@farthershore/cli 0.3.9 → 0.3.10

package/node_modules/@farther-shore/shared-types/dist/webhooks/events.d.ts

@@ -0,0 +1,48 @@
+import { z } from "zod";
+/**
+ * Canonical, ordered list of webhook event names the platform emits.
+ *
+ * Order is meaningful for documentation rendering only — the schema treats
+ * it as a set (no duplicates allowed by Zod's `.enum` semantics).
+ *
+ * Categories (informational; not enforced):
+ *   - `subscription.*` — lifecycle events on a builder's subscriptions
+ *   - `payment.*`      — Stripe-driven payment outcomes
+ *   - `rate_limit.*`   — gateway-level enforcement signals
+ *   - `entitlement.*`  — entitlement publish events (CompiledPlan changes)
+ *   - `usage.*`        — metered-usage threshold events
+ */
+export declare const WEBHOOK_EVENT_NAMES: readonly ["subscription.created", "subscription.updated", "subscription.canceled", "payment.succeeded", "payment.failed", "rate_limit.exceeded", "entitlement.changed", "usage.threshold_reached"];
+/**
+ * Discriminated-union of all valid webhook event names. New code should
+ * type event-typed parameters with this rather than `string` so the
+ * TypeScript compiler catches typos at build time (compiler engineering
+ * standard #3 — discriminated unions over open strings).
+ */
+export type WebhookEventName = (typeof WEBHOOK_EVENT_NAMES)[number];
+/**
+ * Zod enum mirroring the const tuple. Used by:
+ *   - The product-spec extension's webhook schema (invariant 9 enforcement).
+ *   - Any route validator that accepts an event-name body field.
+ *
+ * Built via `z.enum(WEBHOOK_EVENT_NAMES)` — Zod 4's enum accepts a const
+ * tuple directly, no extra spread needed.
+ */
+export declare const webhookEventNameSchema: z.ZodEnum<{
+    "subscription.created": "subscription.created";
+    "subscription.updated": "subscription.updated";
+    "subscription.canceled": "subscription.canceled";
+    "payment.succeeded": "payment.succeeded";
+    "payment.failed": "payment.failed";
+    "rate_limit.exceeded": "rate_limit.exceeded";
+    "entitlement.changed": "entitlement.changed";
+    "usage.threshold_reached": "usage.threshold_reached";
+}>;
+/**
+ * Type-guard: narrow an unknown string to a `WebhookEventName`. Useful at
+ * the dispatcher boundary where event names arrive from external systems
+ * (e.g. forwarded Stripe webhooks) and need to be validated before
+ * branching on the union.
+ */
+export declare function isWebhookEventName(value: unknown): value is WebhookEventName;
+//# sourceMappingURL=events.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/webhooks/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/webhooks/events.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,oMAStB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;EAA8B,CAAC;AAElE;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAK5E"}

package/node_modules/@farther-shore/shared-types/dist/webhooks/events.js

@@ -0,0 +1,68 @@
+// ---------------------------------------------------------------------------
+// Webhook Event Catalog (Phase B0 — Platform-as-Backend mode)
+// ---------------------------------------------------------------------------
+//
+// Single source of truth for the set of event names the platform emits to
+// builder-registered webhook endpoints. Imported by:
+//
+//   - shared-types/src/plans/spec.ts — used by `webhookEndpointSchema` to
+//     reject typoed event names at YAML compile time (invariant 9).
+//   - core/src/services/webhook-dispatcher.ts — the dispatcher's emit-time
+//     event-type union narrows to this list.
+//   - core/src/product-compiler/passes/emit-webhooks.ts — the compiler
+//     pass validates each `webhooks.endpoints[].events[]` value against
+//     this catalog before persisting.
+//
+// Adding a new event: append to `WEBHOOK_EVENT_NAMES` and ship a dispatcher
+// update in the same change. The const-as-tuple form preserves literal types
+// so `WebhookEventName` stays a discriminated union, not `string`.
+//
+// Renaming an event is a BREAKING CHANGE — existing builder YAMLs reference
+// the old name and will fail invariant 9. Cut a deprecation window: add the
+// new name + keep the old as an alias in the dispatcher for ≥ 2 minor
+// versions before removing.
+// ---------------------------------------------------------------------------
+import { z } from "zod";
+/**
+ * Canonical, ordered list of webhook event names the platform emits.
+ *
+ * Order is meaningful for documentation rendering only — the schema treats
+ * it as a set (no duplicates allowed by Zod's `.enum` semantics).
+ *
+ * Categories (informational; not enforced):
+ *   - `subscription.*` — lifecycle events on a builder's subscriptions
+ *   - `payment.*`      — Stripe-driven payment outcomes
+ *   - `rate_limit.*`   — gateway-level enforcement signals
+ *   - `entitlement.*`  — entitlement publish events (CompiledPlan changes)
+ *   - `usage.*`        — metered-usage threshold events
+ */
+export const WEBHOOK_EVENT_NAMES = [
+    "subscription.created",
+    "subscription.updated",
+    "subscription.canceled",
+    "payment.succeeded",
+    "payment.failed",
+    "rate_limit.exceeded",
+    "entitlement.changed",
+    "usage.threshold_reached",
+];
+/**
+ * Zod enum mirroring the const tuple. Used by:
+ *   - The product-spec extension's webhook schema (invariant 9 enforcement).
+ *   - Any route validator that accepts an event-name body field.
+ *
+ * Built via `z.enum(WEBHOOK_EVENT_NAMES)` — Zod 4's enum accepts a const
+ * tuple directly, no extra spread needed.
+ */
+export const webhookEventNameSchema = z.enum(WEBHOOK_EVENT_NAMES);
+/**
+ * Type-guard: narrow an unknown string to a `WebhookEventName`. Useful at
+ * the dispatcher boundary where event names arrive from external systems
+ * (e.g. forwarded Stripe webhooks) and need to be validated before
+ * branching on the union.
+ */
+export function isWebhookEventName(value) {
+    return (typeof value === "string" &&
+        WEBHOOK_EVENT_NAMES.includes(value));
+}
+//# sourceMappingURL=events.js.map

package/node_modules/@farther-shore/shared-types/dist/webhooks/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/webhooks/events.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAC9E,EAAE;AACF,0EAA0E;AAC1E,qDAAqD;AACrD,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,2EAA2E;AAC3E,6CAA6C;AAC7C,uEAAuE;AACvE,wEAAwE;AACxE,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,4BAA4B;AAC5B,8EAA8E;AAE9E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,mBAAmB;IACnB,gBAAgB;IAChB,qBAAqB;IACrB,qBAAqB;IACrB,yBAAyB;CACjB,CAAC;AAUX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC3D,CAAC;AACJ,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/webhooks/migration.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Relative URL of the API → YAML webhooks migration guide. Consumers
+ * (UI / SDK) prefix their own host. Core ships this in the
+ * `error.details.migrationDocsUrl` field of every 409 MANAGED_BY_YAML
+ * response body.
+ */
+export declare const WEBHOOKS_MIGRATION_DOCS_URL = "/sdk/docs/platform-as-backend.md#webhooks-migration";
+//# sourceMappingURL=migration.d.ts.map

package/node_modules/@farther-shore/shared-types/dist/webhooks/migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../../src/webhooks/migration.ts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,wDACe,CAAC"}

package/node_modules/@farther-shore/shared-types/dist/webhooks/migration.js

@@ -0,0 +1,21 @@
+// ---------------------------------------------------------------------------
+// Webhooks API → YAML migration constants
+// ---------------------------------------------------------------------------
+//
+// F16 (Verification Loop 1) — single source of truth for the migration
+// docs URL surfaced in 409 MANAGED_BY_YAML response bodies + the SDK
+// fallback message. Previously hard-coded in three places (core route
+// constant, SDK fallback message, sdk/docs markdown).
+//
+// Markdown can't import TypeScript; the markdown carries a comment
+// `<!-- @url: <value> -->` adjacent to the section anchor for grep-
+// discovery + manual sync.
+// ---------------------------------------------------------------------------
+/**
+ * Relative URL of the API → YAML webhooks migration guide. Consumers
+ * (UI / SDK) prefix their own host. Core ships this in the
+ * `error.details.migrationDocsUrl` field of every 409 MANAGED_BY_YAML
+ * response body.
+ */
+export const WEBHOOKS_MIGRATION_DOCS_URL = "/sdk/docs/platform-as-backend.md#webhooks-migration";
+//# sourceMappingURL=migration.js.map

package/node_modules/@farther-shore/shared-types/dist/webhooks/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/webhooks/migration.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,sEAAsE;AACtE,sDAAsD;AACtD,EAAE;AACF,mEAAmE;AACnE,oEAAoE;AACpE,2BAA2B;AAC3B,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC,qDAAqD,CAAC"}

package/node_modules/@farther-shore/shared-types/package.json

@@ -0,0 +1,156 @@
+{
+  "name": "@farther-shore/shared-types",
+  "version": "0.28.2",
+  "description": "Shared TypeScript types for the farthershore platform",
+  "engines": {
+    "node": ">=22"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./enums": {
+      "types": "./dist/enums.d.ts",
+      "import": "./dist/enums.js"
+    },
+    "./metering": {
+      "types": "./dist/metering.d.ts",
+      "import": "./dist/metering.js"
+    },
+    "./limits": {
+      "types": "./dist/limits.d.ts",
+      "import": "./dist/limits.js"
+    },
+    "./entitlements": {
+      "types": "./dist/entitlements.d.ts",
+      "import": "./dist/entitlements.js"
+    },
+    "./billing": {
+      "types": "./dist/billing.d.ts",
+      "import": "./dist/billing.js"
+    },
+    "./base": {
+      "types": "./dist/base.d.ts",
+      "import": "./dist/base.js"
+    },
+    "./projections": {
+      "types": "./dist/projections.d.ts",
+      "import": "./dist/projections.js"
+    },
+    "./api": {
+      "types": "./dist/api.d.ts",
+      "import": "./dist/api.js"
+    },
+    "./format": {
+      "types": "./dist/format.d.ts",
+      "import": "./dist/format.js"
+    },
+    "./web-ui": {
+      "types": "./dist/web-ui.d.ts",
+      "import": "./dist/web-ui.js"
+    },
+    "./builder-context": {
+      "types": "./dist/builder-context.d.ts",
+      "import": "./dist/builder-context.js"
+    },
+    "./portal": {
+      "types": "./dist/portal.d.ts",
+      "import": "./dist/portal.js"
+    },
+    "./admin": {
+      "types": "./dist/admin.d.ts",
+      "import": "./dist/admin.js"
+    },
+    "./consumer": {
+      "types": "./dist/consumer.d.ts",
+      "import": "./dist/consumer.js"
+    },
+    "./pricing-model": {
+      "types": "./dist/pricing-model.d.ts",
+      "import": "./dist/pricing-model.js"
+    },
+    "./edge-kv-keys": {
+      "types": "./dist/edge-kv-keys.d.ts",
+      "import": "./dist/edge-kv-keys.js"
+    },
+    "./logger": {
+      "types": "./dist/logger.d.ts",
+      "import": "./dist/logger.js"
+    },
+    "./plans": {
+      "types": "./dist/plans/index.d.ts",
+      "import": "./dist/plans/index.js"
+    },
+    "./analytics": {
+      "types": "./dist/analytics.d.ts",
+      "import": "./dist/analytics.js"
+    },
+    "./dlq": {
+      "types": "./dist/dlq.d.ts",
+      "import": "./dist/dlq.js"
+    },
+    "./scope-matcher": {
+      "types": "./dist/scope-matcher.d.ts",
+      "import": "./dist/scope-matcher.js"
+    },
+    "./service-auth": {
+      "types": "./dist/service-auth.d.ts",
+      "import": "./dist/service-auth.js"
+    },
+    "./auth/permissions": {
+      "types": "./dist/auth/permissions.d.ts",
+      "import": "./dist/auth/permissions.js"
+    },
+    "./webhooks/events": {
+      "types": "./dist/webhooks/events.d.ts",
+      "import": "./dist/webhooks/events.js"
+    },
+    "./webhooks/migration": {
+      "types": "./dist/webhooks/migration.d.ts",
+      "import": "./dist/webhooks/migration.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "build": "npm run clean && tsc -p tsconfig.build.json",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "test:billing-contracts": "npm run build && node --test test/pricing-model.test.mjs test/consumer.test.mjs test/portal.test.mjs test/entitlements.test.mjs test/web-ui.test.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/farther-shore/shared-types.git"
+  },
+  "license": "UNLICENSED",
+  "dependencies": {
+    "pino": "^10.0.0",
+    "zod": "^4.3.6"
+  },
+  "peerDependencies": {
+    "pino-pretty": "^13.0.0"
+  },
+  "peerDependenciesMeta": {
+    "pino-pretty": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "eslint": "^10.2.1",
+    "eslint-plugin-sonarjs": "^4.0.3",
+    "typescript": "^6.0.2",
+    "typescript-eslint": "^8.59.1"
+  }
+}

package/node_modules/@pinojs/redact/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 10
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 10

package/node_modules/@pinojs/redact/.github/workflows/ci.yml

@@ -0,0 +1,48 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+      - 'v*'
+    paths-ignore:
+      - 'docs/**'
+      - '*.md'
+  pull_request:
+    paths-ignore:
+      - 'docs/**'
+      - '*.md'
+
+# This allows a subsequently queued workflow run to interrupt previous runs
+concurrency:
+  group: "${{ github.workflow }} @ ${{ github.event.pull_request.head.label || github.head_ref || github.ref }}"
+  cancel-in-progress: true
+
+jobs:
+  test:
+    name: ${{ matrix.node-version }} ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macOS-latest, windows-latest, ubuntu-latest]
+        node-version: [18, 20, 22, 24]
+
+    steps:
+      - name: Check out repo
+        uses: actions/checkout@v5.0.0
+        with:
+          persist-credentials: false
+
+      - name: Setup Node ${{ matrix.node-version }}
+        uses: actions/setup-node@v5
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Install dependencies
+        run: npm i --ignore-scripts
+
+      - name: Run tests
+        run: npm run test

package/node_modules/@pinojs/redact/.github/workflows/publish-release.yml

@@ -0,0 +1,43 @@
+name: Publish release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'The version number to tag and release'
+        required: true
+        type: string
+      prerelease:
+        description: 'Release as pre-release'
+        required: false
+        type: boolean
+        default: false
+
+jobs:
+  release-npm:
+    runs-on: ubuntu-latest
+    environment: main
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4
+      - uses: actions/setup-node@v5
+        with:
+          node-version: '22'
+          registry-url: 'https://registry.npmjs.org'
+      - run: npm install npm -g
+      - run: npm install
+      - name: Change version number and sync
+        run: |
+          node scripts/sync-version.mjs ${{ inputs.version }}
+      - name: GIT commit and push all changed files
+        run: |
+          git config --global user.name "mcollina"
+          git config --global user.email "hello@matteocollina.com"
+          git commit -n -a -m "Bumped v${{ inputs.version }}"
+          git push origin HEAD:${{ github.ref }}
+      - run: npm publish --access public --tag ${{ inputs.prerelease == true && 'next' || 'latest' }}
+      - name: 'Create release notes'
+        run: |
+          npx @matteo.collina/release-notes -a ${{ secrets.GITHUB_TOKEN }} -t v${{ inputs.version }} -r redact -o pinojs ${{ github.event.inputs.prerelease == 'true' && '-p' || '' }} -c ${{ github.ref }}

package/node_modules/@pinojs/redact/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 pinojs contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.