sitero-server 0.0.1

package/dist/types/src/composition/types.d.ts

@@ -0,0 +1,219 @@
+import type { SiteroServerPolicies } from "./policies";
+import type { AdminForgotPasswordEmailSender, AdminVerificationEmailSender, NewInquiryEmailSender } from "../application/email";
+import type { AdminAuthenticationCommandPort, AdminChangePasswordOperation, AdminEmailUnverifiedInput, AdminEmailUnverifiedOperation, AdminForgotPasswordInput, AdminForgotPasswordOperation, AdminMeOperation, AdminResetPasswordInput, AdminResetPasswordOperation, AdminSignInInput, AdminSignInOperation, AdminSignOutOperation, AdminVerifyEmailInput, AdminVerifyEmailOperation, AdminVerifyOperation } from "../application/features/authentication";
+import type { EmailPreviewListTemplatesOperation, EmailPreviewRenderTemplateInput, EmailPreviewRenderTemplateOperation } from "../application/features/email-preview";
+import type { InquirySubmitInput, InquirySubmitOperation } from "../application/features/inquiry";
+import type { UploadFileInput, UploadFileOperation, UploadFilesInput, UploadFilesOperation, UploadPolicy } from "../application/features/uploads";
+import type { AdminCommandPort, AdminCreateCommand, AdminDeleteCommand, AdminFindDetailQuery, AdminFindListCardsQuery, AdminInquiryNotificationRecipientQueryPort, AdminQueryPort, AdminUpdateCommand } from "../application/resources/admin";
+import type { AdminRefreshTokenCommandPort, AdminRefreshTokenDeleteCommand, AdminRefreshTokenFindManyQuery, AdminRefreshTokenQueryPort } from "../application/resources/admin-refresh-token";
+import type { ConfigCommandPort, ConfigFindDetailQuery, ConfigFindManyQuery, ConfigFindPublicQuery, ConfigQueryPort, ConfigUpdateCommand } from "../application/resources/config";
+import type { FileCommandPort, FileCreateCommand, FileCreateManyCommand, FileDeleteCommand, FileDeleteManyCommand, FileFindDetailQuery, FileFindListCardsQuery, FilePurgeManyCommand, FileQueryPort, FileReplaceContentCommand, FileReplaceContentPort, FileRestoreManyCommand, FileUpdateCommand } from "../application/resources/file";
+import type { InquiryCommandPort, InquiryDeleteCommand, InquiryFindListCardsQuery, InquiryFindQuery, InquiryQueryPort } from "../application/resources/inquiry";
+import type { PostCommandPort, PostCreateCommand, PostDeleteCommand, PostFindDetailQuery, PostFindPublicQuery, PostFindPublicListCardsQuery, PostFindListCardsQuery, PostFindManyQuery, PostQueryPort, PostUpdateCommand } from "../application/resources/post";
+import type { SeoMetadataCommandPort, SeoMetadataUpsertCommand } from "../application/resources/seo-metadata";
+import type { AdminSessionAuthenticate } from "../application/sessions";
+import type { AuthenticationPasswordPort, AuthenticationTokenPort } from "../contracts/authentication";
+import type { CachePort } from "../contracts/cache";
+import type { EmailTemplateCatalogPort, EmailTemplateRendererPort } from "../contracts/email";
+import type { RateLimiterPort } from "../contracts/rate-limiter";
+import type { StorageRemovePort, StorageUploadPort } from "../contracts/storage";
+import type { Executor, ObserverPort, OperationRateLimit } from "../kernel";
+export interface SiteroServerRateLimits {
+    authentication?: {
+        admin?: {
+            signIn?: OperationRateLimit<AdminSignInInput> | undefined;
+            verify?: OperationRateLimit<undefined> | undefined;
+            emailUnverified?: OperationRateLimit<AdminEmailUnverifiedInput> | undefined;
+            forgotPassword?: OperationRateLimit<AdminForgotPasswordInput> | undefined;
+            verifyEmail?: OperationRateLimit<AdminVerifyEmailInput> | undefined;
+            resetPassword?: OperationRateLimit<AdminResetPasswordInput> | undefined;
+        };
+    };
+    features?: {
+        inquiry?: {
+            submit?: OperationRateLimit<InquirySubmitInput> | undefined;
+        };
+        emailPreview?: {
+            listTemplates?: OperationRateLimit<undefined> | undefined;
+            renderTemplate?: OperationRateLimit<EmailPreviewRenderTemplateInput> | undefined;
+        };
+        uploads?: {
+            uploadFile?: OperationRateLimit<UploadFileInput> | undefined;
+            uploadFiles?: OperationRateLimit<UploadFilesInput> | undefined;
+        };
+    };
+}
+export interface SiteroServerInput {
+    /** Product-level constraints enforced by framework-neutral upload operations. */
+    uploads?: UploadPolicy | undefined;
+    /** Explicit, consumer-owned declarations for unauthenticated resource reads. */
+    publicResources?: {
+        config?: {
+            /** Seeded Config slugs that the website may read without an actor. */
+            slugs?: readonly string[] | undefined;
+        };
+    };
+    authentication?: {
+        admin?: {
+            refreshTokenTtlSeconds?: number | undefined;
+        };
+    };
+    email: {
+        authentication: {
+            admin: {
+                verification: {
+                    sender: AdminVerificationEmailSender;
+                };
+                forgotPassword: {
+                    sender: AdminForgotPasswordEmailSender;
+                };
+            };
+        };
+        inquiry?: {
+            newInquiry?: {
+                sender: NewInquiryEmailSender;
+            };
+        };
+    };
+    rateLimits?: SiteroServerRateLimits | undefined;
+    kernel?: {
+        cache?: CachePort | undefined;
+        observer?: ObserverPort | undefined;
+        rateLimiter?: RateLimiterPort | undefined;
+    };
+    policies?: SiteroServerPolicies | undefined;
+    ports: {
+        features: {
+            emailPreview: {
+                emailTemplateCatalogPort: EmailTemplateCatalogPort;
+                emailTemplateRendererPort: EmailTemplateRendererPort;
+            };
+            uploads: {
+                storageUploadPort: StorageUploadPort;
+            };
+        };
+        resources: {
+            admin: {
+                adminQueryPort: AdminQueryPort;
+                adminInquiryNotificationRecipientQueryPort: AdminInquiryNotificationRecipientQueryPort;
+                adminCommandPort: AdminCommandPort;
+            };
+            adminRefreshToken: {
+                adminRefreshTokenQueryPort: AdminRefreshTokenQueryPort;
+                adminRefreshTokenCommandPort: AdminRefreshTokenCommandPort;
+            };
+            config: {
+                configCommandPort: ConfigCommandPort;
+                configQueryPort: ConfigQueryPort;
+            };
+            file: {
+                fileCommandPort: FileCommandPort;
+                fileQueryPort: FileQueryPort;
+                fileReplaceContentPort: FileReplaceContentPort;
+                storageRemovePort: StorageRemovePort;
+            };
+            inquiry: {
+                inquiryCommandPort: InquiryCommandPort;
+                inquiryQueryPort: InquiryQueryPort;
+            };
+            post: {
+                postCommandPort: PostCommandPort;
+                postQueryPort: PostQueryPort;
+            };
+            seoMetadata: {
+                seoMetadataCommandPort: SeoMetadataCommandPort;
+            };
+        };
+        authentication: {
+            admin: {
+                adminAuthenticationCommandPort: AdminAuthenticationCommandPort;
+                authenticationPasswordPort: AuthenticationPasswordPort;
+                authenticationTokenPort: AuthenticationTokenPort;
+            };
+        };
+    };
+}
+export interface SiteroServer {
+    executor: Executor;
+    sessions: {
+        admin: {
+            authenticate: AdminSessionAuthenticate;
+        };
+    };
+    authentication: {
+        admin: {
+            signIn: AdminSignInOperation;
+            signOut: AdminSignOutOperation;
+            verify: AdminVerifyOperation;
+            me: AdminMeOperation;
+            emailUnverified: AdminEmailUnverifiedOperation;
+            forgotPassword: AdminForgotPasswordOperation;
+            verifyEmail: AdminVerifyEmailOperation;
+            resetPassword: AdminResetPasswordOperation;
+            changePassword: AdminChangePasswordOperation;
+        };
+    };
+    features: {
+        inquiry: {
+            submit: InquirySubmitOperation;
+        };
+        emailPreview: {
+            listTemplates: EmailPreviewListTemplatesOperation;
+            renderTemplate: EmailPreviewRenderTemplateOperation;
+        };
+        uploads: {
+            uploadFile: UploadFileOperation;
+            uploadFiles: UploadFilesOperation;
+        };
+    };
+    resources: {
+        admin: {
+            create: AdminCreateCommand;
+            update: AdminUpdateCommand;
+            delete: AdminDeleteCommand;
+            findDetail: AdminFindDetailQuery;
+            findListCards: AdminFindListCardsQuery;
+        };
+        adminRefreshToken: {
+            delete: AdminRefreshTokenDeleteCommand;
+            findMany: AdminRefreshTokenFindManyQuery;
+        };
+        config: {
+            update: ConfigUpdateCommand;
+            findDetail: ConfigFindDetailQuery;
+            findPublic: ConfigFindPublicQuery;
+            findMany: ConfigFindManyQuery;
+        };
+        file: {
+            create: FileCreateCommand;
+            createMany: FileCreateManyCommand;
+            replaceContent: FileReplaceContentCommand;
+            delete: FileDeleteCommand;
+            deleteMany: FileDeleteManyCommand;
+            purgeMany: FilePurgeManyCommand;
+            findDetail: FileFindDetailQuery;
+            findListCards: FileFindListCardsQuery;
+            restoreMany: FileRestoreManyCommand;
+            update: FileUpdateCommand;
+        };
+        inquiry: {
+            delete: InquiryDeleteCommand;
+            find: InquiryFindQuery;
+            findListCards: InquiryFindListCardsQuery;
+        };
+        post: {
+            create: PostCreateCommand;
+            update: PostUpdateCommand;
+            delete: PostDeleteCommand;
+            findDetail: PostFindDetailQuery;
+            findPublic: PostFindPublicQuery;
+            findPublicListCards: PostFindPublicListCardsQuery;
+            findListCards: PostFindListCardsQuery;
+            findMany: PostFindManyQuery;
+        };
+        seoMetadata: {
+            upsert: SeoMetadataUpsertCommand;
+        };
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types/src/composition/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/composition/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EACV,8BAA8B,EAC9B,4BAA4B,EAC5B,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,8BAA8B,EAC9B,4BAA4B,EAC5B,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,4BAA4B,EAC5B,gBAAgB,EAChB,uBAAuB,EACvB,2BAA2B,EAC3B,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACrB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EACV,kCAAkC,EAClC,+BAA+B,EAC/B,mCAAmC,EACpC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACb,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,0CAA0C,EAC1C,cAAc,EACd,kBAAkB,EACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC9B,8BAA8B,EAC9B,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,EAC5B,sBAAsB,EACtB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,KAAK,EACV,0BAA0B,EAC1B,uBAAuB,EACxB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE5E,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,EAAE;QACf,KAAK,CAAC,EAAE;YACN,MAAM,CAAC,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;YAC1D,MAAM,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;YACnD,eAAe,CAAC,EACZ,kBAAkB,CAAC,yBAAyB,CAAC,GAC7C,SAAS,CAAC;YACd,cAAc,CAAC,EAAE,kBAAkB,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC;YAC1E,WAAW,CAAC,EAAE,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC;YACpE,aAAa,CAAC,EAAE,kBAAkB,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC;SACzE,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE;YACR,MAAM,CAAC,EAAE,kBAAkB,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC;SAC7D,CAAC;QACF,YAAY,CAAC,EAAE;YACb,aAAa,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;YAC1D,cAAc,CAAC,EACX,kBAAkB,CAAC,+BAA+B,CAAC,GACnD,SAAS,CAAC;SACf,CAAC;QACF,OAAO,CAAC,EAAE;YACR,UAAU,CAAC,EAAE,kBAAkB,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC;YAC7D,WAAW,CAAC,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC;SAChE,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACnC,gFAAgF;IAChF,eAAe,CAAC,EAAE;QAChB,MAAM,CAAC,EAAE;YACP,sEAAsE;YACtE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;SACvC,CAAC;KACH,CAAC;IACF,cAAc,CAAC,EAAE;QACf,KAAK,CAAC,EAAE;YACN,sBAAsB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;SAC7C,CAAC;KACH,CAAC;IACF,KAAK,EAAE;QACL,cAAc,EAAE;YACd,KAAK,EAAE;gBACL,YAAY,EAAE;oBACZ,MAAM,EAAE,4BAA4B,CAAC;iBACtC,CAAC;gBACF,cAAc,EAAE;oBACd,MAAM,EAAE,8BAA8B,CAAC;iBACxC,CAAC;aACH,CAAC;SACH,CAAC;QACF,OAAO,CAAC,EAAE;YACR,UAAU,CAAC,EAAE;gBACX,MAAM,EAAE,qBAAqB,CAAC;aAC/B,CAAC;SACH,CAAC;KACH,CAAC;IACF,UAAU,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAChD,MAAM,CAAC,EAAE;QACP,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;QACpC,WAAW,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;KAC3C,CAAC;IACF,QAAQ,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC5C,KAAK,EAAE;QACL,QAAQ,EAAE;YACR,YAAY,EAAE;gBACZ,wBAAwB,EAAE,wBAAwB,CAAC;gBACnD,yBAAyB,EAAE,yBAAyB,CAAC;aACtD,CAAC;YACF,OAAO,EAAE;gBACP,iBAAiB,EAAE,iBAAiB,CAAC;aACtC,CAAC;SACH,CAAC;QACF,SAAS,EAAE;YACT,KAAK,EAAE;gBACL,cAAc,EAAE,cAAc,CAAC;gBAC/B,0CAA0C,EAAE,0CAA0C,CAAC;gBACvF,gBAAgB,EAAE,gBAAgB,CAAC;aACpC,CAAC;YACF,iBAAiB,EAAE;gBACjB,0BAA0B,EAAE,0BAA0B,CAAC;gBACvD,4BAA4B,EAAE,4BAA4B,CAAC;aAC5D,CAAC;YACF,MAAM,EAAE;gBACN,iBAAiB,EAAE,iBAAiB,CAAC;gBACrC,eAAe,EAAE,eAAe,CAAC;aAClC,CAAC;YACF,IAAI,EAAE;gBACJ,eAAe,EAAE,eAAe,CAAC;gBACjC,aAAa,EAAE,aAAa,CAAC;gBAC7B,sBAAsB,EAAE,sBAAsB,CAAC;gBAC/C,iBAAiB,EAAE,iBAAiB,CAAC;aACtC,CAAC;YACF,OAAO,EAAE;gBACP,kBAAkB,EAAE,kBAAkB,CAAC;gBACvC,gBAAgB,EAAE,gBAAgB,CAAC;aACpC,CAAC;YACF,IAAI,EAAE;gBACJ,eAAe,EAAE,eAAe,CAAC;gBACjC,aAAa,EAAE,aAAa,CAAC;aAC9B,CAAC;YACF,WAAW,EAAE;gBACX,sBAAsB,EAAE,sBAAsB,CAAC;aAChD,CAAC;SACH,CAAC;QACF,cAAc,EAAE;YACd,KAAK,EAAE;gBACL,8BAA8B,EAAE,8BAA8B,CAAC;gBAC/D,0BAA0B,EAAE,0BAA0B,CAAC;gBACvD,uBAAuB,EAAE,uBAAuB,CAAC;aAClD,CAAC;SACH,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE;QACR,KAAK,EAAE;YACL,YAAY,EAAE,wBAAwB,CAAC;SACxC,CAAC;KACH,CAAC;IACF,cAAc,EAAE;QACd,KAAK,EAAE;YACL,MAAM,EAAE,oBAAoB,CAAC;YAC7B,OAAO,EAAE,qBAAqB,CAAC;YAC/B,MAAM,EAAE,oBAAoB,CAAC;YAC7B,EAAE,EAAE,gBAAgB,CAAC;YACrB,eAAe,EAAE,6BAA6B,CAAC;YAC/C,cAAc,EAAE,4BAA4B,CAAC;YAC7C,WAAW,EAAE,yBAAyB,CAAC;YACvC,aAAa,EAAE,2BAA2B,CAAC;YAC3C,cAAc,EAAE,4BAA4B,CAAC;SAC9C,CAAC;KACH,CAAC;IACF,QAAQ,EAAE;QACR,OAAO,EAAE;YACP,MAAM,EAAE,sBAAsB,CAAC;SAChC,CAAC;QACF,YAAY,EAAE;YACZ,aAAa,EAAE,kCAAkC,CAAC;YAClD,cAAc,EAAE,mCAAmC,CAAC;SACrD,CAAC;QACF,OAAO,EAAE;YACP,UAAU,EAAE,mBAAmB,CAAC;YAChC,WAAW,EAAE,oBAAoB,CAAC;SACnC,CAAC;KACH,CAAC;IACF,SAAS,EAAE;QACT,KAAK,EAAE;YACL,MAAM,EAAE,kBAAkB,CAAC;YAC3B,MAAM,EAAE,kBAAkB,CAAC;YAC3B,MAAM,EAAE,kBAAkB,CAAC;YAC3B,UAAU,EAAE,oBAAoB,CAAC;YACjC,aAAa,EAAE,uBAAuB,CAAC;SACxC,CAAC;QACF,iBAAiB,EAAE;YACjB,MAAM,EAAE,8BAA8B,CAAC;YACvC,QAAQ,EAAE,8BAA8B,CAAC;SAC1C,CAAC;QACF,MAAM,EAAE;YACN,MAAM,EAAE,mBAAmB,CAAC;YAC5B,UAAU,EAAE,qBAAqB,CAAC;YAClC,UAAU,EAAE,qBAAqB,CAAC;YAClC,QAAQ,EAAE,mBAAmB,CAAC;SAC/B,CAAC;QACF,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB,CAAC;YAC1B,UAAU,EAAE,qBAAqB,CAAC;YAClC,cAAc,EAAE,yBAAyB,CAAC;YAC1C,MAAM,EAAE,iBAAiB,CAAC;YAC1B,UAAU,EAAE,qBAAqB,CAAC;YAClC,SAAS,EAAE,oBAAoB,CAAC;YAChC,UAAU,EAAE,mBAAmB,CAAC;YAChC,aAAa,EAAE,sBAAsB,CAAC;YACtC,WAAW,EAAE,sBAAsB,CAAC;YACpC,MAAM,EAAE,iBAAiB,CAAC;SAC3B,CAAC;QACF,OAAO,EAAE;YACP,MAAM,EAAE,oBAAoB,CAAC;YAC7B,IAAI,EAAE,gBAAgB,CAAC;YACvB,aAAa,EAAE,yBAAyB,CAAC;SAC1C,CAAC;QACF,IAAI,EAAE;YACJ,MAAM,EAAE,iBAAiB,CAAC;YAC1B,MAAM,EAAE,iBAAiB,CAAC;YAC1B,MAAM,EAAE,iBAAiB,CAAC;YAC1B,UAAU,EAAE,mBAAmB,CAAC;YAChC,UAAU,EAAE,mBAAmB,CAAC;YAChC,mBAAmB,EAAE,4BAA4B,CAAC;YAClD,aAAa,EAAE,sBAAsB,CAAC;YACtC,QAAQ,EAAE,iBAAiB,CAAC;SAC7B,CAAC;QACF,WAAW,EAAE;YACX,MAAM,EAAE,wBAAwB,CAAC;SAClC,CAAC;KACH,CAAC;CACH"}

package/dist/types/src/contracts/authentication/actor.d.ts

@@ -0,0 +1,15 @@
+import type { AdminRole } from "sitero-domain";
+/** Actor categories supported by sitero-server authentication. */
+export type ActorType = "admin" | "user";
+/** Role type associated with each actor category. */
+export type ActorRoleMap = {
+    admin: AdminRole;
+    user: string;
+};
+/** Authenticated actor identity available to operations. */
+export interface AuthenticationActor<TActorType extends ActorType = ActorType> {
+    type: TActorType;
+    id: string;
+    role?: ActorRoleMap[TActorType] | undefined;
+}
+//# sourceMappingURL=actor.d.ts.map

package/dist/types/src/contracts/authentication/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/authentication/actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,kEAAkE;AAClE,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAEzC,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB,CAAC,UAAU,SAAS,SAAS,GAAG,SAAS;IAC3E,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;CAC7C"}

package/dist/types/src/contracts/authentication/authenticate.d.ts

@@ -0,0 +1,24 @@
+import type { ActorType, AuthenticationActor } from "./actor";
+import type { AuthenticationTokens } from "./token";
+import type { DeviceInfo } from "sitero-domain";
+/** Credentials and request metadata used to authenticate an execution. */
+export interface AuthenticateInput {
+    accessToken?: string | undefined;
+    refreshToken?: string | undefined;
+    ip: string;
+    deviceInfo?: DeviceInfo | null | undefined;
+}
+/** Result of resolving authentication for an execution. */
+export type AuthenticateResult<T extends ActorType = ActorType> = {
+    status: "authenticated";
+    actor: AuthenticationActor<T>;
+    session?: {
+        id: string;
+    } | undefined;
+    refreshed: boolean;
+    tokens?: AuthenticationTokens | undefined;
+} | {
+    status: "unauthenticated";
+    shouldClearSession: boolean;
+};
+//# sourceMappingURL=authenticate.d.ts.map

package/dist/types/src/contracts/authentication/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/authentication/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,CAAC;CAC5C;AAED,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,SAAS,GAAG,SAAS,IAC1D;IACE,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CAC3C,GACD;IACE,MAAM,EAAE,iBAAiB,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC"}

package/dist/types/src/contracts/authentication/index.d.ts

@@ -0,0 +1,5 @@
+export type { ActorRoleMap, ActorType, AuthenticationActor } from "./actor";
+export type { AccessTokenPayload, AuthenticationTokens } from "./token";
+export type { AuthenticateInput, AuthenticateResult } from "./authenticate";
+export type { AuthenticationPasswordPort, AuthenticationTokenPort, } from "./ports";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/authentication/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/authentication/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAE5E,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAExE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,SAAS,CAAC"}

package/dist/types/src/contracts/authentication/ports.d.ts

@@ -0,0 +1,32 @@
+import type { ActorType } from "./actor";
+import type { AccessTokenPayload } from "./token";
+export interface AuthenticationTokenPort {
+    signAccessToken<TActorType extends ActorType>(input: AccessTokenPayload<TActorType>): string;
+    verifyAccessToken<TActorType extends ActorType>(accessToken: string): AccessTokenPayload<TActorType>;
+    generateRefreshToken(): string;
+    hashRefreshToken(refreshToken: string): string;
+    signAdminPasswordResetToken(input: {
+        adminId: string;
+    }): string;
+    verifyAdminPasswordResetToken(input: {
+        token: string;
+    }): {
+        adminId: string;
+    };
+    signAdminEmailVerificationToken(input: {
+        adminId: string;
+    }): string;
+    verifyAdminEmailVerificationToken(input: {
+        token: string;
+    }): {
+        adminId: string;
+    };
+}
+export interface AuthenticationPasswordPort {
+    hashPassword(password: string): Promise<string>;
+    verifyPassword(input: {
+        passwordHash: string;
+        password: string;
+    }): Promise<boolean>;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/types/src/contracts/authentication/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/authentication/ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAKlD,MAAM,WAAW,uBAAuB;IAEtC,eAAe,CAAC,UAAU,SAAS,SAAS,EAC1C,KAAK,EAAE,kBAAkB,CAAC,UAAU,CAAC,GACpC,MAAM,CAAC;IACV,iBAAiB,CAAC,UAAU,SAAS,SAAS,EAC5C,WAAW,EAAE,MAAM,GAClB,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAElC,oBAAoB,IAAI,MAAM,CAAC;IAC/B,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAG/C,2BAA2B,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAChE,6BAA6B,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,+BAA+B,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IACpE,iCAAiC,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG;QAC3D,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAKD,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,cAAc,CAAC,KAAK,EAAE;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB"}

package/dist/types/src/contracts/authentication/token.d.ts

@@ -0,0 +1,14 @@
+import type { ActorRoleMap, ActorType } from "./actor";
+/** Signed access-token payload shared by authentication adapters. */
+export interface AccessTokenPayload<TActorType extends ActorType = ActorType> {
+    actorId: string;
+    actorType: TActorType;
+    sessionId?: string | undefined;
+    role?: ActorRoleMap[TActorType] | undefined;
+}
+/** Token pair issued by authentication operations. */
+export interface AuthenticationTokens {
+    accessToken: string;
+    refreshToken: string;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/types/src/contracts/authentication/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/authentication/token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvD,qEAAqE;AACrE,MAAM,WAAW,kBAAkB,CAAC,UAAU,SAAS,SAAS,GAAG,SAAS;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC;CAC7C;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB"}

package/dist/types/src/contracts/cache/index.d.ts

@@ -0,0 +1,2 @@
+export type { CachePort, CacheSetInput } from "./port";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/cache/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC"}

package/dist/types/src/contracts/cache/port.d.ts

@@ -0,0 +1,11 @@
+export interface CacheSetInput<TValue> {
+    key: string;
+    value: TValue;
+    tags?: readonly string[] | undefined;
+}
+export interface CachePort {
+    get<TValue>(key: string): Promise<TValue | undefined>;
+    set<TValue>(input: CacheSetInput<TValue>): Promise<void>;
+    invalidateTags(tags: readonly string[]): Promise<void>;
+}
+//# sourceMappingURL=port.d.ts.map

package/dist/types/src/contracts/cache/port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"port.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/cache/port.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa,CAAC,MAAM;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD"}

package/dist/types/src/contracts/email/composer.d.ts

@@ -0,0 +1,11 @@
+/** Email content resolved from a consumer-owned definition. */
+export interface ComposedEmail {
+    subject: string;
+    html: string;
+    text?: string | undefined;
+}
+/** Composes one email purpose without exposing its template implementation. */
+export interface EmailComposerPort<TInput> {
+    compose(input: TInput): Promise<ComposedEmail> | ComposedEmail;
+}
+//# sourceMappingURL=composer.d.ts.map

package/dist/types/src/contracts/email/composer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/composer.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB,CAAC,MAAM;IACvC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;CAChE"}

package/dist/types/src/contracts/email/delivery.d.ts

@@ -0,0 +1,8 @@
+/** Rendered email ready for delivery. */
+export interface EmailDeliveryMessage {
+    to: string;
+    subject: string;
+    html: string;
+    text?: string | undefined;
+}
+//# sourceMappingURL=delivery.d.ts.map

package/dist/types/src/contracts/email/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/delivery.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B"}

package/dist/types/src/contracts/email/index.d.ts

@@ -0,0 +1,6 @@
+export type { EmailDeliveryMessage } from "./delivery";
+export type { ComposedEmail, EmailComposerPort } from "./composer";
+export type { EmailTemplateCatalogItem, EmailTemplatePreview, EmailTemplateReplacementValue, RenderEmailTemplateInput, } from "./template";
+export type { BuildEmailLinkInput, BuildEmailLinkQueryValue } from "./link";
+export type { EmailDeliveryPort, EmailLinkBuilderPort, EmailTemplateCatalogPort, EmailTemplateRendererPort, } from "./ports";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEnE,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,QAAQ,CAAC;AAE5E,YAAY,EACV,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,SAAS,CAAC"}

package/dist/types/src/contracts/email/link.d.ts

@@ -0,0 +1,8 @@
+/** Supported primitive value used in built email links. */
+export type BuildEmailLinkQueryValue = string | number | boolean | null | undefined;
+/** Request for building an absolute or host-specific email link. */
+export interface BuildEmailLinkInput {
+    pathname: string;
+    query?: Record<string, BuildEmailLinkQueryValue> | undefined;
+}
+//# sourceMappingURL=link.d.ts.map

package/dist/types/src/contracts/email/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/link.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,MAAM,MAAM,wBAAwB,GAChC,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,GAAG,SAAS,CAAC;CAC9D"}

package/dist/types/src/contracts/email/ports.d.ts

@@ -0,0 +1,20 @@
+import type { EmailDeliveryMessage } from "./delivery";
+import type { BuildEmailLinkInput } from "./link";
+import type { EmailTemplateCatalogItem, EmailTemplatePreview, RenderEmailTemplateInput } from "./template";
+/** Sends a rendered email message. */
+export interface EmailDeliveryPort {
+    send(message: EmailDeliveryMessage): Promise<void> | void;
+}
+/** Composes a complete localized preview without sending an email. */
+export interface EmailTemplateRendererPort {
+    render(input: RenderEmailTemplateInput): Promise<EmailTemplatePreview> | EmailTemplatePreview;
+}
+/** Lists available email templates for preview tooling. */
+export interface EmailTemplateCatalogPort {
+    list(): Promise<readonly EmailTemplateCatalogItem[]> | readonly EmailTemplateCatalogItem[];
+}
+/** Creates absolute or host-specific links used by email templates. */
+export interface EmailLinkBuilderPort {
+    build(input: BuildEmailLinkInput): string;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/types/src/contracts/email/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,EACV,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,sCAAsC;AACtC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3D;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;CACzD;AAED,2DAA2D;AAC3D,MAAM,WAAW,wBAAwB;IACvC,IAAI,IACA,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,GAC5C,SAAS,wBAAwB,EAAE,CAAC;CACzC;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAAC;CAC3C"}

package/dist/types/src/contracts/email/template.d.ts

@@ -0,0 +1,19 @@
+import type { ComposedEmail } from "./composer";
+/** A complete preview, including the locale actually used to compose it. */
+export interface EmailTemplatePreview extends ComposedEmail {
+    locale: string;
+}
+/** Supported primitive value used in email template replacements. */
+export type EmailTemplateReplacementValue = string | number | boolean | null | undefined;
+/** Public metadata for one previewable email template. */
+export interface EmailTemplateCatalogItem {
+    key: string;
+    fallbackLocale: string;
+}
+/** Request for rendering a localized email template into HTML. */
+export interface RenderEmailTemplateInput {
+    key: string;
+    locale?: string | undefined;
+    replacements?: Record<string, EmailTemplateReplacementValue> | undefined;
+}
+//# sourceMappingURL=template.d.ts.map

package/dist/types/src/contracts/email/template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/email/template.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,4EAA4E;AAC5E,MAAM,WAAW,oBAAqB,SAAQ,aAAa;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,MAAM,MAAM,6BAA6B,GACrC,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,0DAA0D;AAC1D,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,GAAG,SAAS,CAAC;CAC1E"}

package/dist/types/src/contracts/execution/authentication.d.ts

@@ -0,0 +1,13 @@
+import type { AuthenticateInput, AuthenticateResult } from "../authentication";
+import type { ExecutionContext } from "./context";
+/**
+ * Host-provided authentication resolution for a single execution.
+ */
+export interface ExecutionAuthenticationResolver {
+    input: AuthenticateInput;
+    authenticate(params: {
+        input: AuthenticateInput;
+        context: ExecutionContext;
+    }): Promise<AuthenticateResult>;
+}
+//# sourceMappingURL=authentication.d.ts.map

package/dist/types/src/contracts/execution/authentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/execution/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,iBAAiB,CAAC;IACzB,YAAY,CAAC,MAAM,EAAE;QACnB,KAAK,EAAE,iBAAiB,CAAC;QACzB,OAAO,EAAE,gBAAgB,CAAC;KAC3B,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC"}

package/dist/types/src/contracts/execution/context.d.ts

@@ -0,0 +1,24 @@
+import type { AuthenticationActor } from "../authentication";
+import type { ExecutionAuthenticationResolver } from "./authentication";
+/**
+ * Delivery-neutral information supplied by a Server Action, HTTP adapter, or
+ * other host before an operation executes.
+ */
+export interface ExecutionContext {
+    actor?: AuthenticationActor | undefined;
+    /** Delivery-neutral request metadata supplied by HTTP or action adapters. */
+    request?: {
+        /** Best-effort client IP used by rate-limit keys and observability. */
+        ip?: string | undefined;
+    } | undefined;
+    /** A delivery-resolved session identity; never a raw credential. */
+    session?: {
+        id: string;
+    } | undefined;
+    authentication?: ExecutionAuthenticationResolver | undefined;
+}
+/** Execution context after authentication and authorization have resolved. */
+export type AuthorizedExecutionContext = ExecutionContext & {
+    actor: AuthenticationActor;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/types/src/contracts/execution/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/execution/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAExE;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACxC,6EAA6E;IAC7E,OAAO,CAAC,EACJ;QACE,uEAAuE;QACvE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzB,GACD,SAAS,CAAC;IACd,oEAAoE;IACpE,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;CAC9D;AAED,8EAA8E;AAC9E,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IAC1D,KAAK,EAAE,mBAAmB,CAAC;CAC5B,CAAC"}

package/dist/types/src/contracts/execution/index.d.ts

@@ -0,0 +1,3 @@
+export type { ExecutionAuthenticationResolver } from "./authentication";
+export type { AuthorizedExecutionContext, ExecutionContext } from "./context";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/execution/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AAExE,YAAY,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC"}

package/dist/types/src/contracts/operation/error.d.ts

@@ -0,0 +1,18 @@
+/**
+ *  Base error that can be normalized into an operation failure result.
+ */
+export declare class OperationError<Code extends string = string> extends Error {
+    /** Stable machine-readable operation error code. */
+    code: Code;
+    /** Optional structured details for adapters or clients. */
+    details?: Record<string, unknown> | undefined;
+    /** Optional public field errors for an expected operation failure. */
+    fields?: readonly OperationFieldError[] | undefined;
+    constructor(input: {
+        code: Code;
+        details?: Record<string, unknown> | undefined;
+        fields?: readonly OperationFieldError[] | undefined;
+    });
+}
+import type { OperationFieldError } from "./result";
+//# sourceMappingURL=error.d.ts.map

package/dist/types/src/contracts/operation/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/operation/error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,cAAc,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,KAAK;IACrE,oDAAoD;IACpD,IAAI,EAAE,IAAI,CAAC;IACX,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9C,sEAAsE;IACtE,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;gBAExC,KAAK,EAAE;QACjB,IAAI,EAAE,IAAI,CAAC;QACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAC9C,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;KACrD;CAOF;AACD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}

package/dist/types/src/contracts/operation/index.d.ts

@@ -0,0 +1,3 @@
+export { OperationError } from "./error";
+export { type OperationFailure, type OperationFailureError, type OperationFieldError, type OperationResult, type OperationSuccess, operationResult, } from "./result";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/operation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/operation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,eAAe,GAChB,MAAM,UAAU,CAAC"}

package/dist/types/src/contracts/operation/result.d.ts

@@ -0,0 +1,32 @@
+/** Field-level validation or input error. */
+export interface OperationFieldError {
+    /** Path to the invalid input field. */
+    path: readonly (string | number)[];
+    /** Stable machine-readable field error code. */
+    code: string;
+}
+/** Machine-readable operation failure payload. */
+export interface OperationFailureError<Code extends string = string> {
+    /** Stable machine-readable operation error code. */
+    code: Code;
+    /** Optional structured details for adapters or clients. */
+    details?: Record<string, unknown> | undefined;
+    /** Optional field-level errors. */
+    fields?: readonly OperationFieldError[] | undefined;
+}
+/** Failed operation result. */
+export interface OperationFailure<Error extends OperationFailureError> {
+    success: false;
+    error: Error;
+}
+/** Successful operation result. */
+export interface OperationSuccess<Data> {
+    success: true;
+    data: Data;
+}
+export type OperationResult<Data, Error extends OperationFailureError = OperationFailureError> = OperationSuccess<Data> | OperationFailure<Error>;
+export declare const operationResult: {
+    success<Data>(data: Data): OperationSuccess<Data>;
+    failure<TError extends OperationFailureError>(error: TError): OperationFailure<TError>;
+};
+//# sourceMappingURL=result.d.ts.map

package/dist/types/src/contracts/operation/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/operation/result.ts"],"names":[],"mappings":"AAGA,6CAA6C;AAC7C,MAAM,WAAW,mBAAmB;IAClC,uCAAuC;IACvC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACnC,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kDAAkD;AAClD,MAAM,WAAW,qBAAqB,CAAC,IAAI,SAAS,MAAM,GAAG,MAAM;IACjE,oDAAoD;IACpD,IAAI,EAAE,IAAI,CAAC;IACX,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC9C,mCAAmC;IACnC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,CAAC;CACrD;AAED,+BAA+B;AAC/B,MAAM,WAAW,gBAAgB,CAAC,KAAK,SAAS,qBAAqB;IACnE,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd;AAKD,mCAAmC;AACnC,MAAM,WAAW,gBAAgB,CAAC,IAAI;IACpC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;CACZ;AAKD,MAAM,MAAM,eAAe,CACzB,IAAI,EACJ,KAAK,SAAS,qBAAqB,GAAG,qBAAqB,IACzD,gBAAgB,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAKrD,eAAO,MAAM,eAAe;YAClB,IAAI,QAAQ,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC;YAMzC,MAAM,SAAS,qBAAqB,SACnC,MAAM,GACZ,gBAAgB,CAAC,MAAM,CAAC;CAM5B,CAAC"}

package/dist/types/src/contracts/rate-limiter/index.d.ts

@@ -0,0 +1,2 @@
+export { createNoopRateLimiterPort, type RateLimiterConsumeInput, type RateLimiterConsumeResult, type RateLimiterPort, } from "./port";
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/contracts/rate-limiter/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/contracts/rate-limiter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,eAAe,GACrB,MAAM,QAAQ,CAAC"}