stratal 0.0.27 → 0.1.0

package/dist/{queue.module-CEs4_kEM.mjs → queue.module-DnAdSbR-.mjs}

@@ -1,11 +1,9 @@
-import { t as __exportAll } from "./chunk-BBjsoOtd.mjs";
-import { c as Request, l as Singleton, p as inject, r as DI_TOKENS, u as Transient } from "./di-D7qmrAir.mjs";
-import { a as ApplicationError, n as getContainer, t as containerStorage } from "./container-storage-BmOJ4_Na.mjs";
-import { n as __decorateParam, t as __decorate } from "./decorate-CuAoSZvs.mjs";
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { c as Request, l as Singleton, p as inject, r as DI_TOKENS, u as Transient } from "./di-DQ3xbjgf.mjs";
+import { a as ApplicationError, n as getContainer, t as containerStorage } from "./container-storage-DfF7SXdV.mjs";
+import { n as __decorateParam, t as __decorate } from "./decorate-C79yt3Wt.mjs";
 import { LOGGER_TOKENS } from "./logger/index.mjs";
-import "./errors-C01O2T-n.mjs";
-import { n as Module } from "./module.decorator-CYHY6pG5.mjs";
-import "./module/index.mjs";
+import { n as Module } from "./module.decorator-CYbrOlX9.mjs";
 import { CACHE_TOKENS, CacheModule } from "./cache/index.mjs";
 import { t as QUEUE_TOKENS } from "./queue.tokens-DjHnFmre.mjs";
 import { t as I18N_TOKENS } from "./i18n.tokens-CZ_v8oyS.mjs";
@@ -54,36 +52,37 @@ let QueueManager = class QueueManager {
 					failedConsumer = consumer.constructor.name;
 				}
 			}
-			if (lastError !== void 0) if (message.attempts > this.maxRetries) {
-				try {
-					const binding = queueMessage.metadata?.binding;
-					if (!binding) throw new QueueError(`Queue message ${queueMessage.id} has no binding metadata and cannot be recorded for retry. Messages must be dispatched through a Stratal queue sender (@InjectQueue).`);
-					const failedJob = {
-						id: queueMessage.id,
-						queue: queueName,
-						binding,
-						type: queueMessage.type,
-						message: queueMessage,
-						error: {
-							name: lastError.name,
-							message: lastError.message,
-							stack: lastError.stack
-						},
-						consumer: failedConsumer,
-						attempts: message.attempts,
-						failedAt: (/* @__PURE__ */ new Date()).toISOString()
-					};
-					await this.store.storeFailedJob(failedJob);
-				} catch (error) {
-					this.logger.error("Failed to persist failed queue job", error instanceof Error ? error : new Error(String(error)), {
-						queue: queueName,
-						messageId: queueMessage.id,
-						type: queueMessage.type
-					});
-				}
-				message.ack();
-			} else message.retry();
-			else {
+			if (lastError !== void 0) {
+				if (message.attempts > this.maxRetries) {
+					try {
+						const binding = queueMessage.metadata?.binding;
+						if (!binding) throw new QueueError(`Queue message ${queueMessage.id} has no binding metadata and cannot be recorded for retry. Messages must be dispatched through a Stratal queue sender (@InjectQueue).`);
+						const failedJob = {
+							id: queueMessage.id,
+							queue: queueName,
+							binding,
+							type: queueMessage.type,
+							message: queueMessage,
+							error: {
+								name: lastError.name,
+								message: lastError.message,
+								stack: lastError.stack
+							},
+							consumer: failedConsumer,
+							attempts: message.attempts,
+							failedAt: (/* @__PURE__ */ new Date()).toISOString()
+						};
+						await this.store.storeFailedJob(failedJob);
+					} catch (error) {
+						this.logger.error("Failed to persist failed queue job", error instanceof Error ? error : new Error(String(error)), {
+							queue: queueName,
+							messageId: queueMessage.id,
+							type: queueMessage.type
+						});
+					}
+					message.ack();
+				} else message.retry();
+			} else {
 				await this.store.markProcessed(idempotencyKey);
 				message.ack();
 			}
@@ -143,7 +142,7 @@ let ConsumerRegistry = class ConsumerRegistry {
 	getConsumerClasses(messageType) {
 		const exactMatch = this.classesByType.get(messageType) ?? [];
 		const wildcardMatch = this.classesByType.get("*") ?? [];
-		return Array.from(new Set([...exactMatch, ...wildcardMatch]));
+		return Array.from(/* @__PURE__ */ new Set([...exactMatch, ...wildcardMatch]));
 	}
 	/**
 	* Check if any consumers can handle a message type
@@ -297,7 +296,7 @@ let QueueStore = class QueueStore {
 		return await this.cache.get(`${IDEM_PREFIX}${key}`) !== null;
 	}
 	async markProcessed(key) {
-		await this.cache.put(`${IDEM_PREFIX}${key}`, "1", { expirationTtl: this.idempotencyTtl });
+		await this.cache.putDurable(`${IDEM_PREFIX}${key}`, "1", { expirationTtl: this.idempotencyTtl });
 	}
 	async storeFailedJob(job) {
 		const metadata = {
@@ -308,7 +307,7 @@ let QueueStore = class QueueStore {
 			attempts: job.attempts,
 			failedAt: job.failedAt
 		};
-		await this.cache.put(`${FAILED_PREFIX}${job.id}`, JSON.stringify(job), { metadata });
+		await this.cache.putDurable(`${FAILED_PREFIX}${job.id}`, JSON.stringify(job), { metadata });
 	}
 	async getFailedJob(messageId) {
 		return this.cache.get(`${FAILED_PREFIX}${messageId}`, "json");
@@ -617,4 +616,4 @@ QueueModule = _QueueModule = __decorate([Module({
 //#endregion
 export { CloudflareQueueProvider as a, QueueRegistry as c, QueueManager as d, QueueError as f, SyncQueueProvider as i, QueueSender as l, queue_module_exports as n, DEFAULT_STORE_BINDING as o, QueueProviderFactory as r, QueueStore as s, QueueModule as t, ConsumerRegistry as u };
 
-//# sourceMappingURL=queue.module-CEs4_kEM.mjs.map
+//# sourceMappingURL=queue.module-DnAdSbR-.mjs.map

package/dist/queue.module-DnAdSbR-.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue.module-DnAdSbR-.mjs","names":[],"sources":["../src/queue/queue.error.ts","../src/queue/queue-manager.ts","../src/queue/consumer-registry.ts","../src/queue/queue-sender.ts","../src/queue/queue-registry.ts","../src/queue/queue-store.ts","../src/queue/providers/cloudflare-queue.provider.ts","../src/queue/providers/sync-queue.provider.ts","../src/queue/services/queue-provider-factory.ts","../src/queue/queue.module.ts"],"sourcesContent":["import { ApplicationError } from '../errors'\n\nexport class QueueError extends ApplicationError {}\n","import { inject } from '../di'\nimport { getContainer } from '../di/container-storage'\nimport { Transient } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport { LOGGER_TOKENS, type LoggerService } from '../logger'\nimport { type ConsumerRegistry } from './consumer-registry'\nimport type { FailedJob } from './failed-job'\nimport type { IQueueConsumer, QueueMessage } from './queue-consumer'\nimport { QueueError } from './queue.error'\nimport type { QueueModuleOptions } from './queue.module'\nimport type { QueueStore } from './queue-store'\nimport { QUEUE_TOKENS } from './queue.tokens'\n\nconst DEFAULT_MAX_RETRIES = 3\n\n@Transient(DI_TOKENS.Queue)\nexport class QueueManager {\n  private readonly maxRetries: number\n\n  constructor(\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(LOGGER_TOKENS.LoggerService) private readonly logger: LoggerService,\n    @inject(QUEUE_TOKENS.QueueStore) private readonly store: QueueStore,\n    @inject(QUEUE_TOKENS.QueueModuleOptions) options: QueueModuleOptions,\n  ) {\n    this.maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES\n  }\n\n  async processBatch(queueName: string, batch: MessageBatch): Promise<void> {\n    for (const message of batch.messages) {\n      const queueMessage = message.body as QueueMessage\n      const idempotencyKey = queueMessage.metadata?.idempotencyKey ?? queueMessage.id\n\n      if (await this.store.isProcessed(idempotencyKey)) {\n        message.ack()\n        continue\n      }\n\n      // Resolve a fresh consumer instance per message from the active request\n      // scope (handleQueue runs processBatch inside runInRequestScope), so\n      // request-scoped consumer dependencies bind to this message's scope.\n      const container = getContainer()\n      const consumers = this.registry\n        .getConsumerClasses(queueMessage.type)\n        .map((ConsumerClass) => container.resolve<IQueueConsumer>(ConsumerClass))\n\n      const results = await Promise.allSettled(\n        consumers.map((consumer) => consumer.handle(queueMessage)),\n      )\n\n      let lastError: Error | undefined\n      let failedConsumer: string | undefined\n\n      for (let i = 0; i < results.length; i++) {\n        const result = results[i]\n        if (result.status === 'rejected') {\n          const consumer = consumers[i]\n          const errorInstance = result.reason instanceof Error\n            ? result.reason\n            : new Error(String(result.reason))\n\n          this.logger.error('Queue message processing failed', errorInstance, {\n            type: queueMessage.type,\n            queue: queueName,\n            messageId: queueMessage.id,\n            idempotencyKey,\n          })\n\n          if (consumer.onError) {\n            await consumer.onError(errorInstance, queueMessage)\n          }\n\n          lastError = errorInstance\n          failedConsumer = consumer.constructor.name\n        }\n      }\n\n      const failed = lastError !== undefined\n\n      if (failed) {\n        // `message.attempts` is 1-based (the first delivery is attempt 1), so a\n        // message is only out of retries once it has been delivered more than\n        // `maxRetries` times. `maxRetries: 3` therefore means 3 retries after the\n        // initial delivery (4 total attempts). This must be <= the consumer's\n        // `max_retries` in wrangler.jsonc, otherwise Cloudflare dead-letters the\n        // message before this branch ever runs and it never reaches the store.\n        if (message.attempts > this.maxRetries) {\n          // A KV failure (or a message dispatched outside Stratal, with no\n          // binding to retry through) while persisting the failed job must not\n          // abort the rest of the batch — log and ack so the message isn't\n          // redelivered forever.\n          try {\n            const binding = queueMessage.metadata?.binding\n            if (!binding) {\n              throw new QueueError(\n                `Queue message ${queueMessage.id} has no binding metadata and cannot be recorded for retry. ` +\n                  `Messages must be dispatched through a Stratal queue sender (@InjectQueue).`,\n              )\n            }\n\n            const failedJob: FailedJob = {\n              id: queueMessage.id,\n              queue: queueName,\n              binding,\n              type: queueMessage.type,\n              message: queueMessage,\n              error: {\n                name: lastError!.name,\n                message: lastError!.message,\n                stack: lastError!.stack,\n              },\n              consumer: failedConsumer!,\n              attempts: message.attempts,\n              failedAt: new Date().toISOString(),\n            }\n\n            await this.store.storeFailedJob(failedJob)\n          } catch (error) {\n            this.logger.error(\n              'Failed to persist failed queue job',\n              error instanceof Error ? error : new Error(String(error)),\n              { queue: queueName, messageId: queueMessage.id, type: queueMessage.type },\n            )\n          }\n          message.ack()\n        } else {\n          message.retry()\n        }\n      } else {\n        await this.store.markProcessed(idempotencyKey)\n        message.ack()\n      }\n    }\n  }\n}\n","import { Singleton } from '../di/decorators'\nimport { DI_TOKENS } from '../di/tokens'\nimport type { Constructor } from '../types'\nimport type { IQueueConsumer } from './queue-consumer'\n\n/** A registered consumer class together with the message types it handles. */\nexport interface ConsumerRegistration {\n  consumerClass: Constructor<IQueueConsumer>\n  messageTypes: string[]\n}\n\n/**\n * Consumer Registry\n *\n * Singleton service that holds all registered queue consumers indexed by message type.\n * Consumers declare the message types they handle, and this registry routes messages\n * to the appropriate consumers based on their types.\n *\n * **Message-Type Routing:**\n * - Consumers declare `messageTypes` array (e.g., `['email.send', 'email.batch.send']`)\n * - When a message arrives, consumers matching the message type are invoked\n * - A consumer can handle messages from ANY queue (routing is by type, not queue)\n * - Use `'*'` as a wildcard to handle all message types\n *\n * @example Consumer registration\n * ```typescript\n * // In consumer.ts\n * @Transient()\n * export class EmailConsumer implements IQueueConsumer {\n *   readonly messageTypes = ['email.send', 'email.batch.send']\n *   // ...\n * }\n *\n * // In module.ts\n * @Module({\n *   consumers: [EmailConsumer]\n * })\n *\n * // Application auto-registers via ConsumerRegistry\n * this.consumerRegistry.register(consumer)\n * ```\n */\n@Singleton(DI_TOKENS.ConsumerRegistry)\nexport class ConsumerRegistry {\n  /** Map from message type to consumer classes handling that type */\n  private classesByType = new Map<string, Constructor<IQueueConsumer>[]>()\n\n  /** All registrations (for iteration / listing) */\n  private registrations: ConsumerRegistration[] = []\n\n  /** Registered consumer classes (dedupe) */\n  private registeredClasses = new Set<Constructor<IQueueConsumer>>()\n\n  /**\n   * Register a queue consumer class.\n   *\n   * Indexes the class by each of its declared message types. A fresh instance\n   * is resolved per message from the request-scoped container at dispatch time —\n   * consumers are never held as long-lived singletons, so they may safely inject\n   * request-scoped providers (`@InjectQueue`, i18n, auth context, …).\n   *\n   * @param consumerClass - Queue consumer class to register\n   * @param messageTypes - Message types the consumer handles\n   */\n  register(consumerClass: Constructor<IQueueConsumer>, messageTypes: string[]): void {\n    if (this.registeredClasses.has(consumerClass)) {\n      return // Already registered\n    }\n\n    this.registeredClasses.add(consumerClass)\n    this.registrations.push({ consumerClass, messageTypes })\n\n    for (const messageType of messageTypes) {\n      const existing = this.classesByType.get(messageType) ?? []\n      existing.push(consumerClass)\n      this.classesByType.set(messageType, existing)\n    }\n  }\n\n  /**\n   * Get all consumer classes that can handle a specific message type.\n   *\n   * Returns classes that either declare the message type explicitly or use the\n   * `'*'` wildcard. Callers resolve a fresh instance per message from the\n   * request-scoped container.\n   *\n   * @param messageType - The message type to find consumers for\n   * @returns Array of consumer classes that can handle this message type\n   */\n  getConsumerClasses(messageType: string): Constructor<IQueueConsumer>[] {\n    const exactMatch = this.classesByType.get(messageType) ?? []\n    const wildcardMatch = this.classesByType.get('*') ?? []\n\n    // Combine and dedupe\n    return Array.from(new Set([...exactMatch, ...wildcardMatch]))\n  }\n\n  /**\n   * Check if any consumers can handle a message type\n   *\n   * @param messageType - The message type to check\n   * @returns true if at least one consumer can handle this type\n   */\n  hasConsumers(messageType: string): boolean {\n    return this.getConsumerClasses(messageType).length > 0\n  }\n\n  /**\n   * Get all registered message types\n   *\n   * @returns Array of message types with registered consumers\n   */\n  getMessageTypes(): string[] {\n    return Array.from(this.classesByType.keys())\n  }\n\n  /**\n   * Get all consumer registrations (class + message types) for listing.\n   */\n  getRegistrations(): readonly ConsumerRegistration[] {\n    return this.registrations\n  }\n}\n","import type { II18nService } from '../i18n/i18n.types';\nimport type { IQueueProvider } from './providers';\nimport type { QueueMessage } from './queue-consumer';\nimport type { DispatchMessage, IQueueSender } from './queue-sender.interface';\n\n/**\n * Queue Sender\n *\n * Implementation of IQueueSender bound to a specific queue binding.\n * Created by QueueRegistry for each registered binding.\n *\n * Automatically enriches messages with:\n * - `id`: UUID generated via crypto.randomUUID()\n * - `metadata.locale`: Current locale from I18n context\n * - `metadata.idempotencyKey`: Deterministic SHA-256 hash of type + payload (if not provided)\n *\n * @example\n * ```typescript\n * // Created by QueueRegistry, not directly instantiated\n * const sender = registry.getQueue('NOTIFICATIONS_QUEUE')\n *\n * await sender.dispatch({\n *   type: 'email.send',\n *   payload: { to: 'user@example.com', subject: 'Hello' }\n * })\n * ```\n */\nexport class QueueSender implements IQueueSender {\n  constructor(\n    private readonly binding: string,\n    private readonly provider: IQueueProvider,\n    private readonly i18n: II18nService\n  ) {}\n\n  /**\n   * Dispatch a message to this queue.\n   *\n   * @param message - Message to dispatch (without id)\n   */\n  async dispatch<T>(message: DispatchMessage<T>): Promise<void> {\n    const metadata = { ...message.metadata }\n\n    if (!metadata.locale) {\n      const locale = this.i18n.getLocale()\n      if (locale) {\n        metadata.locale = locale\n      }\n    }\n\n    metadata.idempotencyKey ??= await this.generateIdempotencyKey(message.type, message.payload);\n\n    // Stamp the producer binding so a failed job can be retried to the right\n    // Cloudflare binding. Consumers only see the queue *name*, which is not a\n    // valid producer binding key.\n    metadata.binding = this.binding\n\n    const fullMessage: QueueMessage<T> = {\n      id: crypto.randomUUID(),\n      ...message,\n      metadata,\n    }\n\n    await this.provider.send(this.binding, fullMessage)\n  }\n\n  private async generateIdempotencyKey(type: string, payload: unknown): Promise<string> {\n    // Use a stable, key-sorted serialization: `JSON.stringify` preserves\n    // insertion order, so two semantically identical payloads with differently\n    // ordered keys would otherwise hash differently and defeat deduplication.\n    const data = new TextEncoder().encode(stableStringify({ type, payload }))\n    const hash = await crypto.subtle.digest('SHA-256', data)\n    return `queue:${Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('')}`\n  }\n}\n\n/**\n * Deterministic JSON serialization: object keys are emitted in sorted order at\n * every level so the output depends only on the data, not on key insertion\n * order. Arrays keep their order (order is significant). Used to derive a stable\n * idempotency hash from a message's `type` + `payload`.\n */\nfunction stableStringify(value: unknown): string {\n  if (value === null || typeof value !== 'object') {\n    return JSON.stringify(value) ?? 'null'\n  }\n  if (Array.isArray(value)) {\n    return `[${value.map(stableStringify).join(',')}]`\n  }\n  const entries = Object.keys(value as Record<string, unknown>)\n    .sort()\n    .map((key) => {\n      const v = (value as Record<string, unknown>)[key]\n      if (v === undefined) return undefined\n      return `${JSON.stringify(key)}:${stableStringify(v)}`\n    })\n    .filter((entry): entry is string => entry !== undefined)\n  return `{${entries.join(',')}}`\n}\n","import { inject } from '../di'\nimport { Request } from '../di/decorators'\nimport { I18N_TOKENS } from '../i18n/i18n.tokens'\nimport type { II18nService } from '../i18n/i18n.types'\nimport type { IQueueProvider } from './providers'\nimport type { IQueueSender } from './queue-sender.interface'\nimport { QueueSender } from './queue-sender'\nimport { QUEUE_TOKENS } from './queue.tokens'\nimport { type QueueProviderFactory } from './services'\n\n/**\n * Queue Registry\n *\n * Request-scoped factory service for creating QueueSender instances.\n * Caches senders per binding within the request scope.\n *\n * This service is used internally by QueueModule.registerQueue() to provide\n * IQueueSender instances for each registered binding.\n *\n * **Why request-scoped?**\n * - Needs access to I18nService for locale-aware message metadata\n * - Provider is created once per request for consistency\n * - Queue senders are cached per request to avoid recreating them\n *\n * @example\n * ```typescript\n * // Used internally by QueueModule.registerQueue()\n * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n *\n * // The module creates a factory provider:\n * {\n *   provide: 'NOTIFICATIONS_QUEUE',\n *   useFactory: (registry: QueueRegistry) => registry.getQueue('NOTIFICATIONS_QUEUE'),\n *   inject: [QUEUE_TOKENS.QueueRegistry],\n * }\n * ```\n */\n@Request(QUEUE_TOKENS.QueueRegistry)\nexport class QueueRegistry {\n  private readonly provider: IQueueProvider\n  private readonly senders = new Map<string, IQueueSender>()\n\n  constructor(\n    @inject(QUEUE_TOKENS.QueueProviderFactory) providerFactory: QueueProviderFactory,\n    @inject(I18N_TOKENS.I18nService) private readonly i18n: II18nService\n  ) {\n    this.provider = providerFactory.create()\n  }\n\n  /**\n   * Get or create a QueueSender for the specified binding.\n   *\n   * Senders are cached per binding within the request scope.\n   *\n   * @param binding - The queue binding to get a sender for\n   * @returns QueueSender bound to the specified binding\n   */\n  getQueue(binding: string): IQueueSender {\n    let sender = this.senders.get(binding)\n\n    if (!sender) {\n      sender = new QueueSender(binding, this.provider, this.i18n)\n      this.senders.set(binding, sender)\n    }\n\n    return sender\n  }\n}\n","import { inject } from '../di';\nimport { Transient } from '../di/decorators';\nimport { CACHE_TOKENS } from '../cache/cache.tokens';\nimport type { TieredCacheService } from '../cache/services/tiered-cache.service';\nimport type { FailedJob, FailedJobMetadata } from './failed-job';\nimport type { QueueModuleOptions } from './queue.module';\nimport { QUEUE_TOKENS } from './queue.tokens';\n\nconst IDEM_PREFIX = 'queue:idem:'\nconst FAILED_PREFIX = 'queue:failed:'\nconst DEFAULT_IDEMPOTENCY_TTL = 86400\n\n/** Default KV binding name used for queue state when none is configured. */\nexport const DEFAULT_STORE_BINDING = 'CACHE'\n\n/**\n * Persists queue idempotency claims and failed jobs.\n *\n * Backed by {@link TieredCacheService} (isolate-local L1 + KV). The L1 is what\n * makes `markProcessed` → `isProcessed` reliable within an isolate: a claim\n * written on this isolate is read back from memory, so a message redelivered to\n * the same warm isolate is de-duplicated even inside KV's eventual-consistency\n * window. Idempotency markers are set-once, the pattern the L1 tier is designed\n * for. Cross-isolate duplicates still rely on KV (eventually consistent) —\n * delivery remains at-least-once with best-effort de-duplication, not\n * exactly-once.\n */\n@Transient(QUEUE_TOKENS.QueueStore)\nexport class QueueStore {\n  private readonly cache: TieredCacheService\n  private readonly idempotencyTtl: number\n\n  constructor(\n    @inject(CACHE_TOKENS.TieredCacheService) cache: TieredCacheService,\n    @inject(QUEUE_TOKENS.QueueModuleOptions) options: QueueModuleOptions,\n  ) {\n    // Bind to the configured KV namespace via the tiered cache so the L1 lives\n    // on its singleton (one per isolate) and persists across messages. The\n    // binding is validated at module init (QueueModule.onInitialize);\n    // `binding()` also throws if it is somehow absent here.\n    this.cache = cache.binding(options.store?.binding ?? DEFAULT_STORE_BINDING)\n    this.idempotencyTtl = options.idempotency?.ttl ?? DEFAULT_IDEMPOTENCY_TTL\n  }\n\n  async isProcessed(key: string): Promise<boolean> {\n    return (await this.cache.get(`${IDEM_PREFIX}${key}`)) !== null\n  }\n\n  async markProcessed(key: string): Promise<void> {\n    // Durable, awaited write: the idempotency claim gates message redelivery, so\n    // it must be committed (or fail loudly so the handler retries) before the\n    // consumer acks — never deferred. See TieredCacheService.putDurable.\n    await this.cache.putDurable(`${IDEM_PREFIX}${key}`, '1', {\n      expirationTtl: this.idempotencyTtl,\n    })\n  }\n\n  async storeFailedJob(job: FailedJob): Promise<void> {\n    const metadata: FailedJobMetadata = {\n      queue: job.queue,\n      binding: job.binding,\n      type: job.type,\n      consumer: job.consumer,\n      attempts: job.attempts,\n      failedAt: job.failedAt,\n    }\n\n    // Durable, awaited write: a failed-job record that only lands in L1 is\n    // invisible to listFailedJobs (KV-direct) and lost on any other isolate, so\n    // it must be committed or fail loudly — never deferred.\n    await this.cache.putDurable(`${FAILED_PREFIX}${job.id}`, JSON.stringify(job), {\n      metadata,\n    })\n  }\n\n  async getFailedJob(messageId: string): Promise<FailedJob | null> {\n    return this.cache.get<FailedJob>(`${FAILED_PREFIX}${messageId}`, 'json')\n  }\n\n  async removeFailedJob(messageId: string): Promise<void> {\n    await this.cache.delete(`${FAILED_PREFIX}${messageId}`)\n  }\n\n  async listFailedJobs(options?: {\n    limit?: number\n    cursor?: string\n  }): Promise<{ keys: { id: string; metadata: FailedJobMetadata }[]; cursor?: string }> {\n    const result = await this.cache.list<FailedJobMetadata>({\n      prefix: FAILED_PREFIX,\n      limit: options?.limit ?? 50,\n      cursor: options?.cursor,\n    })\n\n    // Skip keys without metadata: a partially-written entry (or one written by\n    // an older code path) is unusable for listing and must not crash the page.\n    const keys = result.keys\n      .filter((key): key is typeof key & { metadata: FailedJobMetadata } => key.metadata != null)\n      .map((key) => ({\n        id: key.name.slice(FAILED_PREFIX.length),\n        metadata: key.metadata,\n      }))\n\n    return {\n      keys,\n      cursor: result.list_complete ? undefined : result.cursor,\n    }\n  }\n\n  async purgeFailedJobs(): Promise<void> {\n    let cursor: string | undefined\n\n    do {\n      const result = await this.cache.list({ prefix: FAILED_PREFIX, cursor })\n      await Promise.all(result.keys.map((key) => this.cache.delete(key.name)))\n      cursor = result.list_complete ? undefined : result.cursor\n    } while (cursor)\n  }\n\n  /**\n   * Delete failed jobs older than `retentionSeconds` (by their `failedAt`\n   * timestamp). Returns the number removed. Backs the opt-in\n   * {@link FailedJobCleanupJob} cron — failed jobs otherwise persist\n   * indefinitely until retried or purged.\n   */\n  async purgeFailedJobsOlderThan(retentionSeconds: number): Promise<number> {\n    const cutoff = Date.now() - retentionSeconds * 1000\n    let cursor: string | undefined\n    let removed = 0\n\n    do {\n      const result = await this.cache.list<FailedJobMetadata>({ prefix: FAILED_PREFIX, cursor })\n      const expired = result.keys.filter((key) => {\n        const failedAt = key.metadata?.failedAt\n        return failedAt !== undefined && Date.parse(failedAt) < cutoff\n      })\n      await Promise.all(expired.map((key) => this.cache.delete(key.name)))\n      removed += expired.length\n      cursor = result.list_complete ? undefined : result.cursor\n    } while (cursor)\n\n    return removed\n  }\n}\n","import { inject } from '../../di'\nimport { type StratalEnv } from '../../env'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport { QueueError } from '../queue.error'\nimport type { QueueMessage } from '../queue-consumer'\nimport type { IQueueProvider } from './queue-provider.interface'\n\n/**\n * Cloudflare Queue Provider\n *\n * Sends messages to Cloudflare Queues by resolving the binding directly on\n * the worker's `env`. Used in production environments where Cloudflare Workers\n * handle queue processing.\n *\n * @example\n * ```typescript\n * const provider = new CloudflareQueueProvider(env)\n * await provider.send('NOTIFICATIONS_QUEUE', message)\n * ```\n */\n@Transient()\nexport class CloudflareQueueProvider implements IQueueProvider {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv\n  ) { }\n\n  /**\n   * Send a message to a Cloudflare Queue\n   *\n   * @param binding - Queue binding identifier (e.g., 'NOTIFICATIONS_QUEUE')\n   * @param message - Complete message with id and payload\n   * @throws {QueueError} If the binding is not configured on env\n   */\n  async send<T>(binding: string, message: QueueMessage<T>): Promise<void> {\n    const queue = (this.env as unknown as Record<string, unknown>)[binding] as Queue | undefined\n\n    if (!queue) {\n      throw new QueueError(`Queue binding \"${binding}\" was not found in the environment`)\n    }\n\n    await queue.send(message)\n  }\n}\n","import type { Application } from '../../application'\nimport type { Container } from '../../di/container'\nimport { containerStorage } from '../../di/container-storage'\nimport { inject } from '../../di'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport type { RouterContext } from '../../router/router-context'\nimport { type ConsumerRegistry } from '../consumer-registry'\nimport type { IQueueConsumer, QueueMessage } from '../queue-consumer'\nimport type { IQueueProvider } from './queue-provider.interface'\n\n/**\n * Sync Queue Provider\n *\n * Processes messages immediately by finding matching consumers and calling\n * their handle() method directly. Used for testing and development where\n * real queue infrastructure is not available.\n *\n * **Behavior:**\n * - Messages are processed synchronously when send() is called\n * - Matching consumers are found via ConsumerRegistry by message type\n * - All matching consumers are called sequentially\n * - Errors are re-thrown after onError() is called (fail-fast for testing)\n *\n * **Consumer Matching:**\n * - Consumers are matched by message type, not queue name\n * - Wildcard ('*') matches all message types\n */\n@Transient()\nexport class SyncQueueProvider implements IQueueProvider {\n  constructor(\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(DI_TOKENS.Container) private readonly root: Container,\n    @inject(DI_TOKENS.Application) private readonly app: Application,\n  ) {}\n\n  /**\n   * Process a message synchronously.\n   *\n   * Runs inside the active request scope when dispatch happens within one (an\n   * HTTP request, or `runInScope` for queues/cron/commands). When dispatched\n   * with no ambient scope — e.g. a service invoked directly in a test — it\n   * establishes its own request scope (mirroring the production queue handler)\n   * so consumers and their request-scoped dependencies resolve correctly.\n   *\n   * @param _binding - Queue binding (not used for routing, consumers match by message type)\n   * @param message - Complete message with id and payload\n   * @throws Re-throws any error from consumer.handle() after calling onError()\n   */\n  async send<T>(_binding: string, message: QueueMessage<T>): Promise<void> {\n    // The fetch path deliberately skips queue init (a Cloudflare-queue worker\n    // never processes consumers inline) — but the sync provider IS the inline\n    // consumer path, so populate the consumer registry before matching message\n    // types. Memoized inside the application; a no-op after the first dispatch.\n    await this.app.ensureScopedHandlers()\n\n    const ambient = containerStorage.getStore()\n    if (ambient) {\n      await this.process(ambient, message)\n      return\n    }\n\n    const locale = message.metadata?.locale ?? 'en'\n    const context = {\n      getLocale: () => locale,\n      setLocale: () => { /* no-op */ },\n      getContainer: () => containerStorage.getStore() ?? this.root,\n    } as unknown as RouterContext\n\n    await this.root.runInRequestScope(context, (container) => this.process(container, message))\n  }\n\n  /**\n   * Resolve a fresh consumer per message from `container` (matched by type) and\n   * invoke each sequentially, fail-fast on the first error after `onError`.\n   */\n  private async process<T>(container: Container, message: QueueMessage<T>): Promise<void> {\n    const consumers = this.registry\n      .getConsumerClasses(message.type)\n      .map((ConsumerClass) => container.resolve<IQueueConsumer>(ConsumerClass))\n\n    for (const consumer of consumers) {\n      try {\n        await consumer.handle(message)\n      } catch (error) {\n        const errorInstance = error instanceof Error ? error : new Error(String(error))\n\n        // Call onError hook if defined\n        if (consumer.onError) {\n          await consumer.onError(errorInstance, message)\n        }\n\n        // Re-throw for fail-fast behavior in tests\n        throw errorInstance\n      }\n    }\n  }\n}\n","import { inject } from '../../di'\nimport type { Container } from '../../di/container'\nimport { type StratalEnv } from '../../env'\nimport { Transient } from '../../di/decorators'\nimport { DI_TOKENS } from '../../di/tokens'\nimport { type ConsumerRegistry } from '../consumer-registry'\nimport { QueueError } from '../queue.error'\nimport type { Application } from '../../application'\nimport { CloudflareQueueProvider, SyncQueueProvider, type IQueueProvider } from '../providers'\nimport type { QueueModuleOptions } from '../queue.module'\nimport { QUEUE_TOKENS } from '../queue.tokens'\n\n/**\n * Queue Provider Factory\n *\n * Creates the appropriate queue provider based on configuration provided\n * via QueueModule.forRootAsync().\n *\n * **Provider Selection:**\n * - `cloudflare`: Production provider using Cloudflare Queue bindings\n * - `sync`: Testing provider that processes messages immediately\n *\n * @example\n * ```typescript\n * // Configuration via QueueModule.forRootAsync()\n * QueueModule.forRootAsync({\n *   inject: [CONFIG_TOKENS.ConfigService],\n *   useFactory: (config) => ({ provider: config.get('queue').provider })\n * })\n *\n * // Factory usage (internal)\n * const factory = container.resolve(QueueProviderFactory)\n * const provider = factory.create()\n * ```\n */\n@Transient(QUEUE_TOKENS.QueueProviderFactory)\nexport class QueueProviderFactory {\n  constructor(\n    @inject(DI_TOKENS.CloudflareEnv) private readonly env: StratalEnv,\n    @inject(DI_TOKENS.ConsumerRegistry) private readonly registry: ConsumerRegistry,\n    @inject(DI_TOKENS.Container) private readonly container: Container,\n    @inject(DI_TOKENS.Application) private readonly app: Application,\n    @inject(QUEUE_TOKENS.QueueModuleOptions, { isOptional: true }) private readonly options?: QueueModuleOptions,\n  ) { }\n\n  /**\n   * Create a queue provider based on module configuration\n   *\n   * @returns Queue provider instance\n   * @throws {QueueError} If provider type is not supported\n   */\n  create(): IQueueProvider {\n    const providerType = this.options?.provider ?? 'cloudflare'\n\n    switch (providerType) {\n      case 'cloudflare':\n        return new CloudflareQueueProvider(this.env)\n\n      case 'sync':\n        return new SyncQueueProvider(this.registry, this.container, this.app)\n\n      default:\n        throw new QueueError(`Queue provider \"${String(providerType)}\" is not supported`)\n    }\n  }\n}\n","/**\n * Queue Module\n *\n * Provides declarative queue infrastructure with provider abstraction.\n *\n * **Usage:**\n * ```typescript\n * // 1. Configure provider (once, in app root)\n * QueueModule.forRootAsync({\n *   inject: [CONFIG_TOKENS.ConfigService],\n *   useFactory: (config) => ({ provider: config.get('queue').provider })\n * })\n *\n * // 2. Register queue bindings (the binding IS the injection token)\n * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n * QueueModule.registerQueue('BACKGROUND_QUEUE')\n *\n * // 3. Inject and use\n * constructor(@InjectQueue('NOTIFICATIONS_QUEUE') private queue: IQueueSender) {}\n * await this.queue.dispatch({ type: 'email.send', payload: {...} })\n * ```\n *\n * **Providers:**\n * - `cloudflare`: Production provider using Cloudflare Queue bindings\n * - `sync`: Testing provider that processes messages immediately\n */\n\nimport { CacheModule } from '../cache';\nimport { DI_TOKENS } from '../di/tokens';\nimport { type StratalEnv } from '../env';\nimport { Module } from '../module';\nimport type {\n  AsyncModuleOptions,\n  DynamicModule,\n  InjectionToken,\n  ModuleContext,\n  OnInitialize,\n} from '../module/types';\nimport { ConsumerRegistry } from './consumer-registry';\nimport type { QueueBinding } from './queue-binding';\nimport { QueueManager } from './queue-manager';\nimport { QueueRegistry } from './queue-registry';\nimport type { IQueueSender } from './queue-sender.interface';\nimport { QueueError } from './queue.error';\nimport { DEFAULT_STORE_BINDING, QueueStore } from './queue-store';\nimport { QUEUE_TOKENS } from './queue.tokens';\nimport { QueueProviderFactory } from './services';\n\n/**\n * Queue module configuration options\n */\nexport interface QueueModuleOptions {\n  /**\n   * Queue provider type\n   * - 'cloudflare': Production provider using Cloudflare Queue bindings\n   * - 'sync': Testing provider that processes messages immediately\n   */\n  provider: 'cloudflare' | 'sync'\n\n  /**\n   * KV binding for queue state (idempotency keys + failed jobs).\n   * Defaults to the `CACHE` binding if omitted.\n   */\n  store?: {\n    /**\n     * KV namespace binding name.\n     * @default CACHE\n     */\n    binding?: string\n  }\n\n  /**\n   * Idempotency configuration.\n   *\n   * Delivery is **at-least-once with best-effort de-duplication**, not\n   * exactly-once. Every dispatch carries an idempotency key (an explicit\n   * `metadata.idempotencyKey`, otherwise a deterministic SHA-256 hash of `type`\n   * + `payload`), and a message already recorded as processed is skipped. The\n   * processed marker is written only after a handler succeeds, and KV `get`/`put`\n   * are eventually consistent — so a message redelivered concurrently (or after\n   * a crash before the marker was durable) can still run more than once. Make\n   * handlers idempotent; don't rely on this as a hard exactly-once guarantee.\n   * `ttl` bounds how long processed keys are remembered.\n   */\n  idempotency?: {\n    /** TTL in seconds for processed idempotency keys. Default: 86400 (24h) */\n    ttl?: number\n  }\n\n  /**\n   * Failed-job configuration.\n   *\n   * Failed jobs persist indefinitely until retried or purged. To bound growth,\n   * register the opt-in `FailedJobCleanupJob` cron in a module's `jobs` array;\n   * it deletes failed jobs older than `retention`.\n   */\n  failedJobs?: {\n    /**\n     * Age in seconds beyond which `FailedJobCleanupJob` deletes a failed job.\n     * Default: 604800 (7d). Has no effect unless the cron is registered.\n     */\n    retention?: number\n  }\n\n  /** Max retry attempts before storing as failed job. Default: 3 */\n  maxRetries?: number\n}\n\n@Module({\n  // QueueStore persists idempotency claims and failed jobs through CacheService\n  // (isolate-local L1 + KV), so the cache must be available wherever queues are.\n  imports: [CacheModule],\n  providers: [\n    { provide: DI_TOKENS.ConsumerRegistry, useClass: ConsumerRegistry },\n    QueueManager,\n    { provide: QUEUE_TOKENS.QueueProviderFactory, useClass: QueueProviderFactory },\n    { provide: QUEUE_TOKENS.QueueRegistry, useClass: QueueRegistry },\n    { provide: QUEUE_TOKENS.QueueStore, useClass: QueueStore },\n  ],\n})\nexport class QueueModule implements OnInitialize {\n  /**\n   * Fail fast at boot if the configured KV store binding is missing, rather\n   * than letting every queue invocation hard-fail lazily. The binding backs\n   * idempotency claims and failed-job storage, so without it the queue\n   * subsystem cannot function.\n   */\n  onInitialize({ container }: ModuleContext): void {\n    const options = container.resolve<QueueModuleOptions>(QUEUE_TOKENS.QueueModuleOptions)\n\n    // Only the `cloudflare` provider persists idempotency claims and failed jobs\n    // to KV. The `sync` provider (dev/CLI) processes inline and never touches the\n    // store, so it must not require the binding.\n    if (options.provider !== 'cloudflare') return\n\n    const binding = options.store?.binding ?? DEFAULT_STORE_BINDING\n    const env = container.resolve<StratalEnv>(DI_TOKENS.CloudflareEnv)\n    const kv = (env as unknown as Record<string, unknown>)[binding]\n\n    if (!kv) {\n      throw new QueueError(\n        `Queue KV store binding \"${binding}\" was not found in the environment. ` +\n          `The queue subsystem persists idempotency claims and failed jobs to KV. ` +\n          `Add a kv_namespaces entry for \"${binding}\" in wrangler.jsonc, or set ` +\n          `QueueModule.forRootAsync({ ..., store: { binding: 'YOUR_KV' } }) to point at an existing namespace.`,\n      )\n    }\n  }\n\n  /**\n   * Configure queue infrastructure with async factory.\n   *\n   * Use when provider configuration depends on other services like ConfigService.\n   *\n   * @param options - Async configuration with factory and inject tokens\n   * @returns Dynamic module with queue infrastructure\n   *\n   * @example\n   * ```typescript\n   * QueueModule.forRootAsync({\n   *   inject: [CONFIG_TOKENS.ConfigService],\n   *   useFactory: (config: IConfigService) => ({\n   *     provider: config.get('queue').provider\n   *   })\n   * })\n   * ```\n   */\n  static forRootAsync(options: AsyncModuleOptions<QueueModuleOptions>): DynamicModule {\n    return {\n      module: QueueModule,\n      providers: [\n        {\n          provide: QUEUE_TOKENS.QueueModuleOptions,\n          useFactory: options.useFactory,\n          inject: options.inject,\n        },\n      ],\n    }\n  }\n\n  /**\n   * Register a queue binding for injection.\n   *\n   * The binding name doubles as the DI injection token and the\n   * `env`-lookup key. Binding names are typed against `StratalEnv`\n   * (autocomplete works once an app augments `StratalEnv` with its\n   * Cloudflare bindings).\n   *\n   * @param binding - Queue binding identifier (e.g. `NOTIFICATIONS_QUEUE`).\n   * @returns Dynamic module that provides the queue sender\n   *\n   * @example\n   * ```typescript\n   * // In AppModule imports\n   * QueueModule.registerQueue('NOTIFICATIONS_QUEUE')\n   *\n   * // Then inject using the binding name\n   * constructor(@InjectQueue('NOTIFICATIONS_QUEUE') private queue: IQueueSender) {}\n   * ```\n   */\n  static registerQueue(binding: QueueBinding): DynamicModule {\n    return {\n      module: QueueModule,\n      providers: [\n        {\n          provide: binding as InjectionToken<IQueueSender>,\n          useFactory: (registry: QueueRegistry) => registry.getQueue(binding),\n          inject: [QUEUE_TOKENS.QueueRegistry],\n        },\n      ],\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;AAEA,IAAa,aAAb,cAAgC,iBAAiB,CAAC;;;ACWlD,MAAM,sBAAsB;AAGrB,IAAM,eAAN,MAAM,aAAa;CAI+B;CACC;CACJ;CALpD;CAEA,YACE,UACA,QACA,OACA,SACA;EAJqD,KAAA,WAAA;EACC,KAAA,SAAA;EACJ,KAAA,QAAA;EAGlD,KAAK,aAAa,QAAQ,cAAc;CAC1C;CAEA,MAAM,aAAa,WAAmB,OAAoC;EACxE,KAAK,MAAM,WAAW,MAAM,UAAU;GACpC,MAAM,eAAe,QAAQ;GAC7B,MAAM,iBAAiB,aAAa,UAAU,kBAAkB,aAAa;GAE7E,IAAI,MAAM,KAAK,MAAM,YAAY,cAAc,GAAG;IAChD,QAAQ,IAAI;IACZ;GACF;GAKA,MAAM,YAAY,aAAa;GAC/B,MAAM,YAAY,KAAK,SACpB,mBAAmB,aAAa,IAAI,CAAC,CACrC,KAAK,kBAAkB,UAAU,QAAwB,aAAa,CAAC;GAE1E,MAAM,UAAU,MAAM,QAAQ,WAC5B,UAAU,KAAK,aAAa,SAAS,OAAO,YAAY,CAAC,CAC3D;GAEA,IAAI;GACJ,IAAI;GAEJ,KAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;IACvC,MAAM,SAAS,QAAQ;IACvB,IAAI,OAAO,WAAW,YAAY;KAChC,MAAM,WAAW,UAAU;KAC3B,MAAM,gBAAgB,OAAO,kBAAkB,QAC3C,OAAO,SACP,IAAI,MAAM,OAAO,OAAO,MAAM,CAAC;KAEnC,KAAK,OAAO,MAAM,mCAAmC,eAAe;MAClE,MAAM,aAAa;MACnB,OAAO;MACP,WAAW,aAAa;MACxB;KACF,CAAC;KAED,IAAI,SAAS,SACX,MAAM,SAAS,QAAQ,eAAe,YAAY;KAGpD,YAAY;KACZ,iBAAiB,SAAS,YAAY;IACxC;GACF;GAIA,IAFe,cAAc,KAAA,GAEjB;IAOV,IAAI,QAAQ,WAAW,KAAK,YAAY;KAKtC,IAAI;MACF,MAAM,UAAU,aAAa,UAAU;MACvC,IAAI,CAAC,SACH,MAAM,IAAI,WACR,iBAAiB,aAAa,GAAG,sIAEnC;MAGF,MAAM,YAAuB;OAC3B,IAAI,aAAa;OACjB,OAAO;OACP;OACA,MAAM,aAAa;OACnB,SAAS;OACT,OAAO;QACL,MAAM,UAAW;QACjB,SAAS,UAAW;QACpB,OAAO,UAAW;OACpB;OACA,UAAU;OACV,UAAU,QAAQ;OAClB,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY;MACnC;MAEA,MAAM,KAAK,MAAM,eAAe,SAAS;KAC3C,SAAS,OAAO;MACd,KAAK,OAAO,MACV,sCACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,GACxD;OAAE,OAAO;OAAW,WAAW,aAAa;OAAI,MAAM,aAAa;MAAK,CAC1E;KACF;KACA,QAAQ,IAAI;IACd,OACE,QAAQ,MAAM;GAElB,OAAO;IACL,MAAM,KAAK,MAAM,cAAc,cAAc;IAC7C,QAAQ,IAAI;GACd;EACF;CACF;AACF;;CAvHC,UAAU,UAAU,KAAK;CAKrB,gBAAA,GAAA,OAAO,UAAU,gBAAgB,CAAA;CACjC,gBAAA,GAAA,OAAO,cAAc,aAAa,CAAA;CAClC,gBAAA,GAAA,OAAO,aAAa,UAAU,CAAA;CAC9B,gBAAA,GAAA,OAAO,aAAa,kBAAkB,CAAA;;;;ACoBpC,IAAM,mBAAN,MAAM,iBAAiB;;CAE5B,gCAAwB,IAAI,IAA2C;;CAGvE,gBAAgD,CAAC;;CAGjD,oCAA4B,IAAI,IAAiC;;;;;;;;;;;;CAajE,SAAS,eAA4C,cAA8B;EACjF,IAAI,KAAK,kBAAkB,IAAI,aAAa,GAC1C;EAGF,KAAK,kBAAkB,IAAI,aAAa;EACxC,KAAK,cAAc,KAAK;GAAE;GAAe;EAAa,CAAC;EAEvD,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,WAAW,KAAK,cAAc,IAAI,WAAW,KAAK,CAAC;GACzD,SAAS,KAAK,aAAa;GAC3B,KAAK,cAAc,IAAI,aAAa,QAAQ;EAC9C;CACF;;;;;;;;;;;CAYA,mBAAmB,aAAoD;EACrE,MAAM,aAAa,KAAK,cAAc,IAAI,WAAW,KAAK,CAAC;EAC3D,MAAM,gBAAgB,KAAK,cAAc,IAAI,GAAG,KAAK,CAAC;EAGtD,OAAO,MAAM,qBAAK,IAAI,IAAI,CAAC,GAAG,YAAY,GAAG,aAAa,CAAC,CAAC;CAC9D;;;;;;;CAQA,aAAa,aAA8B;EACzC,OAAO,KAAK,mBAAmB,WAAW,CAAC,CAAC,SAAS;CACvD;;;;;;CAOA,kBAA4B;EAC1B,OAAO,MAAM,KAAK,KAAK,cAAc,KAAK,CAAC;CAC7C;;;;CAKA,mBAAoD;EAClD,OAAO,KAAK;CACd;AACF;AAhFC,mBAAA,WAAA,CAAA,UAAU,UAAU,gBAAgB,CAAA,GAAA,gBAAA;;;;;;;;;;;;;;;;;;;;;;;;;ACfrC,IAAa,cAAb,MAAiD;CAE5B;CACA;CACA;CAHnB,YACE,SACA,UACA,MACA;EAHiB,KAAA,UAAA;EACA,KAAA,WAAA;EACA,KAAA,OAAA;CAChB;;;;;;CAOH,MAAM,SAAY,SAA4C;EAC5D,MAAM,WAAW,EAAE,GAAG,QAAQ,SAAS;EAEvC,IAAI,CAAC,SAAS,QAAQ;GACpB,MAAM,SAAS,KAAK,KAAK,UAAU;GACnC,IAAI,QACF,SAAS,SAAS;EAEtB;EAEA,SAAS,mBAAmB,MAAM,KAAK,uBAAuB,QAAQ,MAAM,QAAQ,OAAO;EAK3F,SAAS,UAAU,KAAK;EAExB,MAAM,cAA+B;GACnC,IAAI,OAAO,WAAW;GACtB,GAAG;GACH;EACF;EAEA,MAAM,KAAK,SAAS,KAAK,KAAK,SAAS,WAAW;CACpD;CAEA,MAAc,uBAAuB,MAAc,SAAmC;EAIpF,MAAM,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,gBAAgB;GAAE;GAAM;EAAQ,CAAC,CAAC;EACxE,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;EACvD,OAAO,SAAS,MAAM,KAAK,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC,KAAI,MAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;CACpG;AACF;;;;;;;AAQA,SAAS,gBAAgB,OAAwB;CAC/C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO,KAAK,UAAU,KAAK,KAAK;CAElC,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,IAAI,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,GAAG,EAAE;CAUlD,OAAO,IARS,OAAO,KAAK,KAAgC,CAAC,CAC1D,KAAK,CAAC,CACN,KAAK,QAAQ;EACZ,MAAM,IAAK,MAAkC;EAC7C,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;EAC5B,OAAO,GAAG,KAAK,UAAU,GAAG,EAAE,GAAG,gBAAgB,CAAC;CACpD,CAAC,CAAC,CACD,QAAQ,UAA2B,UAAU,KAAA,CAC/B,CAAC,CAAC,KAAK,GAAG,EAAE;AAC/B;;;AC3DO,IAAM,gBAAN,MAAM,cAAc;CAM2B;CALpD;CACA,0BAA2B,IAAI,IAA0B;CAEzD,YACE,iBACA,MACA;EADkD,KAAA,OAAA;EAElD,KAAK,WAAW,gBAAgB,OAAO;CACzC;;;;;;;;;CAUA,SAAS,SAA+B;EACtC,IAAI,SAAS,KAAK,QAAQ,IAAI,OAAO;EAErC,IAAI,CAAC,QAAQ;GACX,SAAS,IAAI,YAAY,SAAS,KAAK,UAAU,KAAK,IAAI;GAC1D,KAAK,QAAQ,IAAI,SAAS,MAAM;EAClC;EAEA,OAAO;CACT;AACF;;CA9BC,QAAQ,aAAa,aAAa;CAM9B,gBAAA,GAAA,OAAO,aAAa,oBAAoB,CAAA;CACxC,gBAAA,GAAA,OAAO,YAAY,WAAW,CAAA;;;;ACpCnC,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,0BAA0B;;AAGhC,MAAa,wBAAwB;AAe9B,IAAM,aAAN,MAAM,WAAW;CACtB;CACA;CAEA,YACE,OACA,SACA;EAKA,KAAK,QAAQ,MAAM,QAAQ,QAAQ,OAAO,WAAA,OAAgC;EAC1E,KAAK,iBAAiB,QAAQ,aAAa,OAAO;CACpD;CAEA,MAAM,YAAY,KAA+B;EAC/C,OAAQ,MAAM,KAAK,MAAM,IAAI,GAAG,cAAc,KAAK,MAAO;CAC5D;CAEA,MAAM,cAAc,KAA4B;EAI9C,MAAM,KAAK,MAAM,WAAW,GAAG,cAAc,OAAO,KAAK,EACvD,eAAe,KAAK,eACtB,CAAC;CACH;CAEA,MAAM,eAAe,KAA+B;EAClD,MAAM,WAA8B;GAClC,OAAO,IAAI;GACX,SAAS,IAAI;GACb,MAAM,IAAI;GACV,UAAU,IAAI;GACd,UAAU,IAAI;GACd,UAAU,IAAI;EAChB;EAKA,MAAM,KAAK,MAAM,WAAW,GAAG,gBAAgB,IAAI,MAAM,KAAK,UAAU,GAAG,GAAG,EAC5E,SACF,CAAC;CACH;CAEA,MAAM,aAAa,WAA8C;EAC/D,OAAO,KAAK,MAAM,IAAe,GAAG,gBAAgB,aAAa,MAAM;CACzE;CAEA,MAAM,gBAAgB,WAAkC;EACtD,MAAM,KAAK,MAAM,OAAO,GAAG,gBAAgB,WAAW;CACxD;CAEA,MAAM,eAAe,SAGiE;EACpF,MAAM,SAAS,MAAM,KAAK,MAAM,KAAwB;GACtD,QAAQ;GACR,OAAO,SAAS,SAAS;GACzB,QAAQ,SAAS;EACnB,CAAC;EAWD,OAAO;GACL,MARW,OAAO,KACjB,QAAQ,QAA6D,IAAI,YAAY,IAAI,CAAC,CAC1F,KAAK,SAAS;IACb,IAAI,IAAI,KAAK,MAAM,EAAoB;IACvC,UAAU,IAAI;GAChB,EAGG;GACH,QAAQ,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACpD;CACF;CAEA,MAAM,kBAAiC;EACrC,IAAI;EAEJ,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,MAAM,KAAK;IAAE,QAAQ;IAAe;GAAO,CAAC;GACtE,MAAM,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,CAAC;GACvE,SAAS,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACrD,SAAS;CACX;;;;;;;CAQA,MAAM,yBAAyB,kBAA2C;EACxE,MAAM,SAAS,KAAK,IAAI,IAAI,mBAAmB;EAC/C,IAAI;EACJ,IAAI,UAAU;EAEd,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,MAAM,KAAwB;IAAE,QAAQ;IAAe;GAAO,CAAC;GACzF,MAAM,UAAU,OAAO,KAAK,QAAQ,QAAQ;IAC1C,MAAM,WAAW,IAAI,UAAU;IAC/B,OAAO,aAAa,KAAA,KAAa,KAAK,MAAM,QAAQ,IAAI;GAC1D,CAAC;GACD,MAAM,QAAQ,IAAI,QAAQ,KAAK,QAAQ,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,CAAC;GACnE,WAAW,QAAQ;GACnB,SAAS,OAAO,gBAAgB,KAAA,IAAY,OAAO;EACrD,SAAS;EAET,OAAO;CACT;AACF;;CAnHC,UAAU,aAAa,UAAU;CAM7B,gBAAA,GAAA,OAAO,aAAa,kBAAkB,CAAA;CACtC,gBAAA,GAAA,OAAO,aAAa,kBAAkB,CAAA;;;;ACZpC,IAAM,0BAAN,MAAM,wBAAkD;CAET;CADpD,YACE,KACA;EADkD,KAAA,MAAA;CAChD;;;;;;;;CASJ,MAAM,KAAQ,SAAiB,SAAyC;EACtE,MAAM,QAAS,KAAK,IAA2C;EAE/D,IAAI,CAAC,OACH,MAAM,IAAI,WAAW,kBAAkB,QAAQ,mCAAmC;EAGpF,MAAM,MAAM,KAAK,OAAO;CAC1B;AACF;AAtBC,0BAAA,WAAA,CAAA,UAAU,GAAA,gBAAA,GAGN,OAAO,UAAU,aAAa,CAAA,CAAA,GAAA,uBAAA;;;ACK5B,IAAM,oBAAN,MAAM,kBAA4C;CAEA;CACP;CACE;CAHlD,YACE,UACA,MACA,KACA;EAHqD,KAAA,WAAA;EACP,KAAA,OAAA;EACE,KAAA,MAAA;CAC/C;;;;;;;;;;;;;;CAeH,MAAM,KAAQ,UAAkB,SAAyC;EAKvE,MAAM,KAAK,IAAI,qBAAqB;EAEpC,MAAM,UAAU,iBAAiB,SAAS;EAC1C,IAAI,SAAS;GACX,MAAM,KAAK,QAAQ,SAAS,OAAO;GACnC;EACF;EAEA,MAAM,SAAS,QAAQ,UAAU,UAAU;EAO3C,MAAM,KAAK,KAAK,kBAAkB;GALhC,iBAAiB;GACjB,iBAAiB,CAAc;GAC/B,oBAAoB,iBAAiB,SAAS,KAAK,KAAK;EAGlB,IAAI,cAAc,KAAK,QAAQ,WAAW,OAAO,CAAC;CAC5F;;;;;CAMA,MAAc,QAAW,WAAsB,SAAyC;EACtF,MAAM,YAAY,KAAK,SACpB,mBAAmB,QAAQ,IAAI,CAAC,CAChC,KAAK,kBAAkB,UAAU,QAAwB,aAAa,CAAC;EAE1E,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,MAAM,SAAS,OAAO,OAAO;EAC/B,SAAS,OAAO;GACd,MAAM,gBAAgB,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;GAG9E,IAAI,SAAS,SACX,MAAM,SAAS,QAAQ,eAAe,OAAO;GAI/C,MAAM;EACR;CAEJ;AACF;;CArEC,UAAU;CAGN,gBAAA,GAAA,OAAO,UAAU,gBAAgB,CAAA;CACjC,gBAAA,GAAA,OAAO,UAAU,SAAS,CAAA;CAC1B,gBAAA,GAAA,OAAO,UAAU,WAAW,CAAA;;;;ACG1B,IAAM,uBAAN,MAAM,qBAAqB;CAEoB;CACG;CACP;CACE;CACgC;CALlF,YACE,KACA,UACA,WACA,KACA,SACA;EALkD,KAAA,MAAA;EACG,KAAA,WAAA;EACP,KAAA,YAAA;EACE,KAAA,MAAA;EACgC,KAAA,UAAA;CAC9E;;;;;;;CAQJ,SAAyB;EACvB,MAAM,eAAe,KAAK,SAAS,YAAY;EAE/C,QAAQ,cAAR;GACE,KAAK,cACH,OAAO,IAAI,wBAAwB,KAAK,GAAG;GAE7C,KAAK,QACH,OAAO,IAAI,kBAAkB,KAAK,UAAU,KAAK,WAAW,KAAK,GAAG;GAEtE,SACE,MAAM,IAAI,WAAW,mBAAmB,OAAO,YAAY,EAAE,mBAAmB;EACpF;CACF;AACF;;CA9BC,UAAU,aAAa,oBAAoB;CAGvC,gBAAA,GAAA,OAAO,UAAU,aAAa,CAAA;CAC9B,gBAAA,GAAA,OAAO,UAAU,gBAAgB,CAAA;CACjC,gBAAA,GAAA,OAAO,UAAU,SAAS,CAAA;CAC1B,gBAAA,GAAA,OAAO,UAAU,WAAW,CAAA;CAC5B,gBAAA,GAAA,OAAO,aAAa,oBAAoB,EAAE,YAAY,KAAK,CAAC,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC8E1D,IAAM,cAAA,eAAN,MAAM,YAAoC;;;;;;;CAO/C,aAAa,EAAE,aAAkC;EAC/C,MAAM,UAAU,UAAU,QAA4B,aAAa,kBAAkB;EAKrF,IAAI,QAAQ,aAAa,cAAc;EAEvC,MAAM,UAAU,QAAQ,OAAO,WAAA;EAI/B,IAAI,CAHQ,UAAU,QAAoB,UAAU,aACtC,CAAC,CAAwC,UAGrD,MAAM,IAAI,WACR,2BAA2B,QAAQ,4IAEC,QAAQ,gIAE9C;CAEJ;;;;;;;;;;;;;;;;;;;CAoBA,OAAO,aAAa,SAAgE;EAClF,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS,aAAa;IACtB,YAAY,QAAQ;IACpB,QAAQ,QAAQ;GAClB,CACF;EACF;CACF;;;;;;;;;;;;;;;;;;;;;CAsBA,OAAO,cAAc,SAAsC;EACzD,OAAO;GACL,QAAA;GACA,WAAW,CACT;IACE,SAAS;IACT,aAAa,aAA4B,SAAS,SAAS,OAAO;IAClE,QAAQ,CAAC,aAAa,aAAa;GACrC,CACF;EACF;CACF;AACF;AAxGC,cAAA,eAAA,WAAA,CAAA,OAAO;CAGN,SAAS,CAAC,WAAW;CACrB,WAAW;EACT;GAAE,SAAS,UAAU;GAAkB,UAAU;EAAiB;EAClE;EACA;GAAE,SAAS,aAAa;GAAsB,UAAU;EAAqB;EAC7E;GAAE,SAAS,aAAa;GAAe,UAAU;EAAc;EAC/D;GAAE,SAAS,aAAa;GAAY,UAAU;EAAW;CAC3D;AACF,CAAC,CAAA,GAAA,WAAA"}

package/dist/{r2-storage.provider-BoZmR6Ut.mjs → r2-storage.provider-wU_6api4.mjs}

@@ -1,9 +1,10 @@
-import { t as __exportAll } from "./chunk-BBjsoOtd.mjs";
-import { t as StorageError } from "./storage.error-BStXPmO4.mjs";
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
+import { t as StorageError } from "./storage.error-Ao38Qdjx.mjs";
 import { t as signUrl } from "./signed-url-DIU0sK_6.mjs";
 //#region src/storage/providers/r2-storage.provider.ts
 var r2_storage_provider_exports = /* @__PURE__ */ __exportAll({ R2StorageProvider: () => R2StorageProvider });
-const MIN_PART_SIZE = 5 * 1024 * 1024;
+const MIN_PART_SIZE = 5242880;
+const R2_BULK_DELETE_LIMIT = 1e3;
 const MULTIPART_PREFIX = "__multipart/";
 const PARTS_PREFIX = "__parts/";
 /**
@@ -60,11 +61,33 @@ var R2StorageProvider = class {
 	async exists(path) {
 		return await this.bucket.head(path) !== null;
 	}
+	async deleteMany(paths) {
+		for (let i = 0; i < paths.length; i += R2_BULK_DELETE_LIMIT) await this.bucket.delete(paths.slice(i, i + R2_BULK_DELETE_LIMIT));
+	}
+	async head(path) {
+		const obj = await this.bucket.head(path);
+		if (obj === null) return null;
+		return toHeadResult(obj);
+	}
+	async list(options) {
+		const listed = await this.bucket.list({
+			prefix: options.prefix,
+			cursor: options.cursor,
+			limit: options.limit,
+			include: options.includeMetadata ? ["httpMetadata", "customMetadata"] : []
+		});
+		return {
+			objects: listed.objects.map((obj) => toHeadResult(obj)),
+			truncated: listed.truncated,
+			cursor: listed.truncated ? listed.cursor : void 0
+		};
+	}
 	async getPresignedUrl(path, method, expiresIn) {
 		const secret = this.env.APP_SECRET;
 		if (!secret) throw new StorageError("APP_SECRET is required for generating presigned URLs");
+		const urlWithMethod = `${`${this.routeBasePath}/${this.config.disk}/${path}`}?method=${method}`;
 		return {
-			url: await signUrl(`${`${this.routeBasePath}/${this.config.disk}/${path}`}?method=${method}`, secret, { expiresIn }),
+			url: await signUrl(urlWithMethod, secret, { expiresIn }),
 			expiresIn,
 			expiresAt: new Date(Date.now() + expiresIn * 1e3),
 			method
@@ -79,7 +102,7 @@ var R2StorageProvider = class {
 		try {
 			if (body instanceof ReadableStream) {
 				const reader = body.getReader();
-				let buffer = new Uint8Array(0);
+				let buffer = /* @__PURE__ */ new Uint8Array(0);
 				let partNumber = 1;
 				while (true) {
 					const { done, value } = await reader.read();
@@ -241,7 +264,23 @@ var R2StorageProvider = class {
 		if (keysToDelete.length > 0) await this.bucket.delete(keysToDelete);
 	}
 };
+/**
+* Narrows an R2 object to the provider-agnostic shape.
+*
+* Takes `R2Object` rather than the `R2ObjectBody` `get` returns, so it works for both `head` and
+* `list` — neither of which carries a body.
+*/
+function toHeadResult(obj) {
+	return {
+		path: obj.key,
+		size: obj.size,
+		contentType: obj.httpMetadata?.contentType,
+		etag: obj.etag,
+		uploadedAt: obj.uploaded,
+		metadata: obj.customMetadata
+	};
+}
 //#endregion
 export { r2_storage_provider_exports as n, R2StorageProvider as t };
 
-//# sourceMappingURL=r2-storage.provider-BoZmR6Ut.mjs.map
+//# sourceMappingURL=r2-storage.provider-wU_6api4.mjs.map

package/dist/r2-storage.provider-wU_6api4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-storage.provider-wU_6api4.mjs","names":[],"sources":["../src/storage/providers/r2-storage.provider.ts"],"sourcesContent":["import { type StratalEnv } from '../../env'\nimport { signUrl } from '../../router/signed-url'\nimport type {\n  DownloadResult,\n  HeadResult,\n  ListOptions,\n  ListResult,\n  PresignedUrlResult,\n  UploadOptions,\n  UploadResult,\n} from '../contracts'\nimport { StorageError } from '../storage.error'\nimport type { StorageEntry, StorageRouteConfig } from '../types'\nimport type {\n  CompletedPart,\n  CompleteMultipartResult,\n  CreateMultipartOptions,\n  CreateMultipartResult,\n  DeleteObjectsResult,\n  HeadObjectResult,\n  IMultipartProvider,\n  ListMultipartUploadsResult,\n  ListPartsResult,\n  UploadPartResult,\n} from './multipart-provider.interface'\nimport type { StreamingBlobPayloadInputTypes } from './storage-provider.interface'\n\nconst MIN_PART_SIZE = 5 * 1024 * 1024 // 5MB\nconst R2_BULK_DELETE_LIMIT = 1000\nconst MULTIPART_PREFIX = '__multipart/'\nconst PARTS_PREFIX = '__parts/'\n\n/**\n * R2 Storage Provider\n * Implements storage operations using native Cloudflare R2 bindings\n *\n * Implements IMultipartProvider for multipart upload support needed by TUS.\n * Tracks multipart upload metadata using companion R2 objects so that\n * listParts/listMultipartUploads work in all environments (local, test, prod).\n */\nexport class R2StorageProvider implements IMultipartProvider {\n  private readonly routeBasePath: string\n\n  constructor(\n    private readonly config: StorageEntry,\n    private readonly bucket: R2Bucket,\n    private readonly env: StratalEnv,\n    routeConfig?: StorageRouteConfig\n  ) {\n    this.routeBasePath = routeConfig?.basePath ?? '/storage'\n  }\n\n  async upload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: UploadOptions\n  ): Promise<UploadResult> {\n    const customMetadata: Record<string, string> = { ...options.metadata }\n    if (options.tagging) {\n      customMetadata['x-tags'] = options.tagging\n    }\n\n    await this.bucket.put(path, body as ReadableStream | ArrayBuffer | ArrayBufferView | string | Blob | null, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata,\n    })\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: options.size,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  async download(path: string): Promise<DownloadResult> {\n    const obj = await this.bucket.get(path)\n\n    if (!obj) {\n      throw new StorageError(`Storage object not found at path \"${path}\"`)\n    }\n\n    // R2ObjectBody has body, text(), arrayBuffer(), etc.\n    const objBody = obj\n\n    return {\n      toStream: () => objBody.body as ReadableStream<Uint8Array>,\n      contentType: obj.httpMetadata?.contentType ?? 'application/octet-stream',\n      size: obj.size,\n      metadata: obj.customMetadata,\n      toString: () => objBody.text(),\n      toArrayBuffer: () => objBody.bytes(),\n    }\n  }\n\n  async delete(path: string): Promise<void> {\n    await this.bucket.delete(path)\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const head = await this.bucket.head(path)\n    return head !== null\n  }\n\n  async deleteMany(paths: string[]): Promise<void> {\n    // Chunked here rather than by the caller: R2 accepts 1000 keys per call, and unlike a\n    // listing there is no partial answer to misread — every key given is deleted before this\n    // resolves.\n    for (let i = 0; i < paths.length; i += R2_BULK_DELETE_LIMIT) {\n      await this.bucket.delete(paths.slice(i, i + R2_BULK_DELETE_LIMIT))\n    }\n  }\n\n  async head(path: string): Promise<HeadResult | null> {\n    const obj = await this.bucket.head(path)\n    if (obj === null) {\n      return null\n    }\n\n    return toHeadResult(obj)\n  }\n\n  async list(options: ListOptions): Promise<ListResult> {\n    const listed = await this.bucket.list({\n      prefix: options.prefix,\n      cursor: options.cursor,\n      limit: options.limit,\n      // R2 omits both unless asked (`r2_list_honor_include`, default since 2022-08-04), and\n      // including them makes it return fewer objects per page — so this stays off unless the\n      // caller says it reads those fields.\n      include: options.includeMetadata ? ['httpMetadata', 'customMetadata'] : [],\n    })\n\n    return {\n      objects: listed.objects.map((obj) => toHeadResult(obj)),\n      // Passed through rather than resolved here. R2 caps a single list at 1000 keys whatever\n      // `limit` asks for, so `truncated` is the only thing that tells a caller its aggregate is\n      // complete — and looping internally would turn one await into an unbounded number of\n      // subrequests, which on Workers is a budget the caller has to own.\n      truncated: listed.truncated,\n      cursor: listed.truncated ? listed.cursor : undefined,\n    }\n  }\n\n  async getPresignedUrl(\n    path: string,\n    method: 'GET' | 'PUT' | 'DELETE' | 'HEAD',\n    expiresIn: number\n  ): Promise<PresignedUrlResult> {\n    const secret = this.env.APP_SECRET;\n    if (!secret) {\n      throw new StorageError('APP_SECRET is required for generating presigned URLs')\n    }\n\n    // Build a relative URL pointing to the StorageController route\n    const routePath = `${this.routeBasePath}/${this.config.disk}/${path}`\n    const urlWithMethod = `${routePath}?method=${method}`\n    const url = await signUrl(urlWithMethod, secret, { expiresIn })\n\n    return {\n      url,\n      expiresIn,\n      expiresAt: new Date(Date.now() + expiresIn * 1000),\n      method,\n    }\n  }\n\n  async chunkedUpload(\n    body: StreamingBlobPayloadInputTypes,\n    path: string,\n    options: Omit<UploadOptions, 'size'> & { size?: number }\n  ): Promise<UploadResult> {\n    const multipartUpload = await this.bucket.createMultipartUpload(path, {\n      httpMetadata: {\n        contentType: options.mimeType,\n      },\n      customMetadata: options.metadata,\n    })\n\n    const parts: R2UploadedPart[] = []\n\n    try {\n      if (body instanceof ReadableStream) {\n        const reader = (body as ReadableStream<Uint8Array>).getReader()\n        let buffer = new Uint8Array(0)\n        let partNumber = 1\n\n        while (true) {\n          const { done, value } = await reader.read()\n\n          if (value) {\n            const newBuffer = new Uint8Array(buffer.length + value.length)\n            newBuffer.set(buffer, 0)\n            newBuffer.set(value, buffer.length)\n            buffer = newBuffer\n          }\n\n          while (buffer.length >= MIN_PART_SIZE) {\n            const partData = buffer.slice(0, MIN_PART_SIZE)\n            buffer = buffer.slice(MIN_PART_SIZE)\n            const part = await multipartUpload.uploadPart(partNumber, partData)\n            parts.push(part)\n            partNumber++\n          }\n\n          if (done) {\n            // Upload remaining buffer as final part\n            if (buffer.length > 0) {\n              const part = await multipartUpload.uploadPart(partNumber, buffer)\n              parts.push(part)\n            }\n            break\n          }\n        }\n      } else if (body !== null && body !== undefined) {\n        // Non-stream body: upload as single part\n        const part = await multipartUpload.uploadPart(1, body)\n        parts.push(part)\n      }\n\n      await multipartUpload.complete(parts)\n    } catch (error) {\n      await multipartUpload.abort()\n      throw error\n    }\n\n    // Get actual size via head\n    const headResult = await this.bucket.head(path)\n\n    return {\n      path,\n      disk: this.config.disk,\n      fullPath: path,\n      size: headResult?.size ?? options.size ?? 0,\n      mimeType: options.mimeType ?? 'application/octet-stream',\n      uploadedAt: new Date(),\n    }\n  }\n\n  // ============================================\n  // IMultipartProvider - Multipart upload methods\n  // ============================================\n\n  getBucket(): string {\n    return this.config.binding\n  }\n\n  async headObject(key: string): Promise<HeadObjectResult | null> {\n    const obj = await this.bucket.head(key)\n    if (!obj) {\n      return null\n    }\n    return {\n      size: obj.size,\n      contentType: obj.httpMetadata?.contentType,\n      metadata: obj.customMetadata,\n    }\n  }\n\n  async deleteObjects(keys: string[]): Promise<DeleteObjectsResult> {\n    if (keys.length === 0) {\n      return { deleted: 0, errors: [] }\n    }\n\n    await this.bucket.delete(keys)\n\n    return {\n      deleted: keys.length,\n      errors: [],\n    }\n  }\n\n  async createMultipartUpload(\n    key: string,\n    options?: CreateMultipartOptions\n  ): Promise<CreateMultipartResult> {\n    const upload = await this.bucket.createMultipartUpload(key, {\n      httpMetadata: {\n        contentType: options?.contentType,\n        cacheControl: options?.cacheControl,\n      },\n      customMetadata: options?.metadata,\n    })\n\n    // Track upload for listMultipartUploads\n    await this.bucket.put(\n      `${MULTIPART_PREFIX}${upload.uploadId}.json`,\n      JSON.stringify({ key: upload.key, uploadId: upload.uploadId, initiated: new Date().toISOString() }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      uploadId: upload.uploadId,\n      key: upload.key,\n    }\n  }\n\n  async uploadPart(\n    key: string,\n    uploadId: string,\n    partNumber: number,\n    body: Uint8Array\n  ): Promise<UploadPartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const part = await upload.uploadPart(partNumber, body)\n\n    // Track part for listParts\n    await this.bucket.put(\n      `${PARTS_PREFIX}${uploadId}/${partNumber}`,\n      JSON.stringify({ partNumber: part.partNumber, etag: part.etag, size: body.length }),\n      { httpMetadata: { contentType: 'application/json' } }\n    )\n\n    return {\n      etag: part.etag,\n      partNumber: part.partNumber,\n    }\n  }\n\n  async completeMultipartUpload(\n    key: string,\n    uploadId: string,\n    parts: CompletedPart[]\n  ): Promise<CompleteMultipartResult> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    const result = await upload.complete(\n      parts.map((p) => ({\n        partNumber: p.partNumber,\n        etag: p.etag,\n      }))\n    )\n\n    await this.cleanupTrackingObjects(uploadId)\n\n    return {\n      key: result.key,\n    }\n  }\n\n  async abortMultipartUpload(key: string, uploadId: string): Promise<void> {\n    const upload = this.bucket.resumeMultipartUpload(key, uploadId)\n    await upload.abort()\n\n    await this.cleanupTrackingObjects(uploadId)\n  }\n\n  async listParts(\n    _key: string,\n    uploadId: string,\n    partNumberMarker?: string\n  ): Promise<ListPartsResult> {\n    const prefix = `${PARTS_PREFIX}${uploadId}/`\n    const listed = await this.bucket.list({\n      prefix,\n      cursor: partNumberMarker,\n    })\n\n    const parts = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        return JSON.parse(await data.text()) as { partNumber: number; etag: string; size: number }\n      })\n    )\n\n    const validParts = parts\n      .filter((p): p is NonNullable<typeof p> => p !== null)\n      .sort((a, b) => a.partNumber - b.partNumber)\n\n    return {\n      parts: validParts,\n      isTruncated: listed.truncated,\n      nextPartNumberMarker: listed.truncated ? listed.cursor : undefined,\n    }\n  }\n\n  async listMultipartUploads(\n    keyMarker?: string,\n    _uploadIdMarker?: string\n  ): Promise<ListMultipartUploadsResult> {\n    const listed = await this.bucket.list({\n      prefix: MULTIPART_PREFIX,\n      cursor: keyMarker,\n    })\n\n    const uploads = await Promise.all(\n      listed.objects.map(async (obj) => {\n        const data = await this.bucket.get(obj.key)\n        if (!data) {\n          return null\n        }\n        const parsed = JSON.parse(await data.text()) as { key: string; uploadId: string; initiated: string }\n        return {\n          key: parsed.key,\n          uploadId: parsed.uploadId,\n          initiated: new Date(parsed.initiated),\n        }\n      })\n    )\n\n    return {\n      uploads: uploads.filter((u): u is NonNullable<typeof u> => u !== null),\n      isTruncated: listed.truncated,\n      nextKeyMarker: listed.truncated ? listed.cursor : undefined,\n      nextUploadIdMarker: undefined,\n    }\n  }\n\n  // ============================================\n  // Private helpers\n  // ============================================\n\n  private async cleanupTrackingObjects(uploadId: string): Promise<void> {\n    // Delete part tracking objects\n    const partsPrefix = `${PARTS_PREFIX}${uploadId}/`\n    let cursor: string | undefined\n    const keysToDelete: string[] = []\n\n    do {\n      const listed = await this.bucket.list({ prefix: partsPrefix, cursor })\n      for (const obj of listed.objects) {\n        keysToDelete.push(obj.key)\n      }\n      cursor = listed.truncated ? listed.cursor : undefined\n    } while (cursor)\n\n    // Delete multipart tracking object\n    keysToDelete.push(`${MULTIPART_PREFIX}${uploadId}.json`)\n\n    if (keysToDelete.length > 0) {\n      await this.bucket.delete(keysToDelete)\n    }\n  }\n}\n\n/**\n * Narrows an R2 object to the provider-agnostic shape.\n *\n * Takes `R2Object` rather than the `R2ObjectBody` `get` returns, so it works for both `head` and\n * `list` — neither of which carries a body.\n */\nfunction toHeadResult(obj: R2Object): HeadResult {\n  return {\n    path: obj.key,\n    size: obj.size,\n    contentType: obj.httpMetadata?.contentType,\n    etag: obj.etag,\n    uploadedAt: obj.uploaded,\n    metadata: obj.customMetadata,\n  }\n}\n"],"mappings":";;;;;AA2BA,MAAM,gBAAgB;AACtB,MAAM,uBAAuB;AAC7B,MAAM,mBAAmB;AACzB,MAAM,eAAe;;;;;;;;;AAUrB,IAAa,oBAAb,MAA6D;CAIxC;CACA;CACA;CALnB;CAEA,YACE,QACA,QACA,KACA,aACA;EAJiB,KAAA,SAAA;EACA,KAAA,SAAA;EACA,KAAA,MAAA;EAGjB,KAAK,gBAAgB,aAAa,YAAY;CAChD;CAEA,MAAM,OACJ,MACA,MACA,SACuB;EACvB,MAAM,iBAAyC,EAAE,GAAG,QAAQ,SAAS;EACrE,IAAI,QAAQ,SACV,eAAe,YAAY,QAAQ;EAGrC,MAAM,KAAK,OAAO,IAAI,MAAM,MAA+E;GACzG,cAAc,EACZ,aAAa,QAAQ,SACvB;GACA;EACF,CAAC;EAED,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,QAAQ;GACd,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,KAAK;EACvB;CACF;CAEA,MAAM,SAAS,MAAuC;EACpD,MAAM,MAAM,MAAM,KAAK,OAAO,IAAI,IAAI;EAEtC,IAAI,CAAC,KACH,MAAM,IAAI,aAAa,qCAAqC,KAAK,EAAE;EAIrE,MAAM,UAAU;EAEhB,OAAO;GACL,gBAAgB,QAAQ;GACxB,aAAa,IAAI,cAAc,eAAe;GAC9C,MAAM,IAAI;GACV,UAAU,IAAI;GACd,gBAAgB,QAAQ,KAAK;GAC7B,qBAAqB,QAAQ,MAAM;EACrC;CACF;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,KAAK,OAAO,OAAO,IAAI;CAC/B;CAEA,MAAM,OAAO,MAAgC;EAE3C,OAAO,MADY,KAAK,OAAO,KAAK,IAAI,MACxB;CAClB;CAEA,MAAM,WAAW,OAAgC;EAI/C,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,sBACrC,MAAM,KAAK,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC;CAErE;CAEA,MAAM,KAAK,MAA0C;EACnD,MAAM,MAAM,MAAM,KAAK,OAAO,KAAK,IAAI;EACvC,IAAI,QAAQ,MACV,OAAO;EAGT,OAAO,aAAa,GAAG;CACzB;CAEA,MAAM,KAAK,SAA2C;EACpD,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC,QAAQ,QAAQ;GAChB,QAAQ,QAAQ;GAChB,OAAO,QAAQ;GAIf,SAAS,QAAQ,kBAAkB,CAAC,gBAAgB,gBAAgB,IAAI,CAAC;EAC3E,CAAC;EAED,OAAO;GACL,SAAS,OAAO,QAAQ,KAAK,QAAQ,aAAa,GAAG,CAAC;GAKtD,WAAW,OAAO;GAClB,QAAQ,OAAO,YAAY,OAAO,SAAS,KAAA;EAC7C;CACF;CAEA,MAAM,gBACJ,MACA,QACA,WAC6B;EAC7B,MAAM,SAAS,KAAK,IAAI;EACxB,IAAI,CAAC,QACH,MAAM,IAAI,aAAa,sDAAsD;EAK/E,MAAM,gBAAgB,GAAG,GADJ,KAAK,cAAc,GAAG,KAAK,OAAO,KAAK,GAAG,OAC5B,UAAU;EAG7C,OAAO;GACL,KAAA,MAHgB,QAAQ,eAAe,QAAQ,EAAE,UAAU,CAAC;GAI5D;GACA,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,YAAY,GAAI;GACjD;EACF;CACF;CAEA,MAAM,cACJ,MACA,MACA,SACuB;EACvB,MAAM,kBAAkB,MAAM,KAAK,OAAO,sBAAsB,MAAM;GACpE,cAAc,EACZ,aAAa,QAAQ,SACvB;GACA,gBAAgB,QAAQ;EAC1B,CAAC;EAED,MAAM,QAA0B,CAAC;EAEjC,IAAI;GACF,IAAI,gBAAgB,gBAAgB;IAClC,MAAM,SAAU,KAAoC,UAAU;IAC9D,IAAI,yBAAS,IAAI,WAAW,CAAC;IAC7B,IAAI,aAAa;IAEjB,OAAO,MAAM;KACX,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;KAE1C,IAAI,OAAO;MACT,MAAM,YAAY,IAAI,WAAW,OAAO,SAAS,MAAM,MAAM;MAC7D,UAAU,IAAI,QAAQ,CAAC;MACvB,UAAU,IAAI,OAAO,OAAO,MAAM;MAClC,SAAS;KACX;KAEA,OAAO,OAAO,UAAU,eAAe;MACrC,MAAM,WAAW,OAAO,MAAM,GAAG,aAAa;MAC9C,SAAS,OAAO,MAAM,aAAa;MACnC,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,QAAQ;MAClE,MAAM,KAAK,IAAI;MACf;KACF;KAEA,IAAI,MAAM;MAER,IAAI,OAAO,SAAS,GAAG;OACrB,MAAM,OAAO,MAAM,gBAAgB,WAAW,YAAY,MAAM;OAChE,MAAM,KAAK,IAAI;MACjB;MACA;KACF;IACF;GACF,OAAO,IAAI,SAAS,QAAQ,SAAS,KAAA,GAAW;IAE9C,MAAM,OAAO,MAAM,gBAAgB,WAAW,GAAG,IAAI;IACrD,MAAM,KAAK,IAAI;GACjB;GAEA,MAAM,gBAAgB,SAAS,KAAK;EACtC,SAAS,OAAO;GACd,MAAM,gBAAgB,MAAM;GAC5B,MAAM;EACR;EAGA,MAAM,aAAa,MAAM,KAAK,OAAO,KAAK,IAAI;EAE9C,OAAO;GACL;GACA,MAAM,KAAK,OAAO;GAClB,UAAU;GACV,MAAM,YAAY,QAAQ,QAAQ,QAAQ;GAC1C,UAAU,QAAQ,YAAY;GAC9B,4BAAY,IAAI,KAAK;EACvB;CACF;CAMA,YAAoB;EAClB,OAAO,KAAK,OAAO;CACrB;CAEA,MAAM,WAAW,KAA+C;EAC9D,MAAM,MAAM,MAAM,KAAK,OAAO,KAAK,GAAG;EACtC,IAAI,CAAC,KACH,OAAO;EAET,OAAO;GACL,MAAM,IAAI;GACV,aAAa,IAAI,cAAc;GAC/B,UAAU,IAAI;EAChB;CACF;CAEA,MAAM,cAAc,MAA8C;EAChE,IAAI,KAAK,WAAW,GAClB,OAAO;GAAE,SAAS;GAAG,QAAQ,CAAC;EAAE;EAGlC,MAAM,KAAK,OAAO,OAAO,IAAI;EAE7B,OAAO;GACL,SAAS,KAAK;GACd,QAAQ,CAAC;EACX;CACF;CAEA,MAAM,sBACJ,KACA,SACgC;EAChC,MAAM,SAAS,MAAM,KAAK,OAAO,sBAAsB,KAAK;GAC1D,cAAc;IACZ,aAAa,SAAS;IACtB,cAAc,SAAS;GACzB;GACA,gBAAgB,SAAS;EAC3B,CAAC;EAGD,MAAM,KAAK,OAAO,IAChB,GAAG,mBAAmB,OAAO,SAAS,QACtC,KAAK,UAAU;GAAE,KAAK,OAAO;GAAK,UAAU,OAAO;GAAU,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;EAAE,CAAC,GAClG,EAAE,cAAc,EAAE,aAAa,mBAAmB,EAAE,CACtD;EAEA,OAAO;GACL,UAAU,OAAO;GACjB,KAAK,OAAO;EACd;CACF;CAEA,MAAM,WACJ,KACA,UACA,YACA,MAC2B;EAE3B,MAAM,OAAO,MADE,KAAK,OAAO,sBAAsB,KAAK,QAC9B,CAAC,CAAC,WAAW,YAAY,IAAI;EAGrD,MAAM,KAAK,OAAO,IAChB,GAAG,eAAe,SAAS,GAAG,cAC9B,KAAK,UAAU;GAAE,YAAY,KAAK;GAAY,MAAM,KAAK;GAAM,MAAM,KAAK;EAAO,CAAC,GAClF,EAAE,cAAc,EAAE,aAAa,mBAAmB,EAAE,CACtD;EAEA,OAAO;GACL,MAAM,KAAK;GACX,YAAY,KAAK;EACnB;CACF;CAEA,MAAM,wBACJ,KACA,UACA,OACkC;EAElC,MAAM,SAAS,MADA,KAAK,OAAO,sBAAsB,KAAK,QAC5B,CAAC,CAAC,SAC1B,MAAM,KAAK,OAAO;GAChB,YAAY,EAAE;GACd,MAAM,EAAE;EACV,EAAE,CACJ;EAEA,MAAM,KAAK,uBAAuB,QAAQ;EAE1C,OAAO,EACL,KAAK,OAAO,IACd;CACF;CAEA,MAAM,qBAAqB,KAAa,UAAiC;EAEvE,MADe,KAAK,OAAO,sBAAsB,KAAK,QAC3C,CAAC,CAAC,MAAM;EAEnB,MAAM,KAAK,uBAAuB,QAAQ;CAC5C;CAEA,MAAM,UACJ,MACA,UACA,kBAC0B;EAC1B,MAAM,SAAS,GAAG,eAAe,SAAS;EAC1C,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC;GACA,QAAQ;EACV,CAAC;EAgBD,OAAO;GACL,QALiB,MAVC,QAAQ,IAC1B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,GAAG;IAC1C,IAAI,CAAC,MACH,OAAO;IAET,OAAO,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;GACrC,CAAC,CACH,EAAA,CAGG,QAAQ,MAAkC,MAAM,IAAI,CAAC,CACrD,MAAM,GAAG,MAAM,EAAE,aAAa,EAAE,UAGjB;GAChB,aAAa,OAAO;GACpB,sBAAsB,OAAO,YAAY,OAAO,SAAS,KAAA;EAC3D;CACF;CAEA,MAAM,qBACJ,WACA,iBACqC;EACrC,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GACpC,QAAQ;GACR,QAAQ;EACV,CAAC;EAiBD,OAAO;GACL,UAAS,MAhBW,QAAQ,IAC5B,OAAO,QAAQ,IAAI,OAAO,QAAQ;IAChC,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI,IAAI,GAAG;IAC1C,IAAI,CAAC,MACH,OAAO;IAET,MAAM,SAAS,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;IAC3C,OAAO;KACL,KAAK,OAAO;KACZ,UAAU,OAAO;KACjB,WAAW,IAAI,KAAK,OAAO,SAAS;IACtC;GACF,CAAC,CACH,EAAA,CAGmB,QAAQ,MAAkC,MAAM,IAAI;GACrE,aAAa,OAAO;GACpB,eAAe,OAAO,YAAY,OAAO,SAAS,KAAA;GAClD,oBAAoB,KAAA;EACtB;CACF;CAMA,MAAc,uBAAuB,UAAiC;EAEpE,MAAM,cAAc,GAAG,eAAe,SAAS;EAC/C,IAAI;EACJ,MAAM,eAAyB,CAAC;EAEhC,GAAG;GACD,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;IAAE,QAAQ;IAAa;GAAO,CAAC;GACrE,KAAK,MAAM,OAAO,OAAO,SACvB,aAAa,KAAK,IAAI,GAAG;GAE3B,SAAS,OAAO,YAAY,OAAO,SAAS,KAAA;EAC9C,SAAS;EAGT,aAAa,KAAK,GAAG,mBAAmB,SAAS,MAAM;EAEvD,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,OAAO,OAAO,YAAY;CAEzC;AACF;;;;;;;AAQA,SAAS,aAAa,KAA2B;CAC/C,OAAO;EACL,MAAM,IAAI;EACV,MAAM,IAAI;EACV,aAAa,IAAI,cAAc;EAC/B,MAAM,IAAI;EACV,YAAY,IAAI;EAChB,UAAU,IAAI;CAChB;AACF"}

package/dist/{rate-limit.decorator-Djs4oYDB.mjs → rate-limit.decorator-PYQ9EYqs.mjs}

@@ -1,5 +1,5 @@
-import { n as getMetadata, t as defineMetadata } from "./metadata-DzzprcID.mjs";
-import { u as ROUTE_METADATA_KEYS } from "./exception-context-D-kvney-.mjs";
+import { _ as defineMetadata, v as getMetadata } from "./di-DQ3xbjgf.mjs";
+import { u as ROUTE_METADATA_KEYS } from "./exception-context-CdnGTQNF.mjs";
 //#region src/rate-limiter/decorators/rate-limit.decorator.ts
 const KEY = ROUTE_METADATA_KEYS.RATE_LIMIT;
 /**
@@ -30,8 +30,13 @@ const KEY = ROUTE_METADATA_KEYS.RATE_LIMIT;
 */
 function RateLimit(name) {
 	return (target, propertyKey) => {
-		if (propertyKey === void 0) defineMetadata(KEY, [...getMetadata(KEY, target) ?? [], name], target);
-		else defineMetadata(KEY, [...getMetadata(KEY, target, propertyKey) ?? [], name], target, propertyKey);
+		if (propertyKey === void 0) {
+			const existing = getMetadata(KEY, target) ?? [];
+			defineMetadata(KEY, [...existing, name], target);
+		} else {
+			const existing = getMetadata(KEY, target, propertyKey) ?? [];
+			defineMetadata(KEY, [...existing, name], target, propertyKey);
+		}
 	};
 }
 /**
@@ -47,4 +52,4 @@ function getRateLimits(target, propertyKey) {
 //#endregion
 export { getRateLimits as n, RateLimit as t };
 
-//# sourceMappingURL=rate-limit.decorator-Djs4oYDB.mjs.map
+//# sourceMappingURL=rate-limit.decorator-PYQ9EYqs.mjs.map

package/dist/{rate-limit.decorator-Djs4oYDB.mjs.map → rate-limit.decorator-PYQ9EYqs.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.decorator-Djs4oYDB.mjs","names":[],"sources":["../src/rate-limiter/decorators/rate-limit.decorator.ts"],"sourcesContent":["import { defineMetadata, getMetadata } from '../../di/metadata'\nimport { ROUTE_METADATA_KEYS } from '../../router/constants'\n\nconst KEY = ROUTE_METADATA_KEYS.RATE_LIMIT\n\n/**\n * Apply a named rate limiter to a controller class or a single route method.\n *\n * Stacks: multiple `@RateLimit` decorators on the same target push onto\n * the metadata array — every named limiter is enforced. Class-level limits\n * run before method-level limits in the resulting middleware chain.\n *\n * The named limiter must be registered separately via\n * `RateLimiterRegistry.for('name', resolver)` (typically inside a\n * module's `onInitialize` hook) and the user must import\n * `RateLimiterModule.forRoot({ store: ... })` in their AppModule.\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * @RateLimit('api')\n * export class UsersController {\n *   @Get('/')\n *   list(ctx: RouterContext) { ... }\n *\n *   @Post('/')\n *   @RateLimit('writes')           // stacks with class-level 'api'\n *   create(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport function RateLimit(name: string): ClassDecorator & MethodDecorator {\n  return (target: object, propertyKey?: string | symbol) => {\n    if (propertyKey === undefined) {\n      const existing = getMetadata<string[]>(KEY, target) ?? []\n      defineMetadata(KEY, [...existing, name], target)\n    } else {\n      const existing = getMetadata<string[]>(KEY, target, propertyKey as string) ?? []\n      defineMetadata(KEY, [...existing, name], target, propertyKey as string)\n    }\n  }\n}\n\n/**\n * Read the rate-limit names attached to a class or method via `@RateLimit`.\n * Returns an empty array when no decorator was applied.\n *\n * @param target - For class metadata, pass the controller constructor.\n *   For method metadata, pass `Controller.prototype` and the method name.\n */\nexport function getRateLimits(target: object, propertyKey?: string): string[] {\n  const meta = propertyKey === undefined\n    ? getMetadata<string[]>(KEY, target)\n    : getMetadata<string[]>(KEY, target, propertyKey)\n  return meta ?? []\n}\n"],"mappings":";;;AAGA,MAAM,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,SAAgB,UAAU,MAAgD;CACxE,QAAQ,QAAgB,gBAAkC;EACxD,IAAI,gBAAgB,KAAA,GAElB,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,MAAM,KAAK,CAAC,GACtB,IAAI,GAAG,MAAM;OAG/C,eAAe,KAAK,CAAC,GADJ,YAAsB,KAAK,QAAQ,WAAqB,KAAK,CAAC,GAC7C,IAAI,GAAG,QAAQ,WAAqB;CAE1E;AACF;;;;;;;;AASA,SAAgB,cAAc,QAAgB,aAAgC;CAI5E,QAHa,gBAAgB,KAAA,IACzB,YAAsB,KAAK,MAAM,IACjC,YAAsB,KAAK,QAAQ,WAAW,MACnC,CAAC;AAClB"}
+{"version":3,"file":"rate-limit.decorator-PYQ9EYqs.mjs","names":[],"sources":["../src/rate-limiter/decorators/rate-limit.decorator.ts"],"sourcesContent":["import { defineMetadata, getMetadata } from '../../di/metadata'\nimport { ROUTE_METADATA_KEYS } from '../../router/constants'\n\nconst KEY = ROUTE_METADATA_KEYS.RATE_LIMIT\n\n/**\n * Apply a named rate limiter to a controller class or a single route method.\n *\n * Stacks: multiple `@RateLimit` decorators on the same target push onto\n * the metadata array — every named limiter is enforced. Class-level limits\n * run before method-level limits in the resulting middleware chain.\n *\n * The named limiter must be registered separately via\n * `RateLimiterRegistry.for('name', resolver)` (typically inside a\n * module's `onInitialize` hook) and the user must import\n * `RateLimiterModule.forRoot({ store: ... })` in their AppModule.\n *\n * @example\n * ```typescript\n * @Controller('/api/v1/users')\n * @RateLimit('api')\n * export class UsersController {\n *   @Get('/')\n *   list(ctx: RouterContext) { ... }\n *\n *   @Post('/')\n *   @RateLimit('writes')           // stacks with class-level 'api'\n *   create(ctx: RouterContext) { ... }\n * }\n * ```\n */\nexport function RateLimit(name: string): ClassDecorator & MethodDecorator {\n  return (target: object, propertyKey?: string | symbol) => {\n    if (propertyKey === undefined) {\n      const existing = getMetadata<string[]>(KEY, target) ?? []\n      defineMetadata(KEY, [...existing, name], target)\n    } else {\n      const existing = getMetadata<string[]>(KEY, target, propertyKey) ?? []\n      defineMetadata(KEY, [...existing, name], target, propertyKey)\n    }\n  }\n}\n\n/**\n * Read the rate-limit names attached to a class or method via `@RateLimit`.\n * Returns an empty array when no decorator was applied.\n *\n * @param target - For class metadata, pass the controller constructor.\n *   For method metadata, pass `Controller.prototype` and the method name.\n */\nexport function getRateLimits(target: object, propertyKey?: string): string[] {\n  const meta = propertyKey === undefined\n    ? getMetadata<string[]>(KEY, target)\n    : getMetadata<string[]>(KEY, target, propertyKey)\n  return meta ?? []\n}\n"],"mappings":";;;AAGA,MAAM,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BhC,SAAgB,UAAU,MAAgD;CACxE,QAAQ,QAAgB,gBAAkC;EACxD,IAAI,gBAAgB,KAAA,GAAW;GAC7B,MAAM,WAAW,YAAsB,KAAK,MAAM,KAAK,CAAC;GACxD,eAAe,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,MAAM;EACjD,OAAO;GACL,MAAM,WAAW,YAAsB,KAAK,QAAQ,WAAW,KAAK,CAAC;GACrE,eAAe,KAAK,CAAC,GAAG,UAAU,IAAI,GAAG,QAAQ,WAAW;EAC9D;CACF;AACF;;;;;;;;AASA,SAAgB,cAAc,QAAgB,aAAgC;CAI5E,QAHa,gBAAgB,KAAA,IACzB,YAAsB,KAAK,MAAM,IACjC,YAAsB,KAAK,QAAQ,WAAW,MACnC,CAAC;AAClB"}

package/dist/rate-limiter/index.d.mts

@@ -1,9 +1,8 @@
-import { $ as Container, Cn as Middleware, Fn as DynamicModule, Hn as OnInitialize, Ir as ApplicationError, Nn as AsyncModuleOptions, Vn as OnException, f as ExceptionHandler, l as HttpException, st as RouterContext, wn as Next, zn as ModuleContext } from "../index-uybm0bhQ.mjs";
+import { $ as Container, Jn as AsyncModuleOptions, Xn as DynamicModule, Xr as Middleware, Zr as Next, er as ModuleContext, f as ExceptionHandler, l as HttpException, li as ApplicationError, nr as OnException, rr as OnInitialize, st as RouterContext } from "../index-B2WtEagR.mjs";
 import { t as Macroable } from "../index-0ItCjaqw.mjs";
 import { t as StratalEnv } from "../env-ug22bJj7.mjs";
 import { t as Constructor } from "../types-CmV_9xBD.mjs";
-import { t as CacheService } from "../cache.service-uElmBtdS.mjs";
-
+import { t as CacheService } from "../cache.service-Dg0Hj0gp.mjs";
 //#region src/rate-limiter/errors.d.ts
 /**
  * Thrown when a request exceeds a configured rate limit.
@@ -15,7 +14,7 @@ import { t as CacheService } from "../cache.service-uElmBtdS.mjs";
  * headers (`Retry-After`, `X-RateLimit-*`) are injected by the
  * `respond()` callback registered via `RateLimiterModule.onException`.
  */
-declare class TooManyRequestsError extends HttpException {
+export declare class TooManyRequestsError extends HttpException {
   readonly info: {
     retryAfter: number;
     limit: number;
@@ -27,7 +26,7 @@ declare class TooManyRequestsError extends HttpException {
     resetAt: number;
   });
 }
-declare class RateLimiterError extends ApplicationError {}
+export declare class RateLimiterError extends ApplicationError {}
 //#endregion
 //#region src/rate-limiter/limit.d.ts
 /**
@@ -64,12 +63,13 @@ type RateLimitResponseHandler = (ctx: RouterContext, headers: RateLimitHeaders)
  * Limit.none()                                // bypass
  * ```
  */
-declare class Limit {
+export declare class Limit {
   readonly windowSeconds: number;
   readonly max: number;
   readonly disabled: boolean;
   private _key?;
   private _customResponse?;
+  private _distinctValue?;
   private constructor();
   static perSecond(max: number): Limit;
   static perSeconds(seconds: number, max: number): Limit;
@@ -87,8 +87,30 @@ declare class Limit {
    * them as it sees fit.
    */
   response(handler: RateLimitResponseHandler): this;
+  /**
+   * Count DISTINCT values of `value` in the window instead of counting requests.
+   *
+   * `Limit.perDay(10).distinctBy(courseCode).by(userId)` admits a user touching up to ten
+   * different courses a day, however many requests each takes — and keeps admitting a course
+   * already counted once the budget is full, which a request counter cannot express.
+   *
+   * A new value past the cap is refused without being stored, so the stored set never exceeds
+   * `max`.
+   *
+   * Two consequences worth knowing before reaching for this:
+   *
+   * - `X-RateLimit-Remaining` counts unused DISTINCT slots, not remaining requests. A user who
+   *   has spent every slot gets `0` on each *successful* request for a value already counted, so
+   *   a client that throttles itself on the header will stop issuing requests that would succeed.
+   * - The cap is a soft ceiling on an eventually-consistent store (KV): concurrent requests
+   *   carrying different new values can lose each other's writes, and a lost set member is gone
+   *   for the rest of the window. Use small caps — tens, not thousands — and a
+   *   strongly-consistent store (a Durable Object) if the cap must be hard.
+   */
+  distinctBy(value: string | number): this;
   get key(): string | undefined;
   get customResponse(): RateLimitResponseHandler | undefined;
+  get distinctValue(): string | undefined;
 }
 //#endregion
 //#region src/rate-limiter/rate-limiter-registry.d.ts
@@ -117,7 +139,7 @@ type LimitResolver = (ctx: RouterContext) => Limit | Limit[] | Promise<Limit | L
  * can attach extra registration methods such as `forPath()` for better-auth
  * `customRules` interop.
  */
-declare class RateLimiterRegistry extends Macroable {
+export declare class RateLimiterRegistry extends Macroable {
   private readonly container;
   private readonly resolvers;
   constructor(container: Container);
@@ -149,6 +171,31 @@ declare class RateLimiterRegistry extends Macroable {
    * concurrent edge requests on KV — see `KvRateLimiterStore`'s caveat.
    */
   private hit;
+  /**
+   * A window that counts DISTINCT values rather than requests.
+   *
+   * Uses the same typed-KV store as {@link hit} — the store persists arbitrary values, so a
+   * cardinality window needs no store-interface change — but a key namespace of its own, since
+   * the two shapes are not interchangeable and a shared key would have each read the other's.
+   *
+   * A value already present is admitted WITHOUT a write, which both keeps the count stable and
+   * leaves the TTL alone: re-touching something already counted must not slide the window. The
+   * stored set therefore never exceeds `max`.
+   *
+   * The cap is a SOFT ceiling under an eventually-consistent store. This is a read-modify-write
+   * of the whole array, so N concurrent requests carrying N different values all read the same
+   * set and last-write-wins keeps one of them: a burst can overshoot `max`, and unlike a lost
+   * counter increment (which the next request re-adds) a lost set member is gone for the rest of
+   * the window. Intended for small caps — tens, not thousands; nothing bounds `max` itself, and
+   * the whole set is read and rewritten on every new value. A hard cap needs a
+   * strongly-consistent store, i.e. a Durable Object.
+   */
+  private hitDistinct;
+  /**
+   * Distinct windows carry a `d:` segment: they store `StoredDistinct` where a plain window
+   * stores `StoredHit`, and one limiter name can legitimately declare both on the same window
+   * and actor. Sharing a key would have each branch read the other's shape and throw.
+   */
   private makeKey;
   private makeHeaders;
 }
@@ -217,7 +264,7 @@ type RateLimiterModuleOptions = {
     useClass: Constructor<IRateLimiterStore>;
   };
 };
-declare class RateLimiterStoreFactory {
+export declare class RateLimiterStoreFactory {
   private readonly env;
   private readonly cache;
   private readonly container;
@@ -251,7 +298,7 @@ declare class RateLimiterStoreFactory {
  *    on every {@link TooManyRequestsError} response, regardless of whether
  *    the body was rendered as JSON, HTML, or via Inertia.
  */
-declare class RateLimiterModule implements OnInitialize, OnException {
+export declare class RateLimiterModule implements OnInitialize, OnException {
   /**
    * Configure the rate limiter with a store choice.
    *
@@ -271,9 +318,7 @@ declare class RateLimiterModule implements OnInitialize, OnException {
    * indistinguishable at the DI layer because @Module's `registry()` call
    * binds providers globally at decoration time).
    */
-  onInitialize({
-    container
-  }: ModuleContext): void;
+  onInitialize({ container }: ModuleContext): void;
   /**
    * Inject `Retry-After` + `X-RateLimit-*` headers on every 429 response.
    * The body itself is rendered by `ExceptionHandler.defaultRender` —
@@ -284,7 +329,7 @@ declare class RateLimiterModule implements OnInitialize, OnException {
 }
 //#endregion
 //#region src/rate-limiter/rate-limiter.tokens.d.ts
-declare const RATE_LIMITER_TOKENS: {
+export declare const RATE_LIMITER_TOKENS: {
   readonly Registry: symbol;
   readonly Store: symbol;
   readonly StoreFactory: symbol;
@@ -307,7 +352,7 @@ type RateLimiterToken = (typeof RATE_LIMITER_TOKENS)[keyof typeof RATE_LIMITER_T
  * registered by `RateLimiterModule.onInitialize`. We check
  * `isRegistered(marker)` at request time before resolving Registry.
  */
-declare function createThrottleMiddleware(name: string): Constructor<Middleware>;
+export declare function createThrottleMiddleware(name: string): Constructor<Middleware>;
 //#endregion
 //#region src/rate-limiter/decorators/rate-limit.decorator.d.ts
 /**
@@ -336,7 +381,7 @@ declare function createThrottleMiddleware(name: string): Constructor<Middleware>
  * }
  * ```
  */
-declare function RateLimit(name: string): ClassDecorator & MethodDecorator;
+export declare function RateLimit(name: string): ClassDecorator & MethodDecorator;
 /**
  * Read the rate-limit names attached to a class or method via `@RateLimit`.
  * Returns an empty array when no decorator was applied.
@@ -344,7 +389,7 @@ declare function RateLimit(name: string): ClassDecorator & MethodDecorator;
  * @param target - For class metadata, pass the controller constructor.
  *   For method metadata, pass `Controller.prototype` and the method name.
  */
-declare function getRateLimits(target: object, propertyKey?: string): string[];
+export declare function getRateLimits(target: object, propertyKey?: string): string[];
 //#endregion
 //#region src/rate-limiter/stores/kv-store.d.ts
 /**
@@ -359,7 +404,7 @@ declare function getRateLimits(target: object, propertyKey?: string): string[];
  * KV tradeoff — pick `{ useClass: MyDurableObjectStore }` for strict
  * accuracy across edges.
  */
-declare class KvRateLimiterStore implements IRateLimiterStore {
+export declare class KvRateLimiterStore implements IRateLimiterStore {
   private readonly cache;
   constructor(cache: CacheService);
   get<T>(key: string): Promise<T | null>;
@@ -377,12 +422,12 @@ declare class KvRateLimiterStore implements IRateLimiterStore {
  * for production. Expiry is lazy: stale entries are dropped on the next
  * `get`.
  */
-declare class InMemoryRateLimiterStore implements IRateLimiterStore {
+export declare class InMemoryRateLimiterStore implements IRateLimiterStore {
   private readonly entries;
   get<T>(key: string): Promise<T | null>;
   set<T>(key: string, value: T, ttlSeconds: number): Promise<void>;
   delete(key: string): Promise<void>;
 }
 //#endregion
-export { type IRateLimiterStore, InMemoryRateLimiterStore, KvRateLimiterStore, Limit, type LimitResolver, RATE_LIMITER_TOKENS, RateLimit, type RateLimitHeaders, type RateLimitHit, type RateLimitResponseHandler, RateLimiterError, RateLimiterModule, type RateLimiterModuleOptions, RateLimiterRegistry, RateLimiterStoreFactory, type RateLimiterToken, TooManyRequestsError, createThrottleMiddleware, getRateLimits };
+export type { IRateLimiterStore, LimitResolver, RateLimitHeaders, RateLimitHit, RateLimitResponseHandler, RateLimiterModuleOptions, RateLimiterToken };
 //# sourceMappingURL=index.d.mts.map