@farthershore/cli 0.3.10 → 0.3.11

package/node_modules/@farther-shore/shared-types/dist/analytics.d.ts

@@ -1,229 +0,0 @@
-/**
- * analytics.ts — canonical types for the analytics domain.
- *
- * Lives in shared-types so core (writer), gateway (publisher),
- * fs-usage-consumer (queue worker), and any future BI/dashboard surface
- * all agree on one wire shape. The previous home was
- * `core/src/services/gateway-usage-ingestion.ts`, which made cross-repo
- * consumers re-derive the type and risk drift (gateway already had a
- * divergent `QueueUsageEvent` for the queue payload).
- *
- * Three concept groups:
- *
- *   1. `GatewayUsageEvent` — the canonical wire shape that flows from
- *      gateway → queue → fs-usage-consumer → core ingestion route.
- *      Mirrors the Prisma `UsageEvent` row field-for-field where it
- *      matters (the `rawDimsJson` column is `rawDimsUnits` here, the
- *      `idempotencyKey` is `requestId`, etc.). The 0.21.0 superset
- *      reconciles the gateway's richer publisher-side shape (orgId /
- *      actorType / subjectKey / overageBehavior / environment) into
- *      shared-types as OPTIONAL fields so existing producers and
- *      consumers stay backward-compatible while we migrate everyone
- *      onto the canonical contract.
- *
- *   2. `AnalyticsSink` — provider-agnostic interface for fan-out to an
- *      analytics warehouse (ClickHouse / Tinybird / DuckDB / Timescale).
- *      Implementations live in core; the interface lives here so future
- *      cross-repo consumers (admin reports, dashboards, replay scripts)
- *      can typecheck against one contract. Designed for best-effort
- *      fire-and-forget — Postgres remains the source of truth for
- *      billing.
- *
- *   3. `UsageRollup` — forward-compatible aggregation row shape. Not
- *      consumed by the sink itself; published now so dashboard endpoints
- *      added later can typecheck against the rolled-up wire format
- *      without churning shared-types again.
- *
- * Runtime gate: `gatewayUsageEventSchema` mirrors `GatewayUsageEvent`
- * with `.passthrough()` so consumers (fs-usage-consumer, core ingestion)
- * can validate inbound queue payloads at the boundary without rejecting
- * forward-compatible unknown fields.
- */
-import { z } from "zod";
-import type { OverageBehavior } from "./enums.js";
-/**
- * Canonical wire shape for usage events flowing through the pipeline.
- *
- * Field semantics:
- *   - `requestId` doubles as the idempotency key — `core/src/services/
- *     gateway-usage-ingestion.ts` uses `prisma.usageEvent.createMany`
- *     with `skipDuplicates` against the unique `idempotencyKey` index,
- *     so re-deliveries from the Cloudflare Queue are no-ops.
- *   - `timestamp` is a Unix epoch in **milliseconds** (matches what
- *     `Date.now()` produces; the ingestion route converts it to a
- *     `Date` for `occurredAt`).
- *   - `rawDimsUnits` is the per-metric value map (e.g.
- *     `{ requests: 1, tokens: 42 }`). Persisted to Postgres as
- *     `rawDimsJson` JSON.
- *   - `apiKeyId` is nullable — internal traffic + reservation flows
- *     don't always carry a credential.
- *   - `environmentId` is nullable for production-scope events.
- *   - `subscriberStatus` is a closed literal union — gateway only
- *     publishes events for subscriptions in one of three lifecycle
- *     states. (Pre-0.21.0 this was an open string for forward-compat
- *     with unknown future statuses; we now require the closed set so
- *     consumers can switch-exhaustively.)
- *
- * 0.21.0 superset (additive, all optional):
- *   - `orgId` — tenant's owning Org (gateway publishes; core ingestion
- *     denormalizes for analytics partitioning).
- *   - `actorType` / `actorId` — who initiated the request (an org-level
- *     service token vs. a specific end-user).
- *   - `subjectKey` — gateway-side composed cache/dedupe key.
- *   - `overageBehavior` — snapshot of the plan's overage policy at the
- *     moment of measurement; lets consumers reconstruct the gating
- *     decision without re-reading the compiled plan.
- *   - `environment` — `'production' | 'sandbox'`. Distinct from
- *     `environmentId` (the env-branch UUID); this is the lifecycle
- *     channel.
- */
-export type GatewayUsageEvent = {
-    requestId: string;
-    tenantId: string;
-    slug: string;
-    subscriptionId: string;
-    subscriberId: string;
-    apiKeyId: string | null;
-    compiledPlanId: string;
-    subscriberStatus: "ONBOARDING" | "ACTIVE" | "SUSPENDED";
-    subscriptionStatus: string;
-    productId: string;
-    statusCode: number;
-    path: string;
-    latencyMs: number;
-    rawDimsUnits: Record<string, number>;
-    reportingAttested: boolean;
-    measureContext?: Record<string, unknown>;
-    creditUnitsConsumed?: Record<string, number>;
-    timestamp: number;
-    environmentId?: string | null;
-    /** Owning org of the tenant. Gateway populates; analytics partitions on it. */
-    orgId?: string;
-    /** Whether the request was driven by an org-level token or an end-user. */
-    actorType?: "org" | "user";
-    /** Stable id of the actor (null when actorType is org-level / anonymous). */
-    actorId?: string | null;
-    /** Gateway-composed cache/dedupe key. Opaque to downstream consumers. */
-    subjectKey?: string;
-    /** Snapshot of the overage policy at measurement time. */
-    overageBehavior?: OverageBehavior;
-    /** Lifecycle channel — distinct from `environmentId` (the env-branch UUID). */
-    environment?: "production" | "sandbox";
-    /**
-     * Self-describing metadata stamped onto every event for forensics. The
-     * one field today is `gatewayVersion` — the build identifier of the
-     * `fs-gateway` worker that produced this event. Required when triaging
-     * a poison-message DLQ entry: "every malformed event came from
-     * gateway v1.42.0 → look at that release". Future fields (e.g.
-     * `regionId`, `colo`) can be added without a breaking change.
-     */
-    _meta?: {
-        gatewayVersion?: string;
-    };
-};
-/**
- * Runtime zod schema mirroring {@link GatewayUsageEvent}. Use this at
- * trust boundaries (queue consumer, ingestion HTTP route) to validate
- * inbound payloads — the type alone gives no runtime guarantees.
- *
- * Uses `.passthrough()` (not `.strict()` / `.strip()`) so unknown fields
- * survive the round-trip. This protects us against the staged-deploy
- * window where gateway publishes a new optional field before the
- * consumer side picks up the new shared-types release.
- */
-export declare const gatewayUsageEventSchema: z.ZodObject<{
-    requestId: z.ZodString;
-    tenantId: z.ZodString;
-    slug: z.ZodString;
-    subscriptionId: z.ZodString;
-    subscriberId: z.ZodString;
-    apiKeyId: z.ZodNullable<z.ZodString>;
-    compiledPlanId: z.ZodString;
-    subscriberStatus: z.ZodEnum<{
-        ACTIVE: "ACTIVE";
-        ONBOARDING: "ONBOARDING";
-        SUSPENDED: "SUSPENDED";
-    }>;
-    subscriptionStatus: z.ZodString;
-    productId: z.ZodString;
-    statusCode: z.ZodNumber;
-    path: z.ZodString;
-    latencyMs: z.ZodNumber;
-    rawDimsUnits: z.ZodRecord<z.ZodString, z.ZodNumber>;
-    reportingAttested: z.ZodBoolean;
-    measureContext: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    creditUnitsConsumed: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
-    timestamp: z.ZodNumber;
-    environmentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    orgId: z.ZodOptional<z.ZodString>;
-    actorType: z.ZodOptional<z.ZodEnum<{
-        org: "org";
-        user: "user";
-    }>>;
-    actorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    subjectKey: z.ZodOptional<z.ZodString>;
-    overageBehavior: z.ZodOptional<z.ZodEnum<{
-        BLOCK: "BLOCK";
-        ALLOW_AND_BILL: "ALLOW_AND_BILL";
-    }>>;
-    environment: z.ZodOptional<z.ZodEnum<{
-        production: "production";
-        sandbox: "sandbox";
-    }>>;
-    _meta: z.ZodOptional<z.ZodObject<{
-        gatewayVersion: z.ZodOptional<z.ZodString>;
-    }, z.core.$loose>>;
-}, z.core.$loose>;
-/**
- * Provider-agnostic analytics sink. Implementations fan out usage events
- * to an analytics warehouse (currently ClickHouse-shaped, but the
- * interface is intentionally provider-free so swapping to Tinybird /
- * DuckDB / Timescale is a one-class change in core).
- *
- * Contract:
- *   - `publishUsageEvents` is best-effort. Implementations log + swallow
- *     transport errors; never throw to the caller (the ingestion route
- *     must commit to Postgres regardless).
- *   - `ping` is for `/healthz/analytics` only — must not have side
- *     effects.
- *   - `provider` is a stable string used in logs and health output.
- *     Reserved values: `"null"` (the no-op default), `"clickhouse"`,
- *     `"tinybird"`. Implementations of new providers MUST pick a
- *     unique stable value.
- */
-export interface AnalyticsSink {
-    /** Best-effort batch publish. Failures are logged, never thrown. */
-    publishUsageEvents(events: GatewayUsageEvent[]): Promise<void>;
-    /** Health probe for /healthz/analytics. Must be side-effect free. */
-    ping(): Promise<AnalyticsSinkPing>;
-    /** Stable provider identifier for logs + health output. */
-    readonly provider: string;
-}
-export type AnalyticsSinkPing = {
-    ok: boolean;
-    provider: string;
-    /** Wall-clock duration of the ping round-trip, when measurable. */
-    latencyMs?: number;
-    /** Short error string when `ok === false`. Never the raw stack. */
-    error?: string;
-};
-/**
- * Hourly per-(subscription, dimension) aggregation row.
- *
- * Forward-compatible: the sink itself does not produce this shape —
- * it's the wire format dashboard endpoints will return when the read
- * path comes online. Published now so admin / dev-portal callers can
- * typecheck against one contract without churning shared-types when
- * the dashboards land.
- *
- * `hour` is an ISO-8601 timestamp truncated to the hour boundary.
- * `dimensionKey` matches a key from `GatewayUsageEvent.rawDimsUnits`.
- */
-export type UsageRollup = {
-    subscriptionId: string;
-    hour: string;
-    dimensionKey: string;
-    dimensionSum: number;
-    eventCount: number;
-};
-//# sourceMappingURL=analytics.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/analytics.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;IACxD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAEvC;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE;QACN,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+CpB,CAAC;AAEjB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,qEAAqE;IACrE,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/analytics.js

@@ -1,101 +0,0 @@
-/**
- * analytics.ts — canonical types for the analytics domain.
- *
- * Lives in shared-types so core (writer), gateway (publisher),
- * fs-usage-consumer (queue worker), and any future BI/dashboard surface
- * all agree on one wire shape. The previous home was
- * `core/src/services/gateway-usage-ingestion.ts`, which made cross-repo
- * consumers re-derive the type and risk drift (gateway already had a
- * divergent `QueueUsageEvent` for the queue payload).
- *
- * Three concept groups:
- *
- *   1. `GatewayUsageEvent` — the canonical wire shape that flows from
- *      gateway → queue → fs-usage-consumer → core ingestion route.
- *      Mirrors the Prisma `UsageEvent` row field-for-field where it
- *      matters (the `rawDimsJson` column is `rawDimsUnits` here, the
- *      `idempotencyKey` is `requestId`, etc.). The 0.21.0 superset
- *      reconciles the gateway's richer publisher-side shape (orgId /
- *      actorType / subjectKey / overageBehavior / environment) into
- *      shared-types as OPTIONAL fields so existing producers and
- *      consumers stay backward-compatible while we migrate everyone
- *      onto the canonical contract.
- *
- *   2. `AnalyticsSink` — provider-agnostic interface for fan-out to an
- *      analytics warehouse (ClickHouse / Tinybird / DuckDB / Timescale).
- *      Implementations live in core; the interface lives here so future
- *      cross-repo consumers (admin reports, dashboards, replay scripts)
- *      can typecheck against one contract. Designed for best-effort
- *      fire-and-forget — Postgres remains the source of truth for
- *      billing.
- *
- *   3. `UsageRollup` — forward-compatible aggregation row shape. Not
- *      consumed by the sink itself; published now so dashboard endpoints
- *      added later can typecheck against the rolled-up wire format
- *      without churning shared-types again.
- *
- * Runtime gate: `gatewayUsageEventSchema` mirrors `GatewayUsageEvent`
- * with `.passthrough()` so consumers (fs-usage-consumer, core ingestion)
- * can validate inbound queue payloads at the boundary without rejecting
- * forward-compatible unknown fields.
- */
-import { z } from "zod";
-/**
- * Runtime zod schema mirroring {@link GatewayUsageEvent}. Use this at
- * trust boundaries (queue consumer, ingestion HTTP route) to validate
- * inbound payloads — the type alone gives no runtime guarantees.
- *
- * Uses `.passthrough()` (not `.strict()` / `.strip()`) so unknown fields
- * survive the round-trip. This protects us against the staged-deploy
- * window where gateway publishes a new optional field before the
- * consumer side picks up the new shared-types release.
- */
-export const gatewayUsageEventSchema = z
-    .object({
-    requestId: z.string(),
-    tenantId: z.string(),
-    slug: z.string(),
-    subscriptionId: z.string(),
-    subscriberId: z.string(),
-    apiKeyId: z.string().nullable(),
-    compiledPlanId: z.string(),
-    subscriberStatus: z.enum(["ONBOARDING", "ACTIVE", "SUSPENDED"]),
-    subscriptionStatus: z.string(),
-    productId: z.string(),
-    statusCode: z.number(),
-    path: z.string(),
-    latencyMs: z.number(),
-    rawDimsUnits: z.record(z.string(), z.number()),
-    reportingAttested: z.boolean(),
-    measureContext: z.record(z.string(), z.unknown()).optional(),
-    creditUnitsConsumed: z.record(z.string(), z.number()).optional(),
-    timestamp: z.number(),
-    environmentId: z.string().nullable().optional(),
-    // --- 0.21.0 superset (all optional) ---
-    orgId: z.string().optional(),
-    actorType: z.enum(["org", "user"]).optional(),
-    actorId: z.string().nullable().optional(),
-    subjectKey: z.string().optional(),
-    overageBehavior: z.enum(["BLOCK", "ALLOW_AND_BILL"]).optional(),
-    environment: z.enum(["production", "sandbox"]).optional(),
-    // --- 0.24.0 event-pipeline-hardening (Risk 5) ---
-    // Self-describing metadata for forensics. Optional + permissive so a
-    // gateway version that ships before this field is recognized
-    // produces no validation failure (the schema is `.passthrough()` so
-    // unknown fields are preserved either way; declaring it explicitly
-    // here lets downstream code consume it via the typed shape).
-    // Swarm-1D P1 audit fix: `.passthrough()` on the inner _meta object.
-    // Without it, zod's default `.strip()` silently drops unknown fields
-    // when they reach a v0.24-pinned consumer. A future gateway shipping
-    // _meta.regionId would have it disappear from `parsed._meta` even
-    // though the outer schema's passthrough preserves it on the raw
-    // body. Mirror the outer-schema's permissive contract here.
-    _meta: z
-        .object({
-        gatewayVersion: z.string().optional(),
-    })
-        .passthrough()
-        .optional(),
-})
-    .passthrough();
-//# sourceMappingURL=analytics.js.map

package/node_modules/@farther-shore/shared-types/dist/analytics.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsFxB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,yCAAyC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,mDAAmD;IACnD,qEAAqE;IACrE,6DAA6D;IAC7D,oEAAoE;IACpE,mEAAmE;IACnE,6DAA6D;IAC7D,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,gEAAgE;IAChE,4DAA4D;IAC5D,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/api.d.ts

@@ -1,16 +0,0 @@
-/** Standard error response from the core API */
-export type ApiErrorResponse = {
-    error: string;
-    code?: string;
-    details?: unknown;
-};
-/** Paginated list response */
-export type PaginatedResponse<T> = {
-    data: T[];
-    total: number;
-    page: number;
-    limit: number;
-};
-/** Usage summary keyed by meter dimension */
-export type UsageSummary = Record<string, number>;
-//# sourceMappingURL=api.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAIA,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,8BAA8B;AAC9B,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/api.js

@@ -1,5 +0,0 @@
-// ---------------------------------------------------------------------------
-// API response envelope types — canonical shapes for all API responses
-// ---------------------------------------------------------------------------
-export {};
-//# sourceMappingURL=api.js.map

package/node_modules/@farther-shore/shared-types/dist/api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E"}

package/node_modules/@farther-shore/shared-types/dist/auth/permissions.d.ts

@@ -1,63 +0,0 @@
-/**
- * The 9 resources the builder authorization layer knows about.
- * Each resource has a per-verb namespace below. Adding a new resource
- * means: add a `<resource>` constant here AND a `<RESOURCE>_VERBS` array
- * below AND wire it into core's `defaultRolePolicies()`.
- */
-export declare const RESOURCES: {
-    readonly ORG: "org";
-    readonly TEAM: "team";
-    readonly PRODUCT: "product";
-    readonly PLAN: "plan";
-    readonly APIKEY: "apikey";
-    readonly MAKERTOKEN: "makertoken";
-    readonly BILLING: "billing";
-    readonly WEBHOOK: "webhook";
-    readonly AUDIT_LOG: "audit_log";
-};
-export type Resource = (typeof RESOURCES)[keyof typeof RESOURCES];
-/**
- * Org-level verbs. `manage_billing` and `delete` are owner-only by default.
- *
- * The act of creating a brand-new org is technically a user-level action
- * — the caller doesn't yet have a Membership row in the new org — so
- * core enforces `org.create` on the caller's CURRENT active org (where
- * they DO have a role). admin+owner are allowed to create new orgs,
- * members are not.
- */
-export declare const ORG_VERBS: readonly ["read", "create", "update", "delete", "manage_settings", "manage_billing"];
-export type OrgVerb = (typeof ORG_VERBS)[number];
-/** Team / membership verbs. */
-export declare const TEAM_VERBS: readonly ["read", "invite", "remove_member", "change_role"];
-export type TeamVerb = (typeof TEAM_VERBS)[number];
-/** Product CRUD + lifecycle. `publish` and `delete` are owner-only by default. */
-export declare const PRODUCT_VERBS: readonly ["read", "create", "update", "delete", "publish", "archive"];
-export type ProductVerb = (typeof PRODUCT_VERBS)[number];
-/** Plan CRUD + version promote. */
-export declare const PLAN_VERBS: readonly ["read", "create", "update", "delete", "promote_version"];
-export type PlanVerb = (typeof PLAN_VERBS)[number];
-/** Subscriber-facing API key management at the builder layer. */
-export declare const APIKEY_VERBS: readonly ["read", "create", "rotate", "revoke"];
-export type ApiKeyVerb = (typeof APIKEY_VERBS)[number];
-/** MakerToken (builder CI/CD machine identity) management. */
-export declare const MAKERTOKEN_VERBS: readonly ["read", "create", "rotate", "revoke"];
-export type MakerTokenVerb = (typeof MAKERTOKEN_VERBS)[number];
-/** Billing surface: builder's own subscription + per-product billing config. */
-export declare const BILLING_VERBS: readonly ["read", "manage_subscription", "refund", "change_payment_method"];
-export type BillingVerb = (typeof BILLING_VERBS)[number];
-/** Outbound webhook configuration (the URLs FartherShore POSTs events to). */
-export declare const WEBHOOK_VERBS: readonly ["read", "configure", "rotate_secret"];
-export type WebhookVerb = (typeof WEBHOOK_VERBS)[number];
-/** Audit log read + export (separate verb so SOC 2 access reviews can scope it). */
-export declare const AUDIT_LOG_VERBS: readonly ["read", "export"];
-export type AuditLogVerb = (typeof AUDIT_LOG_VERBS)[number];
-/**
- * Resource → verb-array map. Useful for tests and tooling (matrix
- * generators, scope validators, role-policy builders).
- */
-export declare const VERBS_BY_RESOURCE: Record<Resource, readonly string[]>;
-/** Total verb count across all resources — sanity check for tests. */
-export declare const TOTAL_VERB_COUNT: number;
-export declare const MAKER_TOKEN_SCOPES: readonly ["products:create", "products:update", "products:publish", "products:read", "customers:read", "customers:write", "billing:checkout", "billing:manage", "entitlements:read", "entitlements:check"];
-export type MakerTokenScope = (typeof MAKER_TOKEN_SCOPES)[number];
-//# sourceMappingURL=permissions.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/auth/permissions.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/auth/permissions.ts"],"names":[],"mappings":"AAyBA;;;;;GAKG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;CAUZ,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,CAAC;AAUlE;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS,sFAOZ,CAAC;AACX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,+BAA+B;AAC/B,eAAO,MAAM,UAAU,6DAKb,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,kFAAkF;AAClF,eAAO,MAAM,aAAa,uEAOhB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,mCAAmC;AACnC,eAAO,MAAM,UAAU,oEAMb,CAAC;AACX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,iEAAiE;AACjE,eAAO,MAAM,YAAY,iDAAkD,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB,iDAAkD,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,gFAAgF;AAChF,eAAO,MAAM,aAAa,6EAKhB,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,8EAA8E;AAC9E,eAAO,MAAM,aAAa,iDAAkD,CAAC;AAC7E,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,oFAAoF;AACpF,eAAO,MAAM,eAAe,6BAA8B,CAAC;AAC3D,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAUjE,CAAC;AAEF,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,QAG5B,CAAC;AAYF,eAAO,MAAM,kBAAkB,4MAWrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/auth/permissions.js

@@ -1,143 +0,0 @@
-// ---------------------------------------------------------------------------
-// Canonical scope grammar + verb namespace.
-//
-// This module is the cross-repo source of truth for the resource/verb
-// grammar that powers RBAC across FartherShore. core re-exports these
-// symbols from `core/src/services/authorization/permissions.ts` and
-// `core/src/services/workspaces.ts` for backward compat.
-//
-// Future: SDK + fs-admin should validate scope strings (e.g. on
-// maker-token issuance and Casbin policy authoring) against the constants
-// exported here, instead of accepting free-form strings. That keeps the
-// scope vocabulary closed and lets us extend the grammar without
-// silently accepting typos.
-//
-// Notes:
-//   - Only the namespace constants live here. Role bundles
-//     (`defaultRolePolicies`), `ALL_READ_VERBS`, and `ADMIN_DENY_LIST`
-//     are core-only enforcement logic and stay in core.
-//   - Casbin enforcement still uses regexMatch on the action field, so
-//     any string matching `<resource>.<verb>` is technically a legal
-//     action. The namespace below is the canonical set; routes calling
-//     enforcement helpers should always pass a tuple drawn from these
-//     constants, not a free-form string.
-// ---------------------------------------------------------------------------
-/**
- * The 9 resources the builder authorization layer knows about.
- * Each resource has a per-verb namespace below. Adding a new resource
- * means: add a `<resource>` constant here AND a `<RESOURCE>_VERBS` array
- * below AND wire it into core's `defaultRolePolicies()`.
- */
-export const RESOURCES = {
-    ORG: "org",
-    TEAM: "team",
-    PRODUCT: "product",
-    PLAN: "plan",
-    APIKEY: "apikey",
-    MAKERTOKEN: "makertoken",
-    BILLING: "billing",
-    WEBHOOK: "webhook",
-    AUDIT_LOG: "audit_log",
-};
-// ---------------------------------------------------------------------------
-// Per-resource verb namespaces.
-//
-// Each `<RESOURCE>_VERBS` is the closed set of actions the platform knows
-// how to enforce for that resource. The `<Resource>Verb` types extract
-// the union so callers get autocomplete + compile-time errors on typos.
-// ---------------------------------------------------------------------------
-/**
- * Org-level verbs. `manage_billing` and `delete` are owner-only by default.
- *
- * The act of creating a brand-new org is technically a user-level action
- * — the caller doesn't yet have a Membership row in the new org — so
- * core enforces `org.create` on the caller's CURRENT active org (where
- * they DO have a role). admin+owner are allowed to create new orgs,
- * members are not.
- */
-export const ORG_VERBS = [
-    "read",
-    "create",
-    "update",
-    "delete",
-    "manage_settings",
-    "manage_billing",
-];
-/** Team / membership verbs. */
-export const TEAM_VERBS = [
-    "read",
-    "invite",
-    "remove_member",
-    "change_role",
-];
-/** Product CRUD + lifecycle. `publish` and `delete` are owner-only by default. */
-export const PRODUCT_VERBS = [
-    "read",
-    "create",
-    "update",
-    "delete",
-    "publish",
-    "archive",
-];
-/** Plan CRUD + version promote. */
-export const PLAN_VERBS = [
-    "read",
-    "create",
-    "update",
-    "delete",
-    "promote_version",
-];
-/** Subscriber-facing API key management at the builder layer. */
-export const APIKEY_VERBS = ["read", "create", "rotate", "revoke"];
-/** MakerToken (builder CI/CD machine identity) management. */
-export const MAKERTOKEN_VERBS = ["read", "create", "rotate", "revoke"];
-/** Billing surface: builder's own subscription + per-product billing config. */
-export const BILLING_VERBS = [
-    "read",
-    "manage_subscription",
-    "refund",
-    "change_payment_method",
-];
-/** Outbound webhook configuration (the URLs FartherShore POSTs events to). */
-export const WEBHOOK_VERBS = ["read", "configure", "rotate_secret"];
-/** Audit log read + export (separate verb so SOC 2 access reviews can scope it). */
-export const AUDIT_LOG_VERBS = ["read", "export"];
-/**
- * Resource → verb-array map. Useful for tests and tooling (matrix
- * generators, scope validators, role-policy builders).
- */
-export const VERBS_BY_RESOURCE = {
-    [RESOURCES.ORG]: ORG_VERBS,
-    [RESOURCES.TEAM]: TEAM_VERBS,
-    [RESOURCES.PRODUCT]: PRODUCT_VERBS,
-    [RESOURCES.PLAN]: PLAN_VERBS,
-    [RESOURCES.APIKEY]: APIKEY_VERBS,
-    [RESOURCES.MAKERTOKEN]: MAKERTOKEN_VERBS,
-    [RESOURCES.BILLING]: BILLING_VERBS,
-    [RESOURCES.WEBHOOK]: WEBHOOK_VERBS,
-    [RESOURCES.AUDIT_LOG]: AUDIT_LOG_VERBS,
-};
-/** Total verb count across all resources — sanity check for tests. */
-export const TOTAL_VERB_COUNT = Object.values(VERBS_BY_RESOURCE).reduce((sum, verbs) => sum + verbs.length, 0);
-// ---------------------------------------------------------------------------
-// MakerToken scope grammar.
-//
-// MakerTokens are CI/CD machine identities. Their scopes are the
-// coarse-grained `domain:action` strings issuers can pin onto a token
-// at creation time. Tier mapping (READONLY / WRITE / ADMIN) is enforced
-// in core; the closed set itself lives here so SDK + fs-admin can
-// validate scope strings without reaching into core.
-// ---------------------------------------------------------------------------
-export const MAKER_TOKEN_SCOPES = [
-    "products:create",
-    "products:update",
-    "products:publish",
-    "products:read",
-    "customers:read",
-    "customers:write",
-    "billing:checkout",
-    "billing:manage",
-    "entitlements:read",
-    "entitlements:check",
-];
-//# sourceMappingURL=permissions.js.map

package/node_modules/@farther-shore/shared-types/dist/auth/permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/auth/permissions.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,4CAA4C;AAC5C,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,oEAAoE;AACpE,yDAAyD;AACzD,EAAE;AACF,gEAAgE;AAChE,0EAA0E;AAC1E,wEAAwE;AACxE,iEAAiE;AACjE,4BAA4B;AAC5B,EAAE;AACF,SAAS;AACT,2DAA2D;AAC3D,uEAAuE;AACvE,wDAAwD;AACxD,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,yCAAyC;AACzC,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;CACd,CAAC;AAIX,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,iBAAiB;IACjB,gBAAgB;CACR,CAAC;AAGX,+BAA+B;AAC/B,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM;IACN,QAAQ;IACR,eAAe;IACf,aAAa;CACL,CAAC;AAGX,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;CACD,CAAC;AAGX,mCAAmC;AACnC,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,iBAAiB;CACT,CAAC;AAGX,iEAAiE;AACjE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAG5E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGhF,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,MAAM;IACN,qBAAqB;IACrB,QAAQ;IACR,uBAAuB;CACf,CAAC;AAGX,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,eAAe,CAAU,CAAC;AAG7E,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AAG3D;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwC;IACpE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,SAAS;IAC1B,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU;IAC5B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa;IAClC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU;IAC5B,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,YAAY;IAChC,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,gBAAgB;IACxC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa;IAClC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,aAAa;IAClC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,eAAe;CACvC,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CACrE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAClC,CAAC,CACF,CAAC;AAEF,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,iEAAiE;AACjE,sEAAsE;AACtE,wEAAwE;AACxE,kEAAkE;AAClE,qDAAqD;AACrD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;CACZ,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/base.d.ts

@@ -1,18 +0,0 @@
-import type { PlanType, ProductStatus, SubscriberStatus } from "./enums.js";
-export type ProductBase = {
-    id: string;
-    name: string;
-    status: ProductStatus;
-};
-export type PlanBase = {
-    id: string;
-    name: string;
-    type: PlanType;
-    monthlyPriceCents: number;
-};
-export type SubscriberBase = {
-    id: string;
-    productId: string;
-    status: SubscriberStatus;
-};
-//# sourceMappingURL=base.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/base.js

@@ -1,6 +0,0 @@
-// ---------------------------------------------------------------------------
-// Base interfaces — minimal fields present in ALL repo projections.
-// Each repo extends these locally with its own API-specific fields.
-// ---------------------------------------------------------------------------
-export {};
-//# sourceMappingURL=base.js.map

package/node_modules/@farther-shore/shared-types/dist/base.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../src/base.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,oEAAoE;AACpE,oEAAoE;AACpE,8EAA8E"}