pipework 0.7.12 → 0.7.13

package/dist/async/pipeline/resume.js

@@ -0,0 +1,100 @@
+import { sql } from '../../data/db/sql.js';
+import { PipelineResumeError, PipelineStepError } from './errors.js';
+export async function resumePipeline(db, config, runId, stepOutput) {
+    const [runRow] = await db.execute(sql `
+    UPDATE pipework_pipeline_runs
+    SET status = 'running'
+    WHERE id = ${runId}::uuid AND status = 'waiting'
+    RETURNING id, current_step, input, tenant_id, metadata, started_at
+  `);
+    if (runRow === undefined) {
+        const [existingRow] = await db.execute(sql `
+      SELECT status FROM pipework_pipeline_runs WHERE id = ${runId}::uuid
+    `);
+        if (existingRow === undefined) {
+            throw new PipelineResumeError(runId, 'Pipeline run not found.');
+        }
+        throw new PipelineResumeError(runId, `Expected status "waiting" but found "${String(existingRow['status'])}".`);
+    }
+    const currentStep = Number(runRow['current_step']);
+    const input = runRow['input'];
+    const tenant = String(runRow['tenant_id']);
+    const metadata = runRow['metadata'] ?? {};
+    const startedAt = new Date(String(runRow['started_at']));
+    await db.execute(sql `
+    UPDATE pipework_pipeline_steps SET status = 'completed', output = ${JSON.stringify(stepOutput ?? null)}::jsonb, completed_at = now()
+    WHERE run_id = ${runId}::uuid AND step_index = ${currentStep}
+  `);
+    let lastOutput = stepOutput;
+    for (let i = currentStep + 1; i < config.steps.length; i++) {
+        const step = config.steps[i];
+        if (step.async === true) {
+            await db.execute(sql `
+        UPDATE pipework_pipeline_runs SET status = 'waiting', current_step = ${i}
+        WHERE id = ${runId}::uuid
+      `);
+            return {
+                id: runId,
+                pipelineName: config.name,
+                status: 'waiting',
+                currentStep: i,
+                input,
+                startedAt,
+                completedAt: null,
+                error: null,
+            };
+        }
+        await db.execute(sql `
+      UPDATE pipework_pipeline_steps SET status = 'running', started_at = now()
+      WHERE run_id = ${runId}::uuid AND step_index = ${i}
+    `);
+        try {
+            const stepCtx = {
+                db,
+                input: lastOutput,
+                runId,
+                stepIndex: i,
+                tenant,
+                metadata,
+            };
+            lastOutput = await step.handler(stepCtx);
+            await db.execute(sql `
+        UPDATE pipework_pipeline_steps SET status = 'completed', output = ${JSON.stringify(lastOutput ?? null)}::jsonb, completed_at = now()
+        WHERE run_id = ${runId}::uuid AND step_index = ${i}
+      `);
+            await db.execute(sql `
+        UPDATE pipework_pipeline_runs SET current_step = ${i + 1}
+        WHERE id = ${runId}::uuid
+      `);
+        }
+        catch (error) {
+            const errorJson = error instanceof Error
+                ? { message: error.message, stack: error.stack }
+                : { message: String(error) };
+            await db.execute(sql `
+        UPDATE pipework_pipeline_steps SET status = 'failed', error = ${JSON.stringify(errorJson)}::jsonb, completed_at = now()
+        WHERE run_id = ${runId}::uuid AND step_index = ${i}
+      `);
+            await db.execute(sql `
+        UPDATE pipework_pipeline_runs SET status = 'failed', error = ${JSON.stringify(errorJson)}::jsonb, completed_at = now()
+        WHERE id = ${runId}::uuid
+      `);
+            throw new PipelineStepError(config.name, step.name, i, error);
+        }
+    }
+    await db.execute(sql `
+    UPDATE pipework_pipeline_runs SET status = 'completed', current_step = ${config.steps.length}, completed_at = now()
+    WHERE id = ${runId}::uuid
+  `);
+    return {
+        id: runId,
+        pipelineName: config.name,
+        status: 'completed',
+        currentStep: config.steps.length,
+        input,
+        startedAt,
+        completedAt: new Date(),
+        error: null,
+    };
+}
+//# sourceMappingURL=resume.js.map

package/dist/async/pipeline/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../../src/async/pipeline/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAG1C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAEpE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAM,EACN,MAAsB,EACtB,KAAa,EACb,UAAmB;IAEnB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;;iBAGtB,KAAK;;GAEnB,CAAC,CAAA;IAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;6DACe,KAAK;KAC7D,CAAC,CAAA;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,IAAI,mBAAmB,CAC3B,KAAK,EACL,wCAAwC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAI,MAAM,CAAC,UAAU,CAAoC,IAAI,EAAE,CAAA;IAC7E,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAExD,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;wEACkD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC;qBACrF,KAAK,2BAA2B,WAAW;GAC7D,CAAC,CAAA;IAEF,IAAI,UAAU,GAAY,UAAU,CAAA;IAEpC,KAAK,IAAI,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QAE7B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;+EACqD,CAAC;qBAC3D,KAAK;OACnB,CAAC,CAAA;YAEF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,MAAM,CAAC,IAAI;gBACzB,MAAM,EAAE,SAAS;gBACjB,WAAW,EAAE,CAAC;gBACd,KAAK;gBACL,SAAS;gBACT,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,IAAI;aACZ,CAAA;QACH,CAAC;QAED,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;uBAED,KAAK,2BAA2B,CAAC;KACnD,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,GAAgB;gBAC3B,EAAE;gBACF,KAAK,EAAE,UAAU;gBACjB,KAAK;gBACL,SAAS,EAAE,CAAC;gBACZ,MAAM;gBACN,QAAQ;aACT,CAAA;YAED,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAExC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;4EACkD,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC;yBACrF,KAAK,2BAA2B,CAAC;OACnD,CAAC,CAAA;YAEF,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;2DACiC,CAAC,GAAG,CAAC;qBAC3C,KAAK;OACnB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK;gBACtC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBAChD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;YAE9B,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;wEAC8C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;yBACxE,KAAK,2BAA2B,CAAC;OACnD,CAAC,CAAA;YAEF,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;uEAC6C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;qBAC3E,KAAK;OACnB,CAAC,CAAA;YAEF,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;6EACuD,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/E,KAAK;GACnB,CAAC,CAAA;IAEF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,YAAY,EAAE,MAAM,CAAC,IAAI;QACzB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAChC,KAAK;QACL,SAAS;QACT,WAAW,EAAE,IAAI,IAAI,EAAE;QACvB,KAAK,EAAE,IAAI;KACZ,CAAA;AACH,CAAC"}

package/dist/async/pipeline/types.d.ts

@@ -0,0 +1,50 @@
+import type { DB } from '../../data/db/index.js';
+export interface StepDefinition<TInput = unknown, TOutput = unknown> {
+    readonly name: string;
+    readonly async?: boolean;
+    readonly handler: (ctx: StepContext<TInput>) => Promise<TOutput>;
+}
+export interface StepContext<TInput = unknown> {
+    readonly db: DB;
+    readonly input: TInput;
+    readonly runId: string;
+    readonly stepIndex: number;
+    readonly tenant: string;
+    readonly metadata: Record<string, unknown>;
+}
+export interface PipelineConfig {
+    readonly name: string;
+    readonly database: string;
+    readonly steps: readonly StepDefinition[];
+}
+export type PipelineStatus = 'running' | 'waiting' | 'completed' | 'failed';
+export type StepStatus = 'pending' | 'running' | 'completed' | 'failed';
+export interface PipelineRun {
+    readonly id: string;
+    readonly pipelineName: string;
+    readonly status: PipelineStatus;
+    readonly currentStep: number;
+    readonly input: unknown;
+    readonly startedAt: Date;
+    readonly completedAt: Date | null;
+    readonly error: unknown | null;
+}
+export interface StepRunResult {
+    readonly stepName: string;
+    readonly status: StepStatus;
+    readonly output: unknown | null;
+    readonly startedAt: Date | null;
+    readonly completedAt: Date | null;
+    readonly error: unknown | null;
+}
+export interface PipelineExecuteContext {
+    readonly tenant: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface Pipeline {
+    execute(db: DB, input: unknown, context: PipelineExecuteContext): Promise<PipelineRun>;
+    resume(db: DB, runId: string, stepOutput: unknown): Promise<PipelineRun>;
+    getStatus(db: DB, runId: string): Promise<PipelineRun | null>;
+    readonly definition: PipelineConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/async/pipeline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/async/pipeline/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAEhD,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACjE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACjE;AAED,MAAM,WAAW,WAAW,CAAC,MAAM,GAAG,OAAO;IAC3C,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAA;IACf,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAA;CAC1C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAC3E,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;AAEvE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;IACxB,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACtF,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IACxE,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAA;CACpC"}

package/dist/async/pipeline/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/async/pipeline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/async/pipeline/types.ts"],"names":[],"mappings":""}

package/dist/async/state-machine/define.d.ts

@@ -0,0 +1,3 @@
+import type { StateMachineConfig, StateMachine } from './types.js';
+export declare function defineStateMachine(config: StateMachineConfig): StateMachine;
+//# sourceMappingURL=define.d.ts.map

package/dist/async/state-machine/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/define.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAuC,MAAM,YAAY,CAAA;AAIvG,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,YAAY,CAwB3E"}

package/dist/async/state-machine/define.js

@@ -0,0 +1,46 @@
+import { InvalidStateMachineError } from './errors.js';
+import { buildTransitionMap, getValidTargets, attemptTransition, evaluateGuard } from './transition.js';
+export function defineStateMachine(config) {
+    validate(config);
+    const transitionMap = buildTransitionMap(config.transitions);
+    return {
+        validTargets(from) {
+            return getValidTargets(transitionMap, from);
+        },
+        hasTransition(from, to) {
+            return getValidTargets(transitionMap, from).includes(to);
+        },
+        async canTransition(context) {
+            return evaluateGuard(transitionMap, context);
+        },
+        async transition(context) {
+            return attemptTransition(context, transitionMap);
+        },
+        definition: config,
+    };
+}
+function validate(config) {
+    if (config.states.length === 0) {
+        throw new InvalidStateMachineError('Must define at least one state.');
+    }
+    const stateSet = new Set(config.states);
+    if (stateSet.size !== config.states.length) {
+        const dupes = config.states.filter((s, i) => config.states.indexOf(s) !== i);
+        throw new InvalidStateMachineError(`Duplicate states: ${dupes.join(', ')}.`);
+    }
+    if (config.initial !== undefined && !stateSet.has(config.initial)) {
+        throw new InvalidStateMachineError(`Initial state "${config.initial}" is not in the states list.`);
+    }
+    for (const t of config.transitions) {
+        if (!stateSet.has(t.from)) {
+            throw new InvalidStateMachineError(`Transition references unknown source state "${t.from}".`);
+        }
+        const targets = typeof t.to === 'string' ? [t.to] : t.to;
+        for (const target of targets) {
+            if (!stateSet.has(target)) {
+                throw new InvalidStateMachineError(`Transition from "${t.from}" references unknown target state "${target}".`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=define.js.map

package/dist/async/state-machine/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../../src/async/state-machine/define.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAEvG,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,QAAQ,CAAC,MAAM,CAAC,CAAA;IAEhB,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAE5D,OAAO;QACL,YAAY,CAAC,IAAY;YACvB,OAAO,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;QAC7C,CAAC;QAED,aAAa,CAAC,IAAY,EAAE,EAAU;YACpC,OAAO,eAAe,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAA0B;YAC5C,OAAO,aAAa,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,OAA0B;YACzC,OAAO,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QAClD,CAAC;QAED,UAAU,EAAE,MAAM;KACnB,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAA0B;IAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,CAAC,CAAA;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEvC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5E,MAAM,IAAI,wBAAwB,CAAC,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,wBAAwB,CAChC,kBAAkB,MAAM,CAAC,OAAO,8BAA8B,CAC/D,CAAA;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,wBAAwB,CAChC,+CAA+C,CAAC,CAAC,IAAI,IAAI,CAC1D,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,wBAAwB,CAChC,oBAAoB,CAAC,CAAC,IAAI,sCAAsC,MAAM,IAAI,CAC3E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/async/state-machine/errors.d.ts

@@ -0,0 +1,12 @@
+import { PipeworkError } from '../../core/errors/base.js';
+export declare class InvalidTransitionError extends PipeworkError {
+    readonly code: "INVALID_TRANSITION";
+    readonly httpStatus: 409;
+    constructor(entityType: string, from: string, to: string, validTargets: readonly string[]);
+}
+export declare class InvalidStateMachineError extends PipeworkError {
+    readonly code: "INVALID_STATE_MACHINE";
+    readonly httpStatus: 500;
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/async/state-machine/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEzD,qBAAa,sBAAuB,SAAQ,aAAa;IACvD,QAAQ,CAAC,IAAI,EAAG,oBAAoB,CAAS;IAC7C,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAGhC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,SAAS,MAAM,EAAE;CASlC;AAED,qBAAa,wBAAyB,SAAQ,aAAa;IACzD,QAAQ,CAAC,IAAI,EAAG,uBAAuB,CAAS;IAChD,QAAQ,CAAC,UAAU,EAAG,GAAG,CAAS;gBAEtB,OAAO,EAAE,MAAM;CAG5B"}

package/dist/async/state-machine/errors.js

@@ -0,0 +1,19 @@
+import { PipeworkError } from '../../core/errors/base.js';
+export class InvalidTransitionError extends PipeworkError {
+    code = 'INVALID_TRANSITION';
+    httpStatus = 409;
+    constructor(entityType, from, to, validTargets) {
+        const targets = validTargets.length > 0
+            ? `Valid targets from "${from}": ${validTargets.join(', ')}.`
+            : `No transitions defined from "${from}".`;
+        super(`Cannot transition ${entityType} from "${from}" to "${to}". ${targets}`);
+    }
+}
+export class InvalidStateMachineError extends PipeworkError {
+    code = 'INVALID_STATE_MACHINE';
+    httpStatus = 500;
+    constructor(message) {
+        super(`[pipework] Invalid state machine definition: ${message}`);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/async/state-machine/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/async/state-machine/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAEzD,MAAM,OAAO,sBAAuB,SAAQ,aAAa;IAC9C,IAAI,GAAG,oBAA6B,CAAA;IACpC,UAAU,GAAG,GAAY,CAAA;IAElC,YACE,UAAkB,EAClB,IAAY,EACZ,EAAU,EACV,YAA+B;QAE/B,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC;YACrC,CAAC,CAAC,uBAAuB,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC7D,CAAC,CAAC,gCAAgC,IAAI,IAAI,CAAA;QAC5C,KAAK,CACH,qBAAqB,UAAU,UAAU,IAAI,SAAS,EAAE,MAAM,OAAO,EAAE,CACxE,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,aAAa;IAChD,IAAI,GAAG,uBAAgC,CAAA;IACvC,UAAU,GAAG,GAAY,CAAA;IAElC,YAAY,OAAe;QACzB,KAAK,CAAC,gDAAgD,OAAO,EAAE,CAAC,CAAA;IAClE,CAAC;CACF"}

package/dist/async/state-machine/index.d.ts

@@ -0,0 +1,4 @@
+export { defineStateMachine } from './define.js';
+export { InvalidTransitionError, InvalidStateMachineError } from './errors.js';
+export type { StateMachineConfig, TransitionDef, TransitionContext, TransitionResult, StateMachine } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/async/state-machine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAC9E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/async/state-machine/index.js

@@ -0,0 +1,3 @@
+export { defineStateMachine } from './define.js';
+export { InvalidTransitionError, InvalidStateMachineError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/async/state-machine/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/async/state-machine/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA"}

package/dist/async/state-machine/namespace.d.ts

@@ -0,0 +1,12 @@
+import { defineStateMachine } from './define.js';
+import { InvalidTransitionError, InvalidStateMachineError } from './errors.js';
+/** State machine namespace — define valid transitions with guards and side effects. */
+export declare const state: {
+    /** Defines a state machine from states, transitions, guards, and effects. Returns a StateMachine with transition/canTransition. */
+    define: typeof defineStateMachine;
+    /** Thrown when a transition is not allowed from the current state. */
+    InvalidTransitionError: typeof InvalidTransitionError;
+    /** Thrown when the state machine definition is internally inconsistent. */
+    InvalidStateMachineError: typeof InvalidStateMachineError;
+};
+//# sourceMappingURL=namespace.d.ts.map

package/dist/async/state-machine/namespace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAE9E,uFAAuF;AACvF,eAAO,MAAM,KAAK;IAChB,mIAAmI;;IAEnI,sEAAsE;;IAEtE,2EAA2E;;CAE5E,CAAA"}

package/dist/async/state-machine/namespace.js

@@ -0,0 +1,12 @@
+import { defineStateMachine } from './define.js';
+import { InvalidTransitionError, InvalidStateMachineError } from './errors.js';
+/** State machine namespace — define valid transitions with guards and side effects. */
+export const state = {
+    /** Defines a state machine from states, transitions, guards, and effects. Returns a StateMachine with transition/canTransition. */
+    define: defineStateMachine,
+    /** Thrown when a transition is not allowed from the current state. */
+    InvalidTransitionError,
+    /** Thrown when the state machine definition is internally inconsistent. */
+    InvalidStateMachineError,
+};
+//# sourceMappingURL=namespace.js.map

package/dist/async/state-machine/namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namespace.js","sourceRoot":"","sources":["../../../src/async/state-machine/namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAE9E,uFAAuF;AACvF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,mIAAmI;IACnI,MAAM,EAAE,kBAAkB;IAC1B,sEAAsE;IACtE,sBAAsB;IACtB,2EAA2E;IAC3E,wBAAwB;CACzB,CAAA"}

package/dist/async/state-machine/transition.d.ts

@@ -0,0 +1,7 @@
+import type { TransitionDef, TransitionContext, TransitionResult } from './types.js';
+export declare function buildTransitionMap(transitions: readonly TransitionDef[]): Map<string, TransitionDef[]>;
+export declare function getValidTargets(transitionMap: Map<string, TransitionDef[]>, from: string): string[];
+export declare function findMatchingDef(transitionMap: Map<string, TransitionDef[]>, from: string, to: string): TransitionDef | undefined;
+export declare function evaluateGuard(transitionMap: Map<string, TransitionDef[]>, context: TransitionContext): Promise<boolean>;
+export declare function attemptTransition(context: TransitionContext, transitionMap: Map<string, TransitionDef[]>): Promise<TransitionResult>;
+//# sourceMappingURL=transition.d.ts.map

package/dist/async/state-machine/transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transition.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/transition.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGpF,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAQtG;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWnG;AAED,wBAAgB,eAAe,CAC7B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,EAC3C,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,aAAa,GAAG,SAAS,CAK3B;AAED,wBAAsB,aAAa,CACjC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,EAC3C,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CA+B3B"}

package/dist/async/state-machine/transition.js

@@ -0,0 +1,57 @@
+import { InvalidTransitionError } from './errors.js';
+export function buildTransitionMap(transitions) {
+    const map = new Map();
+    for (const t of transitions) {
+        const existing = map.get(t.from) ?? [];
+        existing.push(t);
+        map.set(t.from, existing);
+    }
+    return map;
+}
+export function getValidTargets(transitionMap, from) {
+    const defs = transitionMap.get(from) ?? [];
+    const targets = [];
+    for (const def of defs) {
+        if (typeof def.to === 'string') {
+            targets.push(def.to);
+        }
+        else {
+            targets.push(...def.to);
+        }
+    }
+    return targets;
+}
+export function findMatchingDef(transitionMap, from, to) {
+    const defs = transitionMap.get(from) ?? [];
+    return defs.find(d => typeof d.to === 'string' ? d.to === to : d.to.includes(to));
+}
+export async function evaluateGuard(transitionMap, context) {
+    const validTargets = getValidTargets(transitionMap, context.from);
+    if (!validTargets.includes(context.to)) {
+        return false;
+    }
+    const matchingDef = findMatchingDef(transitionMap, context.from, context.to);
+    if (matchingDef?.guard !== undefined) {
+        return matchingDef.guard(context);
+    }
+    return true;
+}
+export async function attemptTransition(context, transitionMap) {
+    const validTargets = getValidTargets(transitionMap, context.from);
+    if (!validTargets.includes(context.to)) {
+        throw new InvalidTransitionError(context.entityType, context.from, context.to, validTargets);
+    }
+    const matchingDef = findMatchingDef(transitionMap, context.from, context.to);
+    if (matchingDef?.guard !== undefined) {
+        const allowed = await matchingDef.guard(context);
+        if (!allowed) {
+            throw new InvalidTransitionError(context.entityType, context.from, context.to, validTargets);
+        }
+    }
+    return {
+        from: context.from,
+        to: context.to,
+        entityId: context.entityId,
+    };
+}
+//# sourceMappingURL=transition.js.map

package/dist/async/state-machine/transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transition.js","sourceRoot":"","sources":["../../../src/async/state-machine/transition.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAEpD,MAAM,UAAU,kBAAkB,CAAC,WAAqC;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;QACtC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3B,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,aAA2C,EAAE,IAAY;IACvF,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,aAA2C,EAC3C,IAAY,EACZ,EAAU;IAEV,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACnB,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAC3D,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAA2C,EAC3C,OAA0B;IAE1B,MAAM,YAAY,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;IAE5E,IAAI,WAAW,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA0B,EAC1B,aAA2C;IAE3C,MAAM,YAAY,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,EAAE,EACV,YAAY,CACb,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;IAE5E,IAAI,WAAW,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,EAAE,EACV,YAAY,CACb,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAA;AACH,CAAC"}

package/dist/async/state-machine/types.d.ts

@@ -0,0 +1,33 @@
+import type { Audit } from '../../infra/audit/types.js';
+export interface TransitionDef {
+    readonly from: string;
+    readonly to: string | readonly string[];
+    readonly guard?: (context: TransitionContext) => boolean | Promise<boolean>;
+}
+export interface StateMachineConfig {
+    readonly states: readonly string[];
+    readonly transitions: readonly TransitionDef[];
+    readonly initial?: string;
+    readonly audit?: Audit;
+}
+export interface TransitionContext {
+    readonly entityId: string;
+    readonly entityType: string;
+    readonly from: string;
+    readonly to: string;
+    readonly userId?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface TransitionResult {
+    readonly from: string;
+    readonly to: string;
+    readonly entityId: string;
+}
+export interface StateMachine {
+    validTargets(from: string): readonly string[];
+    hasTransition(from: string, to: string): boolean;
+    canTransition(context: TransitionContext): Promise<boolean>;
+    transition(context: TransitionContext): Promise<TransitionResult>;
+    readonly definition: StateMachineConfig;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/async/state-machine/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/async/state-machine/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5E;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAA;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;IAChD,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3D,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACjE,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;CACxC"}

package/dist/async/state-machine/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/async/state-machine/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/async/state-machine/types.ts"],"names":[],"mappings":""}

package/dist/auth/auth/chain.d.ts

@@ -0,0 +1,26 @@
+import type { AuthStrategy, AuthRequest, AuthContext } from './types.js';
+/** Post-authentication hook — enrich the resolved auth with additional data (roles, permissions, etc.). */
+export interface AuthEnricher<TAuth> {
+    readonly name: string;
+    enrich(auth: TAuth): Promise<TAuth>;
+}
+/** Resolves tenant ID from auth context — called after authentication in the chain. */
+export interface TenantResolver<TAuth> {
+    resolve(auth: TAuth): string;
+}
+/** Configuration for the auth chain — strategies, enrichers, tenant resolver. */
+export interface AuthChainConfig<TAuth> {
+    readonly strategies: readonly AuthStrategy<TAuth>[];
+    readonly enrichers?: readonly AuthEnricher<TAuth>[];
+    readonly tenantResolver?: TenantResolver<TAuth>;
+}
+/** Result of running the auth chain — resolved auth and tenant (both nullable for public routes). */
+export interface AuthChainResult<TAuth> {
+    readonly auth: TAuth | null;
+    readonly tenant: string | null;
+}
+/** Executes the auth chain: tries strategies in order, enriches, resolves tenant. */
+export declare function runAuthChain<TAuth>(config: AuthChainConfig<TAuth>, request: AuthRequest, options: {
+    optional: boolean;
+}, context: AuthContext): Promise<AuthChainResult<TAuth>>;
+//# sourceMappingURL=chain.d.ts.map

package/dist/auth/auth/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../../src/auth/auth/chain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAGxE,2GAA2G;AAC3G,MAAM,WAAW,YAAY,CAAC,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;CACpC;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc,CAAC,KAAK;IACnC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,eAAe,CAAC,KAAK;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,CAAC,KAAK,CAAC,EAAE,CAAA;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,YAAY,CAAC,KAAK,CAAC,EAAE,CAAA;IACnD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAA;CAChD;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe,CAAC,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAED,qFAAqF;AACrF,wBAAsB,YAAY,CAAC,KAAK,EACtC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAC9B,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,EAC9B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAqCjC"}

package/dist/auth/auth/chain.js

@@ -0,0 +1,46 @@
+import { UnauthorizedError } from '../../core/errors/index.js';
+/** Executes the auth chain: tries strategies in order, enriches, resolves tenant. */
+export async function runAuthChain(config, request, options, context) {
+    let extracted = null;
+    let matchedStrategy = null;
+    for (const strategy of config.strategies) {
+        extracted = await strategy.extract(request, context);
+        if (extracted !== null) {
+            matchedStrategy = strategy;
+            break;
+        }
+    }
+    if (extracted === null) {
+        if (options.optional)
+            return { auth: null, tenant: null };
+        throw new UnauthorizedError();
+    }
+    let auth;
+    try {
+        auth = await matchedStrategy.verify(extracted, context);
+    }
+    catch (error) {
+        if (error instanceof UnauthorizedError)
+            throw error;
+        throw new UnauthorizedError('Authentication failed', {
+            strategy: matchedStrategy.name,
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+    if (config.enrichers) {
+        for (const enricher of config.enrichers) {
+            auth = await enricher.enrich(auth);
+        }
+    }
+    const tenant = config.tenantResolver ? config.tenantResolver.resolve(auth) : extractTenant(auth);
+    return { auth, tenant };
+}
+function extractTenant(auth) {
+    if (auth !== null && typeof auth === 'object' && 'tenantId' in auth) {
+        const tenantId = auth.tenantId;
+        if (typeof tenantId === 'string')
+            return tenantId;
+    }
+    return null;
+}
+//# sourceMappingURL=chain.js.map

package/dist/auth/auth/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../../src/auth/auth/chain.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AA0B9D,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA8B,EAC9B,OAAoB,EACpB,OAA8B,EAC9B,OAAoB;IAEpB,IAAI,SAAS,GAAiB,IAAI,CAAA;IAClC,IAAI,eAAe,GAA+B,IAAI,CAAA;IAEtD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACpD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,eAAe,GAAG,QAAQ,CAAA;YAC1B,MAAK;QACP,CAAC;IACH,CAAC;IAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;QACzD,MAAM,IAAI,iBAAiB,EAAE,CAAA;IAC/B,CAAC;IAED,IAAI,IAAW,CAAA;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,eAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAA;QACnD,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,EAAE;YACnD,QAAQ,EAAE,eAAgB,CAAC,IAAI;YAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;IAEhG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAI,IAA8B,CAAC,QAAQ,CAAA;QACzD,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAA;IACnD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/auth/auth/cookie.d.ts

@@ -0,0 +1,24 @@
+/** Cookie configuration for token delivery — name, domain, path, secure, sameSite, httpOnly. */
+export interface CookieConfig {
+    readonly name?: string;
+    readonly secure?: 'auto' | boolean;
+    readonly sameSite?: 'strict' | 'lax' | 'none';
+    readonly path?: string;
+}
+/** CookieConfig with all defaults resolved — every field is required. */
+export interface ResolvedCookieConfig {
+    readonly name: string;
+    readonly secure: boolean;
+    readonly sameSite: string;
+    readonly path: string;
+    readonly httpOnly: true;
+}
+/** Resolves a partial CookieConfig into a ResolvedCookieConfig with secure defaults. */
+export declare function resolveCookieConfig(cookie: CookieConfig, env: string): ResolvedCookieConfig;
+/** Builds a Set-Cookie header string from name, value, and resolved config. */
+export declare function buildSetCookieHeader(resolved: ResolvedCookieConfig, value: string, maxAge: number): string;
+/** Builds a Set-Cookie header that expires (clears) a cookie. */
+export declare function buildClearCookieHeader(resolved: ResolvedCookieConfig): string;
+/** Parses a Cookie header string into a Record of key-value pairs. */
+export declare function parseCookieHeader(header: string | undefined, name: string): string | undefined;
+//# sourceMappingURL=cookie.d.ts.map

package/dist/auth/auth/cookie.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cookie.d.ts","sourceRoot":"","sources":["../../../src/auth/auth/cookie.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;IAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;CACxB;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAY3F;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAU1G;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,CAU7E;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAY9F"}

package/dist/auth/auth/cookie.js

@@ -0,0 +1,59 @@
+/** Resolves a partial CookieConfig into a ResolvedCookieConfig with secure defaults. */
+export function resolveCookieConfig(cookie, env) {
+    const secure = cookie.secure === 'auto' || cookie.secure === undefined
+        ? env === 'production'
+        : cookie.secure;
+    return {
+        name: cookie.name ?? '__pipework_refresh',
+        secure,
+        sameSite: cookie.sameSite ?? 'strict',
+        path: cookie.path ?? '/',
+        httpOnly: true,
+    };
+}
+/** Builds a Set-Cookie header string from name, value, and resolved config. */
+export function buildSetCookieHeader(resolved, value, maxAge) {
+    const parts = [
+        `${resolved.name}=${encodeURIComponent(value)}`,
+        `HttpOnly`,
+        `Path=${resolved.path}`,
+        `Max-Age=${maxAge}`,
+        `SameSite=${capitalize(resolved.sameSite)}`,
+    ];
+    if (resolved.secure)
+        parts.push('Secure');
+    return parts.join('; ');
+}
+/** Builds a Set-Cookie header that expires (clears) a cookie. */
+export function buildClearCookieHeader(resolved) {
+    const parts = [
+        `${resolved.name}=`,
+        `HttpOnly`,
+        `Path=${resolved.path}`,
+        `Max-Age=0`,
+        `SameSite=${capitalize(resolved.sameSite)}`,
+    ];
+    if (resolved.secure)
+        parts.push('Secure');
+    return parts.join('; ');
+}
+/** Parses a Cookie header string into a Record of key-value pairs. */
+export function parseCookieHeader(header, name) {
+    if (header === undefined)
+        return undefined;
+    for (const pair of header.split(';')) {
+        const trimmed = pair.trim();
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx === -1)
+            continue;
+        const key = trimmed.slice(0, eqIdx).trim();
+        if (key === name) {
+            return decodeURIComponent(trimmed.slice(eqIdx + 1).trim());
+        }
+    }
+    return undefined;
+}
+function capitalize(s) {
+    return s.charAt(0).toUpperCase() + s.slice(1);
+}
+//# sourceMappingURL=cookie.js.map