@auxiora/cloud 1.0.0

package/dist/quotas.js

@@ -0,0 +1,87 @@
+import { QuotaExceededError } from './types.js';
+import { getPlanQuotas } from './plans.js';
+/**
+ * QuotaEnforcer tracks usage against plan limits
+ * and throws QuotaExceededError when limits are breached.
+ */
+export class QuotaEnforcer {
+    usage = new Map();
+    tenantManager;
+    constructor(options) {
+        this.tenantManager = options.tenantManager;
+    }
+    /**
+     * Check whether a metric increment would exceed the quota.
+     * Throws QuotaExceededError if the limit would be breached.
+     */
+    async check(tenantId, metric, increment = 1) {
+        const tenant = await this.tenantManager.get(tenantId);
+        const quotas = getPlanQuotas(tenant.plan);
+        const limit = quotas[metric];
+        // -1 means unlimited
+        if (limit === -1)
+            return;
+        const current = this.getUsage(tenantId, metric);
+        if (current + increment > limit) {
+            throw new QuotaExceededError(metric, limit, current + increment);
+        }
+    }
+    /**
+     * Record usage for a metric.
+     */
+    record(tenantId, metric, value = 1) {
+        let tenantUsage = this.usage.get(tenantId);
+        if (!tenantUsage) {
+            tenantUsage = new Map();
+            this.usage.set(tenantId, tenantUsage);
+        }
+        const current = tenantUsage.get(metric) ?? 0;
+        tenantUsage.set(metric, current + value);
+        return {
+            tenantId,
+            metric,
+            value: current + value,
+            timestamp: new Date().toISOString(),
+        };
+    }
+    /**
+     * Get current usage for a specific metric.
+     */
+    getUsage(tenantId, metric) {
+        return this.usage.get(tenantId)?.get(metric) ?? 0;
+    }
+    /**
+     * Get all usage for a tenant.
+     */
+    getAllUsage(tenantId) {
+        const tenantUsage = this.usage.get(tenantId);
+        if (!tenantUsage)
+            return {};
+        const result = {};
+        for (const [metric, value] of tenantUsage) {
+            result[metric] = value;
+        }
+        return result;
+    }
+    /**
+     * Reset usage for a tenant (e.g., at billing period start).
+     */
+    resetUsage(tenantId) {
+        this.usage.delete(tenantId);
+    }
+    /**
+     * Get usage as a percentage of the quota limit.
+     */
+    async getUsagePercentage(tenantId, metric) {
+        const tenant = await this.tenantManager.get(tenantId);
+        const quotas = getPlanQuotas(tenant.plan);
+        const limit = quotas[metric];
+        if (limit === -1)
+            return 0;
+        if (limit === 0)
+            return 100;
+        const current = this.getUsage(tenantId, metric);
+        return Math.round((current / limit) * 100);
+    }
+}
+//# sourceMappingURL=quotas.js.map

package/dist/quotas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quotas.js","sourceRoot":"","sources":["../src/quotas.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAO3C;;;GAGG;AACH,MAAM,OAAO,aAAa;IAChB,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC/C,aAAa,CAAgB;IAErC,YAAY,OAA6B;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,MAA0B,EAAE,SAAS,GAAG,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7B,qBAAqB;QACrB,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,OAAO,GAAG,SAAS,GAAG,KAAK,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAK,GAAG,CAAC;QAChD,IAAI,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;QAEzC,OAAO;YACL,QAAQ;YACR,MAAM;YACN,KAAK,EAAE,OAAO,GAAG,KAAK;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,QAAgB,EAAE,MAAc;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,CAAC;QAE5B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,QAAgB;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,QAAgB,EAAE,MAA0B;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAE7B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/tenant.d.ts

@@ -0,0 +1,21 @@
+import type { Tenant, TenantPlan, CloudConfig } from './types.js';
+export interface TenantManagerOptions {
+    config: CloudConfig;
+}
+export declare class TenantManager {
+    private tenants;
+    private config;
+    constructor(options: TenantManagerOptions);
+    create(email: string, name: string, plan?: TenantPlan): Promise<Tenant>;
+    get(id: string): Promise<Tenant>;
+    getByEmail(email: string): Promise<Tenant | null>;
+    update(id: string, updates: Partial<Pick<Tenant, 'name' | 'email' | 'plan'>>): Promise<Tenant>;
+    suspend(id: string, reason: string): Promise<Tenant>;
+    reactivate(id: string): Promise<Tenant>;
+    delete(id: string): Promise<boolean>;
+    list(): Promise<Tenant[]>;
+    getQuotas(plan: TenantPlan): import("./types.js").TenantQuotas;
+    private persistTenant;
+    loadFromDisk(): Promise<void>;
+}
+//# sourceMappingURL=tenant.d.ts.map

package/dist/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIlE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,MAAM,CAAc;gBAEhB,OAAO,EAAE,oBAAoB;IAInC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,UAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB/E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAQhC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASjD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAa9F,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYpD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYvC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWpC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI/B,SAAS,CAAC,IAAI,EAAE,UAAU;YAIZ,aAAa;IAMrB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;CAmBpC"}

package/dist/tenant.js

@@ -0,0 +1,121 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+import { TenantNotFoundError } from './types.js';
+import { getPlanQuotas } from './plans.js';
+export class TenantManager {
+    tenants = new Map();
+    config;
+    constructor(options) {
+        this.config = options.config;
+    }
+    async create(email, name, plan = 'free') {
+        const id = `tenant-${crypto.randomUUID()}`;
+        const dataDir = path.join(this.config.baseDataDir, id);
+        await fs.mkdir(dataDir, { recursive: true });
+        const tenant = {
+            id,
+            name,
+            email,
+            plan,
+            status: 'active',
+            dataDir,
+            createdAt: new Date().toISOString(),
+            updatedAt: new Date().toISOString(),
+        };
+        this.tenants.set(id, tenant);
+        await this.persistTenant(tenant);
+        return tenant;
+    }
+    async get(id) {
+        const tenant = this.tenants.get(id);
+        if (!tenant) {
+            throw new TenantNotFoundError(id);
+        }
+        return tenant;
+    }
+    async getByEmail(email) {
+        for (const tenant of this.tenants.values()) {
+            if (tenant.email === email) {
+                return tenant;
+            }
+        }
+        return null;
+    }
+    async update(id, updates) {
+        const tenant = await this.get(id);
+        if (updates.name !== undefined)
+            tenant.name = updates.name;
+        if (updates.email !== undefined)
+            tenant.email = updates.email;
+        if (updates.plan !== undefined)
+            tenant.plan = updates.plan;
+        tenant.updatedAt = new Date().toISOString();
+        this.tenants.set(id, tenant);
+        await this.persistTenant(tenant);
+        return tenant;
+    }
+    async suspend(id, reason) {
+        const tenant = await this.get(id);
+        tenant.status = 'suspended';
+        tenant.suspendedAt = new Date().toISOString();
+        tenant.suspendReason = reason;
+        tenant.updatedAt = new Date().toISOString();
+        this.tenants.set(id, tenant);
+        await this.persistTenant(tenant);
+        return tenant;
+    }
+    async reactivate(id) {
+        const tenant = await this.get(id);
+        tenant.status = 'active';
+        tenant.suspendedAt = undefined;
+        tenant.suspendReason = undefined;
+        tenant.updatedAt = new Date().toISOString();
+        this.tenants.set(id, tenant);
+        await this.persistTenant(tenant);
+        return tenant;
+    }
+    async delete(id) {
+        const tenant = this.tenants.get(id);
+        if (!tenant)
+            return false;
+        tenant.status = 'deleted';
+        tenant.updatedAt = new Date().toISOString();
+        this.tenants.set(id, tenant);
+        await this.persistTenant(tenant);
+        return true;
+    }
+    async list() {
+        return Array.from(this.tenants.values()).filter(t => t.status !== 'deleted');
+    }
+    getQuotas(plan) {
+        return getPlanQuotas(plan);
+    }
+    async persistTenant(tenant) {
+        const tenantFile = path.join(tenant.dataDir, 'tenant.json');
+        await fs.mkdir(path.dirname(tenantFile), { recursive: true });
+        await fs.writeFile(tenantFile, JSON.stringify(tenant, null, 2), 'utf-8');
+    }
+    async loadFromDisk() {
+        try {
+            const entries = await fs.readdir(this.config.baseDataDir, { withFileTypes: true });
+            for (const entry of entries) {
+                if (entry.isDirectory() && entry.name.startsWith('tenant-')) {
+                    const tenantFile = path.join(this.config.baseDataDir, entry.name, 'tenant.json');
+                    try {
+                        const content = await fs.readFile(tenantFile, 'utf-8');
+                        const tenant = JSON.parse(content);
+                        this.tenants.set(tenant.id, tenant);
+                    }
+                    catch {
+                        // Skip corrupt tenant files
+                    }
+                }
+            }
+        }
+        catch {
+            // Base data dir doesn't exist yet
+        }
+    }
+}
+//# sourceMappingURL=tenant.js.map

package/dist/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAM3C,MAAM,OAAO,aAAa;IAChB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,MAAM,CAAc;IAE5B,YAAY,OAA6B;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,OAAmB,MAAM;QACjE,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAEvD,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,MAAM,MAAM,GAAW;YACrB,EAAE;YACF,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,QAAQ;YAChB,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC3B,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAAyD;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAElC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC3D,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAc;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QAC5B,MAAM,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;QAC9B,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC;QAC/B,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC/E,CAAC;IAED,SAAS,CAAC,IAAgB;QACxB,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;oBACjF,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;wBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC;wBAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACP,4BAA4B;oBAC9B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,101 @@
+/** Tenant plan tiers */
+export type TenantPlan = 'free' | 'pro' | 'team' | 'enterprise';
+/** Tenant status */
+export type TenantStatus = 'active' | 'suspended' | 'pending' | 'deleted';
+/** A cloud tenant */
+export interface Tenant {
+    id: string;
+    name: string;
+    email: string;
+    plan: TenantPlan;
+    status: TenantStatus;
+    stripeCustomerId?: string;
+    stripeSubscriptionId?: string;
+    dataDir: string;
+    createdAt: string;
+    updatedAt: string;
+    suspendedAt?: string;
+    suspendReason?: string;
+}
+/** Quota limits for a given plan */
+export interface TenantQuotas {
+    maxMessages: number;
+    maxSessions: number;
+    maxStorageMb: number;
+    maxPlugins: number;
+    maxBehaviors: number;
+    maxChannels: number;
+    maxAgents: number;
+}
+/** A single usage record */
+export interface UsageRecord {
+    tenantId: string;
+    metric: string;
+    value: number;
+    timestamp: string;
+}
+/** Billing information */
+export interface BillingInfo {
+    tenantId: string;
+    plan: TenantPlan;
+    stripeCustomerId?: string;
+    stripeSubscriptionId?: string;
+    currentPeriodStart?: string;
+    currentPeriodEnd?: string;
+    paymentMethodLast4?: string;
+    paymentMethodBrand?: string;
+}
+/** Cloud-specific configuration */
+export interface CloudConfig {
+    enabled: boolean;
+    baseDataDir: string;
+    jwtSecret: string;
+    stripeSecretKey?: string;
+    stripeWebhookSecret?: string;
+    domain: string;
+}
+/** Plan definition with pricing */
+export interface PlanDefinition {
+    plan: TenantPlan;
+    name: string;
+    priceMonthly: number;
+    priceYearly: number;
+    quotas: TenantQuotas;
+    features: string[];
+}
+/** Stripe SDK interface for dependency injection */
+export interface StripeClient {
+    createCustomer(email: string, name: string): Promise<{
+        id: string;
+    }>;
+    createSubscription(customerId: string, priceId: string): Promise<{
+        id: string;
+        status: string;
+    }>;
+    cancelSubscription(subscriptionId: string): Promise<void>;
+    getInvoices(customerId: string): Promise<Array<{
+        id: string;
+        amount: number;
+        status: string;
+        created: string;
+    }>>;
+    createPaymentIntent(customerId: string, amount: number): Promise<{
+        clientSecret: string;
+    }>;
+}
+/** Quota exceeded error */
+export declare class QuotaExceededError extends Error {
+    readonly metric: string;
+    readonly limit: number;
+    readonly current: number;
+    constructor(metric: string, limit: number, current: number);
+}
+/** Tenant not found error */
+export declare class TenantNotFoundError extends Error {
+    constructor(tenantId: string);
+}
+/** Tenant suspended error */
+export declare class TenantSuspendedError extends Error {
+    constructor(tenantId: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,YAAY,CAAC;AAEhE,oBAAoB;AACpB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1E,qBAAqB;AACrB,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oCAAoC;AACpC,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4BAA4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mCAAmC;AACnC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjG,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7C,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC,CAAC;IACJ,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,2BAA2B;AAC3B,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,MAAM,EAAE,MAAM;aACd,KAAK,EAAE,MAAM;aACb,OAAO,EAAE,MAAM;gBAFf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM;CAKlC;AAED,6BAA6B;AAC7B,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,QAAQ,EAAE,MAAM;CAI7B;AAED,6BAA6B;AAC7B,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,QAAQ,EAAE,MAAM;CAI7B"}

package/dist/types.js

@@ -0,0 +1,28 @@
+/** Quota exceeded error */
+export class QuotaExceededError extends Error {
+    metric;
+    limit;
+    current;
+    constructor(metric, limit, current) {
+        super(`Quota exceeded for ${metric}: ${current}/${limit}`);
+        this.metric = metric;
+        this.limit = limit;
+        this.current = current;
+        this.name = 'QuotaExceededError';
+    }
+}
+/** Tenant not found error */
+export class TenantNotFoundError extends Error {
+    constructor(tenantId) {
+        super(`Tenant not found: ${tenantId}`);
+        this.name = 'TenantNotFoundError';
+    }
+}
+/** Tenant suspended error */
+export class TenantSuspendedError extends Error {
+    constructor(tenantId) {
+        super(`Tenant is suspended: ${tenantId}`);
+        this.name = 'TenantSuspendedError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAuFA,2BAA2B;AAC3B,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACA;IACA;IAHlB,YACkB,MAAc,EACd,KAAa,EACb,OAAe;QAE/B,KAAK,CAAC,sBAAsB,MAAM,KAAK,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QAJ3C,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAQ;QACb,YAAO,GAAP,OAAO,CAAQ;QAG/B,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,6BAA6B;AAC7B,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,QAAgB;QAC1B,KAAK,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,6BAA6B;AAC7B,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,QAAgB;QAC1B,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF"}

package/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@auxiora/cloud",
+  "version": "1.0.0",
+  "description": "Multi-tenant cloud layer with isolation, billing, and quotas",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@auxiora/core": "1.0.0",
+    "@auxiora/logger": "1.0.0",
+    "@auxiora/audit": "1.0.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  }
+}

package/src/billing.ts

@@ -0,0 +1,142 @@
+import type { BillingInfo, StripeClient, TenantPlan } from './types.js';
+import type { TenantManager } from './tenant.js';
+import { getPlanDefinition } from './plans.js';
+
+export interface BillingManagerOptions {
+  tenantManager: TenantManager;
+  stripe?: StripeClient;
+}
+
+/**
+ * BillingManager handles Stripe integration for subscription management.
+ * Uses dependency injection for the Stripe SDK to enable easy testing.
+ */
+export class BillingManager {
+  private tenantManager: TenantManager;
+  private stripe?: StripeClient;
+
+  constructor(options: BillingManagerOptions) {
+    this.tenantManager = options.tenantManager;
+    this.stripe = options.stripe;
+  }
+
+  /**
+   * Create a Stripe customer for a tenant.
+   */
+  async createCustomer(tenantId: string): Promise<string> {
+    if (!this.stripe) {
+      throw new Error('Stripe not configured');
+    }
+
+    const tenant = await this.tenantManager.get(tenantId);
+    const customer = await this.stripe.createCustomer(tenant.email, tenant.name);
+
+    await this.tenantManager.update(tenantId, {} as any);
+    // Store stripeCustomerId directly
+    const updated = await this.tenantManager.get(tenantId);
+    (updated as any).stripeCustomerId = customer.id;
+
+    return customer.id;
+  }
+
+  /**
+   * Create a subscription for a tenant.
+   */
+  async createSubscription(tenantId: string, plan: TenantPlan): Promise<{ subscriptionId: string; status: string }> {
+    if (!this.stripe) {
+      throw new Error('Stripe not configured');
+    }
+
+    const tenant = await this.tenantManager.get(tenantId);
+    if (!tenant.stripeCustomerId) {
+      throw new Error('No Stripe customer ID. Call createCustomer first.');
+    }
+
+    const planDef = getPlanDefinition(plan);
+    const priceId = `price_${plan}_monthly`;
+
+    const subscription = await this.stripe.createSubscription(tenant.stripeCustomerId, priceId);
+
+    // Update tenant plan
+    await this.tenantManager.update(tenantId, { plan });
+
+    return {
+      subscriptionId: subscription.id,
+      status: subscription.status,
+    };
+  }
+
+  /**
+   * Cancel a tenant's subscription.
+   */
+  async cancelSubscription(tenantId: string): Promise<void> {
+    if (!this.stripe) {
+      throw new Error('Stripe not configured');
+    }
+
+    const tenant = await this.tenantManager.get(tenantId);
+    if (!tenant.stripeSubscriptionId) {
+      throw new Error('No active subscription');
+    }
+
+    await this.stripe.cancelSubscription(tenant.stripeSubscriptionId);
+    await this.tenantManager.update(tenantId, { plan: 'free' });
+  }
+
+  /**
+   * Get billing info for a tenant.
+   */
+  async getBillingInfo(tenantId: string): Promise<BillingInfo> {
+    const tenant = await this.tenantManager.get(tenantId);
+
+    return {
+      tenantId,
+      plan: tenant.plan,
+      stripeCustomerId: tenant.stripeCustomerId,
+      stripeSubscriptionId: tenant.stripeSubscriptionId,
+    };
+  }
+
+  /**
+   * Get invoices for a tenant.
+   */
+  async getInvoices(tenantId: string): Promise<Array<{ id: string; amount: number; status: string; created: string }>> {
+    if (!this.stripe) {
+      return [];
+    }
+
+    const tenant = await this.tenantManager.get(tenantId);
+    if (!tenant.stripeCustomerId) {
+      return [];
+    }
+
+    return this.stripe.getInvoices(tenant.stripeCustomerId);
+  }
+
+  /**
+   * Handle a Stripe webhook event.
+   */
+  async handleWebhookEvent(eventType: string, data: Record<string, unknown>): Promise<void> {
+    switch (eventType) {
+      case 'customer.subscription.deleted': {
+        const customerId = data.customer as string;
+        // Find tenant by customer ID and downgrade
+        const tenants = await this.tenantManager.list();
+        const tenant = tenants.find(t => t.stripeCustomerId === customerId);
+        if (tenant) {
+          await this.tenantManager.update(tenant.id, { plan: 'free' });
+        }
+        break;
+      }
+      case 'invoice.payment_failed': {
+        const customerId = data.customer as string;
+        const tenants = await this.tenantManager.list();
+        const tenant = tenants.find(t => t.stripeCustomerId === customerId);
+        if (tenant) {
+          await this.tenantManager.suspend(tenant.id, 'Payment failed');
+        }
+        break;
+      }
+    }
+  }
+}

package/src/index.ts

@@ -0,0 +1,21 @@
+export { TenantManager, type TenantManagerOptions } from './tenant.js';
+export { TenantIsolation, type TenantContext, type IsolationOptions } from './isolation.js';
+export { QuotaEnforcer, type QuotaEnforcerOptions } from './quotas.js';
+export { BillingManager, type BillingManagerOptions } from './billing.js';
+export { getPlanDefinition, getPlanQuotas, getAllPlans, isValidPlan } from './plans.js';
+export type {
+  Tenant,
+  TenantPlan,
+  TenantStatus,
+  TenantQuotas,
+  UsageRecord,
+  BillingInfo,
+  CloudConfig,
+  PlanDefinition,
+  StripeClient,
+} from './types.js';
+export {
+  QuotaExceededError,
+  TenantNotFoundError,
+  TenantSuspendedError,
+} from './types.js';

package/src/isolation.ts

@@ -0,0 +1,69 @@
+import type { Tenant, CloudConfig } from './types.js';
+import { TenantNotFoundError, TenantSuspendedError } from './types.js';
+import type { TenantManager } from './tenant.js';
+
+export interface TenantContext {
+  tenantId: string;
+  tenant: Tenant;
+}
+
+export interface IsolationOptions {
+  tenantManager: TenantManager;
+  config: CloudConfig;
+}
+
+/**
+ * TenantIsolation provides middleware-like extraction of tenant context
+ * from JWT tokens and scoping of all operations to the tenant's data.
+ */
+export class TenantIsolation {
+  private tenantManager: TenantManager;
+
+  constructor(options: IsolationOptions) {
+    this.tenantManager = options.tenantManager;
+  }
+
+  /**
+   * Extract tenant context from a JWT payload.
+   * Validates the tenant exists and is active.
+   */
+  async extractTenant(jwtPayload: { tenantId?: string; sub?: string }): Promise<TenantContext> {
+    const tenantId = jwtPayload.tenantId || jwtPayload.sub;
+    if (!tenantId) {
+      throw new TenantNotFoundError('unknown');
+    }
+
+    const tenant = await this.tenantManager.get(tenantId);
+
+    if (tenant.status === 'suspended') {
+      throw new TenantSuspendedError(tenantId);
+    }
+
+    if (tenant.status === 'deleted') {
+      throw new TenantNotFoundError(tenantId);
+    }
+
+    return { tenantId, tenant };
+  }
+
+  /**
+   * Scope a file path to the tenant's data directory.
+   * Prevents path traversal outside the tenant's sandbox.
+   */
+  scopePath(tenant: Tenant, relativePath: string): string {
+    const resolved = new URL(relativePath, `file://${tenant.dataDir}/`).pathname;
+
+    if (!resolved.startsWith(tenant.dataDir)) {
+      throw new Error('Path traversal attempt detected');
+    }
+
+    return resolved;
+  }
+
+  /**
+   * Validate that a tenant can access a given resource.
+   */
+  validateAccess(context: TenantContext, resourceTenantId: string): boolean {
+    return context.tenantId === resourceTenantId;
+  }
+}