@digilogiclabs/platform-core 1.6.0 → 1.8.0

package/dist/{index-CkyVz0hQ.d.ts → env-jqNJdZVt.d.ts}

@@ -1,5 +1,269 @@
 import { z } from 'zod';
 
+/**
+ * Beta Access Management Interface
+ *
+ * Provides a vendor-agnostic way to manage beta/early-access programs.
+ * Handles invite codes, access gating, settings, and analytics across
+ * all DLL Platform applications.
+ *
+ * Features:
+ * - Beta mode settings (mode, require code, custom message)
+ * - Invite code management (create, validate, consume, revoke)
+ * - Multi-use codes with usage tracking and expiration
+ * - Profile tagging (beta tester flag, join date)
+ * - Analytics (usage stats, per-code reports)
+ * - Live toggling (closed beta → open beta → public launch)
+ *
+ * @example
+ * ```typescript
+ * import { MemoryBeta } from '@digilogiclabs/platform-core';
+ *
+ * const beta = new MemoryBeta();
+ *
+ * // Check if beta is active
+ * const settings = await beta.getSettings();
+ * if (settings.requireInviteCode) {
+ *   const result = await beta.validateCode('BETA2026');
+ *   if (result.valid) {
+ *     await beta.consumeCode('BETA2026', 'user_123');
+ *   }
+ * }
+ *
+ * // Create invite codes
+ * const codes = await beta.createCodes({
+ *   count: 10,
+ *   prefix: 'DLL',
+ *   maxUses: 5,
+ *   createdBy: 'admin',
+ * });
+ *
+ * // Transition to public launch
+ * await beta.updateSettings({ betaMode: false, requireInviteCode: false });
+ * ```
+ */
+/** Beta program settings */
+interface BetaSettings {
+    /** Whether the app is in beta mode (shows beta messaging) */
+    betaMode: boolean;
+    /** Whether an invite code is required to sign up */
+    requireInviteCode: boolean;
+    /** Custom message to display during beta */
+    betaMessage: string;
+}
+/** Options for updating beta settings */
+interface UpdateBetaSettingsOptions {
+    betaMode?: boolean;
+    requireInviteCode?: boolean;
+    betaMessage?: string;
+    updatedBy?: string;
+}
+/** A beta invite code */
+interface BetaInviteCode {
+    /** Unique identifier */
+    id: string;
+    /** The invite code string (normalized to uppercase) */
+    code: string;
+    /** Maximum number of times this code can be used */
+    maxUses: number;
+    /** Current number of times this code has been used */
+    currentUses: number;
+    /** Optional expiration date */
+    expiresAt: Date | null;
+    /** Who created this code */
+    createdBy: string;
+    /** Admin notes about this code */
+    notes: string;
+    /** Whether this code is active (soft delete) */
+    isActive: boolean;
+    /** When this code was created */
+    createdAt: Date;
+}
+/** Options for creating invite codes */
+interface CreateBetaCodesOptions {
+    /** Number of codes to generate (max 50) */
+    count?: number;
+    /** Prefix for generated codes (e.g., 'DLL' → 'DLL-A1B2C3D4') */
+    prefix?: string;
+    /** Specific code string (for named codes like 'BETA2026') */
+    code?: string;
+    /** Maximum uses per code (default: 1) */
+    maxUses?: number;
+    /** Optional expiration date */
+    expiresAt?: Date;
+    /** Who is creating the codes */
+    createdBy: string;
+    /** Admin notes */
+    notes?: string;
+}
+/** Filter for listing invite codes */
+type BetaCodeStatus = "unused" | "partial" | "exhausted" | "expired" | "revoked";
+interface ListBetaCodesOptions {
+    /** Filter by status */
+    status?: BetaCodeStatus;
+    /** Filter by active state */
+    isActive?: boolean;
+    /** Pagination offset */
+    offset?: number;
+    /** Pagination limit */
+    limit?: number;
+}
+/** Result of validating a beta code (read-only, does not consume) */
+interface BetaValidationResult {
+    /** Whether the code is valid */
+    valid: boolean;
+    /** Human-readable message */
+    message: string;
+    /** The normalized code (if valid) */
+    code?: string;
+    /** Remaining uses (if valid) */
+    remainingUses?: number;
+}
+/** Result of consuming a beta code */
+interface BetaConsumeResult {
+    /** Whether the code was successfully consumed */
+    success: boolean;
+    /** Human-readable message */
+    message: string;
+}
+/** Beta tester profile metadata */
+interface BetaTester {
+    /** User identifier */
+    userId: string;
+    /** The invite code they used */
+    inviteCode: string;
+    /** Whether they are flagged as a beta tester */
+    isBetaTester: boolean;
+    /** When they joined beta */
+    betaJoinedAt: Date;
+}
+/** Aggregate beta program statistics */
+interface BetaStats {
+    /** Total number of beta testers */
+    totalBetaTesters: number;
+    /** Total invite codes created */
+    totalCodes: number;
+    /** Number of active (usable) codes */
+    activeCodes: number;
+    /** Total uses across all codes */
+    totalUses: number;
+    /** Total remaining capacity across all codes */
+    totalRemaining: number;
+    /** Earliest beta signup */
+    firstBetaSignup: Date | null;
+    /** Most recent beta signup */
+    latestBetaSignup: Date | null;
+}
+/** Per-code usage report */
+interface BetaCodeUsageReport {
+    /** The invite code */
+    code: string;
+    /** Admin notes */
+    notes: string;
+    /** Maximum uses */
+    maxUses: number;
+    /** Current uses */
+    currentUses: number;
+    /** Remaining uses */
+    remainingUses: number;
+    /** Usage percentage (0-100) */
+    usagePercent: number;
+    /** Whether the code is active */
+    isActive: boolean;
+    /** Expiration date */
+    expiresAt: Date | null;
+    /** Creation date */
+    createdAt: Date;
+}
+/** Configuration for beta adapters */
+interface BetaConfig {
+    /** Default beta mode on initialization */
+    defaultBetaMode?: boolean;
+    /** Default require invite code on initialization */
+    defaultRequireInviteCode?: boolean;
+    /** Default beta message */
+    defaultBetaMessage?: string;
+    /** Code prefix for generated codes (e.g., 'DLL', 'WIAN') */
+    codePrefix?: string;
+    /** Maximum codes per createCodes call (default: 50) */
+    maxCodesPerBatch?: number;
+}
+interface IBeta {
+    /** Get current beta program settings */
+    getSettings(): Promise<BetaSettings>;
+    /** Update beta program settings (live toggle, no redeploy needed) */
+    updateSettings(options: UpdateBetaSettingsOptions): Promise<void>;
+    /** Create one or more invite codes */
+    createCodes(options: CreateBetaCodesOptions): Promise<BetaInviteCode[]>;
+    /** List invite codes with optional filtering */
+    listCodes(options?: ListBetaCodesOptions): Promise<BetaInviteCode[]>;
+    /** Get a specific invite code by its code string */
+    getCode(code: string): Promise<BetaInviteCode | null>;
+    /** Revoke an invite code (soft delete — sets isActive to false) */
+    revokeCode(code: string): Promise<void>;
+    /**
+     * Validate an invite code (read-only, does not consume).
+     * If requireInviteCode is false, always returns { valid: true }.
+     */
+    validateCode(code: string): Promise<BetaValidationResult>;
+    /**
+     * Consume an invite code for a user (increments usage, tags user).
+     * Should be called after successful signup, not before.
+     */
+    consumeCode(code: string, userId: string): Promise<BetaConsumeResult>;
+    /** Check if a user is a beta tester */
+    isBetaTester(userId: string): Promise<boolean>;
+    /** Get beta tester details for a user */
+    getBetaTester(userId: string): Promise<BetaTester | null>;
+    /** List all beta testers */
+    listBetaTesters(options?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<BetaTester[]>;
+    /** Get aggregate beta program statistics */
+    getStats(): Promise<BetaStats>;
+    /** Get per-code usage reports */
+    getCodeUsageReports(): Promise<BetaCodeUsageReport[]>;
+    /** Check beta service health */
+    healthCheck(): Promise<boolean>;
+}
+/** Generate a random hex code with prefix (e.g., 'DLL-A1B2C3D4') */
+declare function generateBetaCode(prefix?: string): string;
+/** Normalize a code for comparison (trim + uppercase) */
+declare function normalizeBetaCode(code: string): string;
+/** Generate a unique ID for beta records */
+declare function generateBetaId(): string;
+declare class MemoryBeta implements IBeta {
+    private settings;
+    private codes;
+    private testers;
+    private config;
+    constructor(config?: BetaConfig);
+    getSettings(): Promise<BetaSettings>;
+    updateSettings(options: UpdateBetaSettingsOptions): Promise<void>;
+    createCodes(options: CreateBetaCodesOptions): Promise<BetaInviteCode[]>;
+    listCodes(options?: ListBetaCodesOptions): Promise<BetaInviteCode[]>;
+    getCode(code: string): Promise<BetaInviteCode | null>;
+    revokeCode(code: string): Promise<void>;
+    validateCode(code: string): Promise<BetaValidationResult>;
+    consumeCode(code: string, userId: string): Promise<BetaConsumeResult>;
+    isBetaTester(userId: string): Promise<boolean>;
+    getBetaTester(userId: string): Promise<BetaTester | null>;
+    listBetaTesters(options?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<BetaTester[]>;
+    getStats(): Promise<BetaStats>;
+    getCodeUsageReports(): Promise<BetaCodeUsageReport[]>;
+    healthCheck(): Promise<boolean>;
+    /** Clear all data (for testing) */
+    clear(): void;
+    /** Get the number of stored codes */
+    get codeCount(): number;
+    /** Get the number of beta testers */
+    get testerCount(): number;
+}
+
 /**
  * Security Utilities
  *
@@ -464,7 +728,7 @@ declare function buildKeycloakCallbacks(config: KeycloakCallbacksConfig): {
      *
      * Compatible with Auth.js v5 JWT callback signature.
      */
-    jwt({ token, user, account }: {
+    jwt({ token, user, account, }: {
         token: any;
         user?: any;
         account?: any;
@@ -1279,6 +1543,100 @@ declare function createAuditLogger(options?: OpsAuditLoggerOptions): {
     };
 };
 
+/**
+ * Beta Client Utilities
+ *
+ * Shared client-side helpers for beta access management.
+ * These run in the browser and talk to your app's beta API endpoints.
+ *
+ * Standardizes the pattern used across DLL, WIAN, and future apps:
+ * - Fetch beta settings from API
+ * - Validate invite codes
+ * - Store/retrieve beta code across OAuth redirect flows (sessionStorage)
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   fetchBetaSettings,
+ *   validateBetaCode,
+ *   storeBetaCode,
+ *   getStoredBetaCode,
+ *   clearStoredBetaCode,
+ * } from '@digilogiclabs/platform-core/auth';
+ *
+ * // On sign-in page mount
+ * const settings = await fetchBetaSettings();
+ * if (settings.requireInviteCode) {
+ *   const result = await validateBetaCode(userInput);
+ *   if (result.valid) {
+ *     storeBetaCode(userInput); // Survives OAuth redirect
+ *     // Proceed with sign-in
+ *   }
+ * }
+ * ```
+ */
+
+interface BetaClientConfig {
+    /** Base URL for API calls (default: '' for same-origin) */
+    baseUrl?: string;
+    /** API endpoint for settings (default: '/api/beta-settings') */
+    settingsEndpoint?: string;
+    /** API endpoint for validation (default: '/api/validate-beta-code') */
+    validateEndpoint?: string;
+    /** sessionStorage key for storing beta code (default: 'beta_code') */
+    storageKey?: string;
+    /** Default settings to use when fetch fails */
+    failSafeDefaults?: Partial<BetaSettings>;
+}
+/**
+ * Create a configured beta client with app-specific settings.
+ *
+ * @example
+ * ```typescript
+ * // DLL app
+ * const betaClient = createBetaClient({
+ *   storageKey: 'dll_beta_code',
+ *   validateEndpoint: '/api/validate-beta-code',
+ * });
+ *
+ * // WIAN app
+ * const betaClient = createBetaClient({
+ *   storageKey: 'wian_beta_code',
+ *   validateEndpoint: '/api/validate-invite-code',
+ * });
+ * ```
+ */
+declare function createBetaClient(config?: BetaClientConfig): {
+    fetchSettings: () => Promise<BetaSettings>;
+    validateCode: (code: string) => Promise<BetaValidationResult>;
+    storeCode: (code: string) => void;
+    getStoredCode: () => string | null;
+    clearStoredCode: () => void;
+};
+/**
+ * Fetch beta settings from the server.
+ * Returns fail-safe defaults if the fetch fails.
+ */
+declare function fetchBetaSettings(config?: BetaClientConfig): Promise<BetaSettings>;
+/**
+ * Validate a beta invite code against the server.
+ * Handles rate limiting (429) gracefully.
+ */
+declare function validateBetaCode(code: string, config?: BetaClientConfig): Promise<BetaValidationResult>;
+/**
+ * Store a validated beta code in sessionStorage.
+ * Used to pass the code through OAuth redirect flows.
+ */
+declare function storeBetaCode(code: string, config?: BetaClientConfig): void;
+/**
+ * Retrieve stored beta code from sessionStorage.
+ */
+declare function getStoredBetaCode(config?: BetaClientConfig): string | null;
+/**
+ * Clear stored beta code from sessionStorage.
+ */
+declare function clearStoredBetaCode(config?: BetaClientConfig): void;
+
 /**
  * Environment Variable Helpers
  *
@@ -1364,4 +1722,4 @@ declare function checkEnvVars(config: EnvValidationConfig): EnvValidationResult;
  */
 declare function getEnvSummary(keys: string[]): Record<string, boolean>;
 
-export { type ApiSecurityContext as $, ApiErrorCode as A, type KeycloakConfig as B, CommonApiErrors as C, type KeycloakTokenSet as D, buildKeycloakCallbacks as E, buildAuthCookies as F, buildRedirectCallback as G, HTML_TAG_PATTERN as H, type KeycloakCallbacksConfig as I, type KeycloakJwtFields as J, KEYCLOAK_DEFAULT_ROLES as K, type AuthCookiesConfig as L, resolveRateLimitIdentifier as M, extractClientIp as N, buildRateLimitHeaders as O, PG_ERROR_MAP as P, buildErrorBody as Q, type RedirectCallbackConfig as R, StandardRateLimitPresets as S, type TokenRefreshResult as T, URL_PROTOCOL_PATTERN as U, type AuthMethod as V, WrapperPresets as W, type RouteAuditConfig as X, type RateLimitPreset as Y, type ApiSecurityConfig as Z, type SecuritySession as _, containsHtml as a, EmailSchema as a0, PasswordSchema as a1, SlugSchema as a2, PhoneSchema as a3, PersonNameSchema as a4, PaginationSchema as a5, DateRangeSchema as a6, SearchQuerySchema as a7, LoginSchema as a8, SignupSchema as a9, type RateLimitStore as aA, type RateLimitOptions as aB, createAuditLogger as aC, createAuditActor as aD, extractAuditIp as aE, extractAuditUserAgent as aF, extractAuditRequestId as aG, StandardAuditActions as aH, type OpsAuditActor as aI, type OpsAuditResource as aJ, type OpsAuditEvent as aK, type OpsAuditRecord as aL, type OpsAuditLoggerOptions as aM, type AuditRequest as aN, type StandardAuditActionType as aO, getRequiredEnv as aP, getOptionalEnv as aQ, getBoolEnv as aR, getIntEnv as aS, validateEnvVars as aT, checkEnvVars as aU, getEnvSummary as aV, type EnvValidationConfig as aW, type EnvValidationResult as aX, createSafeTextSchema as aa, type EmailInput as ab, type PaginationInput as ac, type DateRangeInput as ad, type SearchQueryInput as ae, type LoginInput as af, type SignupInput as ag, createFeatureFlags as ah, detectStage as ai, buildAllowlist as aj, isAllowlisted as ak, type DeploymentStage as al, type FlagValue as am, type FlagDefinition as an, type FlagDefinitions as ao, type ResolvedFlags as ap, type AllowlistConfig as aq, checkRateLimit as ar, getRateLimitStatus as as, resetRateLimitForKey as at, createMemoryRateLimitStore as au, buildRateLimitResponseHeaders as av, resolveIdentifier as aw, CommonRateLimits as ax, type RateLimitRule as ay, type RateLimitCheckResult as az, sanitizeForEmail as b, containsUrls as c, defangUrl as d, escapeHtml as e, constantTimeEqual as f, sanitizeApiError as g, getCorrelationId as h, URL_DOMAIN_PATTERN as i, ApiError as j, isApiError as k, classifyError as l, buildPagination as m, type ApiErrorCodeType as n, type ApiSuccessResponse as o, type ApiPaginatedResponse as p, parseKeycloakRoles as q, hasRole as r, stripHtml as s, hasAnyRole as t, hasAllRoles as u, isTokenExpired as v, buildTokenRefreshParams as w, getTokenEndpoint as x, getEndSessionEndpoint as y, refreshKeycloakToken as z };
+export { type SecuritySession as $, ApiError as A, parseKeycloakRoles as B, CommonApiErrors as C, hasRole as D, type EnvValidationConfig as E, hasAnyRole as F, hasAllRoles as G, isTokenExpired as H, buildTokenRefreshParams as I, getTokenEndpoint as J, type KeycloakConfig as K, getEndSessionEndpoint as L, refreshKeycloakToken as M, type KeycloakCallbacksConfig as N, type KeycloakJwtFields as O, type AuthCookiesConfig as P, buildAuthCookies as Q, type RateLimitStore as R, type RedirectCallbackConfig as S, type TokenRefreshResult as T, buildRedirectCallback as U, buildKeycloakCallbacks as V, type AuthMethod as W, type RouteAuditConfig as X, type RateLimitPreset as Y, StandardRateLimitPresets as Z, type ApiSecurityConfig as _, type RateLimitRule as a, type BetaSettings as a$, type ApiSecurityContext as a0, resolveRateLimitIdentifier as a1, extractClientIp as a2, buildRateLimitHeaders as a3, buildErrorBody as a4, WrapperPresets as a5, EmailSchema as a6, PasswordSchema as a7, SlugSchema as a8, PhoneSchema as a9, checkRateLimit as aA, getRateLimitStatus as aB, resetRateLimitForKey as aC, buildRateLimitResponseHeaders as aD, resolveIdentifier as aE, type OpsAuditActor as aF, type OpsAuditResource as aG, type OpsAuditEvent as aH, type OpsAuditRecord as aI, type OpsAuditLoggerOptions as aJ, type AuditRequest as aK, StandardAuditActions as aL, type StandardAuditActionType as aM, extractAuditIp as aN, extractAuditUserAgent as aO, extractAuditRequestId as aP, createAuditActor as aQ, createAuditLogger as aR, type BetaClientConfig as aS, createBetaClient as aT, fetchBetaSettings as aU, validateBetaCode as aV, storeBetaCode as aW, getStoredBetaCode as aX, clearStoredBetaCode as aY, type IBeta as aZ, type BetaConfig as a_, PersonNameSchema as aa, createSafeTextSchema as ab, PaginationSchema as ac, DateRangeSchema as ad, SearchQuerySchema as ae, LoginSchema as af, SignupSchema as ag, type EmailInput as ah, type PaginationInput as ai, type DateRangeInput as aj, type SearchQueryInput as ak, type LoginInput as al, type SignupInput as am, type DeploymentStage as an, type FlagValue as ao, type FlagDefinition as ap, type FlagDefinitions as aq, type ResolvedFlags as ar, type AllowlistConfig as as, detectStage as at, createFeatureFlags as au, buildAllowlist as av, isAllowlisted as aw, type RateLimitCheckResult as ax, CommonRateLimits as ay, createMemoryRateLimitStore as az, type RateLimitOptions as b, type UpdateBetaSettingsOptions as b0, type CreateBetaCodesOptions as b1, type BetaInviteCode as b2, type ListBetaCodesOptions as b3, type BetaValidationResult as b4, type BetaConsumeResult as b5, type BetaTester as b6, type BetaStats as b7, type BetaCodeUsageReport as b8, MemoryBeta as b9, generateBetaCode as ba, normalizeBetaCode as bb, generateBetaId as bc, type BetaCodeStatus as bd, defangUrl as be, sanitizeForEmail as bf, URL_PROTOCOL_PATTERN as bg, URL_DOMAIN_PATTERN as bh, HTML_TAG_PATTERN as bi, PG_ERROR_MAP as bj, constantTimeEqual as c, containsUrls as d, escapeHtml as e, containsHtml as f, sanitizeApiError as g, getCorrelationId as h, classifyError as i, isApiError as j, ApiErrorCode as k, buildPagination as l, type ApiErrorCodeType as m, type ApiSuccessResponse as n, type ApiPaginatedResponse as o, getRequiredEnv as p, getOptionalEnv as q, getBoolEnv as r, stripHtml as s, getIntEnv as t, checkEnvVars as u, validateEnvVars as v, getEnvSummary as w, type EnvValidationResult as x, type KeycloakTokenSet as y, KEYCLOAK_DEFAULT_ROLES as z };

package/dist/{index-CepDdu7h.d.mts → index-DzQ0Js5Z.d.mts}

@@ -431,6 +431,17 @@ declare const createTenantUsageTable: Migration;
  * SSO Sessions Table Migration
  */
 declare const createSsoSessionsTable: Migration;
+/**
+ * Beta Access Management Tables Migration
+ *
+ * Creates the tables needed for beta invite code management:
+ * - beta_settings: Feature flags for beta mode (live toggleable)
+ * - beta_invites: Invite codes with usage tracking and expiration
+ * - beta_testers: User beta participation records
+ */
+declare const createBetaSettingsTable: Migration;
+declare const createBetaInvitesTable: Migration;
+declare const createBetaTestersTable: Migration;
 /**
  * All enterprise migrations in order
  */
@@ -441,6 +452,7 @@ declare const enterpriseMigrations: Migration[];
 declare function getEnterpriseMigrations(features: {
     sso?: boolean;
     tenancy?: boolean;
+    beta?: boolean;
 }): Migration[];
 
-export { type IMigrator as I, Migrator as M, SQL as S, getEnterpriseMigrations as a, createSsoOidcConfigsTable as b, createMigration as c, defineMigration as d, enterpriseMigrations as e, createDomainVerificationsTable as f, generateVersion as g, createVerifiedDomainsTable as h, createTenantsTable as i, createTenantMembersTable as j, createTenantInvitationsTable as k, createTenantUsageTable as l, createSsoSessionsTable as m, type Migration as n, type MigrationRecord as o, type MigrationResult as p, type MigrationStatus as q, type MigratorConfig as r, sqlMigration as s, type IMigrationDatabase as t };
+export { type IMigrator as I, Migrator as M, SQL as S, getEnterpriseMigrations as a, createSsoOidcConfigsTable as b, createMigration as c, defineMigration as d, enterpriseMigrations as e, createDomainVerificationsTable as f, generateVersion as g, createVerifiedDomainsTable as h, createTenantsTable as i, createTenantMembersTable as j, createTenantInvitationsTable as k, createTenantUsageTable as l, createSsoSessionsTable as m, createBetaSettingsTable as n, createBetaInvitesTable as o, createBetaTestersTable as p, type Migration as q, type MigrationRecord as r, sqlMigration as s, type MigrationResult as t, type MigrationStatus as u, type MigratorConfig as v, type IMigrationDatabase as w };

package/dist/{index-CepDdu7h.d.ts → index-DzQ0Js5Z.d.ts}

@@ -431,6 +431,17 @@ declare const createTenantUsageTable: Migration;
  * SSO Sessions Table Migration
  */
 declare const createSsoSessionsTable: Migration;
+/**
+ * Beta Access Management Tables Migration
+ *
+ * Creates the tables needed for beta invite code management:
+ * - beta_settings: Feature flags for beta mode (live toggleable)
+ * - beta_invites: Invite codes with usage tracking and expiration
+ * - beta_testers: User beta participation records
+ */
+declare const createBetaSettingsTable: Migration;
+declare const createBetaInvitesTable: Migration;
+declare const createBetaTestersTable: Migration;
 /**
  * All enterprise migrations in order
  */
@@ -441,6 +452,7 @@ declare const enterpriseMigrations: Migration[];
 declare function getEnterpriseMigrations(features: {
     sso?: boolean;
     tenancy?: boolean;
+    beta?: boolean;
 }): Migration[];
 
-export { type IMigrator as I, Migrator as M, SQL as S, getEnterpriseMigrations as a, createSsoOidcConfigsTable as b, createMigration as c, defineMigration as d, enterpriseMigrations as e, createDomainVerificationsTable as f, generateVersion as g, createVerifiedDomainsTable as h, createTenantsTable as i, createTenantMembersTable as j, createTenantInvitationsTable as k, createTenantUsageTable as l, createSsoSessionsTable as m, type Migration as n, type MigrationRecord as o, type MigrationResult as p, type MigrationStatus as q, type MigratorConfig as r, sqlMigration as s, type IMigrationDatabase as t };
+export { type IMigrator as I, Migrator as M, SQL as S, getEnterpriseMigrations as a, createSsoOidcConfigsTable as b, createMigration as c, defineMigration as d, enterpriseMigrations as e, createDomainVerificationsTable as f, generateVersion as g, createVerifiedDomainsTable as h, createTenantsTable as i, createTenantMembersTable as j, createTenantInvitationsTable as k, createTenantUsageTable as l, createSsoSessionsTable as m, createBetaSettingsTable as n, createBetaInvitesTable as o, createBetaTestersTable as p, type Migration as q, type MigrationRecord as r, sqlMigration as s, type MigrationResult as t, type MigrationStatus as u, type MigratorConfig as v, type IMigrationDatabase as w };

package/dist/index.d.mts

@@ -1,7 +1,8 @@
 import { p as ILogger, q as IMetrics, I as IPlatform, P as PlatformHealthStatus, u as MetricsSummary, v as ICrypto, w as EncryptOptions, x as EncryptedField, D as DeterministicEncryptedField, K as KeyRotationResult, y as CryptoKeyMetadata, e as IDatabase, k as IQueryBuilder, Q as QueryResult, l as ICache, m as IStorage, U as UploadOptions, S as StorageFile, n as IEmail, t as EmailMessage, z as EmailResult, o as IQueue, s as JobOptions, J as Job, R as RepeatOptions, A as JobState, B as JobEventType, F as JobEventHandler, G as IAI, H as AIConfig, L as AIChatRequest, O as AIChatResponse, T as AIStreamChunk, V as AIStreamCallback, W as AICompletionRequest, X as AICompletionResponse, Y as AIEmbeddingRequest, Z as AIEmbeddingResponse, _ as AIModelConfig, $ as AIModelType, a0 as AIProvider, a1 as IRAG, a2 as RAGConfig, a3 as CreateCollectionOptions, a4 as RAGCollection, a5 as RAGDocument, a6 as IngestionOptions, a7 as BulkIngestionResult, a8 as IngestionResult, a9 as DocumentStatus, aa as RAGChunk, ab as RAGSearchQuery, ac as RAGSearchResponse, ad as RAGSearchResult, ae as ContextAssemblyConfig, af as AssembledContext, ag as RAGPipeline } from './ConsoleEmail-ubSVWgTa.mjs';
 export { aI as AIChatChoice, br as AIConfigSchema, aO as AIError, aN as AIErrorCode, aC as AIErrorMessages, aJ as AIFinishReason, aF as AIMessage, bk as AIProviderSchema, aE as AIRole, aM as AIRouterConfig, aH as AITool, aG as AIToolCall, aK as AIUsageInfo, am as BackoffOptions, by as BulkheadConfigSchema, bI as CacheConfig, bn as CacheConfigSchema, be as CacheProviderSchema, aS as ChunkingConfig, aQ as ChunkingPresets, aR as ChunkingStrategy, bw as CircuitBreakerConfigSchema, C as ConsoleEmail, h as ConsoleLogger, aX as CryptoAlgorithm, bP as CryptoConfig, bt as CryptoConfigSchema, aW as CryptoKeyStatus, bH as DatabaseConfig, bm as DatabaseConfigSchema, bd as DatabaseProviderSchema, b7 as EmailAddress, b8 as EmailAttachment, bK as EmailConfig, bp as EmailConfigSchema, bg as EmailProviderSchema, E as EnvSecrets, aw as GetSecretOptions, as as HistogramStats, ah as ICacheOptions, r as ISecrets, b1 as ISpan, b0 as ITracing, aj as JobContext, ak as JobEvent, ai as JobResult, ap as LogEntry, an as LogLevel, bj as LogLevelSchema, ao as LogMeta, aq as LoggerConfig, bA as LoggingConfigSchema, aD as MemoryAI, a as MemoryCache, M as MemoryDatabase, c as MemoryEmail, i as MemoryMetrics, d as MemoryQueue, aP as MemoryRAG, f as MemorySecrets, b as MemoryStorage, a_ as MemoryTracing, ar as MetricTags, bB as MetricsConfigSchema, bO as MiddlewareConfig, bE as MiddlewareConfigSchema, N as NoopLogger, j as NoopMetrics, a$ as NoopTracing, bN as ObservabilityConfig, bD as ObservabilityConfigSchema, bG as PlatformConfig, bF as PlatformConfigSchema, bL as QueueConfig, bq as QueueConfigSchema, bh as QueueProviderSchema, al as QueueStats, bs as RAGConfigSchema, aU as RAGFilter, aV as RAGPipelineStep, bl as RAGProviderSchema, bM as ResilienceConfig, bz as ResilienceConfigSchema, bv as RetryConfigSchema, ay as RotateSecretOptions, az as RotationResult, aL as RoutingStrategy, aT as SearchMode, au as Secret, av as SecretMetadata, bQ as SecurityConfig, bu as SecurityConfigSchema, ax as SetSecretOptions, b2 as SpanContext, bc as SpanEvent, b5 as SpanKind, b3 as SpanOptions, b4 as SpanStatus, bb as SpanStatusCode, bJ as StorageConfig, bo as StorageConfigSchema, bf as StorageProviderSchema, bx as TimeoutConfigSchema, at as TimingStats, b6 as TracingConfig, bC as TracingConfigSchema, bi as TracingProviderSchema, b9 as calculateBackoff, aA as createAIError, g as createPlatform, aY as createPlatformAsync, aZ as createScopedMetrics, ba as generateJobId, bU as getDefaultConfig, aB as isAIError, bR as loadConfig, bT as safeValidateConfig, bS as validateConfig } from './ConsoleEmail-ubSVWgTa.mjs';
-export { t as IMigrationDatabase, I as IMigrator, n as Migration, o as MigrationRecord, p as MigrationResult, q as MigrationStatus, M as Migrator, r as MigratorConfig, S as SQL, f as createDomainVerificationsTable, c as createMigration, b as createSsoOidcConfigsTable, m as createSsoSessionsTable, k as createTenantInvitationsTable, j as createTenantMembersTable, l as createTenantUsageTable, i as createTenantsTable, h as createVerifiedDomainsTable, d as defineMigration, e as enterpriseMigrations, g as generateVersion, a as getEnterpriseMigrations, s as sqlMigration } from './index-CepDdu7h.mjs';
-export { aq as AllowlistConfig, j as ApiError, A as ApiErrorCode, n as ApiErrorCodeType, p as ApiPaginatedResponse, Z as ApiSecurityConfig, $ as ApiSecurityContext, o as ApiSuccessResponse, aN as AuditRequest, L as AuthCookiesConfig, V as AuthMethod, C as CommonApiErrors, ax as CommonRateLimits, ad as DateRangeInput, a6 as DateRangeSchema, al as DeploymentStage, ab as EmailInput, a0 as EmailSchema, aW as EnvValidationConfig, aX as EnvValidationResult, an as FlagDefinition, ao as FlagDefinitions, am as FlagValue, H as HTML_TAG_PATTERN, K as KEYCLOAK_DEFAULT_ROLES, I as KeycloakCallbacksConfig, B as KeycloakConfig, J as KeycloakJwtFields, D as KeycloakTokenSet, af as LoginInput, a8 as LoginSchema, aI as OpsAuditActor, aK as OpsAuditEvent, aM as OpsAuditLoggerOptions, aL as OpsAuditRecord, aJ as OpsAuditResource, P as PG_ERROR_MAP, ac as PaginationInput, a5 as PaginationSchema, a1 as PasswordSchema, a4 as PersonNameSchema, a3 as PhoneSchema, az as RateLimitCheckResult, aB as RateLimitOptions, Y as RateLimitPreset, ay as RateLimitRule, aA as RateLimitStore, R as RedirectCallbackConfig, ap as ResolvedFlags, X as RouteAuditConfig, ae as SearchQueryInput, a7 as SearchQuerySchema, _ as SecuritySession, ag as SignupInput, a9 as SignupSchema, a2 as SlugSchema, aO as StandardAuditActionType, aH as StandardAuditActions, S as StandardRateLimitPresets, T as TokenRefreshResult, i as URL_DOMAIN_PATTERN, U as URL_PROTOCOL_PATTERN, W as WrapperPresets, aj as buildAllowlist, F as buildAuthCookies, Q as buildErrorBody, E as buildKeycloakCallbacks, m as buildPagination, O as buildRateLimitHeaders, av as buildRateLimitResponseHeaders, G as buildRedirectCallback, w as buildTokenRefreshParams, aU as checkEnvVars, ar as checkRateLimit, l as classifyError, f as constantTimeEqual, a as containsHtml, c as containsUrls, aD as createAuditActor, aC as createAuditLogger, ah as createFeatureFlags, au as createMemoryRateLimitStore, aa as createSafeTextSchema, d as defangUrl, ai as detectStage, e as escapeHtml, aE as extractAuditIp, aG as extractAuditRequestId, aF as extractAuditUserAgent, N as extractClientIp, aR as getBoolEnv, h as getCorrelationId, y as getEndSessionEndpoint, aV as getEnvSummary, aS as getIntEnv, aQ as getOptionalEnv, as as getRateLimitStatus, aP as getRequiredEnv, x as getTokenEndpoint, u as hasAllRoles, t as hasAnyRole, r as hasRole, ak as isAllowlisted, k as isApiError, v as isTokenExpired, q as parseKeycloakRoles, z as refreshKeycloakToken, at as resetRateLimitForKey, aw as resolveIdentifier, M as resolveRateLimitIdentifier, g as sanitizeApiError, b as sanitizeForEmail, s as stripHtml, aT as validateEnvVars } from './index-CkyVz0hQ.mjs';
+export { w as IMigrationDatabase, I as IMigrator, q as Migration, r as MigrationRecord, t as MigrationResult, u as MigrationStatus, M as Migrator, v as MigratorConfig, S as SQL, o as createBetaInvitesTable, n as createBetaSettingsTable, p as createBetaTestersTable, f as createDomainVerificationsTable, c as createMigration, b as createSsoOidcConfigsTable, m as createSsoSessionsTable, k as createTenantInvitationsTable, j as createTenantMembersTable, l as createTenantUsageTable, i as createTenantsTable, h as createVerifiedDomainsTable, d as defineMigration, e as enterpriseMigrations, g as generateVersion, a as getEnterpriseMigrations, s as sqlMigration } from './index-DzQ0Js5Z.mjs';
+import { aZ as IBeta, a_ as BetaConfig, a$ as BetaSettings, b0 as UpdateBetaSettingsOptions, b1 as CreateBetaCodesOptions, b2 as BetaInviteCode, b3 as ListBetaCodesOptions, b4 as BetaValidationResult, b5 as BetaConsumeResult, b6 as BetaTester, b7 as BetaStats, b8 as BetaCodeUsageReport } from './env-jqNJdZVt.mjs';
+export { as as AllowlistConfig, A as ApiError, k as ApiErrorCode, m as ApiErrorCodeType, o as ApiPaginatedResponse, _ as ApiSecurityConfig, a0 as ApiSecurityContext, n as ApiSuccessResponse, aK as AuditRequest, P as AuthCookiesConfig, W as AuthMethod, aS as BetaClientConfig, bd as BetaCodeStatus, C as CommonApiErrors, ay as CommonRateLimits, aj as DateRangeInput, ad as DateRangeSchema, an as DeploymentStage, ah as EmailInput, a6 as EmailSchema, E as EnvValidationConfig, x as EnvValidationResult, ap as FlagDefinition, aq as FlagDefinitions, ao as FlagValue, bi as HTML_TAG_PATTERN, z as KEYCLOAK_DEFAULT_ROLES, N as KeycloakCallbacksConfig, K as KeycloakConfig, O as KeycloakJwtFields, y as KeycloakTokenSet, al as LoginInput, af as LoginSchema, b9 as MemoryBeta, aF as OpsAuditActor, aH as OpsAuditEvent, aJ as OpsAuditLoggerOptions, aI as OpsAuditRecord, aG as OpsAuditResource, bj as PG_ERROR_MAP, ai as PaginationInput, ac as PaginationSchema, a7 as PasswordSchema, aa as PersonNameSchema, a9 as PhoneSchema, ax as RateLimitCheckResult, b as RateLimitOptions, Y as RateLimitPreset, a as RateLimitRule, R as RateLimitStore, S as RedirectCallbackConfig, ar as ResolvedFlags, X as RouteAuditConfig, ak as SearchQueryInput, ae as SearchQuerySchema, $ as SecuritySession, am as SignupInput, ag as SignupSchema, a8 as SlugSchema, aM as StandardAuditActionType, aL as StandardAuditActions, Z as StandardRateLimitPresets, T as TokenRefreshResult, bh as URL_DOMAIN_PATTERN, bg as URL_PROTOCOL_PATTERN, a5 as WrapperPresets, av as buildAllowlist, Q as buildAuthCookies, a4 as buildErrorBody, V as buildKeycloakCallbacks, l as buildPagination, a3 as buildRateLimitHeaders, aD as buildRateLimitResponseHeaders, U as buildRedirectCallback, I as buildTokenRefreshParams, u as checkEnvVars, aA as checkRateLimit, i as classifyError, aY as clearStoredBetaCode, c as constantTimeEqual, f as containsHtml, d as containsUrls, aQ as createAuditActor, aR as createAuditLogger, aT as createBetaClient, au as createFeatureFlags, az as createMemoryRateLimitStore, ab as createSafeTextSchema, be as defangUrl, at as detectStage, e as escapeHtml, aN as extractAuditIp, aP as extractAuditRequestId, aO as extractAuditUserAgent, a2 as extractClientIp, aU as fetchBetaSettings, ba as generateBetaCode, bc as generateBetaId, r as getBoolEnv, h as getCorrelationId, L as getEndSessionEndpoint, w as getEnvSummary, t as getIntEnv, q as getOptionalEnv, aB as getRateLimitStatus, p as getRequiredEnv, aX as getStoredBetaCode, J as getTokenEndpoint, G as hasAllRoles, F as hasAnyRole, D as hasRole, aw as isAllowlisted, j as isApiError, H as isTokenExpired, bb as normalizeBetaCode, B as parseKeycloakRoles, M as refreshKeycloakToken, aC as resetRateLimitForKey, aE as resolveIdentifier, a1 as resolveRateLimitIdentifier, g as sanitizeApiError, bf as sanitizeForEmail, aW as storeBetaCode, s as stripHtml, aV as validateBetaCode, v as validateEnvVars } from './env-jqNJdZVt.mjs';
 export { NextHeaderEntry, SecurityHeaderPresets, SecurityHeadersConfig, generateSecurityHeaders } from './security-headers.mjs';
 import { SupabaseClient } from '@supabase/supabase-js';
 import { Pool } from 'pg';
@@ -13041,6 +13042,100 @@ declare class PostgresTenant implements ITenant {
     private mapRowToInvitation;
 }
 
+/**
+ * PostgreSQL Beta Access Management Adapter
+ *
+ * Production implementation of IBeta using PostgreSQL for persistent
+ * beta settings, invite codes, and tester tracking.
+ *
+ * Supports two configuration sources:
+ * - **Database** (default): Settings stored in `beta_settings` table,
+ *   toggleable live without redeploy. Best for apps needing live toggles.
+ * - **Environment + Database hybrid**: Settings from env vars (BETA_MODE,
+ *   REQUIRE_INVITE_CODE, BETA_MESSAGE), codes from database. Best for
+ *   apps wanting simple env-var control with database code management.
+ *
+ * Uses `FOR UPDATE` row locking on code consumption to prevent race conditions.
+ *
+ * @example
+ * ```typescript
+ * import { Pool } from 'pg';
+ * import { PostgresBeta } from '@digilogiclabs/platform-core';
+ *
+ * const pool = new Pool({ connectionString: process.env.DATABASE_URL });
+ *
+ * // Database-driven settings (live toggleable)
+ * const beta = new PostgresBeta({ pool });
+ * await beta.initialize();
+ *
+ * // Environment-driven settings (deploy to change)
+ * const beta = new PostgresBeta({
+ *   pool,
+ *   settingsSource: 'env',
+ *   envPrefix: 'BETA',
+ * });
+ * ```
+ */
+
+interface PostgresBetaConfig extends BetaConfig {
+    /** PostgreSQL connection pool (pg.Pool) */
+    pool: unknown;
+    /** Schema for beta tables (default: 'public') */
+    schema?: string;
+    /**
+     * Where to read settings from:
+     * - 'database' (default): Read/write beta_settings table
+     * - 'env': Read from environment variables, write is a no-op
+     */
+    settingsSource?: "database" | "env";
+    /**
+     * Environment variable prefix when settingsSource is 'env'.
+     * Maps to: {PREFIX}_MODE, {PREFIX}_REQUIRE_INVITE_CODE, {PREFIX}_MESSAGE
+     * Default: 'BETA'
+     */
+    envPrefix?: string;
+    /**
+     * Additional static codes that are always valid (e.g., from env vars).
+     * These bypass database lookup entirely.
+     * Useful for default/hardcoded codes like 'DLLBETA', 'EARLYACCESS'.
+     */
+    staticCodes?: string[];
+}
+declare class PostgresBeta implements IBeta {
+    private pool;
+    private schema;
+    private settingsSource;
+    private envPrefix;
+    private staticCodes;
+    private config;
+    constructor(pgConfig: PostgresBetaConfig);
+    private t;
+    /**
+     * Initialize beta tables. Call once at app startup.
+     * Creates tables if they don't exist and seeds default settings.
+     */
+    initialize(): Promise<void>;
+    getSettings(): Promise<BetaSettings>;
+    private getEnvSettings;
+    updateSettings(options: UpdateBetaSettingsOptions): Promise<void>;
+    createCodes(options: CreateBetaCodesOptions): Promise<BetaInviteCode[]>;
+    listCodes(options?: ListBetaCodesOptions): Promise<BetaInviteCode[]>;
+    getCode(code: string): Promise<BetaInviteCode | null>;
+    revokeCode(code: string): Promise<void>;
+    validateCode(code: string): Promise<BetaValidationResult>;
+    consumeCode(code: string, userId: string): Promise<BetaConsumeResult>;
+    private tagBetaTester;
+    isBetaTester(userId: string): Promise<boolean>;
+    getBetaTester(userId: string): Promise<BetaTester | null>;
+    listBetaTesters(options?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<BetaTester[]>;
+    getStats(): Promise<BetaStats>;
+    getCodeUsageReports(): Promise<BetaCodeUsageReport[]>;
+    healthCheck(): Promise<boolean>;
+}
+
 /**
  * Application Logger
  *
@@ -13176,4 +13271,4 @@ declare function getSharedRedis(): Redis$2 | null;
  */
 declare function closeSharedRedis(): Promise<void>;
 
-export { AIChatRequest, AIChatResponse, AICompletionRequest, AICompletionResponse, AIConfig, AIEmbeddingRequest, AIEmbeddingResponse, AIModelConfig, AIModelType, AIProvider, AIStreamCallback, AIStreamChunk, type AIUsageConfig, type AccountCapabilities, type AccountLink, type AccountType, type Address, type AlertType, AnthropicAdapter, type AnthropicAdapterConfig, type ApiAuthentication, type ApiChangelog, type ApiDocumentation, type ApiEndpoint, type ApiExample, type ApiKey, type ApiKeyStatus, type ApiKeyType, type ApiKeyValidationResult, type ApiParameter, type ApiResponse, type ApiSchema, type ApiSchemaProperty, type ApiUsageStats, type ApiUsageTimeSeries, type AppLogContext, type AppLogger, type AppLoggerOptions, AssembledContext, type AuditActor, type AuditCategory, type AuditEvent, AuditEvents, type AuditEvidence, type AuditLogConfig, type AuditOutcome, type AuditQuery, type AuditQueryResult, type AuditRetentionPolicy, type AuditStats, type AuditTarget, type AuthConfig, type AuthError, type AuthErrorCode, AuthErrorMessages, type AuthEventType, type AuthResult, type AuthSession, type AuthStateChangeCallback, type AuthStorage, type AuthUser, type Balance, type BalanceAmount, type BankAccountDetails, type BatchNotificationOptions, type BillingConfig, type BillingDetails, type BillingPeriod, type Breadcrumb, type Budget, type BudgetStatus, BulkIngestionResult, Bulkhead, type BulkheadOptions, BulkheadRegistry, BulkheadRejectedError, type BulkheadStats, type BullMQConfig, BullMQQueue, type BusinessProfile, type CancelationReason, type CaptureOptions, type CapturePaymentIntentOptions, type CardBrand, type CardDetails, type ChainExecutionResult, CircuitBreaker, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitOpenError, type CircuitState, type CommandStatus, type ComplianceConfig, type ComplianceReport, type ConfirmPaymentIntentOptions, type ConnectedAccount, type ConnectedAccountStatus, type ConsentPreferences, type ConsentPurpose, type ConsentRecord, type ConsentStatus, ContextAssemblyConfig, type ControlFramework, type ControlStatus, type CorrelationData, type CostBreakdown, type Coupon, type CreateAccountLinkOptions, type CreateApiKeyOptions, CreateCollectionOptions, type CreateConnectedAccountOptions, type CreateCustomerOptions, type CreateDsarOptions, type CreatePaymentIntentOptions, type CreatePayoutOptions, type CreateRefundOptions, type CreateSandboxOptions, type CreateScheduleOptions, type CreateTenantOptions, type CreateTransferOptions, type CreateWebhookOptions, type CreditBalance, type CreditTransaction, type CreditType, type CronExpression, CronPresets, CryptoKeyMetadata, type Currency, type Customer, DEFAULT_BULKHEAD_OPTIONS, DEFAULT_CIRCUIT_BREAKER_OPTIONS, DEFAULT_RETRY_OPTIONS, type DataBreachRecord, type DataCategory, type DataInventoryItem, type DataMap, type DataSensitivity, type DataSubjectRequest, type DataType, DatabaseAIUsage, type DatabaseAIUsageConfig, DatabaseAuditLog, type DatabaseAuditLogConfig, DatabaseBilling, type DatabaseBillingConfig, DatabaseCompliance, DatabaseErrorReporter, type DatabaseErrorReporterConfig, DatabaseNotification, type DatabaseNotificationConfig, DatabasePromptStore, type DatabasePromptStoreConfig, DefaultTimeouts, type DeleteAccountOptions, type DeleteHookContext, type DeliveryAttempt, type DeliveryQuery, type DeliveryStatus, type DetailedHealthResponse, DeterministicEncryptedField, type DevPortalConfig, type DeveloperMetrics, type Device, type DeviceAuthMethod, type DeviceCommand, type DeviceConfig, type DeviceConnectionState, type DeviceCredentials, type DeviceGroup, type DeviceGroupQuery, type DeviceLocation, type DeviceQuery, type DeviceQueryResult, type DeviceShadow, type DeviceStatus, type DirectoryAttributeMapping, type DirectoryConfig, DocumentStatus, type DsarAttachment, type DsarNote, type DsarStatus, type DsarType, type DunningActionType, type DunningAttempt, type DunningConfig, type EmailHookContext, EmailMessage, EmailResult, EncryptOptions, EncryptedField, type EnrollMfaOptions, type EnrollMfaResult, type ErrorContext, type ErrorHookContext, type ErrorLevel, type ErrorReport, type ErrorReporterConfig, type EvidenceType, type ExperimentMetrics, type FallbackOptions, type FallbackResult, FallbackStrategies, type FirmwareStatus, type FirmwareUpdate, type FirmwareVersion, type GeneratedSdk, GenericOIDCAuthSSO, type GenericOIDCConfig, GoogleAIAdapter, type GoogleAIAdapterConfig, type HealthCheckResult, type HealthEndpoints, type HealthEndpointsOptions, type HealthStatus, type HookRegistry, type HttpMethod, HttpWebhook, type HttpWebhookConfig, IAI, type IAIUsage, type IAuditLog, type IAuth, type IAuthSSO, type IBilling, ICache, type ICompliance, ICrypto, IDatabase, type IDevPortal, type IDevice, IEmail, type IErrorReporter, type IHealth, type IHealthCheckable, ILogger, IMetrics, type INotification, type IPayment, IPlatform, type IPromptStore, IQueryBuilder, IQueue, IRAG, type IScheduler, IStorage, type ITenant, type IWebhook, type InboundWebhookConfig, type InboundWebhookContext, IngestionOptions, IngestionResult, type InsertHookContext, type InviteMemberOptions, type Invoice, type InvoiceLineItem, type InvoiceQuery, type InvoiceStatus, Job, JobEventHandler, JobEventType, type JobHookContext, JobOptions, JobState, KeyRotationResult, type ListTenantsOptions, type LivenessResponse, MemoryAIUsage, MemoryAuditLog, type MemoryAuditLogConfig, MemoryAuth, MemoryAuthSSO, MemoryBilling, MemoryCompliance, MemoryCrypto, MemoryDevPortal, MemoryDevice, MemoryErrorReporter, type MemoryErrorReporterConfig, MemoryNotification, type MemoryNotificationConfig, MemoryPayment, MemoryPromptStore, MemoryRateLimiterStorage, MemoryScheduler, type MemorySchedulerConfig, MemoryTenant, MemoryWebhook, type MemoryWebhookConfig, type Meter, type MetricsEndpoint, type MetricsEndpointOptions, MetricsSummary, type MfaChallenge, type MfaFactor, type MfaFactorType, type Middleware, type MiddlewareChain, type MiddlewareChainOptions, type MiddlewareContext, NodeCrypto, type NodeCryptoConfig, type NotificationAction, type NotificationCategory, type NotificationChannel, type NotificationConfig, type NotificationData, type NotificationPreferences, type NotificationPriority, type NotificationQuery, type NotificationResult, type NotificationStats, type NotificationStatus, type NotificationTarget, NotificationTemplates, type OAuthOptions, type OAuthProvider, type OAuthResult, type OidcAuthRequest, type OidcAuthResponse, type OidcClaimMapping, type OidcIdpConfig, OpenAIAdapter, type OpenAIAdapterConfig, type ParameterLocation, type PaymentConfig, type PaymentError, type PaymentErrorCode, PaymentErrorMessages, type PaymentEventType, type PaymentIntent, type PaymentMethod, type PaymentMethodType, type PaymentStatus, type PaymentWebhookEvent, type Payout, type PayoutStatus, type PiaMitigation, type PiaRisk, type PiaStatus, PineconeRAG, type PineconeRAGConfig, type PlatformHealthResult, PlatformHealthStatus, type PlatformHooks, type PostgresConfig, PostgresDatabase, PostgresTenant, type PostgresTenantConfig, type Price, type PricingModel, type PricingTier, type PrivacyImpactAssessment, type Product, type Prompt, type PromptChain, type PromptChainStep, type PromptExperiment, type PromptQuery, type PromptQueryResult, type PromptStatus, type PromptStoreConfig, type PromptType, type PromptUsageRecord, type PromptUsageStats, type PromptVariable, type PromptVariant, type PromptVersion, type ProvisioningConfig, type ProvisioningRequest, type ProvisioningResult, type ProvisioningStatus, type PushSubscription, type QueryHookContext, QueryResult, QueueScheduler, type QueueSchedulerConfig, type Quota, type QuotaStatus, type QuotaType, RAGChunk, RAGCollection, RAGConfig, RAGDocument, RAGPipeline, RAGSearchQuery, RAGSearchResponse, RAGSearchResult, type RateLimitAlgorithm, RateLimitError, type RateLimitInfo, RateLimitPresets, type RateLimiterStorage, type ReadinessResponse, type RecordConsentOptions, RedisCache, type RedisClientOptions, type RedisConfig, type Refund, type RefundReason, type RefundStatus, type RenderOptions, type RenderedPrompt, RepeatOptions, ResendEmail, type ResetPasswordOptions, type RetentionAction, type RetentionExecution, type RetentionPolicy, RetryConfigs, type RetryOptions, RetryPredicates, type RetryResult, type RevenueMetrics, type RiskLevel, S3Storage, type SamlAssertion, type SamlAttributeMapping, type SamlAuthRequest, type SamlAuthResponse, type SamlIdpConfig, type SamlNameIdFormat, type SamlSpConfig, type Sandbox, type SandboxConfig, type SandboxLimits, type SandboxStatus, type SandboxUsage, type ScheduleContext, type ScheduleExecution, type ScheduleHandler, type ScheduleQuery, type ScheduleState, type ScheduleUpdateOptions, type ScheduledJob, type SchedulerConfig, type SchedulerStats, type ScimConfig, type ScimUser, type SdkConfig, type SdkFile, type SdkLanguage, type SendCommandOptions, type SendNotificationOptions, type ServiceHealth, type ShadowDelta, type ShadowMetadata, type ShadowUpdate, type SignInWithEmailOptions, type SignInWithMagicLinkOptions, type SignInWithPhoneOptions, type SignUpWithEmailOptions, type SignatureAlgorithm, type SlidingWindowRateLimitOptions, type SmtpConfig, SmtpEmail, type SsoSession, type StartupResponse, StorageFile, type StoredAuditEvent, type StoredNotification, StripePayment, type StripePaymentConfig, type Subscription, type SubscriptionDiscount, type SubscriptionItem, type SubscriptionMetrics, type SubscriptionQuery, type SubscriptionStatus, SupabaseAuth, type SupabaseAuthConfig, SupabaseDatabase, SupabaseStorage, type SupabaseStorageConfig, type TaxBreakdown, type TelemetryMessage, type TelemetryQuery, type TelemetryResult, type Tenant, type TenantBranding, type TenantContext, type TenantDatabaseConfig, type TenantInvitation, type TenantIsolationModel, type TenantMember, type TenantMemberStatus, type TenantQuotas, type TenantResolutionOptions, type TenantResolutionStrategy, type TenantRole, type TenantSecuritySettings, type TenantSettings, type TenantStatus, type TenantUsage, TimeoutError, type TimeoutOptions, type TokenBucketOptions, type TosAcceptance, type Transfer, type TransferStatus, type Unsubscribe, type UpdateCustomerOptions, type UpdateHookContext, type UpdatePasswordOptions, type UpdatePaymentIntentOptions, type UpdateScheduleOptions, type UpdateStatus, type UpdateTenantOptions, type UpdateUserOptions, type UpdateWebhookOptions, type UploadHookContext, UploadOptions, UpstashCache, type UsageAlert, type UsageCategory, type UsageEvent, type UsageInterval, type UsageInvoice, type UsageInvoiceItem, type UsageQuery, type UsageQueryResult, type UsageRecord, type UsageSummary, type UsageSummaryRecord, type UsageTrend, type VerificationResult, type VerifyMfaOptions, type VerifyPhoneOtpOptions, type VerifyWebhookOptions, WeaviateRAG, type WeaviateRAGConfig, type WebhookConfig, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, WebhookEventTypes, type WebhookQuery, type WebhookState, type WebhookStats, type WebhookTestEndpoint, type WebhookTestEvent, calculateRetryDelay, closeSharedRedis, composeHookRegistries, correlationContext, createAnthropicAdapter, createAppLogger, createAuthError, createBulkhead, createCacheMiddleware, createCachedFallback, createCircuitBreaker, createDefaultPreferences, createErrorReport, createExpressHealthHandlers, createExpressMetricsHandler, createGoogleAIAdapter, createHealthEndpoints, createHealthServer, createHookRegistry, createIpKeyGenerator, createJobContext, createLoggingMiddleware, createMetricsEndpoint, createMetricsMiddleware, createMetricsServer, createMiddlewareChain, createMiddlewareContext, createObservabilityServer, createOpenAIAdapter, createPaymentError, createPineconeRAG, createRateLimitMiddleware, createRedisClient, createRequestContext, createRequestIdMiddleware, createSlowQueryMiddleware, createTenantMiddleware, createTimeoutMiddleware, createUserKeyGenerator, createWeaviateRAG, describeCron, filterChannelsByPreferences, formatAmount, generateAuditId, generateChecksum, generateDeliveryId, generateErrorId, generateEventId, generateFingerprint, generateNotificationId, generatePaymentId, generateScheduleId, generateSecureToken, generateWebhookId, generateWebhookSecret, getContext, getLogMeta, getNextCronRun, getRequestId, getSharedRedis, getTenantId, getTraceId, getUserId, isAuthError, isInContext, isInQuietHours, isPaymentError, isValidCron, matchAction, matchEventType, raceTimeout, retryable, runWithContext, runWithContextAsync, timedHealthCheck, toHealthCheckResult, withCorrelation, withCorrelationAsync, withFallback, withFallbackChain, withFallbackResult, withRetry, withRetryResult, withTimeout, withTimeoutWrapper };
+export { AIChatRequest, AIChatResponse, AICompletionRequest, AICompletionResponse, AIConfig, AIEmbeddingRequest, AIEmbeddingResponse, AIModelConfig, AIModelType, AIProvider, AIStreamCallback, AIStreamChunk, type AIUsageConfig, type AccountCapabilities, type AccountLink, type AccountType, type Address, type AlertType, AnthropicAdapter, type AnthropicAdapterConfig, type ApiAuthentication, type ApiChangelog, type ApiDocumentation, type ApiEndpoint, type ApiExample, type ApiKey, type ApiKeyStatus, type ApiKeyType, type ApiKeyValidationResult, type ApiParameter, type ApiResponse, type ApiSchema, type ApiSchemaProperty, type ApiUsageStats, type ApiUsageTimeSeries, type AppLogContext, type AppLogger, type AppLoggerOptions, AssembledContext, type AuditActor, type AuditCategory, type AuditEvent, AuditEvents, type AuditEvidence, type AuditLogConfig, type AuditOutcome, type AuditQuery, type AuditQueryResult, type AuditRetentionPolicy, type AuditStats, type AuditTarget, type AuthConfig, type AuthError, type AuthErrorCode, AuthErrorMessages, type AuthEventType, type AuthResult, type AuthSession, type AuthStateChangeCallback, type AuthStorage, type AuthUser, type Balance, type BalanceAmount, type BankAccountDetails, type BatchNotificationOptions, BetaCodeUsageReport, BetaConfig, BetaConsumeResult, BetaInviteCode, BetaSettings, BetaStats, BetaTester, BetaValidationResult, type BillingConfig, type BillingDetails, type BillingPeriod, type Breadcrumb, type Budget, type BudgetStatus, BulkIngestionResult, Bulkhead, type BulkheadOptions, BulkheadRegistry, BulkheadRejectedError, type BulkheadStats, type BullMQConfig, BullMQQueue, type BusinessProfile, type CancelationReason, type CaptureOptions, type CapturePaymentIntentOptions, type CardBrand, type CardDetails, type ChainExecutionResult, CircuitBreaker, type CircuitBreakerOptions, CircuitBreakerRegistry, type CircuitBreakerStats, CircuitOpenError, type CircuitState, type CommandStatus, type ComplianceConfig, type ComplianceReport, type ConfirmPaymentIntentOptions, type ConnectedAccount, type ConnectedAccountStatus, type ConsentPreferences, type ConsentPurpose, type ConsentRecord, type ConsentStatus, ContextAssemblyConfig, type ControlFramework, type ControlStatus, type CorrelationData, type CostBreakdown, type Coupon, type CreateAccountLinkOptions, type CreateApiKeyOptions, CreateBetaCodesOptions, CreateCollectionOptions, type CreateConnectedAccountOptions, type CreateCustomerOptions, type CreateDsarOptions, type CreatePaymentIntentOptions, type CreatePayoutOptions, type CreateRefundOptions, type CreateSandboxOptions, type CreateScheduleOptions, type CreateTenantOptions, type CreateTransferOptions, type CreateWebhookOptions, type CreditBalance, type CreditTransaction, type CreditType, type CronExpression, CronPresets, CryptoKeyMetadata, type Currency, type Customer, DEFAULT_BULKHEAD_OPTIONS, DEFAULT_CIRCUIT_BREAKER_OPTIONS, DEFAULT_RETRY_OPTIONS, type DataBreachRecord, type DataCategory, type DataInventoryItem, type DataMap, type DataSensitivity, type DataSubjectRequest, type DataType, DatabaseAIUsage, type DatabaseAIUsageConfig, DatabaseAuditLog, type DatabaseAuditLogConfig, DatabaseBilling, type DatabaseBillingConfig, DatabaseCompliance, DatabaseErrorReporter, type DatabaseErrorReporterConfig, DatabaseNotification, type DatabaseNotificationConfig, DatabasePromptStore, type DatabasePromptStoreConfig, DefaultTimeouts, type DeleteAccountOptions, type DeleteHookContext, type DeliveryAttempt, type DeliveryQuery, type DeliveryStatus, type DetailedHealthResponse, DeterministicEncryptedField, type DevPortalConfig, type DeveloperMetrics, type Device, type DeviceAuthMethod, type DeviceCommand, type DeviceConfig, type DeviceConnectionState, type DeviceCredentials, type DeviceGroup, type DeviceGroupQuery, type DeviceLocation, type DeviceQuery, type DeviceQueryResult, type DeviceShadow, type DeviceStatus, type DirectoryAttributeMapping, type DirectoryConfig, DocumentStatus, type DsarAttachment, type DsarNote, type DsarStatus, type DsarType, type DunningActionType, type DunningAttempt, type DunningConfig, type EmailHookContext, EmailMessage, EmailResult, EncryptOptions, EncryptedField, type EnrollMfaOptions, type EnrollMfaResult, type ErrorContext, type ErrorHookContext, type ErrorLevel, type ErrorReport, type ErrorReporterConfig, type EvidenceType, type ExperimentMetrics, type FallbackOptions, type FallbackResult, FallbackStrategies, type FirmwareStatus, type FirmwareUpdate, type FirmwareVersion, type GeneratedSdk, GenericOIDCAuthSSO, type GenericOIDCConfig, GoogleAIAdapter, type GoogleAIAdapterConfig, type HealthCheckResult, type HealthEndpoints, type HealthEndpointsOptions, type HealthStatus, type HookRegistry, type HttpMethod, HttpWebhook, type HttpWebhookConfig, IAI, type IAIUsage, type IAuditLog, type IAuth, type IAuthSSO, IBeta, type IBilling, ICache, type ICompliance, ICrypto, IDatabase, type IDevPortal, type IDevice, IEmail, type IErrorReporter, type IHealth, type IHealthCheckable, ILogger, IMetrics, type INotification, type IPayment, IPlatform, type IPromptStore, IQueryBuilder, IQueue, IRAG, type IScheduler, IStorage, type ITenant, type IWebhook, type InboundWebhookConfig, type InboundWebhookContext, IngestionOptions, IngestionResult, type InsertHookContext, type InviteMemberOptions, type Invoice, type InvoiceLineItem, type InvoiceQuery, type InvoiceStatus, Job, JobEventHandler, JobEventType, type JobHookContext, JobOptions, JobState, KeyRotationResult, ListBetaCodesOptions, type ListTenantsOptions, type LivenessResponse, MemoryAIUsage, MemoryAuditLog, type MemoryAuditLogConfig, MemoryAuth, MemoryAuthSSO, MemoryBilling, MemoryCompliance, MemoryCrypto, MemoryDevPortal, MemoryDevice, MemoryErrorReporter, type MemoryErrorReporterConfig, MemoryNotification, type MemoryNotificationConfig, MemoryPayment, MemoryPromptStore, MemoryRateLimiterStorage, MemoryScheduler, type MemorySchedulerConfig, MemoryTenant, MemoryWebhook, type MemoryWebhookConfig, type Meter, type MetricsEndpoint, type MetricsEndpointOptions, MetricsSummary, type MfaChallenge, type MfaFactor, type MfaFactorType, type Middleware, type MiddlewareChain, type MiddlewareChainOptions, type MiddlewareContext, NodeCrypto, type NodeCryptoConfig, type NotificationAction, type NotificationCategory, type NotificationChannel, type NotificationConfig, type NotificationData, type NotificationPreferences, type NotificationPriority, type NotificationQuery, type NotificationResult, type NotificationStats, type NotificationStatus, type NotificationTarget, NotificationTemplates, type OAuthOptions, type OAuthProvider, type OAuthResult, type OidcAuthRequest, type OidcAuthResponse, type OidcClaimMapping, type OidcIdpConfig, OpenAIAdapter, type OpenAIAdapterConfig, type ParameterLocation, type PaymentConfig, type PaymentError, type PaymentErrorCode, PaymentErrorMessages, type PaymentEventType, type PaymentIntent, type PaymentMethod, type PaymentMethodType, type PaymentStatus, type PaymentWebhookEvent, type Payout, type PayoutStatus, type PiaMitigation, type PiaRisk, type PiaStatus, PineconeRAG, type PineconeRAGConfig, type PlatformHealthResult, PlatformHealthStatus, type PlatformHooks, PostgresBeta, type PostgresBetaConfig, type PostgresConfig, PostgresDatabase, PostgresTenant, type PostgresTenantConfig, type Price, type PricingModel, type PricingTier, type PrivacyImpactAssessment, type Product, type Prompt, type PromptChain, type PromptChainStep, type PromptExperiment, type PromptQuery, type PromptQueryResult, type PromptStatus, type PromptStoreConfig, type PromptType, type PromptUsageRecord, type PromptUsageStats, type PromptVariable, type PromptVariant, type PromptVersion, type ProvisioningConfig, type ProvisioningRequest, type ProvisioningResult, type ProvisioningStatus, type PushSubscription, type QueryHookContext, QueryResult, QueueScheduler, type QueueSchedulerConfig, type Quota, type QuotaStatus, type QuotaType, RAGChunk, RAGCollection, RAGConfig, RAGDocument, RAGPipeline, RAGSearchQuery, RAGSearchResponse, RAGSearchResult, type RateLimitAlgorithm, RateLimitError, type RateLimitInfo, RateLimitPresets, type RateLimiterStorage, type ReadinessResponse, type RecordConsentOptions, RedisCache, type RedisClientOptions, type RedisConfig, type Refund, type RefundReason, type RefundStatus, type RenderOptions, type RenderedPrompt, RepeatOptions, ResendEmail, type ResetPasswordOptions, type RetentionAction, type RetentionExecution, type RetentionPolicy, RetryConfigs, type RetryOptions, RetryPredicates, type RetryResult, type RevenueMetrics, type RiskLevel, S3Storage, type SamlAssertion, type SamlAttributeMapping, type SamlAuthRequest, type SamlAuthResponse, type SamlIdpConfig, type SamlNameIdFormat, type SamlSpConfig, type Sandbox, type SandboxConfig, type SandboxLimits, type SandboxStatus, type SandboxUsage, type ScheduleContext, type ScheduleExecution, type ScheduleHandler, type ScheduleQuery, type ScheduleState, type ScheduleUpdateOptions, type ScheduledJob, type SchedulerConfig, type SchedulerStats, type ScimConfig, type ScimUser, type SdkConfig, type SdkFile, type SdkLanguage, type SendCommandOptions, type SendNotificationOptions, type ServiceHealth, type ShadowDelta, type ShadowMetadata, type ShadowUpdate, type SignInWithEmailOptions, type SignInWithMagicLinkOptions, type SignInWithPhoneOptions, type SignUpWithEmailOptions, type SignatureAlgorithm, type SlidingWindowRateLimitOptions, type SmtpConfig, SmtpEmail, type SsoSession, type StartupResponse, StorageFile, type StoredAuditEvent, type StoredNotification, StripePayment, type StripePaymentConfig, type Subscription, type SubscriptionDiscount, type SubscriptionItem, type SubscriptionMetrics, type SubscriptionQuery, type SubscriptionStatus, SupabaseAuth, type SupabaseAuthConfig, SupabaseDatabase, SupabaseStorage, type SupabaseStorageConfig, type TaxBreakdown, type TelemetryMessage, type TelemetryQuery, type TelemetryResult, type Tenant, type TenantBranding, type TenantContext, type TenantDatabaseConfig, type TenantInvitation, type TenantIsolationModel, type TenantMember, type TenantMemberStatus, type TenantQuotas, type TenantResolutionOptions, type TenantResolutionStrategy, type TenantRole, type TenantSecuritySettings, type TenantSettings, type TenantStatus, type TenantUsage, TimeoutError, type TimeoutOptions, type TokenBucketOptions, type TosAcceptance, type Transfer, type TransferStatus, type Unsubscribe, UpdateBetaSettingsOptions, type UpdateCustomerOptions, type UpdateHookContext, type UpdatePasswordOptions, type UpdatePaymentIntentOptions, type UpdateScheduleOptions, type UpdateStatus, type UpdateTenantOptions, type UpdateUserOptions, type UpdateWebhookOptions, type UploadHookContext, UploadOptions, UpstashCache, type UsageAlert, type UsageCategory, type UsageEvent, type UsageInterval, type UsageInvoice, type UsageInvoiceItem, type UsageQuery, type UsageQueryResult, type UsageRecord, type UsageSummary, type UsageSummaryRecord, type UsageTrend, type VerificationResult, type VerifyMfaOptions, type VerifyPhoneOtpOptions, type VerifyWebhookOptions, WeaviateRAG, type WeaviateRAGConfig, type WebhookConfig, type WebhookDelivery, type WebhookEndpoint, type WebhookEvent, WebhookEventTypes, type WebhookQuery, type WebhookState, type WebhookStats, type WebhookTestEndpoint, type WebhookTestEvent, calculateRetryDelay, closeSharedRedis, composeHookRegistries, correlationContext, createAnthropicAdapter, createAppLogger, createAuthError, createBulkhead, createCacheMiddleware, createCachedFallback, createCircuitBreaker, createDefaultPreferences, createErrorReport, createExpressHealthHandlers, createExpressMetricsHandler, createGoogleAIAdapter, createHealthEndpoints, createHealthServer, createHookRegistry, createIpKeyGenerator, createJobContext, createLoggingMiddleware, createMetricsEndpoint, createMetricsMiddleware, createMetricsServer, createMiddlewareChain, createMiddlewareContext, createObservabilityServer, createOpenAIAdapter, createPaymentError, createPineconeRAG, createRateLimitMiddleware, createRedisClient, createRequestContext, createRequestIdMiddleware, createSlowQueryMiddleware, createTenantMiddleware, createTimeoutMiddleware, createUserKeyGenerator, createWeaviateRAG, describeCron, filterChannelsByPreferences, formatAmount, generateAuditId, generateChecksum, generateDeliveryId, generateErrorId, generateEventId, generateFingerprint, generateNotificationId, generatePaymentId, generateScheduleId, generateSecureToken, generateWebhookId, generateWebhookSecret, getContext, getLogMeta, getNextCronRun, getRequestId, getSharedRedis, getTenantId, getTraceId, getUserId, isAuthError, isInContext, isInQuietHours, isPaymentError, isValidCron, matchAction, matchEventType, raceTimeout, retryable, runWithContext, runWithContextAsync, timedHealthCheck, toHealthCheckResult, withCorrelation, withCorrelationAsync, withFallback, withFallbackChain, withFallbackResult, withRetry, withRetryResult, withTimeout, withTimeoutWrapper };