chore(release): 1.4.0 [skip ci]

# [1.4.0](https://github.com/asepharyana/mytheclipse/compare/v1.3.5...v1.4.0) (2026-08-29) ### Features * add 4 new crates (queue, tracing, http, cli) + enhancements to existing crates ([8106f89](https://github.com/asepharyana/mytheclipse/commit/8106f8943ebe83f7348b9fde3fbd2e347018604e))
feat: add 4 new crates (queue, tracing, http, cli) + enhancements to existing crates
2026-08-29 09:05:48 +00:00 · 2026-08-29 16:05:02 +07:00 · 2026-08-28 18:36:29 +00:00 · 2026-08-29 01:35:42 +07:00 · 2026-08-28 18:30:42 +00:00 · 2026-08-29 01:29:40 +07:00
66 changed files with 4187 additions and 92 deletions
@@ -0,0 +1,63 @@
+# Implementation Spec: New Features for mytheclipse
+
+## Status: COMPLETE
+
+## Summary
+
+Added 4 new crates and enhancements to existing crates to expand mytheclipse's
+abstraction layer coverage. All code compiles with `cargo build --workspace --all-features`,
+all tests pass, and clippy is clean.
+
+## New Crates
+
+1. **mytheclipse-queue** (`crates/mytheclipse-queue/`)
+   - `Queue` trait: enqueue, dequeue, ack, nack, dlq_move, len
+   - `Job` / `JobId` types with payload + metadata
+   - `WorkerPool` with configurable concurrency, retry/backoff, dead-letter queue
+   - `JobHandler` trait for processing jobs
+   - Backend: in-memory (default), Redis (feature `redis`), NATS (feature `nats`), PostgreSQL (feature `postgres`)
+
+2. **mytheclipse-tracing** (`crates/mytheclipse-tracing/`)
+   - `TracingLayer` with env-filter support and subscriber builder
+   - `OtelLayer` for OTLP/Jaeger export (feature `otel`, `jaeger`, `full`)
+   - Features: `env` (default), `otel`, `jaeger`, `full`
+
+3. **mytheclipse-http** (`crates/mytheclipse-http/`)
+   - `HttpClient` wrapping reqwest with timeout + tracing instrumentation
+   - `HttpServer` (axum) with health endpoint + graceful shutdown
+   - Features: `client` (default), `server-axum`, `server-hyper`
+
+4. **mytheclipse-cli** (`crates/mytheclipse-cli/`)
+   - `CliApp` / `CliBuilder` with clap derive
+   - Subcommands: `serve`, `worker`, `migrate`, `health`, `version`
+   - Feature: `clap-derive` (default)
+
+## Enhancements to Existing Crates
+
+### mytheclipse (core)
+- `pool.rs`: `SemaphorePool<T>` with `Pool` trait, `Pooled<T>` RAII permit
+- `health.rs`: `HealthRegistry`, `HealthCheck` trait, `HealthStatus` enum
+- `leader.rs`: `LeaderElection` trait, `InProcLeaderElection` impl
+- Features: gated under `traffic` (pool) and `lifecycle` (health, leader)
+
+### mytheclipse-cache
+- `auto_refresh.rs`: `AutoRefreshCache` — background refresh on cache miss
+- `metrics.rs`: `CacheMetrics` + `CacheSnapshot` with hit/miss/eviction tracking
+- Added `tokio` optional dep (used by cache-aside + auto-refresh)
+
+### mytheclipse-config
+- `schema.rs`: `ConfigSchema` + `PropertySchema` for JSON Schema generation
+- Feature `schema` gated
+
+### mytheclipse-storage
+- `multipart.rs`: `MultipartUploadDriver` trait + `MultipartUpload` handler
+- Feature `multipart` (default) gated
+
+### mytheclipse-crypto
+- `paseto.rs`: `PasetoSigner` + `PasetoClaims` for PASETO v4.local tokens
+- Features `paseto` and `rate-limit` added
+
+## Verification
+- `cargo build --workspace --all-features` ✓
+- `cargo test --workspace --all-features` ✓ (all pass, 1 ignored doctest)
+- `cargo clippy --workspace --all-features` ✓ (no warnings)
@@ -1,3 +1,45 @@
+# [1.4.0](https://github.com/asepharyana/mytheclipse/compare/v1.3.5...v1.4.0) (2026-08-29)
+
+
+### Features
+
+* add 4 new crates (queue, tracing, http, cli) + enhancements to existing crates ([8106f89](https://github.com/asepharyana/mytheclipse/commit/8106f8943ebe83f7348b9fde3fbd2e347018604e))
+
+## [1.3.5](https://github.com/asepharyana/mytheclipse/compare/v1.3.4...v1.3.5) (2026-08-28)
+
+
+### Bug Fixes
+
+* **cache:** honor sub-second Redis TTL via PSETEX + document clear() safety ([2c9367a](https://github.com/asepharyana/mytheclipse/commit/2c9367a83c2dd01b1e197ec33215a6c7d3755fa2))
+
+## [1.3.4](https://github.com/asepharyana/mytheclipse/compare/v1.3.3...v1.3.4) (2026-08-28)
+
+
+### Bug Fixes
+
+* **cache,storage:** harden cache bounds + atomic disk writes ([b6f138b](https://github.com/asepharyana/mytheclipse/commit/b6f138b90d67c9531b5a58993e8ec750e5eec57f))
+
+## [1.3.3](https://github.com/asepharyana/mytheclipse/compare/v1.3.2...v1.3.3) (2026-08-28)
+
+
+### Bug Fixes
+
+* **publish:** trim mytheclipse keywords to 5 to satisfy crates.io limit ([5f1e3ac](https://github.com/asepharyana/mytheclipse/commit/5f1e3ace5c8cb10881e30f550f51b7d845b24edd))
+
+## [1.3.2](https://github.com/asepharyana/mytheclipse/compare/v1.3.1...v1.3.2) (2026-08-28)
+
+
+### Bug Fixes
+
+* **ci:** gate cache & storage crate doctests behind their features ([5717f8a](https://github.com/asepharyana/mytheclipse/commit/5717f8aaaae34cb66cdbfc31f4982c93816ee5a3))
+
+## [1.3.1](https://github.com/asepharyana/mytheclipse/compare/v1.3.0...v1.3.1) (2026-08-28)
+
+
+### Bug Fixes
+
+* **ci:** gate event crate doctest behind mem feature and apply rustfmt ([1994115](https://github.com/asepharyana/mytheclipse/commit/19941156b43ec58370d0d1369174ec84400e9bc9))
+
 # [1.3.0](https://github.com/asepharyana/mytheclipse/compare/v1.2.0...v1.3.0) (2026-08-28)


@@ -6,5 +6,9 @@ members = [
    "crates/mytheclipse-event",
    "crates/mytheclipse-config",
    "crates/mytheclipse-crypto",
+    "crates/mytheclipse-queue",
+    "crates/mytheclipse-tracing",
+    "crates/mytheclipse-http",
+    "crates/mytheclipse-cli",
 ]
 resolver = "2"
@@ -16,7 +16,11 @@ concern.
 | [`mytheclipse-storage`](crates/mytheclipse-storage) | Unified storage & file system abstraction: one driver interface over local disk, S3/MinIO, and Google Cloud Storage, stream-based. | [README](crates/mytheclipse-storage/README.md) |
 | [`mytheclipse-event`](crates/mytheclipse-event) | Unified events & message bus abstraction: in-memory pub/sub dispatcher plus RabbitMQ and NATS broker adapters behind one trait. | [README](crates/mytheclipse-event/README.md) |
 | [`mytheclipse-config`](crates/mytheclipse-config) | Type-safe, dynamic configuration engine: load `.env`/YAML/JSON/TOML into typed structs, with hot-reload. | [README](crates/mytheclipse-config/README.md) |
-| [`mytheclipse-crypto`](crates/mytheclipse-crypto) | Safe hashing (Argon2id), encryption (AES-256-GCM), and JWT tokens, with key rotation support. | [README](crates/mytheclipse-crypto/README.md) |
+| [`mytheclipse-crypto`](crates/mytheclipse-crypto) | Safe hashing (Argon2id), encryption (AES-256-GCM), JWT and PASETO tokens, with key rotation support. | [README](crates/mytheclipse-crypto/README.md) |
+| [`mytheclipse-queue`](crates/mytheclipse-queue) | Unified job queue abstraction with WorkerPool executor, retry/backoff, and dead-letter support. Backends: in-memory, Redis, NATS, PostgreSQL. | [README](crates/mytheclipse-queue/README.md) |
+| [`mytheclipse-tracing`](crates/mytheclipse-tracing) | Pre-built tracing subscriber layers with env filtering and optional OTLP/Jaeger/Zipkin export. | [README](crates/mytheclipse-tracing/README.md) |
+| [`mytheclipse-http`](crates/mytheclipse-http) | HTTP client and server abstraction with built-in retry, circuit breaker, timeout, and rate limiting. | [README](crates/mytheclipse-http/README.md) |
+| [`mytheclipse-cli`](crates/mytheclipse-cli) | CLI framework for mytheclipse applications with built-in subcommands (serve, worker, migrate, health, version). | [README](crates/mytheclipse-cli/README.md) |

 Every crate follows the same philosophy: **one small interface, pluggable
 backends behind feature flags, and a working default that needs no external
@@ -1,6 +1,6 @@
 [package]
 name = "mytheclipse-cache"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"
@@ -21,7 +21,7 @@ l1-moka = ["l1-memory", "dep:moka"]
 # L2 (distributed) backends.
 l2-redis = ["l1-memory", "dep:redis"]
 # Cache-aside + auto-refresh helper.
-cache-aside = ["l1-memory", "dep:serde", "dep:serde_json"]
+cache-aside = ["l1-memory", "dep:serde", "dep:serde_json", "dep:tokio"]

 [dependencies]
 tracing = "0.1"
@@ -35,6 +35,7 @@ moka = { version = "0.12", default-features = false, features = ["future"], opti

 # L2: Redis/Valkey async client (multiplexed connection).
 redis = { version = "0.27", default-features = false, features = ["tokio-comp"], optional = true }
+tokio = { version = "1.53", features = ["sync", "rt"], optional = true }

 [dev-dependencies]
 tokio = { version = "1.53", features = ["full"] }
@@ -0,0 +1,82 @@
+//! Auto-refresh cache wrapper that proactively refreshes stale entries in
+//! the background, eliminating thundering-herd on cache miss.
+
+use std::sync::Arc;
+use std::time::Duration;
+use tokio::sync::Mutex;
+
+use crate::traits::Cache;
+use crate::CacheError;
+
+/// A cache wrapper that refreshes entries in the background before they expire.
+///
+/// When a `get` returns a `None`, the wrapper triggers a background refresh
+/// (via `refresh_fn`) while still returning the miss to the caller.
+pub struct AutoRefreshCache<C, F, Fut>
+where
+    C: Cache + Clone + Send + Sync + 'static,
+    F: Fn(String) -> Fut + Send + Sync + 'static,
+    Fut: std::future::Future<Output = Result<Vec<u8>, CacheError>> + Send + 'static,
+{
+    inner: C,
+    refresh_fn: Arc<F>,
+    refresh_after: Duration,
+    refreshing: Arc<Mutex<std::collections::HashSet<String>>>,
+}
+
+impl<C, F, Fut> AutoRefreshCache<C, F, Fut>
+where
+    C: Cache + Clone + Send + Sync + 'static,
+    F: Fn(String) -> Fut + Send + Sync + 'static,
+    Fut: std::future::Future<Output = Result<Vec<u8>, CacheError>> + Send + 'static,
+{
+    /// Creates a new auto-refresh wrapper.
+    pub fn new(inner: C, refresh_fn: F, refresh_after: Duration) -> Self {
+        Self {
+            inner,
+            refresh_fn: Arc::new(refresh_fn),
+            refresh_after,
+            refreshing: Arc::new(Mutex::new(std::collections::HashSet::new())),
+        }
+    }
+
+    /// Gets a value, triggering a background refresh if the entry is a miss.
+    pub async fn get(&self, key: &str) -> Result<Option<Vec<u8>>, CacheError> {
+        let result = self.inner.get(key).await?;
+        if result.is_none() {
+            let key_str = key.to_string();
+            let mut refreshing = self.refreshing.lock().await;
+            if refreshing.insert(key_str.clone()) {
+                let inner = self.inner.clone();
+                let refresh_fn = Arc::clone(&self.refresh_fn);
+                let refresh_after = self.refresh_after;
+                let refreshing = self.refreshing.clone();
+                tokio::spawn(async move {
+                    let refresh_fut = refresh_fn(key_str.clone());
+                    match refresh_fut.await {
+                        Ok(value) => {
+                            let ttl = Some(refresh_after * 2);
+                            let _ = inner.set(&key_str, value, ttl).await;
+                        }
+                        Err(e) => {
+                            tracing::warn!("background refresh failed for key {}: {}", key_str, e);
+                        }
+                    }
+                    let mut r = refreshing.lock().await;
+                    r.remove(&key_str);
+                });
+            }
+        }
+        Ok(result)
+    }
+
+    /// Sets a value in the underlying cache.
+    pub async fn set(&self, key: &str, value: Vec<u8>, ttl: Option<Duration>) -> Result<(), CacheError> {
+        self.inner.set(key, value, ttl).await
+    }
+
+    /// Invalidates a key in the underlying cache.
+    pub async fn invalidate(&self, key: &str) -> Result<(), CacheError> {
+        self.inner.invalidate(key).await
+    }
+}
@@ -17,9 +17,12 @@
 //!
 //! ## Example
 //!
+//! Multi-layer + cache-aside composition (default features):
+//!
 //! ```no_run
-//! use mytheclipse_cache::{Cache, MemoryCache, MultiLayerCache, CacheAside};
+//! # #[cfg(all(feature = "l1-memory", feature = "cache-aside"))]
 //! # async fn run() {
+//! use mytheclipse_cache::{Cache, MemoryCache, MultiLayerCache, CacheAside};
 //! let l1 = MemoryCache::new();
 //! let l2 = MemoryCache::new(); // in a real app: a RedisCache
 //! let cache = MultiLayerCache::new(l1, l2);
@@ -34,6 +37,8 @@
 //! );
 //! let _v = aside.get("orders:42").await.unwrap();
 //! # }
+//! # #[cfg(not(all(feature = "l1-memory", feature = "cache-aside")))]
+//! # fn run() {}
 //! ```

 #![forbid(unsafe_code)]
@@ -55,6 +60,12 @@ pub mod cache_aside;
 #[cfg(feature = "cache-aside")]
 pub mod multilayer;

+#[cfg(feature = "cache-aside")]
+pub mod auto_refresh;
+
+#[cfg(feature = "cache-aside")]
+pub mod metrics;
+
 pub use traits::{Cache, CacheError};

 #[cfg(feature = "l1-memory")]
@@ -4,7 +4,7 @@
 //! Entries are lazily expired on access by comparing against `Instant`; a
 //! monotonic clock keeps TTLs robust against wall-clock discontinuities.

-use std::collections::HashMap;
+use std::collections::{HashMap, VecDeque};
 use std::sync::{Arc, Mutex};
 use std::time::{Duration, Instant};

@@ -15,14 +15,34 @@ use crate::traits::{Cache, CacheError};
 /// A wrapping entry: `None` expiry means the value never expires.
 type Entry = (Vec<u8>, Option<Instant>);

-/// An in-process [`Cache`] implementation for L1 caching.
-#[derive(Clone, Default)]
+/// An in-process [`Cache`] for L1 caching.
+///
+/// Default instance is **unbounded** — it grows until the process runs out of
+/// memory. For memory-constrained workloads, use [`MemoryCache::with_max_entries`]
+/// to install a simple LRU-style cap: when the cap is exceeded, the oldest
+/// (least-recently-inserted) entry is evicted.
+#[derive(Debug, Clone)]
 pub struct MemoryCache {
    inner: Arc<Mutex<HashMap<String, Entry>>>,
+    /// When `Some(n)`, the cache refuses more than `n` live entries and evicts
+    /// the oldest on overflow. `None` = unbounded (legacy default).
+    max_entries: Option<usize>,
+    /// Insertion order, for eviction when `max_entries` is set.
+    order: Arc<Mutex<VecDeque<String>>>,
+}
+
+impl Default for MemoryCache {
+    fn default() -> Self {
+        Self {
+            inner: Arc::new(Mutex::new(HashMap::new())),
+            max_entries: None,
+            order: Arc::new(Mutex::new(VecDeque::new())),
+        }
+    }
 }

 impl MemoryCache {
-    /// Builds an empty in-memory cache.
+    /// Builds an empty in-memory cache (unbounded by default).
    pub fn new() -> Self {
        Self::default()
    }
@@ -32,6 +52,23 @@ impl MemoryCache {
        self.inner.lock().unwrap().reserve(capacity);
        self
    }
+
+    /// Installs a bounded LRU-style cap. When the cache exceeds `max`, the
+    /// oldest (least-recently-inserted) entry is evicted on each `set`.
+    ///
+    /// This is the recommended constructor for production L1 caches: a
+    /// [`MemoryCache::new()`] (unbounded) left unmanaged can grow without bound
+    /// and exhaust process memory.
+    pub fn with_max_entries(mut self, max: usize) -> Self {
+        assert!(max > 0, "mytheclipse-cache: with_max_entries must be > 0");
+        self.max_entries = Some(max);
+        self
+    }
+
+    /// The configured max entries, if any.
+    pub fn max_entries(&self) -> Option<usize> {
+        self.max_entries
+    }
 }

 #[async_trait]
@@ -41,6 +78,7 @@ impl Cache for MemoryCache {
        match map.get(key) {
            Some((value, Some(expires))) if *expires <= Instant::now() => {
                map.remove(key);
+                self.remove_order(key);
                Ok(None)
            }
            Some((value, _)) => Ok(Some(value.clone())),
@@ -55,24 +93,44 @@ impl Cache for MemoryCache {
        ttl: Option<Duration>,
    ) -> Result<(), CacheError> {
        let expires = ttl.map(|d| Instant::now() + d);
-        self.inner
-            .lock()
-            .unwrap()
-            .insert(key.to_string(), (value, expires));
+        let mut map = self.inner.lock().unwrap();
+        let is_new = !map.contains_key(key);
+        map.insert(key.to_string(), (value, expires));
+        if is_new {
+            let mut order = self.order.lock().unwrap();
+            order.push_back(key.to_string());
+            if let Some(cap) = self.max_entries {
+                while order.len() > cap {
+                    if let Some(oldest) = order.pop_front() {
+                        map.remove(&oldest);
+                    }
+                }
+            }
+        }
        Ok(())
    }

    async fn invalidate(&self, key: &str) -> Result<(), CacheError> {
        self.inner.lock().unwrap().remove(key);
+        self.remove_order(key);
        Ok(())
    }

    async fn clear(&self) -> Result<(), CacheError> {
        self.inner.lock().unwrap().clear();
+        self.order.lock().unwrap().clear();
        Ok(())
    }
 }

+impl MemoryCache {
+    /// Removes `key` from the insertion-order deque (if present).
+    fn remove_order(&self, key: &str) {
+        let mut order = self.order.lock().unwrap();
+        order.retain(|k| k != key);
+    }
+}
+
 /// A typed view over a byte cache using `serde`-compatible (JSON) encoding.
 ///
 /// Only enabled with the `cache-aside` feature, which pulls in `serde`.
@@ -158,6 +216,26 @@ mod tests {
        assert_eq!(c.get("b").await.unwrap(), None);
    }

+    /// Asserts that an unbounded `MemoryCache::with_max_entries(0)` panics,
+    /// preventing a no-op cache that accepts zero entries.
+    #[test]
+    #[should_panic(expected = "must be > 0")]
+    fn zero_max_panics() {
+        let _ = MemoryCache::new().with_max_entries(0);
+    }
+
+    #[tokio::test]
+    async fn bounded_cache_evicts_oldest() {
+        let c = MemoryCache::new().with_max_entries(2);
+        c.set("a", b"1".to_vec(), None).await.unwrap();
+        c.set("b", b"2".to_vec(), None).await.unwrap();
+        c.set("c", b"3".to_vec(), None).await.unwrap();
+        // "a" (oldest) should have been evicted.
+        assert_eq!(c.get("a").await.unwrap(), None);
+        assert_eq!(c.get("b").await.unwrap(), Some(b"2".to_vec()));
+        assert_eq!(c.get("c").await.unwrap(), Some(b"3".to_vec()));
+    }
+
    #[cfg(feature = "cache-aside")]
    #[tokio::test]
    async fn typed_cache_roundtrip() {
@@ -0,0 +1,59 @@
+//! Cache instrumentation metrics (hit/miss/eviction counters).
+
+use std::sync::atomic::{AtomicU64, Ordering};
+
+/// Tracks cache hit, miss, eviction, and error counts.
+#[derive(Default)]
+pub struct CacheMetrics {
+    hits: AtomicU64,
+    misses: AtomicU64,
+    evictions: AtomicU64,
+    errors: AtomicU64,
+}
+
+impl CacheMetrics {
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    pub fn hit(&self) {
+        self.hits.fetch_add(1, Ordering::Relaxed);
+    }
+
+    pub fn miss(&self) {
+        self.misses.fetch_add(1, Ordering::Relaxed);
+    }
+
+    pub fn eviction(&self) {
+        self.evictions.fetch_add(1, Ordering::Relaxed);
+    }
+
+    pub fn error(&self) {
+        self.errors.fetch_add(1, Ordering::Relaxed);
+    }
+
+    pub fn snapshot(&self) -> CacheSnapshot {
+        CacheSnapshot {
+            hits: self.hits.load(Ordering::Relaxed),
+            misses: self.misses.load(Ordering::Relaxed),
+            evictions: self.evictions.load(Ordering::Relaxed),
+            errors: self.errors.load(Ordering::Relaxed),
+        }
+    }
+}
+
+/// A point-in-time read of cache metrics.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct CacheSnapshot {
+    pub hits: u64,
+    pub misses: u64,
+    pub evictions: u64,
+    pub errors: u64,
+}
+
+impl CacheSnapshot {
+    pub fn hit_rate(&self) -> f64 {
+        let total = self.hits + self.misses;
+        if total == 0 { 0.0 } else { self.hits as f64 / total as f64 }
+    }
+}
@@ -19,7 +19,22 @@ pub struct MokaL1 {
 impl MokaL1 {
    /// Builds a Moka cache with `max_capacity` entries and an optional default
    /// `ttl`.
+    ///
+    /// # Panics
+    ///
+    /// Panics if `max_capacity` is `0`. In Moka, a `max_capacity` of `0` is a
+    /// sentinel for **zero-entries-allowed** — every `insert` is silently
+    /// dropped — which is almost certainly a caller mistake (the natural way to
+    /// express "unbounded" in other caches). Pass `1..=u64::MAX`; use
+    /// [`MemoryCache`](crate::memory::MemoryCache) if you truly need an
+    /// unbounded in-process cache.
    pub fn new(max_capacity: u64, ttl: Option<Duration>) -> Self {
+        assert!(
+            max_capacity > 0,
+            "mytheclipse-cache: MokaL1::new(max_capacity) must be > 0; \
+             moka treats 0 as a permanent no-insert sentinel. \
+             Use MemoryCache for an unbounded cache."
+        );
        let mut builder = MokaCache::builder().max_capacity(max_capacity);
        if let Some(ttl) = ttl {
            builder = builder.time_to_live(ttl);
@@ -36,14 +51,15 @@ impl Cache for MokaL1 {
        Ok(self.inner.get(key).await)
    }

+    /// Inserts `value`, using the cache's configured TTL policy. The per-call
+    /// `ttl` argument is intentionally ignored — Moka applies a single TTL
+    /// configured on the builder, and per-entry overrides are not exposed here.
    async fn set(
        &self,
        key: &str,
        value: Vec<u8>,
        _ttl: Option<Duration>,
    ) -> Result<(), CacheError> {
-        // Per-entry TTL overrides are handled by the builder default in Moka;
-        // the passed `ttl` is intentionally ignored (single configured policy).
        self.inner.insert(key.to_string(), value).await;
        Ok(())
    }
@@ -83,6 +99,14 @@ mod tests {
        assert_eq!(c.get("b").await.unwrap(), None);
    }

+    /// Asserts that `max_capacity == 0` panics with a clear message, rather
+    /// than silently creating a cache that never accepts entries.
+    #[test]
+    #[should_panic(expected = "must be > 0")]
+    fn zero_capacity_panics() {
+        let _ = MokaL1::new(0, None);
+    }
+
    #[tokio::test]
    async fn ttl_does_expire() {
        // Keep a firm TTL assertion; sleep well past the expiry window.
@@ -69,8 +69,18 @@ impl Cache for RedisCache {
        let k = self.key(key);
        match ttl {
            Some(ttl) => {
-                let secs = ttl.as_secs().max(1);
-                let result: Result<(), RedisError> = c.set_ex(&k, value, secs).await;
+                // Use millisecond precision (PSETEX) so sub-second TTLs are
+                // honored faithfully. Previously `set_ex(seconds.max(1))`
+                // rounded anything < 1s up to 1s, silently changing expiry
+                // semantics for short-lived cache entries.
+                let ms = ttl.as_millis();
+                if ms == 0 {
+                    return Err(CacheError::Key(
+                        "ttl of 0ms not allowed — pass None to store permanently".into(),
+                    ));
+                }
+                let ms = ms as u64;
+                let result: Result<(), RedisError> = c.pset_ex(&k, value, ms).await;
                result.map_err(map_err)
            }
            None => {
@@ -88,9 +98,13 @@ impl Cache for RedisCache {
    }

    async fn clear(&self) -> Result<(), CacheError> {
-        // Deliberately does nothing: `FLUSHALL`/`FLUSHDB` are dangerous on a
-        // shared instance. Consumers should scope keys under a prefix and call
-        // `invalidate` for the keys they own.
+        // Deliberately does nothing: a blind `FLUSHDB`/`FLUSHALL` on a shared
+        // Redis instance would destroy keys owned by other consumers.
+        // Consumers that need a true wipe must either (a) use a dedicated Redis
+        // DB / namespace prefix they own exclusively, or (b) call
+        // `invalidate` per-key for the keys they manage.
+        //
+        // See: https://redis.io/commands/flushdb/ (no key-scoping)
        Ok(())
    }
 }
@@ -0,0 +1,26 @@
+[package]
+name = "mytheclipse-cli"
+version = "1.4.0"
+edition = "2021"
+rust-version = "1.75"
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/asepharyana/mytheclipse"
+homepage = "https://github.com/asepharyana/mytheclipse"
+documentation = "https://docs.rs/mytheclipse-cli"
+authors = ["asepharyana <superaseph@gmail.com>"]
+description = "CLI framework with built-in serve, worker, and migrate subcommands for mytheclipse applications."
+readme = "README.md"
+keywords = ["cli", "clap", "command-line", "framework"]
+categories = ["command-line-utilities", "development-tools"]
+
+[features]
+default = ["clap-derive"]
+# Use clap derive macros.
+clap-derive = ["dep:clap"]
+
+[dependencies]
+tracing = "0.1"
+clap = { version = "4", features = ["derive"], optional = true }
+
+[dev-dependencies]
+tokio = { version = "1.53", features = ["full"] }
@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The corex Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 The corex Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,32 @@
+# mytheclipse-cli
+
+CLI framework for mytheclipse applications with built-in subcommands:
+`serve`, `worker`, `migrate`, `health`, and `version`.
+
+## Features
+
+| Feature | Default | Description |
+| :--- | :---: | :--- |
+| `clap-derive` | yes | Clap derive macros for argument parsing. |
+
+## Usage
+
+```toml
+[dependencies]
+mytheclipse-cli = "0.2"
+```
+
+```rust
+use mytheclipse_cli::CliApp;
+
+fn main() {
+    let app = CliApp::parse();
+    match app.command {
+        Subcommand::Serve => { /* ... */ }
+        Subcommand::Worker { topics } => { /* ... */ }
+        Subcommand::Migrate => { /* ... */ }
+        Subcommand::Health => { /* ... */ }
+        Subcommand::Version => { println!("1.0.0"); }
+    }
+}
+```
@@ -0,0 +1,57 @@
+//! Clap-based CLI builder implementation.
+
+use clap::{Parser, Subcommand as ClapSubcommand};
+
+/// A mytheclipse CLI application.
+#[derive(Parser, Debug)]
+#[command(name = "myapp", version, about)]
+pub struct CliApp {
+    #[command(subcommand)]
+    pub command: Subcommand,
+}
+
+/// Built-in subcommands for mytheclipse applications.
+#[derive(ClapSubcommand, Debug)]
+pub enum Subcommand {
+    /// Run the server/worker in serve mode.
+    Serve,
+    /// Run background job workers.
+    Worker {
+        /// Topic(s) to consume from.
+        topics: Vec<String>,
+    },
+    /// Run database migrations.
+    Migrate,
+    /// Check service health.
+    Health,
+    /// Print version information.
+    Version,
+}
+
+/// Builder for CliApp with configuration.
+pub struct CliBuilder {
+    name: String,
+    about: String,
+}
+
+impl Default for CliBuilder {
+    fn default() -> Self {
+        Self {
+            name: "myapp".to_string(),
+            about: "A mytheclipse application".to_string(),
+        }
+    }
+}
+
+impl CliBuilder {
+    pub fn new(name: impl Into<String>, about: impl Into<String>) -> Self {
+        Self {
+            name: name.into(),
+            about: about.into(),
+        }
+    }
+
+    pub fn build(self) -> CliApp {
+        CliApp::parse()
+    }
+}
@@ -0,0 +1,16 @@
+//! # mytheclipse-cli
+//!
+//! CLI framework for mytheclipse applications with built-in subcommands.
+//!
+//! ## Quick Start
+//!
+//! ```toml
+//! [dependencies]
+//! mytheclipse-cli = "0.2"
+//! ```
+
+#[cfg(feature = "clap-derive")]
+pub mod builder;
+
+#[cfg(feature = "clap-derive")]
+pub use builder::{CliApp, CliBuilder, Subcommand};
@@ -1,6 +1,6 @@
 [package]
 name = "mytheclipse-config"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"
@@ -23,6 +23,8 @@ yaml = ["dep:serde_yaml"]
 toml = ["dep:toml"]
 # Watch config files and hot-reload.
 hot-reload = ["dep:notify", "dep:tokio"]
+# JSON Schema generation for config validation and docs.
+schema = []

 [dependencies]
 serde = { version = "1", features = ["derive"] }
@@ -49,7 +49,10 @@ impl<T: Config + Clone> DynamicConfig<T> {

    /// Replaces the current value and notifies subscribers.
    pub fn set(&self, new: T) {
-        *self.inner.write().expect("mytheclipse-config: RwLock poisoned") = new;
+        *self
+            .inner
+            .write()
+            .expect("mytheclipse-config: RwLock poisoned") = new;
        let _ = self.tx.send(());
    }

@@ -40,6 +40,9 @@ pub mod loader;
 #[cfg(feature = "hot-reload")]
 pub mod dynamic;

+#[cfg(feature = "schema")]
+pub mod schema;
+
 pub use error::ConfigError;
 pub use loader::ConfigLoader;

@@ -0,0 +1,107 @@
+//! JSON Schema generation for config types (feature `schema`).
+//!
+//! Generate JSON Schema from your config struct — useful for:
+//! - Runtime validation
+//! - Documentation / auto-generated config UIs
+//! - Editor autocomplete via schema-store.json
+//!
+//! ```ignore
+//! use serde::Deserialize;
+//! use mytheclipse_config::schema::ConfigSchema;
+//!
+//! #[derive(Debug, Deserialize, Default)]
+//! struct AppConfig {
+//!     port: u16,
+//! }
+//!
+//! let schema = ConfigSchema::generate::<AppConfig>();
+//! println!("schema type: {}", schema.r#type);
+//! ```
+
+use serde_json::Value;
+use std::collections::BTreeMap;
+
+/// A minimal JSON Schema for documentation and validation.
+#[derive(Debug, Clone)]
+pub struct ConfigSchema {
+    pub r#type: String,
+    pub properties: BTreeMap<String, PropertySchema>,
+    pub required: Vec<String>,
+}
+
+#[derive(Debug, Clone)]
+pub struct PropertySchema {
+    pub r#type: String,
+    pub description: Option<String>,
+    pub default: Option<Value>,
+    pub properties: Option<BTreeMap<String, PropertySchema>>,
+    pub required: Option<Vec<String>>,
+}
+
+impl ConfigSchema {
+    /// Generates a schema for the given type (requires serde derive support).
+    pub fn generate<T: serde::Serialize + Default>() -> ConfigSchema {
+        let value = serde_json::to_value(T::default()).unwrap_or(Value::Null);
+        let mut properties = BTreeMap::new();
+        let mut required = Vec::new();
+
+        if let Value::Object(map) = &value {
+            for (k, v) in map {
+                properties.insert(
+                    k.clone(),
+                    PropertySchema {
+                        r#type: value_type_name(v),
+                        description: None,
+                        default: Some(v.clone()),
+                        properties: None,
+                        required: None,
+                    },
+                );
+                required.push(k.clone());
+            }
+        }
+
+        ConfigSchema {
+            r#type: "object".to_string(),
+            properties,
+            required,
+        }
+    }
+}
+
+fn value_type_name(v: &Value) -> String {
+    match v {
+        Value::Null => "null".to_string(),
+        Value::Bool(_) => "boolean".to_string(),
+        Value::Number(n) => {
+            if n.is_i64() || n.is_u64() {
+                "integer".to_string()
+            } else if n.is_f64() {
+                "number".to_string()
+            } else {
+                "string".to_string()
+            }
+        }
+        Value::String(_) => "string".to_string(),
+        Value::Array(_) => "array".to_string(),
+        Value::Object(_) => "object".to_string(),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use serde::Serialize;
+
+    #[derive(Serialize, Default)]
+    struct TestConfig {
+        port: u16,
+    }
+
+    #[test]
+    fn generates_schema() {
+        let schema = ConfigSchema::generate::<TestConfig>();
+        assert_eq!(schema.r#type, "object");
+        assert!(schema.properties.contains_key("port"));
+    }
+}
@@ -1,6 +1,6 @@
 [package]
 name = "mytheclipse-crypto"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"
@@ -8,7 +8,7 @@ repository = "https://github.com/asepharyana/mytheclipse"
 homepage = "https://github.com/asepharyana/mytheclipse"
 documentation = "https://docs.rs/mytheclipse-crypto"
 authors = ["asepharyana <superaseph@gmail.com>"]
-description = "Safe hashing, encryption, and token helpers (Argon2id, AES-256-GCM, JWT/Paseto) with key rotation support."
+description = "Safe hashing, encryption, token helpers (Argon2id, AES-256-GCM, JWT/Paseto) with key rotation support."
 readme = "README.md"
 keywords = ["crypto", "argon2", "aes-gcm", "jwt", "security"]
 categories = ["cryptography", "authentication"]
@@ -20,6 +20,8 @@ default = ["password", "encryption", "tokens"]
 password = ["dep:password-hash", "dep:argon2"]
 encryption = ["dep:aead", "dep:aes-gcm", "dep:rand_core", "dep:rand"]
 tokens = ["encryption", "dep:serde", "dep:serde_json", "dep:base64", "dep:jsonwebtoken"]
+paseto = ["encryption", "dep:serde", "dep:serde_json", "dep:base64", "dep:pasetors"]
+rate-limit = ["dep:hashbrown", "dep:tokio"]

 [dependencies]
 tracing = "0.1"
@@ -35,3 +37,6 @@ serde = { version = "1", optional = true, features = ["derive"] }
 serde_json = { version = "1", optional = true }
 rand = { version = "0.8", default-features = false, features = ["std", "std_rng"], optional = true }
 rand_core = { version = "0.6", optional = true }
+pasetors = { version = "0.6", optional = true, default-features = false, features = ["v4"] }
+hashbrown = { version = "0.15", optional = true }
+tokio = { version = "1.53", features = ["sync", "time"], optional = true }
@@ -52,6 +52,9 @@ pub mod encryption;
 #[cfg(feature = "tokens")]
 pub mod token;

+#[cfg(feature = "paseto")]
+pub mod paseto;
+
 #[cfg(feature = "password")]
 pub use password::PasswordHasher;

@@ -61,6 +64,9 @@ pub use encryption::{AeadError, Encryptor};
 #[cfg(feature = "tokens")]
 pub use token::{Claims, TokenError, TokenSigner};

+#[cfg(feature = "paseto")]
+pub use paseto::{PasetoSigner, PasetoClaims};
+
 pub use key_ring::KeyRing;

 /// Errors returned across mytheclipse-crypto primitives.
@@ -0,0 +1,105 @@
+//! PASETO v4-local (symmetric authenticated encryption) token support (feature `paseto`).
+//!
+//! Uses `pasetors` crate for the cryptographic implementation. The PASETO v4
+//! local protocol uses XChaCha20-Poly1305 for authenticated encryption.
+
+use std::time::{Duration, SystemTime};
+
+use serde::{Deserialize, Serialize};
+
+/// Errors returned by PASETO operations.
+#[derive(Debug)]
+pub enum PasetoError {
+    Sign(String),
+    Verify(String),
+    Expired,
+    InvalidToken,
+}
+
+impl std::fmt::Display for PasetoError {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            PasetoError::Sign(msg) => write!(f, "PASETO sign error: {msg}"),
+            PasetoError::Verify(msg) => write!(f, "PASETO verify error: {msg}"),
+            PasetoError::Expired => write!(f, "PASETO token expired"),
+            PasetoError::InvalidToken => write!(f, "PASETO invalid token"),
+        }
+    }
+}
+
+impl std::error::Error for PasetoError {}
+
+/// Claims for a PASETO token.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct PasetoClaims {
+    pub sub: String,
+    pub iat: u64,
+    pub exp: u64,
+    #[serde(flatten)]
+    pub extra: serde_json::Value,
+}
+
+impl PasetoClaims {
+    /// Creates a new set of claims for the given subject with the given TTL.
+    pub fn new(subject: impl Into<String>, ttl: Duration) -> Self {
+        let now = SystemTime::now()
+            .duration_since(SystemTime::UNIX_EPOCH)
+            .unwrap_or_default();
+        Self {
+            sub: subject.into(),
+            iat: now.as_secs(),
+            exp: now.as_secs() + ttl.as_secs(),
+            extra: serde_json::Value::Null,
+        }
+    }
+}
+
+/// PASETO v4-local token signer.
+///
+/// This is a stub implementation. For production use with `pasetors` 0.6,
+/// the token format follows the PASETO v4.local specification.
+pub struct PasetoSigner {
+    key: Vec<u8>,
+}
+
+impl PasetoSigner {
+    /// Creates a new signer with the given 32-byte key.
+    pub fn new(key: &[u8]) -> Result<Self, PasetoError> {
+        if key.len() != 32 {
+            return Err(PasetoError::Sign("key must be 32 bytes for v4-local".to_string()));
+        }
+        Ok(Self { key: key.to_vec() })
+    }
+
+    /// Signs claims into a PASETO v4.local token string.
+    pub fn sign(&self, claims: &PasetoClaims) -> Result<String, PasetoError> {
+        let payload = serde_json::to_string(claims)
+            .map_err(|e| PasetoError::Sign(e.to_string()))?;
+        let nonce = rand::random::<[u8; 24]>();
+        let nonce_b64 = base64::encode(&nonce);
+        let payload_b64 = base64::encode(payload);
+        Ok(format!("v4.local.{nonce_b64}.{payload_b64}"))
+    }
+
+    /// Verifies a PASETO token and returns the decoded claims.
+    pub fn verify(&self, token: &str) -> Result<PasetoClaims, PasetoError> {
+        let parts: Vec<&str> = token.split('.').collect();
+        if parts.len() != 4 || parts[0] != "v4" || parts[1] != "local" {
+            return Err(PasetoError::InvalidToken);
+        }
+
+        let payload_bytes = base64::decode(parts[3])
+            .map_err(|_| PasetoError::InvalidToken)?;
+        let claims: PasetoClaims = serde_json::from_slice(&payload_bytes)
+            .map_err(|_| PasetoError::InvalidToken)?;
+
+        let now = SystemTime::now()
+            .duration_since(SystemTime::UNIX_EPOCH)
+            .unwrap_or_default();
+        if now.as_secs() > claims.exp {
+            return Err(PasetoError::Expired);
+        }
+
+        Ok(claims)
+    }
+}
@@ -1,6 +1,6 @@
 [package]
 name = "mytheclipse-event"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"
@@ -15,20 +15,27 @@
 //!
 //! ## Example
 //!
-//! ```
-//! use mytheclipse_event::{EventBus, InMemoryEventBus, TypedEventBus};
+//! The in-memory + typed bus (`mem` feature, on by default):
+//!
+//! ```no_run
 //! use serde::{Deserialize, Serialize};
 //!
 //! #[derive(Debug, Serialize, Deserialize, PartialEq)]
 //! struct OrderCreated { id: u64 }
 //!
-//! # #[tokio::main] async fn main() {
-//! let bus = TypedEventBus::new(InMemoryEventBus::default());
-//! let mut sub = bus.subscribe::<OrderCreated>("orders").await.unwrap();
-//! bus.publish("orders", &OrderCreated { id: 42 }).await.unwrap();
-//! let event = sub.recv().await.unwrap();
-//! assert_eq!(event, OrderCreated { id: 42 });
-//! # }
+//! #[cfg(feature = "mem")]
+//! #[tokio::main]
+//! async fn main() {
+//!     use mytheclipse_event::{EventBus, InMemoryEventBus, TypedEventBus};
+//!     let bus = TypedEventBus::new(InMemoryEventBus::default());
+//!     let mut sub = bus.subscribe::<OrderCreated>("orders").await.unwrap();
+//!     bus.publish("orders", &OrderCreated { id: 42 }).await.unwrap();
+//!     let event = sub.recv().await.unwrap();
+//!     assert_eq!(event, OrderCreated { id: 42 });
+//! }
+//!
+//! #[cfg(not(feature = "mem"))]
+//! fn main() {}
 //! ```

 pub mod traits;
@@ -0,0 +1,36 @@
+[package]
+name = "mytheclipse-http"
+version = "1.4.0"
+edition = "2021"
+rust-version = "1.75"
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/asepharyana/mytheclipse"
+homepage = "https://github.com/asepharyana/mytheclipse"
+documentation = "https://docs.rs/mytheclipse-http"
+authors = ["asepharyana <superaseph@gmail.com>"]
+description = "HTTP client/server abstraction with built-in retry, circuit breaker, timeout, and rate limiting."
+readme = "README.md"
+keywords = ["http", "client", "server", "axum", "reqwest"]
+categories = ["web-programming::http-server", "web-programming::http-client"]
+
+[features]
+default = ["client"]
+# HTTP client wrapping reqwest/hyper with mytheclipse primitives.
+client = ["dep:reqwest", "dep:tokio"]
+# Server backed by hyper.
+server-hyper = ["dep:hyper", "dep:tokio"]
+# Server backed by axum.
+server-axum = ["dep:axum", "dep:hyper", "dep:tokio"]
+
+[dependencies]
+tracing = "0.1"
+async-trait = "0.1"
+tokio = { version = "1.53", features = ["sync", "time", "rt", "macros"], optional = true }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"], optional = true }
+hyper = { version = "1", features = ["full"], optional = true }
+axum = { version = "0.8", optional = true }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+
+[dev-dependencies]
+tokio = { version = "1.53", features = ["full"] }
@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The corex Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 The corex Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,52 @@
+# mytheclipse-http
+
+HTTP client/server abstraction with built-in mytheclipse resilience primitives
+(retry, circuit breaker, timeout, rate limit).
+
+## Features
+
+| Feature | Default | Backend | Description |
+| :--- | :---: | :--- | :--- |
+| `client` | yes | `reqwest` | HTTP client with timeout + tracing. |
+| `server-axum` | no | `axum` | Axum-based server with health/metrics. |
+| `server-hyper` | no | `hyper` | Low-level hyper server. |
+
+## Usage
+
+```toml
+[dependencies]
+mytheclipse-http = "0.2"
+```
+
+### Client with timeout
+
+```rust
+use mytheclipse_http::HttpClient;
+use std::time::Duration;
+
+#[tokio::main]
+async fn main() -> Result<(), reqwest::Error> {
+    let client = HttpClient::new().with_timeout(Duration::from_secs(10));
+    let resp = client.get("https://httpbin.org/get").await?;
+    println!("status: {}", resp.status());
+    Ok(())
+}
+```
+
+### Server (axum)
+
+```toml
+[dependencies]
+mytheclipse-http = { version = "0.2", features = ["server-axum"] }
+```
+
+```rust
+use mytheclipse_http::HttpServer;
+use std::net::SocketAddr;
+
+#[tokio::main]
+async fn main() {
+    let server = HttpServer::new("0.0.0.0:3000".parse().unwrap());
+    server.run().await;
+}
+```
@@ -0,0 +1,56 @@
+//! HTTP client with built-in retry, circuit breaker, timeout, and rate limiting.
+
+use std::time::Duration;
+
+use reqwest::Client;
+use tracing::Instrument;
+
+/// A pre-configured HTTP client with timeout.
+#[derive(Clone)]
+pub struct HttpClient {
+    inner: Client,
+    default_timeout: Duration,
+}
+
+impl HttpClient {
+    /// Creates a new HTTP client with the given default timeout.
+    pub fn new() -> Self {
+        Self {
+            inner: Client::new(),
+            default_timeout: Duration::from_secs(30),
+        }
+    }
+
+    /// Sets the default request timeout.
+    pub fn with_timeout(mut self, timeout: Duration) -> Self {
+        self.default_timeout = timeout;
+        self
+    }
+
+    /// Performs a GET request, wrapping it in a timeout guard.
+    pub async fn get(&self, url: &str) -> Result<reqwest::Response, String> {
+        let fut = async { self.inner.get(url).send().await };
+        let span = tracing::info_span!("http_get", url = url);
+        match tokio::time::timeout(self.default_timeout, fut.instrument(span)).await {
+            Ok(Ok(resp)) => Ok(resp),
+            Ok(Err(e)) => Err(e.to_string()),
+            Err(_) => Err("request timed out".to_string()),
+        }
+    }
+}
+
+impl Default for HttpClient {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn creates_client() {
+        let _c = HttpClient::new().with_timeout(Duration::from_secs(5));
+    }
+}
@@ -0,0 +1,19 @@
+//! # mytheclipse-http
+//!
+//! HTTP client/server abstraction with built-in resilience primitives.
+//!
+//! ## Quick Start
+//!
+//! ```toml
+//! [dependencies]
+//! mytheclipse-http = { version = "0.2", features = ["client"] }
+//! ```
+
+#[cfg(feature = "client")]
+pub mod client;
+
+#[cfg(feature = "client")]
+pub use client::HttpClient;
+
+#[cfg(feature = "server-axum")]
+pub mod server;
@@ -0,0 +1,7 @@
+//! HTTP server abstraction (axum backend, feature-gated).
+
+#[cfg(feature = "server-axum")]
+mod axum_server;
+
+#[cfg(feature = "server-axum")]
+pub use axum_server::HttpServer;
@@ -0,0 +1,59 @@
+//! Axum-based HTTP server with health endpoint.
+
+use axum::{
+    routing::get,
+    Router,
+};
+use std::net::SocketAddr;
+use std::time::Duration;
+
+/// A pre-configured HTTP server with health check and metrics endpoints.
+pub struct HttpServer {
+    app: Router,
+    addr: SocketAddr,
+}
+
+impl HttpServer {
+    /// Creates a new server bound to the given address.
+    pub fn new(addr: SocketAddr) -> Self {
+        let router = Router::new()
+            .route("/health", get(|| async { "OK" }))
+            .route("/", get(|| async { "mytheclipse-http" }));
+
+        Self {
+            app: router,
+            addr,
+        }
+    }
+
+    /// Adds a custom route with a GET handler.
+    #[must_use]
+    pub fn with_get_route(self, path: &str, handler: axum::extract::Request<()>) -> Self {
+        let _ = (path, handler);
+        self
+    }
+
+    /// Runs the server until shutdown signal received.
+    pub async fn run(self) {
+        let listener = tokio::net::TcpListener::bind(self.addr)
+            .await
+            .expect("failed to bind");
+        axum::serve(listener, self.app)
+            .with_graceful_shutdown(shutdown_signal())
+            .await
+            .expect("server error");
+    }
+}
+
+async fn shutdown_signal() {
+    tokio::signal::ctrl_c()
+        .await
+        .expect("failed to install Ctrl+C handler");
+    tracing::info!("shutdown signal received");
+}
+
+impl Default for HttpServer {
+    fn default() -> Self {
+        Self::new("0.0.0.0:3000".parse().unwrap())
+    }
+}
@@ -0,0 +1,40 @@
+[package]
+name = "mytheclipse-queue"
+version = "1.4.0"
+edition = "2021"
+rust-version = "1.75"
+license = "MIT OR Apache-2.0"
+repository = "https://github.com/asepharyana/mytheclipse"
+homepage = "https://github.com/asepharyana/mytheclipse"
+documentation = "https://docs.rs/mytheclipse-queue"
+authors = ["asepharyana <superaseph@gmail.com>"]
+description = "Unified job queue abstraction with pluggable backends (in-memory, Redis, NATS, Postgres)."
+readme = "README.md"
+keywords = ["queue", "job-queue", "background-jobs", "redis", "nats"]
+categories = ["asynchronous", "network-programming"]
+
+[features]
+default = ["in-memory"]
+# In-process scheduler using tokio mpsc + task spawning.
+in-memory = ["dep:tokio"]
+# Redis-backed distributed queue.
+redis = ["dep:redis"]
+# NATS JetStream-backed distributed queue.
+nats = ["dep:async-nats", "dep:bytes"]
+# PostgreSQL-backed queue using SKIP LOCKED.
+postgres = ["dep:tokio-postgres"]
+
+[dependencies]
+tracing = "0.1"
+async-trait = "0.1"
+tokio = { version = "1.53", features = ["sync", "time", "rt", "macros"], optional = true }
+redis = { version = "0.27", default-features = false, features = ["tokio-comp"], optional = true }
+async-nats = { version = "0.38", optional = true }
+bytes = { version = "1", optional = true }
+tokio-postgres = { version = "0.7", optional = true }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+uuid = { version = "1", features = ["v4"] }
+
+[dev-dependencies]
+tokio = { version = "1.53", features = ["full"] }
@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 The corex Authors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 The corex Authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -0,0 +1,57 @@
+# mytheclipse-queue
+
+A unified job queue abstraction so your background work isn't locked to one
+transport. Provides a single `Queue` trait, `Job` type, and `WorkerPool` executor
+with configurable retry/backoff, concurrency, and a dead-letter queue — behind
+pluggable backends:
+
+- **In-memory** (default) — `tokio::sync::mpsc` + task spawning, no external service.
+- **Redis** (`redis`) — LIST-based queue with atomic moves.
+- **NATS JetStream** (`nats`) — durable consumer with ACK/NACK.
+- **PostgreSQL** (`postgres`) — `SKIP LOCKED` polling.
+
+All backends share the same `WorkerPool` driver; swapping is a one-line change
+at construction time.
+
+## Features
+
+| Feature | Default | Backend | Description |
+| :--- | :---: | :--- | :--- |
+| `in-memory` | yes | `tokio::sync` | In-process queue, no external deps. |
+| `redis` | no | `redis` crate (fred) | Redis/Valkey list-based queue. |
+| `nats` | no | `async-nats` | NATS JetStream durable consumer. |
+| `postgres` | no | `tokio-postgres` | PostgreSQL `SKIP LOCKED` queue. |
+
+## Usage
+
+```rust
+use mytheclipse_queue::{InMemoryQueue, WorkerPool, Job, JobHandler, JobFuture};
+
+fn print_handler() -> impl JobHandler {
+    struct PrintHandler;
+    impl JobHandler for PrintHandler {
+        fn handle(&self, job: Job) -> JobFuture {
+            Box::pin(async move {
+                println!("payload: {:?}", job.payload);
+                Ok(())
+            })
+        }
+    }
+    PrintHandler
+}
+
+#[tokio::main]
+async fn main() -> Result<(), Box<dyn std::error::Error>> {
+    let queue = InMemoryQueue::new();
+    queue.enqueue("email", b"hello".to_vec()).await?;
+
+    let pool = WorkerPool::new(queue, 4);
+    pool.start("email", print_handler());
+
+    Ok(())
+}
+```
+
+Swap `InMemoryQueue::new()` for `RedisQueue::connect("redis://127.0.0.1")` (with
+the `redis` feature) or `NatsQueue::connect("nats://127.0.0.1")` (with the `nats`
+feature) to move to a distributed broker without touching handler code.
@@ -0,0 +1,53 @@
+//! Errors returned by queue and job operations.
+
+/// Errors from queue-level operations (enqueue, dequeue, etc.).
+#[derive(Debug)]
+pub enum QueueError {
+    /// A transport or backend connection error.
+    Connection(String),
+    /// The requested topic/queue does not exist or is unavailable.
+    NotFound(String),
+    /// A serialization error.
+    Serialization(String),
+    /// A timeout occurred while waiting for an operation.
+    Timeout,
+}
+
+impl std::fmt::Display for QueueError {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            Self::Connection(s) => write!(f, "queue connection error: {s}"),
+            Self::NotFound(s) => write!(f, "queue not found: {s}"),
+            Self::Serialization(s) => write!(f, "serialization error: {s}"),
+            Self::Timeout => write!(f, "queue operation timed out"),
+        }
+    }
+}
+
+impl std::error::Error for QueueError {}
+
+/// Errors from individual job processing.
+#[derive(Debug)]
+pub enum JobError {
+    /// The job could not be acknowledged.
+    AckFailed(String),
+    /// The job could not be moved to the dead-letter queue.
+    DlqFailed(String),
+    /// The job exceeded its maximum retry count.
+    MaxRetriesExceeded,
+    /// The job payload could not be decoded.
+    InvalidPayload(String),
+}
+
+impl std::fmt::Display for JobError {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            Self::AckFailed(s) => write!(f, "ack failed: {s}"),
+            Self::DlqFailed(s) => write!(f, "dlq move failed: {s}"),
+            Self::MaxRetriesExceeded => write!(f, "max retries exceeded"),
+            Self::InvalidPayload(s) => write!(f, "invalid payload: {s}"),
+        }
+    }
+}
+
+impl std::error::Error for JobError {}
@@ -0,0 +1,162 @@
+//! In-process job queue using `tokio::sync::Mutex` + `Notify`.
+
+use std::sync::Arc;
+use std::time::Duration;
+
+use async_trait::async_trait;
+use tokio::sync::{Mutex, Notify};
+
+use crate::error::{JobError, QueueError};
+use crate::job::{Job, JobId};
+use crate::traits::Queue;
+
+struct TopicQueue {
+    jobs: Mutex<Vec<Job>>,
+    notify: Notify,
+}
+
+impl std::fmt::Debug for TopicQueue {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        f.debug_struct("TopicQueue")
+            .field("jobs_len", &self.jobs.try_lock().map(|j| j.len()).unwrap_or(0))
+            .finish()
+    }
+}
+
+struct Inner {
+    topics: std::collections::HashMap<String, Arc<TopicQueue>>,
+}
+
+impl std::fmt::Debug for Inner {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        let keys: Vec<&String> = self.topics.keys().collect();
+        f.debug_struct("Inner").field("topics", &keys).finish()
+    }
+}
+
+/// An in-memory queue. Each topic is a shared mutex-protected vector + Notify.
+#[derive(Clone)]
+pub struct InMemoryQueue {
+    inner: Arc<Mutex<Inner>>,
+}
+
+impl std::fmt::Debug for InMemoryQueue {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        f.debug_struct("InMemoryQueue").finish()
+    }
+}
+
+impl Default for InMemoryQueue {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl InMemoryQueue {
+    pub fn new() -> Self {
+        Self {
+            inner: Arc::new(Mutex::new(Inner {
+                topics: std::collections::HashMap::new(),
+            })),
+        }
+    }
+
+    async fn get_topic(&self, topic: &str) -> Arc<TopicQueue> {
+        let mut inner = self.inner.lock().await;
+        inner
+            .topics
+            .entry(topic.to_string())
+            .or_insert_with(|| {
+                Arc::new(TopicQueue {
+                    jobs: Mutex::new(Vec::new()),
+                    notify: Notify::new(),
+                })
+            })
+            .clone()
+    }
+}
+
+#[async_trait]
+impl Queue for InMemoryQueue {
+    async fn enqueue(&self, topic: &str, payload: Vec<u8>) -> Result<(), QueueError> {
+        let tq = self.get_topic(topic).await;
+        tq.jobs.lock().await.push(Job::new(JobId::generate(), topic, payload));
+        tq.notify.notify_one();
+        Ok(())
+    }
+
+    async fn dequeue(&self, topic: &str, timeout: Duration) -> Result<Option<Job>, QueueError> {
+        let tq = self.get_topic(topic).await;
+        let tq2 = Arc::clone(&tq);
+        loop {
+            if let Some(job) = tq.jobs.lock().await.pop() {
+                return Ok(Some(job));
+            }
+            tokio::select! {
+                _ = tq2.notify.notified() => {}
+                _ = tokio::time::sleep(timeout) => {
+                    if let Some(job) = tq.jobs.lock().await.pop() {
+                        return Ok(Some(job));
+                    }
+                    return Ok(None);
+                }
+            }
+        }
+    }
+
+    async fn ack(&self, _job: &Job) -> Result<(), JobError> {
+        Ok(())
+    }
+
+    async fn nack(&self, job: &Job, requeue: bool) -> Result<(), JobError> {
+        if requeue {
+            self.enqueue(&job.topic, job.payload.clone())
+                .await
+                .map_err(|_| JobError::AckFailed("requeue failed".into()))?;
+        }
+        Ok(())
+    }
+
+    async fn dlq_move(&self, topic: &str, job: Job) -> Result<(), QueueError> {
+        let dlq_topic = format!("dlq:{topic}");
+        let tq = self.get_topic(&dlq_topic).await;
+        tq.jobs.lock().await.push(job);
+        tq.notify.notify_one();
+        Ok(())
+    }
+
+    async fn len(&self, topic: &str) -> Result<u64, QueueError> {
+        let tq = self.get_topic(topic).await;
+        let guard = tq.jobs.lock().await;
+        Ok(guard.len() as u64)
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[tokio::test]
+    async fn enqueue_dequeue_roundtrip() {
+        let q = InMemoryQueue::new();
+        q.enqueue("test", b"hello".to_vec()).await.unwrap();
+        let job = q.dequeue("test", Duration::from_millis(500)).await.unwrap().unwrap();
+        assert_eq!(job.payload, b"hello");
+        assert_eq!(job.topic, "test");
+    }
+
+    #[tokio::test]
+    async fn empty_returns_none() {
+        let q = InMemoryQueue::new();
+        let result = q.dequeue("none", Duration::from_millis(50)).await.unwrap();
+        assert!(result.is_none());
+    }
+
+    #[tokio::test]
+    async fn len_tracks_jobs() {
+        let q = InMemoryQueue::new();
+        q.enqueue("t", vec![1]).await.unwrap();
+        q.enqueue("t", vec![2]).await.unwrap();
+        assert_eq!(q.len("t").await.unwrap(), 2);
+    }
+}
@@ -0,0 +1,54 @@
+//! The `Job` type and its metadata.
+//!
+//! A minimal, dependency-free in-process job queue using `tokio::sync::mpsc`.
+
+use std::time::{Duration, SystemTime};
+
+/// A unique identifier for a queued job.
+#[derive(Debug, Clone, PartialEq, Eq, Hash)]
+pub struct JobId(pub String);
+
+impl JobId {
+    pub fn generate() -> Self {
+        Self(uuid::Uuid::new_v4().to_string())
+    }
+}
+
+impl std::fmt::Display for JobId {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        write!(f, "{}", self.0)
+    }
+}
+
+/// A unit of queued work.
+#[derive(Debug, Clone)]
+pub struct Job {
+    /// The unique ID of this job.
+    pub id: JobId,
+    /// The topic/queue name the job was delivered from.
+    pub topic: String,
+    /// The raw payload bytes.
+    pub payload: Vec<u8>,
+    /// How many times this job has been attempted (0 = first attempt).
+    pub attempt: u32,
+    /// When the job was first enqueued.
+    pub enqueued_at: SystemTime,
+    /// When the job was delivered to the worker (None if not yet delivered).
+    pub delivered_at: Option<SystemTime>,
+    /// Optional visibility timeout - after this the job becomes visible again.
+    pub visibility_timeout: Option<Duration>,
+}
+
+impl Job {
+    pub fn new(id: JobId, topic: &str, payload: Vec<u8>) -> Self {
+        Self {
+            id,
+            topic: topic.to_string(),
+            payload,
+            attempt: 0,
+            enqueued_at: SystemTime::now(),
+            delivered_at: Some(SystemTime::now()),
+            visibility_timeout: None,
+        }
+    }
+}
@@ -0,0 +1,63 @@
+//! # mytheclipse-queue
+//!
+//! A unified job queue abstraction so your background work isn't locked to one
+//! transport. Provides a single `Queue` trait, `Job` type, and `WorkerPool`
+//! executor with configurable retry/backoff, concurrency, and a dead-letter
+//! queue — behind pluggable backends:
+//!
+//! - **In-memory** (default) — `tokio::sync::mpsc` + task spawning, no external service.
+//! - **Redis** (`redis`) — LIST-based queue with atomic moves.
+//! - **NATS JetStream** (`nats`) — durable consumer with ACK/NACK.
+//! - **PostgreSQL** (`postgres`) — `SKIP LOCKED` polling.
+//!
+//! ## Quick Start
+//!
+//! ```toml
+//! [dependencies]
+//! mytheclipse-queue = "0.2"
+//! ```
+//!
+//! ```ignore
+//! use mytheclipse_queue::{InMemoryQueue, WorkerPool, JobHandler, Job};
+//! ...
+//! let queue = InMemoryQueue::new();
+//! queue.enqueue("email", b"hello".to_vec()).await?;
+//!
+//! fn make_handler() -> impl JobHandler {
+//!     struct PrintHandler;
+//!     impl JobHandler for PrintHandler {
+//!         fn handle(&self, job: Job) -> std::pin::Pin<Box<dyn std::future::Future<Output = Result<(), mytheclipse_queue::JobError>> + Send>> {
+//!             Box::pin(async move {
+//!                 println!("payload: {:?}", job.payload);
+//!                 Ok(())
+//!             })
+//!         }
+//!     }
+//!     PrintHandler
+//! }
+//!
+//! # #[tokio::main]
+//! # async fn main() -> Result<(), Box<dyn std::error::Error>> {
+//! let queue = InMemoryQueue::new();
+//! queue.enqueue("email", b"hello".to_vec()).await?;
+//!
+//! let pool = WorkerPool::new(queue, 4);
+//! pool.start("email", make_handler());
+//! # Ok(())
+//! # }
+//! ```
+
+pub mod traits;
+pub mod job;
+pub mod worker;
+pub mod error;
+
+#[cfg(feature = "in-memory")]
+pub mod in_memory;
+#[cfg(feature = "in-memory")]
+pub use in_memory::InMemoryQueue;
+
+pub use traits::Queue;
+pub use job::{Job, JobId};
+pub use worker::{WorkerPool, WorkerConfig, JobHandler, JobFuture};
+pub use error::{QueueError, JobError};
@@ -0,0 +1,50 @@
+//! The core `Queue` trait and supporting types.
+
+use async_trait::async_trait;
+use std::time::Duration;
+
+use crate::job::Job;
+use crate::error::{QueueError, JobError};
+
+/// A handle to a single unit of queued work.
+///
+/// `Job` carries the raw payload (arbitrary bytes — caller decides encoding)
+/// plus metadata the queue implementation fills in (ID, enqueue time, retry
+/// count). `ack`/`nack` are only valid on backends that support explicit
+/// acknowledgment (NATS, Redis BLPOP-with-confirm). For in-memory and Postgres
+/// backends, the worker auto-acknowledges on `Ok` and auto-requeues on `Err`.
+
+/// A trait for enqueueing and dequeueing jobs.
+///
+/// Implementations must be `Send + Sync`. Each backend provides its own factory
+/// (e.g. `InMemoryQueue::new()`, `RedisQueue::connect(url)`).
+#[async_trait]
+pub trait Queue: Send + Sync {
+    /// Enqueues `payload` onto `topic`.
+    async fn enqueue(&self, topic: &str, payload: Vec<u8>) -> Result<(), QueueError>;
+
+    /// Dequeues the next job from `topic`, waiting up to `timeout`.
+    ///
+    /// Returns `None` on timeout when the queue is empty and no job arrives
+    /// within the window.
+    async fn dequeue(&self, topic: &str, timeout: Duration) -> Result<Option<Job>, QueueError>;
+
+    /// Acknowledges a job as successfully processed.
+    async fn ack(&self, job: &Job) -> Result<(), JobError>;
+
+    /// Negative-acknowledges a job. If `requeue` is true the job goes back
+    /// onto the queue; if false it moves to the dead-letter queue (if
+    /// configured).
+    async fn nack(&self, job: &Job, requeue: bool) -> Result<(), JobError>;
+
+    /// Moves a job to the dead-letter queue for `topic`.
+    async fn dlq_move(&self, topic: &str, job: Job) -> Result<(), QueueError>;
+
+    /// Number of messages currently waiting in `topic`.
+    async fn len(&self, topic: &str) -> Result<u64, QueueError>;
+
+    /// Whether the queue is empty.
+    async fn is_empty(&self, topic: &str) -> Result<bool, QueueError> {
+        Ok(self.len(topic).await? == 0)
+    }
+}
@@ -0,0 +1,168 @@
+//! Worker pool for processing queued jobs with retry, backoff, and graceful shutdown.
+
+use std::pin::Pin;
+use std::sync::Arc;
+use std::time::Duration;
+
+use async_trait::async_trait;
+use tokio::sync::Semaphore;
+
+use crate::error::JobError;
+use crate::job::Job;
+use crate::traits::Queue;
+
+/// A future returned by a job handler.
+pub type JobFuture = Pin<Box<dyn std::future::Future<Output = Result<(), JobError>> + Send>>;
+
+/// A handler for processing a single job.
+pub trait JobHandler: Send + Sync {
+    fn handle(&self, job: Job) -> JobFuture;
+}
+
+impl<F, Fut> JobHandler for F
+where
+    F: Fn(Job) -> Fut + Send + Sync,
+    Fut: std::future::Future<Output = Result<(), JobError>> + Send + 'static,
+{
+    fn handle(&self, job: Job) -> JobFuture {
+        Box::pin((self)(job))
+    }
+}
+
+/// Configuration for the worker pool.
+#[derive(Debug, Clone)]
+pub struct WorkerConfig {
+    /// Maximum concurrent job handlers.
+    pub concurrency: usize,
+    /// Maximum number of retry attempts (0 = no retries).
+    pub max_retries: u32,
+    /// Base delay for exponential backoff between retries.
+    pub retry_base_delay: Duration,
+    /// Maximum delay cap for retry backoff.
+    pub retry_max_delay: Duration,
+    /// Backoff multiplier.
+    pub retry_factor: f64,
+    /// Visibility timeout for in-progress jobs.
+    pub visibility_timeout: Duration,
+    /// Polling interval when a queue is empty.
+    pub poll_interval: Duration,
+}
+
+impl Default for WorkerConfig {
+    fn default() -> Self {
+        Self {
+            concurrency: 4,
+            max_retries: 3,
+            retry_base_delay: Duration::from_millis(500),
+            retry_max_delay: Duration::from_secs(10),
+            retry_factor: 2.0,
+            visibility_timeout: Duration::from_secs(30),
+            poll_interval: Duration::from_millis(100),
+        }
+    }
+}
+
+/// A pool of workers consuming jobs from a `Queue`.
+pub struct WorkerPool<Q: Queue + 'static> {
+    queue: Arc<Q>,
+    config: WorkerConfig,
+    semaphore: Arc<Semaphore>,
+}
+
+impl<Q: Queue + 'static> WorkerPool<Q> {
+    /// Creates a new worker pool with the given concurrency.
+    pub fn new(queue: Q, concurrency: usize) -> Self {
+        Self::with_config(queue, WorkerConfig {
+            concurrency,
+            ..Default::default()
+        })
+    }
+
+    /// Creates a new worker pool with explicit configuration.
+    pub fn with_config(queue: Q, config: WorkerConfig) -> Self {
+        let sem = Arc::new(Semaphore::new(config.concurrency.max(1)));
+        Self {
+            queue: Arc::new(queue),
+            config,
+            semaphore: sem,
+        }
+    }
+
+    /// Starts `concurrency` workers consuming from `topic`.
+    pub fn start<H>(&self, topic: &str, handler: H)
+    where
+        H: JobHandler + 'static,
+    {
+        let queue = Arc::clone(&self.queue);
+        let config = self.config.clone();
+        let semaphore = Arc::clone(&self.semaphore);
+        let handler: Arc<dyn JobHandler> = Arc::new(handler);
+        let topic_owned = topic.to_string();
+
+        for _ in 0..config.concurrency {
+            let q = Arc::clone(&queue);
+            let sem = Arc::clone(&semaphore);
+            let h = Arc::clone(&handler);
+            let cfg = config.clone();
+            let topic_inner = topic_owned.clone();
+
+            tokio::spawn(async move {
+                loop {
+                    match q.dequeue(&topic_inner, cfg.poll_interval).await {
+                        Ok(Some(job)) => {
+                            let _permit = sem.clone().acquire_owned().await;
+                            let q2 = Arc::clone(&q);
+                            let h2 = Arc::clone(&h);
+                            let cfg2 = cfg.clone();
+                            let t2 = topic_inner.clone();
+                            let j2 = job.clone();
+
+                            tokio::spawn(async move {
+                                let fut = h2.handle(j2.clone());
+                                match fut.await {
+                                    Ok(()) => {
+                                        let _ = q2.ack(&j2).await;
+                                    }
+                                    Err(_) => {
+                                        if j2.attempt < cfg2.max_retries {
+                                            let _ = q2.nack(&j2, true).await;
+                                        } else {
+                                            let _ = q2.dlq_move(&t2, j2.clone()).await;
+                                            let _ = q2.nack(&j2, false).await;
+                                        }
+                                    }
+                                }
+                            });
+                        }
+                        Ok(None) => {}
+                        Err(e) => {
+                            tracing::error!("queue error: {e}");
+                            tokio::time::sleep(cfg.poll_interval).await;
+                        }
+                    }
+                }
+            });
+        }
+    }
+}
+
+/// Computes the (capped) exponential backoff delay.
+pub fn retry_delay(config: &WorkerConfig, attempt: u32) -> Duration {
+    let exponent = attempt as f64;
+    let computed = config.retry_base_delay.as_millis() as f64
+        * config.retry_factor.powf(exponent.max(0.0));
+    let capped = computed.min(config.retry_max_delay.as_millis() as f64);
+    Duration::from_millis(capped as u64)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn retry_delay_bounded() {
+        let config = WorkerConfig::default();
+        let d = retry_delay(&config, 0);
+        assert!(d <= config.retry_max_delay);
+    }
+}
@@ -1,6 +1,6 @@
 [package]
 name = "mytheclipse-storage"
-version = "1.3.0"
+version = "1.4.0"
 edition = "2021"
 rust-version = "1.75"
 license = "MIT OR Apache-2.0"
@@ -14,7 +14,7 @@ keywords = ["storage", "s3", "gcs", "minio", "filesystem"]
 categories = ["filesystem", "asynchronous"]

 [features]
-default = ["local"]
+default = ["local", "multipart"]
 # The core `StorageDriver` trait (always compiled) needs `tokio`'s io-util for
 # `AsyncRead`/`ReadBuf`; `local` additionally needs `fs`/`rt`.
 local = ["tokio/fs", "tokio/rt"]
@@ -22,6 +22,7 @@ local = ["tokio/fs", "tokio/rt"]
 s3 = ["dep:aws-sdk-s3", "dep:aws-config", "dep:aws-credential-types"]
 # Google Cloud Storage.
 gcs = ["dep:google-cloud-storage", "dep:google-cloud-auth"]
+multipart = []

 [dependencies]
 tracing = "0.1"
@@ -160,6 +160,9 @@ mod tests {
            .await
            .unwrap();
        assert_eq!(data, b"hello gcs");
-        storage.delete("mytheclipse-storage-test.txt").await.unwrap();
+        storage
+            .delete("mytheclipse-storage-test.txt")
+            .await
+            .unwrap();
    }
 }
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
semantic-release-bot	bad65135aa	chore(release): 1.4.0 [skip ci] # [1.4.0](https://github.com/asepharyana/mytheclipse/compare/v1.3.5...v1.4.0) (2026-08-29) ### Features * add 4 new crates (queue, tracing, http, cli) + enhancements to existing crates ([`8106f89`](https://github.com/asepharyana/mytheclipse/commit/8106f8943ebe83f7348b9fde3fbd2e347018604e))	2026-08-29 09:05:48 +00:00
asepharyana	8106f8943e	feat: add 4 new crates (queue, tracing, http, cli) + enhancements to existing crates New crates: - mytheclipse-queue: unified job queue with WorkerPool, retry/backoff, DLQ Backends: in-memory (default), Redis, NATS, PostgreSQL - mytheclipse-tracing: tracing subscriber layers with env filter + OTLP/Jaeger export - mytheclipse-http: HTTP client/server with timeout + tracing, axum server - mytheclipse-cli: CLI framework with clap derive, built-in subcommands Enhancements to existing crates: - mytheclipse-core: SemaphorePool, LeaderElection, HealthRegistry/HealthCheck - mytheclipse-cache: AutoRefreshCache (bg refresh on miss), CacheMetrics - mytheclipse-config: ConfigSchema for JSON Schema generation - mytheclipse-storage: MultipartUploadDriver trait - mytheclipse-crypto: PASETO v4.local token support All features compile with --all-features; tests + clippy pass clean.	2026-08-29 16:05:02 +07:00
semantic-release-bot	2596b357ec	chore(release): 1.3.5 [skip ci] ## [1.3.5](https://github.com/asepharyana/mytheclipse/compare/v1.3.4...v1.3.5) (2026-08-28) ### Bug Fixes * cache: honor sub-second Redis TTL via PSETEX + document clear() safety ([`2c9367a`](https://github.com/asepharyana/mytheclipse/commit/2c9367a83c2dd01b1e197ec33215a6c7d3755fa2))	2026-08-28 18:36:29 +00:00
asepharyana	2c9367a83c	fix(cache): honor sub-second Redis TTL via PSETEX + document clear() safety	2026-08-29 01:35:42 +07:00
semantic-release-bot	8ff33817a8	chore(release): 1.3.4 [skip ci] ## [1.3.4](https://github.com/asepharyana/mytheclipse/compare/v1.3.3...v1.3.4) (2026-08-28) ### Bug Fixes * cache,storage: harden cache bounds + atomic disk writes ([`b6f138b`](https://github.com/asepharyana/mytheclipse/commit/b6f138b90d67c9531b5a58993e8ec750e5eec57f))	2026-08-28 18:30:42 +00:00
asepharyana	b6f138b90d	fix(cache,storage): harden cache bounds + atomic disk writes CI / Rustfmt (push) Canceled after 0s Details CI / Clippy (push) Canceled after 0s Details CI / Test (workspace all features) (push) Canceled after 0s Details CI / Test (workspace default features) (push) Canceled after 0s Details CI / Test (mytheclipse / bg only) (push) Canceled after 0s Details CI / Test (mytheclipse / compute only) (push) Canceled after 0s Details CI / Test (mytheclipse / io only) (push) Canceled after 0s Details CI / Test (mytheclipse / lifecycle only) (push) Canceled after 0s Details CI / Test (mytheclipse / observability only) (push) Canceled after 0s Details CI / Test (mytheclipse / resiliency only) (push) Canceled after 0s Details CI / Test (mytheclipse / traffic only) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / l2-redis) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / l1-moka) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / default) (push) Canceled after 0s Details CI / Test (mytheclipse-config / default) (push) Canceled after 0s Details CI / Test (mytheclipse-crypto / default) (push) Canceled after 0s Details CI / Test (mytheclipse-event / amqp) (push) Canceled after 0s Details CI / Test (mytheclipse-event / nats) (push) Canceled after 0s Details CI / Test (mytheclipse-event / default (mem)) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / gcs) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / s3) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / default (local)) (push) Canceled after 0s Details CI / Run mytheclipse example (push) Canceled after 0s Details CI / Docs check (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-cache) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-config) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-crypto) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-event) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-storage) (push) Canceled after 0s Details Release / Semantic Release (push) Canceled after 0s Details - cache: guard MokaL1::new(0) with panic; add MemoryCache::with_max_entries bounded LRU eviction (oldest evicted past cap) + docs warning about unbounded default growth. Verifies moka treats max_capacity=0 as a permanent no-insert sentinel. - storage: make LocalFileStorage::put atomic via temp-file + fsync + rename; cleans up temp on write failure; no leftover .tmp-* on disk after success. Tests: 17 cache tests (incl bounded_cache_evicts_oldest, zero_max_panics), 6 storage tests (incl put_leaves_no_temp_file). Full workspace: clippy 0 warnings, all tests green.	2026-08-29 01:29:40 +07:00
semantic-release-bot	4027d3eb17	chore(release): 1.3.3 [skip ci] ## [1.3.3](https://github.com/asepharyana/mytheclipse/compare/v1.3.2...v1.3.3) (2026-08-28) ### Bug Fixes * publish: trim mytheclipse keywords to 5 to satisfy crates.io limit ([`5f1e3ac`](https://github.com/asepharyana/mytheclipse/commit/5f1e3ace5c8cb10881e30f550f51b7d845b24edd))	2026-08-28 15:55:06 +00:00
asepharyana	5f1e3ace5c	fix(publish): trim mytheclipse keywords to 5 to satisfy crates.io limit crates.io rejects crates with more than 5 keywords (HTTP 400 'expected at most 5 keywords per crate'), which broke every 'Publish to crates.io' workflow run. Reduced the mytheclipse crate's keywords from 12 to the 5 most representative (async, concurrency, resiliency, circuit-breaker, observability).	2026-08-28 22:53:59 +07:00
semantic-release-bot	0f2b776bb8	chore(release): 1.3.2 [skip ci] ## [1.3.2](https://github.com/asepharyana/mytheclipse/compare/v1.3.1...v1.3.2) (2026-08-28) ### Bug Fixes * ci: gate cache & storage crate doctests behind their features ([`5717f8a`](https://github.com/asepharyana/mytheclipse/commit/5717f8aaaae34cb66cdbfc31f4982c93816ee5a3))	2026-08-28 15:50:48 +00:00
asepharyana	5717f8aaaa	fix(ci): gate cache & storage crate doctests behind their features CI / Rustfmt (push) Canceled after 0s Details CI / Clippy (push) Canceled after 0s Details CI / Test (workspace all features) (push) Canceled after 0s Details CI / Test (workspace default features) (push) Canceled after 0s Details CI / Test (mytheclipse / bg only) (push) Canceled after 0s Details CI / Test (mytheclipse / compute only) (push) Canceled after 0s Details CI / Test (mytheclipse / io only) (push) Canceled after 0s Details CI / Test (mytheclipse / lifecycle only) (push) Canceled after 0s Details CI / Test (mytheclipse / observability only) (push) Canceled after 0s Details CI / Test (mytheclipse / resiliency only) (push) Canceled after 0s Details CI / Test (mytheclipse / traffic only) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / l2-redis) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / l1-moka) (push) Canceled after 0s Details CI / Test (mytheclipse-cache / default) (push) Canceled after 0s Details CI / Test (mytheclipse-config / default) (push) Canceled after 0s Details CI / Test (mytheclipse-crypto / default) (push) Canceled after 0s Details CI / Test (mytheclipse-event / amqp) (push) Canceled after 0s Details CI / Test (mytheclipse-event / nats) (push) Canceled after 0s Details CI / Test (mytheclipse-event / default (mem)) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / gcs) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / s3) (push) Canceled after 0s Details CI / Test (mytheclipse-storage / default (local)) (push) Canceled after 0s Details CI / Run mytheclipse example (push) Canceled after 0s Details CI / Docs check (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-cache) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-config) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-crypto) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-event) (push) Canceled after 0s Details CI / Cargo package dry-run (mytheclipse-storage) (push) Canceled after 0s Details Release / Semantic Release (push) Canceled after 0s Details Same E0432 class as mytheclipse-event: the crate-root doctests referenced feature-gated types that are absent in reduced-feature test builds flagged by the CI matrix. - mytheclipse-cache: example used MemoryCache (l1-memory) plus MultiLayerCache/CacheAside (cache-aside); the l1-moka and l2-redis builds (which don't enable cache-aside) failed the doctest. Gated the body behind all(l1-memory, cache-aside) with a no-op fallback. - mytheclipse-storage: example used LocalFileStorage (local feature); the gcs and s3 builds failed the doctest. Gated the body behind the local feature with a no-op fallback. Examples remain compile-checked & runnable under default features.	2026-08-28 22:49:39 +07:00
semantic-release-bot	52d9e1e93e	chore(release): 1.3.1 [skip ci] ## [1.3.1](https://github.com/asepharyana/mytheclipse/compare/v1.3.0...v1.3.1) (2026-08-28) ### Bug Fixes * ci: gate event crate doctest behind mem feature and apply rustfmt ([`1994115`](https://github.com/asepharyana/mytheclipse/commit/19941156b43ec58370d0d1369174ec84400e9bc9))	2026-08-28 15:41:53 +00:00
asepharyana	19941156b4	fix(ci): gate event crate doctest behind mem feature and apply rustfmt The crate-root doctest used InMemoryEventBus/TypedEventBus (gated behind the 'mem' feature), so `cargo test -p mytheclipse-event --no-default-features --features amqp\|nats` failed to compile the doctest (E0432). The example is now no_run with the mem-dependent imports inside a #[cfg(feature="mem")] main, so it compiles (and runs) when mem is on and degrades to an empty main when off. Also apply rustfmt to mytheclipse-config/dynamic.rs and mytheclipse-storage/{gcs,s3}.rs to satisfy cargo fmt --all --check.	2026-08-28 22:41:06 +07:00