pipework 0.212.0 → 0.242.0

package/dist/infra/fetch/namespace.d.ts

@@ -1,9 +1,9 @@
-import { untrustedGet } from './handle.js';
+import { untrustedGet, untrustedPost } from './handle.js';
 import { retryUnsent, fetchRetryingUnsent, isUnsentFault } from './connect-retry.js';
 /** Untrusted fetch — fetch one URL a stranger gave without letting them reach the app's private network. */
 export declare const untrustedFetch: {
     /**
-     * Fetches `url` with GET and returns `{ ok: true, url, status, contentType, body, bytes }`, or `{ ok: false, reason, message }`
+     * Fetches `url` with GET and returns `{ ok: true, url, status, contentType, etag, lastModified, body, bytes }` (`etag` and `lastModified` are the response headers, null when absent), or `{ ok: false, reason, message }`
      * naming the rule that refused: `scheme`, `address`, `redirects`, `too_large`, `timeout`, `status`, `rejected` or `network`.
      * It does not throw for these.
      *
@@ -15,6 +15,9 @@ export declare const untrustedFetch: {
      * `accept({ status, contentType, firstBytes })` sees the first 1024 bytes before the body is kept: return false, or a string
      * (your own message), to refuse with `rejected`. Messages never contain an address or anything a server sent.
      *
+     * `followRedirect(to, from)` is asked before each redirect hop: true follows it; false, or a string (your message), refuses with `rejected`.
+     * A 304 answer is a `status` refusal with `status: 304`; send `If-None-Match` / `If-Modified-Since` through `headers`.
+     *
      * `resolve` and `connect` are for tests: `resolve(hostname)` replaces DNS and `connect(target)` replaces the socket after the
      * address check passed, so a test sends a fake public address to a local server. The address check always runs on what `resolve` returns.
      *
@@ -28,6 +31,21 @@ export declare const untrustedFetch: {
      * ```
      */
     readonly get: typeof untrustedGet;
+    /**
+     * Posts `body` to `url` with every rule of `get`: scheme, every resolved address checked and the connection made to a checked one,
+     * each redirect hop re-checked, `maxBytes`, one `timeoutMs` for the whole fetch, `headers` to the first origin only.
+     * A 307 or 308 resends the body; 301, 302 and 303 become a GET without a body; `maxRedirects: 0` refuses any redirect.
+     * A non-2xx answer is `{ ok: false, reason: 'status', status }` with no body, as in `get`; a 2xx body over `maxBytes` is
+     * `too_large` and carries `status`. `resolve` and `connect` are for tests, as in `get`.
+     * The call is the trace step `pipework/fetch:post`; the full URL is recorded only when `urlIsSafeToTrace` is true.
+     *
+     * ```ts
+     * const sent = await untrustedFetch.post(endpoint.url, { body: json, headers: { 'content-type': 'application/json' },
+     *   maxBytes: 65_536, timeoutMs: 10_000, maxRedirects: 0 })
+     * if (!sent.ok) return record(sent.reason)
+     * ```
+     */
+    readonly post: typeof untrustedPost;
 };
 /** Connect retry — send again only when the connection could not be made, so nothing reached the server. */
 export declare const connectRetry: {

package/dist/infra/fetch/namespace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/fetch/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEpF,4GAA4G;AAC5G,eAAO,MAAM,cAAc;IACzB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;;CAEK,CAAA;AAEV,4GAA4G;AAC5G,eAAO,MAAM,YAAY;IACvB;;;;;;;;;;OAUG;;IAEH,0HAA0H;;IAE1H,+HAA+H;;CAEvH,CAAA"}
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/fetch/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEpF,4GAA4G;AAC5G,eAAO,MAAM,cAAc;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;;IAEH;;;;;;;;;;;;;OAaG;;CAEK,CAAA;AAEV,4GAA4G;AAC5G,eAAO,MAAM,YAAY;IACvB;;;;;;;;;;OAUG;;IAEH,0HAA0H;;IAE1H,+HAA+H;;CAEvH,CAAA"}

package/dist/infra/fetch/namespace.js

@@ -1,9 +1,9 @@
-import { untrustedGet } from './handle.js';
+import { untrustedGet, untrustedPost } from './handle.js';
 import { retryUnsent, fetchRetryingUnsent, isUnsentFault } from './connect-retry.js';
 /** Untrusted fetch — fetch one URL a stranger gave without letting them reach the app's private network. */
 export const untrustedFetch = {
     /**
-     * Fetches `url` with GET and returns `{ ok: true, url, status, contentType, body, bytes }`, or `{ ok: false, reason, message }`
+     * Fetches `url` with GET and returns `{ ok: true, url, status, contentType, etag, lastModified, body, bytes }` (`etag` and `lastModified` are the response headers, null when absent), or `{ ok: false, reason, message }`
      * naming the rule that refused: `scheme`, `address`, `redirects`, `too_large`, `timeout`, `status`, `rejected` or `network`.
      * It does not throw for these.
      *
@@ -15,6 +15,9 @@ export const untrustedFetch = {
      * `accept({ status, contentType, firstBytes })` sees the first 1024 bytes before the body is kept: return false, or a string
      * (your own message), to refuse with `rejected`. Messages never contain an address or anything a server sent.
      *
+     * `followRedirect(to, from)` is asked before each redirect hop: true follows it; false, or a string (your message), refuses with `rejected`.
+     * A 304 answer is a `status` refusal with `status: 304`; send `If-None-Match` / `If-Modified-Since` through `headers`.
+     *
      * `resolve` and `connect` are for tests: `resolve(hostname)` replaces DNS and `connect(target)` replaces the socket after the
      * address check passed, so a test sends a fake public address to a local server. The address check always runs on what `resolve` returns.
      *
@@ -28,6 +31,21 @@ export const untrustedFetch = {
      * ```
      */
     get: untrustedGet,
+    /**
+     * Posts `body` to `url` with every rule of `get`: scheme, every resolved address checked and the connection made to a checked one,
+     * each redirect hop re-checked, `maxBytes`, one `timeoutMs` for the whole fetch, `headers` to the first origin only.
+     * A 307 or 308 resends the body; 301, 302 and 303 become a GET without a body; `maxRedirects: 0` refuses any redirect.
+     * A non-2xx answer is `{ ok: false, reason: 'status', status }` with no body, as in `get`; a 2xx body over `maxBytes` is
+     * `too_large` and carries `status`. `resolve` and `connect` are for tests, as in `get`.
+     * The call is the trace step `pipework/fetch:post`; the full URL is recorded only when `urlIsSafeToTrace` is true.
+     *
+     * ```ts
+     * const sent = await untrustedFetch.post(endpoint.url, { body: json, headers: { 'content-type': 'application/json' },
+     *   maxBytes: 65_536, timeoutMs: 10_000, maxRedirects: 0 })
+     * if (!sent.ok) return record(sent.reason)
+     * ```
+     */
+    post: untrustedPost,
 };
 /** Connect retry — send again only when the connection could not be made, so nothing reached the server. */
 export const connectRetry = {

package/dist/infra/fetch/namespace.js.map

@@ -1 +1 @@
-{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/fetch/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEpF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,GAAG,EAAE,YAAY;CACT,CAAA;AAEV,4GAA4G;AAC5G,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;;;;;;;;;;OAUG;IACH,KAAK,EAAE,mBAAmB;IAC1B,0HAA0H;IAC1H,IAAI,EAAE,WAAW;IACjB,+HAA+H;IAC/H,aAAa;CACL,CAAA"}
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/fetch/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEpF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,GAAG,EAAE,YAAY;IACjB;;;;;;;;;;;;;OAaG;IACH,IAAI,EAAE,aAAa;CACX,CAAA;AAEV,4GAA4G;AAC5G,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B;;;;;;;;;;OAUG;IACH,KAAK,EAAE,mBAAmB;IAC1B,0HAA0H;IAC1H,IAAI,EAAE,WAAW;IACjB,+HAA+H;IAC/H,aAAa;CACL,CAAA"}

package/dist/infra/join-requests/handle.d.ts

@@ -0,0 +1,86 @@
+import type { DB } from '../../data/db/index.js';
+import { JOIN_REQUEST_STATUSES } from './schema.js';
+export type JoinRequestStatus = typeof JOIN_REQUEST_STATUSES[number];
+export interface JoinRequest {
+    readonly id: string;
+    readonly orgId: string;
+    readonly userId: string;
+    readonly status: JoinRequestStatus;
+    readonly reason: string | null;
+    /** App data given to `request`; may be personal data, so the audit record leaves it out. */
+    readonly evidence: unknown;
+    readonly requestedAt: Date;
+    readonly expiresAt: Date;
+    readonly settledAt: Date | null;
+    /** Who settled it; `null` while open, and for an expiry. */
+    readonly settledBy: string | null;
+    /** The role given on approval. */
+    readonly role: string | null;
+    /** The note given on refusal. */
+    readonly note: string | null;
+}
+export interface JoinRequestsConfig {
+    /** The app's owner check; roles are the app's. Called inside the org's transaction. */
+    isOwner(tx: DB, args: {
+        orgId: string;
+        userId: string;
+    }): Promise<boolean>;
+    /** Adds the member; called inside the approve transaction, so a throw rolls the approval back. */
+    addMember(tx: DB, args: {
+        orgId: string;
+        userId: string;
+        role: string | undefined;
+        requestId: string;
+        by: string;
+    }): Promise<void>;
+    /** How long a request stays open. Default 30 days. */
+    readonly expiresInMs?: number;
+    /** Awaited inside the transaction that created the request; a throw rolls it back. */
+    onRequested?(tx: DB, request: JoinRequest): void | Promise<void>;
+    /** Awaited inside the transaction that settled the request (approved, refused, withdrawn, expired); a throw rolls it back. */
+    onSettled?(tx: DB, request: JoinRequest): void | Promise<void>;
+}
+export type SettleResult = {
+    readonly ok: true;
+    readonly request: JoinRequest;
+} | {
+    readonly ok: false;
+    readonly reason: 'not-found' | 'expired' | 'already-settled';
+};
+export interface JoinRequests {
+    /**
+     * Asks to join `orgId` as `userId`. Runs in the named org (the joiner is not in it). One open request
+     * per (org, user): while one is open and unexpired it is returned with `created: false`, with no audit
+     * record and no hook. An open one past its expiry is marked expired first. Writes a `JoinRequest:request`
+     * audit record when the Flow has a trace with an open step.
+     */
+    request(orgId: string, userId: string, opts?: {
+        reason?: string;
+        evidence?: unknown;
+    }): Promise<{
+        request: JoinRequest;
+        created: boolean;
+    }>;
+    /** The Flow tenant's owner (`isOwner`) approves: marks it approved and calls `addMember`, in one transaction. A non-owner gets `ForbiddenError`. */
+    approve(requestId: string, opts: {
+        role?: string;
+    }, by: string): Promise<SettleResult>;
+    /** The Flow tenant's owner refuses it. A non-owner gets `ForbiddenError`. */
+    refuse(requestId: string, opts: {
+        note?: string;
+    }, by: string): Promise<SettleResult>;
+    /** The joiner withdraws their own open request; another user's id is `not-found`. */
+    withdraw(requestId: string, userId: string): Promise<SettleResult>;
+    /** The Flow tenant's requests with `status` (default `open`), newest first. */
+    list(opts?: {
+        status?: JoinRequestStatus;
+    }): Promise<JoinRequest[]>;
+    /** One user's requests across orgs, read through the system channel, newest first. */
+    mine(userId: string): Promise<JoinRequest[]>;
+    /** Marks every open request past its expiry as expired; schedule it (a cron job). */
+    sweep(): Promise<{
+        expired: number;
+    }>;
+}
+export declare function createJoinRequests(config: JoinRequestsConfig): JoinRequests;
+//# sourceMappingURL=handle.d.ts.map

package/dist/infra/join-requests/handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.d.ts","sourceRoot":"","sources":["../../../src/infra/join-requests/handle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAMhD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AAEpE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAA;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,uFAAuF;IACvF,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1E,kGAAkG;IAClG,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClI,sDAAsD;IACtD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,sFAAsF;IACtF,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChE,8HAA8H;IAC9H,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/D;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAA;CAAE,CAAA;AAExF,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,WAAW,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC3I,oJAAoJ;IACpJ,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACtF,6EAA6E;IAC7E,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACrF,qFAAqF;IACrF,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAClE,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,iBAAiB,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnE,sFAAsF;IACtF,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5C,qFAAqF;IACrF,KAAK,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACtC;AA8DD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAqL3E"}

package/dist/infra/join-requests/handle.js

@@ -0,0 +1,233 @@
+import { sql } from '../../data/db/sql.js';
+import { pipe, pipeRaw, pipeSystem } from '../../data/db/db.js';
+import { requireContext } from '../../request/context/store.js';
+import { writeInfraAudit } from '../../data/write/audit/infra-audit.js';
+import { ValidationError, ForbiddenError } from '../../core/errors/index.js';
+import { inTenant as runAsTenant } from '../../auth/tenant/in-tenant.js';
+import { JOIN_REQUEST_STATUSES } from './schema.js';
+const DEFAULT_EXPIRES_IN_MS = 30 * 24 * 60 * 60 * 1000;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const MAX_INSERT_ATTEMPTS = 3;
+function toDate(value) {
+    return value instanceof Date ? value : new Date(String(value));
+}
+function toDateOrNull(value) {
+    return value === null || value === undefined ? null : toDate(value);
+}
+function rowToRequest(row) {
+    return {
+        id: row['id'],
+        orgId: row['tenant_id'],
+        userId: row['user_id'],
+        status: row['status'],
+        reason: row['reason'] ?? null,
+        evidence: row['evidence'] ?? null,
+        requestedAt: toDate(row['requested_at']),
+        expiresAt: toDate(row['expires_at']),
+        settledAt: toDateOrNull(row['settled_at']),
+        settledBy: row['settled_by'] ?? null,
+        role: row['role'] ?? null,
+        note: row['note'] ?? null,
+    };
+}
+function isUniqueViolation(err) {
+    let current = err;
+    for (let depth = 0; depth < 4 && typeof current === 'object' && current !== null; depth++) {
+        if (current.code === '23505')
+            return true;
+        current = current.cause;
+    }
+    return false;
+}
+function requireUuid(value, name) {
+    if (typeof value !== 'string' || !UUID.test(value)) {
+        throw new ValidationError({ [name]: ['must be a uuid'] }, `joinRequests: ${name} must be a uuid, got ${JSON.stringify(value)}.`);
+    }
+    return value;
+}
+function requireText(value, name) {
+    if (typeof value !== 'string' || value === '') {
+        throw new ValidationError({ [name]: ['must be a non-empty string'] }, `joinRequests: ${name} must be a non-empty string.`);
+    }
+    return value;
+}
+// The audit record leaves out `evidence`, which may be personal data.
+function auditProjection(request) {
+    const { id, orgId, userId, status, reason, requestedAt, expiresAt, settledAt, settledBy, role, note } = request;
+    return { id, orgId, userId, status, reason, requestedAt, expiresAt, settledAt, settledBy, role, note };
+}
+export function createJoinRequests(config) {
+    if (typeof config.isOwner !== 'function' || typeof config.addMember !== 'function') {
+        throw new Error('[pipework] joinRequests.create needs `isOwner` and `addMember`.\n\n  Roles are the app\'s: isOwner(tx, { orgId, userId }) says who may settle a request, and\n  addMember(tx, { orgId, userId, role, requestId, by }) adds the member inside the approval.\n');
+    }
+    const expiresInMs = config.expiresInMs ?? DEFAULT_EXPIRES_IN_MS;
+    if (!Number.isFinite(expiresInMs) || expiresInMs <= 0) {
+        throw new Error('[pipework] joinRequests expiresInMs must be a positive number of milliseconds.\n');
+    }
+    function requireTenant() {
+        const flow = requireContext();
+        if (flow.tenant === null) {
+            throw new Error('[pipework] This joinRequests method needs a tenant in the Flow.\n\n' +
+                '  approve/refuse/list act for one org. Call them from an authenticated tenant route;\n' +
+                '  request/withdraw/mine are the ones for the joiner, who is not in the org.\n');
+        }
+        return { flow, tenantId: flow.tenant };
+    }
+    function inTenant(flow, tenantId, fn) {
+        return runAsTenant(flow, tenantId, fn);
+    }
+    function audit(flow, tx, verb, request) {
+        return writeInfraAudit(flow, tx, {
+            tenantId: request.orgId, entity: 'JoinRequest', verb, entityId: request.id, after: auditProjection(request),
+        });
+    }
+    async function settled(flow, tx, verb, request) {
+        await audit(flow, tx, verb, request);
+        await config.onSettled?.(tx, request);
+    }
+    // Says why an open row was not there to settle.
+    async function whyNot(tx, requestId, orgId) {
+        const rows = await tx.execute(sql `
+      SELECT status, (expires_at <= now()) AS past FROM join_request WHERE id = ${requestId} AND tenant_id = ${orgId}`);
+        const row = rows[0];
+        if (row === undefined)
+            return 'not-found';
+        if (row['status'] === 'expired' || (row['status'] === 'open' && row['past'] === true))
+            return 'expired';
+        return 'already-settled';
+    }
+    async function settleAsOwner(kind, requestId, by, opts) {
+        requireUuid(requestId, 'requestId');
+        requireText(by, 'by');
+        const { flow, tenantId } = requireTenant();
+        return pipe.transaction(async (tx) => {
+            if (!(await config.isOwner(tx, { orgId: tenantId, userId: by }))) {
+                throw new ForbiddenError(`Only an owner of the organisation can ${kind} a join request.`, { orgId: tenantId, userId: by });
+            }
+            const rows = kind === 'approve'
+                ? await tx.execute(sql `
+            UPDATE join_request SET status = 'approved', settled_at = now(), settled_by = ${by}, role = ${opts.role ?? null}
+            WHERE id = ${requestId} AND tenant_id = ${tenantId} AND status = 'open' AND expires_at > now()
+            RETURNING *`)
+                : await tx.execute(sql `
+            UPDATE join_request SET status = 'refused', settled_at = now(), settled_by = ${by}, note = ${opts.note ?? null}
+            WHERE id = ${requestId} AND tenant_id = ${tenantId} AND status = 'open' AND expires_at > now()
+            RETURNING *`);
+            if (rows.length === 0)
+                return { ok: false, reason: await whyNot(tx, requestId, tenantId) };
+            const request = rowToRequest(rows[0]);
+            if (kind === 'approve') {
+                await config.addMember(tx, { orgId: tenantId, userId: request.userId, role: opts.role, requestId, by });
+            }
+            await settled(flow, tx, kind, request);
+            return { ok: true, request };
+        });
+    }
+    // Marks the open requests of one org that are past expiry (optionally one user's) as expired.
+    async function expireOpen(flow, tx, orgId, userId) {
+        const rows = await tx.execute(sql `
+      UPDATE join_request SET status = 'expired', settled_at = now()
+      WHERE tenant_id = ${orgId} AND status = 'open' AND expires_at <= now()
+        ${userId === undefined ? sql `` : sql `AND user_id = ${userId}`}
+      RETURNING *`);
+        for (const row of rows)
+            await settled(flow, tx, 'expire', rowToRequest(row));
+        return rows.length;
+    }
+    const handle = {
+        async request(orgId, userId, opts) {
+            requireUuid(orgId, 'orgId');
+            requireText(userId, 'userId');
+            const flow = requireContext();
+            const evidence = opts?.evidence === undefined || opts.evidence === null ? null : JSON.stringify(opts.evidence);
+            return inTenant(flow, orgId, async (tx) => {
+                for (let attempt = 1; attempt <= MAX_INSERT_ATTEMPTS; attempt++) {
+                    const open = await tx.execute(sql `
+            SELECT *, (expires_at <= now()) AS past FROM join_request
+            WHERE tenant_id = ${orgId} AND user_id = ${userId} AND status = 'open'`);
+                    if (open.length > 0) {
+                        if (open[0]['past'] !== true)
+                            return { request: rowToRequest(open[0]), created: false };
+                        await expireOpen(flow, tx, orgId, userId);
+                    }
+                    try {
+                        // A savepoint: losing the race to another request aborts only this insert.
+                        const rows = await tx.transaction((sp) => sp.execute(sql `
+              INSERT INTO join_request (tenant_id, user_id, status, reason, evidence, expires_at)
+              VALUES (${orgId}, ${userId}, 'open', ${opts?.reason ?? null},
+                ${evidence === null ? sql `NULL` : sql `${evidence}::jsonb`},
+                now() + ${expiresInMs}::float8 * interval '1 millisecond')
+              RETURNING *`));
+                        const request = rowToRequest(rows[0]);
+                        await audit(flow, tx, 'request', request);
+                        await config.onRequested?.(tx, request);
+                        return { request, created: true };
+                    }
+                    catch (err) {
+                        if (!isUniqueViolation(err))
+                            throw err;
+                    }
+                }
+                throw new Error('[pipework] joinRequests.request could not settle on an open request after repeated conflicts; retry.\n');
+            });
+        },
+        approve(requestId, opts, by) {
+            return settleAsOwner('approve', requestId, by, { ...(opts.role !== undefined ? { role: opts.role } : {}) });
+        },
+        refuse(requestId, opts, by) {
+            return settleAsOwner('refuse', requestId, by, { ...(opts.note !== undefined ? { note: opts.note } : {}) });
+        },
+        async withdraw(requestId, userId) {
+            requireUuid(requestId, 'requestId');
+            requireText(userId, 'userId');
+            const flow = requireContext();
+            const found = await pipeSystem().execute(sql `SELECT tenant_id FROM join_request WHERE id = ${requestId}`);
+            if (found.length === 0)
+                return { ok: false, reason: 'not-found' };
+            const orgId = found[0]['tenant_id'];
+            return inTenant(flow, orgId, async (tx) => {
+                const rows = await tx.execute(sql `
+          UPDATE join_request SET status = 'withdrawn', settled_at = now(), settled_by = ${userId}
+          WHERE id = ${requestId} AND tenant_id = ${orgId} AND user_id = ${userId} AND status = 'open' AND expires_at > now()
+          RETURNING *`);
+                if (rows.length === 0) {
+                    const own = await tx.execute(sql `SELECT 1 FROM join_request WHERE id = ${requestId} AND tenant_id = ${orgId} AND user_id = ${userId}`);
+                    return { ok: false, reason: own.length === 0 ? 'not-found' : await whyNot(tx, requestId, orgId) };
+                }
+                const request = rowToRequest(rows[0]);
+                await settled(flow, tx, 'withdraw', request);
+                return { ok: true, request };
+            });
+        },
+        async list(opts) {
+            const { tenantId } = requireTenant();
+            const status = opts?.status ?? 'open';
+            if (!JOIN_REQUEST_STATUSES.includes(status)) {
+                throw new ValidationError({ status: [`must be one of ${JOIN_REQUEST_STATUSES.join(', ')}`] }, 'joinRequests list status is not valid.');
+            }
+            const rows = await pipeRaw().execute(sql `
+        SELECT * FROM join_request WHERE tenant_id = ${tenantId} AND status = ${status}
+        ORDER BY requested_at DESC, id DESC`);
+            return rows.map(rowToRequest);
+        },
+        async mine(userId) {
+            requireText(userId, 'userId');
+            const rows = await pipeSystem().execute(sql `
+        SELECT * FROM join_request WHERE user_id = ${userId} ORDER BY requested_at DESC, id DESC`);
+            return rows.map(rowToRequest);
+        },
+        async sweep() {
+            const flow = requireContext();
+            const orgs = await pipeSystem().execute(sql `
+        SELECT DISTINCT tenant_id FROM join_request WHERE status = 'open' AND expires_at <= now()`);
+            let expired = 0;
+            for (const org of orgs) {
+                const orgId = org['tenant_id'];
+                expired += await inTenant(flow, orgId, tx => expireOpen(flow, tx, orgId));
+            }
+            return { expired };
+        },
+    };
+    return handle;
+}
+//# sourceMappingURL=handle.js.map

package/dist/infra/join-requests/handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle.js","sourceRoot":"","sources":["../../../src/infra/join-requests/handle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC5E,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AA8DnD,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACtD,MAAM,IAAI,GAAG,iEAAiE,CAAA;AAC9E,MAAM,mBAAmB,GAAG,CAAC,CAAA;AAI7B,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ;IAC5B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;QACvB,KAAK,EAAE,GAAG,CAAC,WAAW,CAAW;QACjC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAW;QAChC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAsB;QAC1C,MAAM,EAAG,GAAG,CAAC,QAAQ,CAAmB,IAAI,IAAI;QAChD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI;QACjC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACxC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpC,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,SAAS,EAAG,GAAG,CAAC,YAAY,CAAmB,IAAI,IAAI;QACvD,IAAI,EAAG,GAAG,CAAC,MAAM,CAAmB,IAAI,IAAI;QAC5C,IAAI,EAAG,GAAG,CAAC,MAAM,CAAmB,IAAI,IAAI;KAC7C,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAY,GAAG,CAAA;IAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1F,IAAK,OAA8B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QACjE,OAAO,GAAI,OAA+B,CAAC,KAAK,CAAA;IAClD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,iBAAiB,IAAI,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAClI,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAE,iBAAiB,IAAI,8BAA8B,CAAC,CAAA;IAC5H,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,OAAoB;IAC3C,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACxG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,8PAA8P,CAAC,CAAA;IACjR,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,qBAAqB,CAAA;IAC/D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;IACrG,CAAC;IAED,SAAS,aAAa;QACpB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qEAAqE;gBACrE,wFAAwF;gBACxF,+EAA+E,CAChF,CAAA;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;IACxC,CAAC;IAED,SAAS,QAAQ,CAAI,IAAU,EAAE,QAAgB,EAAE,EAA0B;QAC3E,OAAO,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,SAAS,KAAK,CAAC,IAAU,EAAE,EAAM,EAAE,IAAY,EAAE,OAAoB;QACnE,OAAO,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE;YAC/B,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC;SAC5G,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAU,EAAE,EAAM,EAAE,IAAY,EAAE,OAAoB;QAC3E,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;IAED,gDAAgD;IAChD,KAAK,UAAU,MAAM,CAAC,EAAM,EAAE,SAAiB,EAAE,KAAa;QAC5D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;kFAC6C,SAAS,oBAAoB,KAAK,EAAE,CAAC,CAAA;QACnH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,WAAW,CAAA;QACzC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QACvG,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,IAA0B,EAAE,SAAiB,EAAE,EAAU,EAAE,IAAsC;QAC5H,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACnC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACrB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAM,EAAyB,EAAE;YAC9D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;gBACjE,MAAM,IAAI,cAAc,CAAC,yCAAyC,IAAI,kBAAkB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAA;YAC5H,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS;gBAC7B,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;4FAC8D,EAAE,YAAY,IAAI,CAAC,IAAI,IAAI,IAAI;yBAClG,SAAS,oBAAoB,QAAQ;wBACtC,CAAC;gBACjB,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;2FAC6D,EAAE,YAAY,IAAI,CAAC,IAAI,IAAI,IAAI;yBACjG,SAAS,oBAAoB,QAAQ;wBACtC,CAAC,CAAA;YACnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAA;YAC1F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;YACtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;YACzG,CAAC;YACD,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,8FAA8F;IAC9F,KAAK,UAAU,UAAU,CAAC,IAAU,EAAE,EAAM,EAAE,KAAa,EAAE,MAAe;QAC1E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;0BAEX,KAAK;UACrB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAA,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,iBAAiB,MAAM,EAAE;kBACnD,CAAC,CAAA;QACf,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI;YAC/B,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YAC3B,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC7B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;YAC7B,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC9G,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;gBACxC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,mBAAmB,EAAE,OAAO,EAAE,EAAE,CAAC;oBAChE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;gCAEX,KAAK,kBAAkB,MAAM,sBAAsB,CAAC,CAAA;oBAC1E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,KAAK,IAAI;4BAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;wBACzF,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;oBAC3C,CAAC;oBACD,IAAI,CAAC;wBACH,2EAA2E;wBAC3E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,EAAM,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;wBAEhD,KAAK,KAAK,MAAM,aAAa,IAAI,EAAE,MAAM,IAAI,IAAI;kBACvD,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA,GAAG,QAAQ,SAAS;0BAC/C,WAAW;0BACX,CAAC,CAAC,CAAA;wBAChB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;wBACtC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;wBACzC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;wBACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;oBACnC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;4BAAE,MAAM,GAAG,CAAA;oBACxC,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAA;YAC3H,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;YACzB,OAAO,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7G,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;YACxB,OAAO,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC5G,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;YAC9B,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;YACnC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC7B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;YAC7B,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,iDAAiD,SAAS,EAAE,CAAC,CAAA;YACzG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;YACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,CAAW,CAAA;YAC9C,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAyB,EAAE;gBAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;2FACkD,MAAM;uBAC1E,SAAS,oBAAoB,KAAK,kBAAkB,MAAM;sBAC3D,CAAC,CAAA;gBACf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,yCAAyC,SAAS,oBAAoB,KAAK,kBAAkB,MAAM,EAAE,CAAC,CAAA;oBACtI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAA;gBACnG,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;gBACtC,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;gBAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;YAC9B,CAAC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,IAAI;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;YACpC,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAA;YACrC,IAAI,CAAE,qBAA2C,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,kBAAkB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,wCAAwC,CAAC,CAAA;YACzI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;uDACS,QAAQ,iBAAiB,MAAM;4CAC1C,CAAC,CAAA;YACvC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC/B,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM;YACf,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC7B,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;qDACI,MAAM,sCAAsC,CAAC,CAAA;YAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAC/B,CAAC;QAED,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;YAC7B,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;kGACiD,CAAC,CAAA;YAC7F,IAAI,OAAO,GAAG,CAAC,CAAA;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAW,CAAA;gBACxC,OAAO,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;YAC3E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAA;QACpB,CAAC;KACF,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/infra/join-requests/index.d.ts

@@ -0,0 +1,3 @@
+export { createJoinRequests } from './handle.js';
+export type { JoinRequests, JoinRequestsConfig, JoinRequest, JoinRequestStatus, SettleResult } from './handle.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/infra/join-requests/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/infra/join-requests/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA"}

package/dist/infra/join-requests/index.js

@@ -0,0 +1,2 @@
+export { createJoinRequests } from './handle.js';
+//# sourceMappingURL=index.js.map

package/dist/infra/join-requests/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/infra/join-requests/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA"}

package/dist/infra/join-requests/namespace.d.ts

@@ -0,0 +1,7 @@
+import { createJoinRequests } from './handle.js';
+/** Join requests namespace — a user asks to join an existing org and one of its owners settles it. */
+export declare const joinRequests: {
+    /** Creates a join-request handle: `request`, `approve`, `refuse`, `withdraw`, `list`, `mine` and `sweep`. Needs blueprint `joinRequests: {}`. */
+    readonly create: typeof createJoinRequests;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/infra/join-requests/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/infra/join-requests/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,sGAAsG;AACtG,eAAO,MAAM,YAAY;IACvB,iJAAiJ;;CAEzI,CAAA"}

package/dist/infra/join-requests/namespace.js

@@ -0,0 +1,7 @@
+import { createJoinRequests } from './handle.js';
+/** Join requests namespace — a user asks to join an existing org and one of its owners settles it. */
+export const joinRequests = {
+    /** Creates a join-request handle: `request`, `approve`, `refuse`, `withdraw`, `list`, `mine` and `sweep`. Needs blueprint `joinRequests: {}`. */
+    create: createJoinRequests,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/infra/join-requests/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/infra/join-requests/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,sGAAsG;AACtG,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,iJAAiJ;IACjJ,MAAM,EAAE,kBAAkB;CAClB,CAAA"}

package/dist/infra/join-requests/schema.d.ts

@@ -0,0 +1,58 @@
+export declare const JOIN_REQUEST_STATUSES: readonly ["open", "approved", "refused", "withdrawn", "expired"];
+export declare const joinRequest: import("../../data/domain/types.js").DefinedTable<{
+    id: import("../../data/domain/types.js").FieldDescriptor<string, {
+        defaultRandom: true;
+        hasDefault: true;
+    } & {
+        primaryKey: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string, {
+        defaultRandom: true;
+        hasDefault: true;
+    } & {
+        primaryKey: true;
+    }>;
+    tenantId: import("../../data/domain/types.js").FieldDescriptor<string, {
+        tenant: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string, {
+        tenant: true;
+    }>;
+    userId: import("../../data/domain/types.js").FieldDescriptor<string, {}> & import("../../data/domain/field.js").FieldModifiers<string, {}>;
+    status: import("../../data/domain/types.js").FieldDescriptor<"expired" | "open" | "refused" | "approved" | "withdrawn", {}> & import("../../data/domain/field.js").FieldModifiers<"expired" | "open" | "refused" | "approved" | "withdrawn", {}>;
+    reason: import("../../data/domain/types.js").FieldDescriptor<string | null, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string | null, {
+        nullable: true;
+    }>;
+    evidence: import("../../data/domain/types.js").FieldDescriptor<import("zod/v4").JSONType, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<import("zod/v4").JSONType, {
+        nullable: true;
+    }>;
+    requestedAt: import("../../data/domain/types.js").FieldDescriptor<Date, {
+        hasDefault: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<Date, {
+        hasDefault: true;
+    }>;
+    expiresAt: import("../../data/domain/types.js").FieldDescriptor<Date, {}> & import("../../data/domain/field.js").FieldModifiers<Date, {}>;
+    settledAt: import("../../data/domain/types.js").FieldDescriptor<Date | null, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<Date | null, {
+        nullable: true;
+    }>;
+    settledBy: import("../../data/domain/types.js").FieldDescriptor<string | null, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string | null, {
+        nullable: true;
+    }>;
+    role: import("../../data/domain/types.js").FieldDescriptor<string | null, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string | null, {
+        nullable: true;
+    }>;
+    note: import("../../data/domain/types.js").FieldDescriptor<string | null, {
+        nullable: true;
+    }> & import("../../data/domain/field.js").FieldModifiers<string | null, {
+        nullable: true;
+    }>;
+}, "join_request">;
+//# sourceMappingURL=schema.d.ts.map

package/dist/infra/join-requests/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/infra/join-requests/schema.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,qBAAqB,kEAAmE,CAAA;AAErG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmBtB,CAAA"}

package/dist/infra/join-requests/schema.js

@@ -0,0 +1,31 @@
+// The table behind join requests. `join_request` carries a `.tenant()` key (the
+// org the user asks to join), so generated migrations put it under forced
+// row-level security. One open request per (org, user) is enforced by a
+// partial unique index.
+import { define } from '../../data/domain/index.js';
+import { field } from '../../data/domain/field.js';
+import { schema } from '../../data/schema/namespace.js';
+import { sql } from '../../data/db/sql.js';
+import { index, uniqueIndex } from '../../data/db/idx/index.js';
+export const JOIN_REQUEST_STATUSES = ['open', 'approved', 'refused', 'withdrawn', 'expired'];
+export const joinRequest = define('join_request', {
+    id: field.uuid().defaultRandom().primaryKey(),
+    tenantId: field.uuid().tenant(),
+    userId: field.text(),
+    status: field.enum(JOIN_REQUEST_STATUSES),
+    reason: field.text().nullable(),
+    evidence: field.jsonb(schema.check.json()).nullable(),
+    requestedAt: field.timestamp().default('now'),
+    expiresAt: field.timestamp(),
+    settledAt: field.timestamp().nullable(),
+    settledBy: field.text().nullable(),
+    role: field.text().nullable(),
+    note: field.text().nullable(),
+}, {
+    indexes: (t) => ({
+        oneOpen: uniqueIndex('uq_join_request_open').on(t['tenantId'], t['userId']).where(sql.raw(`status = 'open'`)),
+        byUser: index('idx_join_request_user').on(t['userId']),
+        byStatus: index('idx_join_request_status').on(t['tenantId'], t['status']),
+    }),
+});
+//# sourceMappingURL=schema.js.map

package/dist/infra/join-requests/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/infra/join-requests/schema.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,wEAAwE;AACxE,wBAAwB;AAExB,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAE/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAU,CAAA;AAErG,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,cAAc,EAAE;IAChD,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC7C,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE;IAC/B,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE;IACpB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;IACzC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;IAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC9B,EAAE;IACD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,EAAE,WAAW,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC7G,MAAM,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtD,QAAQ,EAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC1E,CAAC;CACH,CAAC,CAAA"}

package/dist/infra/outbox/core.d.ts

@@ -47,6 +47,15 @@ export interface OutboxOptions<D> {
 export interface Outbox {
     /** Delivers what is due now, up to 20 batches; rows that fail wait for the next call. */
     drain(): Promise<OutboxTotals>;
+    /**
+     * Puts given-up rows (`failed_at` set, never delivered) back on the queue: `failed_at` cleared, `attempts` 0, due now.
+     * `last_error` stays until the next attempt. Ids are unchanged. Returns each requeued row as it now is, plus
+     * `prev_attempts`, the attempts it had when given up.
+     */
+    requeue(options: {
+        sink?: string;
+        failedSince?: Date;
+    }): Promise<Record<string, unknown>[]>;
 }
 export declare function createOutbox<D>(options: OutboxOptions<D>): Outbox;
 //# sourceMappingURL=core.d.ts.map

package/dist/infra/outbox/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/infra/outbox/core.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4HAA4H;AAC5H,MAAM,WAAW,YAAY,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,mKAAmK;IACnK,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,CAAA;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtF,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpG;AAED,MAAM,WAAW,MAAM;IACrB,yFAAyF;IACzF,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;CAC/B;AAUD,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAqEjE"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/infra/outbox/core.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,4HAA4H;AAC5H,MAAM,WAAW,YAAY,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IAC/D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,0BAA0B;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,mKAAmK;IACnK,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,CAAA;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtF,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACpG;AAED,MAAM,WAAW,MAAM;IACrB,yFAAyF;IACzF,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;IAC9B;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;CAC5F;AAUD,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,MAAM,CAkFjE"}