM,CAAC,GAAG,8DAkDhD,CAAA;AAEJ,eAAO,MAAM,OAAO,QAAS,SAAS,CAAC,GAAG,SAAS,OAAO;;;;;+BAuFtD,CAAA"}

package/dist/internal/codec/ProtectedProjection.js

@@ -0,0 +1,121 @@
+import { Effect, Schema, SchemaAST } from "effect";
+import { JobPayloadCodecError, maximumJobPayloadSchemaPathBytes, maximumProtectedJobPayloadSubtrees } from "../../JobContract.js";
+const marked = (ast) => ast.annotations?.effectJobsProtectedPayload === true;
+const encoder = new TextEncoder();
+/** No traversal may silently lose a marker across a transformation/custom shape.
+ * Scalar/domain transforms without protected mappings use their encoded AST. */
+export const prepareProjection = (schema) => Effect.try({
+    try: () => {
+        const visit = (ast, transformed, protectedParent, ancestors) => {
+            if (ancestors.has(ast) || SchemaAST.isSuspend(ast)) {
+                throw new JobPayloadCodecError({ reason: "invalid-schema" });
+            }
+            const boundary = transformed || ast.encoding !== undefined;
+            const protectedHere = marked(ast);
+            if (protectedHere && (boundary || protectedParent)) {
+                throw new JobPayloadCodecError({ reason: "invalid-schema" });
+            }
+            ancestors.add(ast);
+            const child = (node) => visit(node, boundary, protectedParent || protectedHere, ancestors);
+            if (SchemaAST.isObjects(ast)) {
+                if (ast.indexSignatures.length > 0 ||
+                    ast.propertySignatures.some((property) => typeof property.name !== "string")) {
+                    throw new JobPayloadCodecError({ reason: "invalid-schema" });
+                }
+                ast.propertySignatures.forEach((property) => child(property.type));
+            }
+            else if (SchemaAST.isArrays(ast)) {
+                if (ast.elements.length !== 0 || ast.rest.length !== 1) {
+                    throw new JobPayloadCodecError({ reason: "invalid-schema" });
+                }
+                ast.rest.forEach(child);
+            }
+            else if (SchemaAST.isUnion(ast)) {
+                ast.types.forEach(child);
+            }
+            else if (SchemaAST.isDeclaration(ast)) {
+                if (ast.encoding === undefined) {
+                    throw new JobPayloadCodecError({ reason: "invalid-schema" });
+                }
+                ast.typeParameters.forEach(child);
+            }
+            ast.encoding?.forEach((link) => child(link.to));
+            ancestors.delete(ast);
+        };
+        visit(schema.ast, false, false, new Set());
+        const encoded = SchemaAST.toEncoded(schema.ast);
+        visit(encoded, false, false, new Set());
+        return encoded;
+    },
+    catch: () => new JobPayloadCodecError({ reason: "invalid-schema" })
+});
+export const project = (ast, value) => Effect.try({
+    try: () => {
+        let count = 0;
+        const protectedFields = [];
+        const visit = (node, item, path) => {
+            if (encoder.encode(path).byteLength > maximumJobPayloadSchemaPathBytes) {
+                throw new JobPayloadCodecError({ reason: "schema-path-too-long" });
+            }
+            if (marked(node)) {
+                if (++count > maximumProtectedJobPayloadSubtrees) {
+                    throw new JobPayloadCodecError({ reason: "too-many-protected-subtrees" });
+                }
+                if (item === null ||
+                    typeof item !== "object" ||
+                    Array.isArray(item) ||
+                    !Object.hasOwn(item, "fingerprint")) {
+                    throw new JobPayloadCodecError({ reason: "invalid-protected-value" });
+                }
+                const fingerprint = Object.getOwnPropertyDescriptor(item, "fingerprint");
+                if ((Object.getPrototypeOf(item) !== Object.prototype &&
+                    Object.getPrototypeOf(item) !== null) ||
+                    !fingerprint.enumerable ||
+                    !("value" in fingerprint)) {
+                    throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                }
+                protectedFields.push([path, fingerprint.value]);
+                return null;
+            }
+            if (SchemaAST.isUnion(node)) {
+                const branch = node.types.find((member) => Schema.decodeUnknownExit(Schema.make(member), {
+                    onExcessProperty: "error"
+                })(item)._tag === "Success");
+                if (branch === undefined) {
+                    throw new JobPayloadCodecError({ reason: "invalid-schema" });
+                }
+                return visit(branch, item, path);
+            }
+            if (SchemaAST.isArrays(node) && Array.isArray(item)) {
+                return item.map((entry, index) => visit(node.rest[0], entry, `${path}/${index}`));
+            }
+            if (SchemaAST.isObjects(node) && item !== null && typeof item === "object") {
+                if (Object.getPrototypeOf(item) !== Object.prototype &&
+                    Object.getPrototypeOf(item) !== null) {
+                    throw new JobPayloadCodecError({ reason: "invalid-json-value" });
+                }
+                // Keep every validated property, including the empty Struct case. Never
+                // create an accidental equivalence by dropping unknown JSON properties.
+                return Object.fromEntries(Object.entries(item).map(([key, entry]) => {
+                    const property = node.propertySignatures.find((field) => field.name === key);
+                    return [
+                        key,
+                        property === undefined
+                            ? entry
+                            : visit(property.type, entry, `${path}/${key.replaceAll("~", "~0").replaceAll("/", "~1")}`)
+                    ];
+                }));
+            }
+            return item;
+        };
+        // Application JSON is always inside data, never interpreted as metadata.
+        // null placeholders preserve positions; the separate path map distinguishes
+        // protected nodes from public nulls, including inside Schema.Unknown.
+        const data = visit(ast, value, "");
+        return { data, protected: Object.fromEntries(protectedFields) };
+    },
+    catch: (error) => error instanceof JobPayloadCodecError
+        ? error
+        : new JobPayloadCodecError({ reason: "invalid-schema" })
+});
+//# sourceMappingURL=ProtectedProjection.js.map

package/dist/internal/codec/ProtectedProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedProjection.js","sourceRoot":"","sources":["../../../src/internal/codec/ProtectedProjection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AAClD,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,kCAAkC,EACnC,MAAM,sBAAsB,CAAA;AAE7B,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE,CACpC,GAAG,CAAC,WAAW,EAAE,0BAA0B,KAAK,IAAI,CAAA;AACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC;gFACgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAkB,EAAE,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,KAAK,GAAG,CACZ,GAAkB,EAClB,WAAoB,EACpB,eAAwB,EACxB,SAA6B,EACvB,EAAE;YACR,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;YAC9D,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAA;YAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,aAAa,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;YAC9D,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClB,MAAM,KAAK,GAAG,CAAC,IAAmB,EAAE,EAAE,CACpC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,IAAI,aAAa,EAAE,SAAS,CAAC,CAAA;YACpE,IAAI,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,IACE,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;oBAC9B,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,EAC5E,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBACD,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;YACpE,CAAC;iBAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACzB,CAAC;iBAAM,IAAI,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC;iBAAM,IAAI,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBACD,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACnC,CAAC;YACD,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/C,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/C,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;QACvC,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CACpE,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAkB,EAAE,KAAc,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,eAAe,GAAsC,EAAE,CAAA;QAC7D,MAAM,KAAK,GAAG,CAAC,IAAmB,EAAE,IAAa,EAAE,IAAY,EAAW,EAAE;YAC1E,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,gCAAgC,EAAE,CAAC;gBACvE,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;YACpE,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,IAAI,EAAE,KAAK,GAAG,kCAAkC,EAAE,CAAC;oBACjD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAA;gBAC3E,CAAC;gBACD,IACE,IAAI,KAAK,IAAI;oBACb,OAAO,IAAI,KAAK,QAAQ;oBACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBACnB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EACnC,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,aAAa,CAAE,CAAA;gBACzE,IACE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS;oBAC/C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;oBACvC,CAAC,WAAW,CAAC,UAAU;oBACvB,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,EACzB,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;gBAClE,CAAC;gBACD,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC/C,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAC5B,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAwB,MAAM,CAAC,EAAE;oBACnE,gBAAgB,EAAE,OAAO;iBAC1B,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAC9B,CAAA;gBACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAA;gBAC9D,CAAC;gBACD,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;YAClC,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAChD,CAAA;YACH,CAAC;YACD,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3E,IACE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS;oBAChD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EACpC,CAAC;oBACD,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAA;gBAClE,CAAC;gBACD,wEAAwE;gBACxE,wEAAwE;gBACxE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;oBACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;oBAC5E,OAAO;wBACL,GAAG;wBACH,QAAQ,KAAK,SAAS;4BACpB,CAAC,CAAC,KAAK;4BACP,CAAC,CAAC,KAAK,CACH,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,GAAG,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAC7D;qBACN,CAAA;gBACH,CAAC,CAAC,CACH,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC,CAAA;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAA;IACjE,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,oBAAoB;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;CAC7D,CAAC,CAAA"}

package/dist/internal/lifecycle/Artifacts.d.ts

@@ -0,0 +1,6 @@
+import { Result } from "effect";
+import * as Contract from "../../JobContract.js";
+import { JobStoreProtocolError, type ClaimedJob } from "../../JobStore.js";
+/** Validates portable structure only. Codec must still validate canonical bytes/schema/projection before execution. */
+export declare const validateClaimArtifact: (claim: ClaimedJob) => Result.Result<Contract.PreparedJob, JobStoreProtocolError>;
+//# sourceMappingURL=Artifacts.d.ts.map

package/dist/internal/lifecycle/Artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Artifacts.d.ts","sourceRoot":"","sources":["../../../src/internal/lifecycle/Artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAIhD,OAAO,EAAE,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAmB1E,uHAAuH;AACvH,eAAO,MAAM,qBAAqB,UACzB,UAAU,KAChB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAyCxD,CAAA"}