@hachej/boring-core 0.1.63 → 0.1.65

package/dist/front/index.d.ts

@@ -1,12 +1,11 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { Component, ReactNode, ErrorInfo } from 'react';
-import { R as RuntimeConfig, g as CapabilitiesResponse, d as WorkspaceMember, U as User, c as Workspace, M as MemberRole, S as SessionState } from '../types-Bb7I-83I.js';
+import { R as RuntimeConfig, g as CapabilitiesResponse, d as WorkspaceMember, U as User, c as Workspace, M as MemberRole, S as SessionState } from '../types-DVgeIw1d.js';
+export { b as CompanyAdminLabels, c as CompanyAdminProvider, d as CompanyAdminProviderProps, e as CompanyAdminStatus, f as CoreFront, C as CoreFrontAuthPagesOverride, a as CoreFrontCompanyAdminOptions, g as CoreFrontProps, L as LoadCompanyAdminStatus, R as RenderCompanyAdminContent, u as useCompanyAdminStatus } from '../CoreFront-DB1OfNJU.js';
 import * as _tanstack_react_query from '@tanstack/react-query';
 import * as better_auth_react from 'better-auth/react';
 import { createAuthClient } from 'better-auth/react';
 import * as better_auth from 'better-auth';
-export { a as CoreFront, C as CoreFrontAuthPagesOverride, b as CoreFrontProps } from '../CoreFront-N0QJSYaM.js';
 import { NavigateFunction } from 'react-router-dom';
 export { TopBarSlotProvider, useTopBarSlot } from './top-bar-slot.js';
 
@@ -23,7 +22,7 @@ declare class AppErrorBoundary extends Component<AppErrorBoundaryProps, AppError
     componentDidCatch(error: Error, errorInfo: ErrorInfo): void;
     private handleReload;
     private handleRetry;
-    render(): string | number | bigint | boolean | Iterable<ReactNode> | Promise<string | number | bigint | boolean | react.ReactPortal | react.ReactElement<unknown, string | react.JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | react_jsx_runtime.JSX.Element | null | undefined;
+    render(): string | number | bigint | boolean | Iterable<ReactNode> | Promise<string | number | bigint | boolean | react.ReactPortal | react.ReactElement<unknown, string | react.JSXElementConstructor<any>> | Iterable<ReactNode> | null | undefined> | react.JSX.Element | null | undefined;
 }
 
 interface ConfigProviderProps {
@@ -31,7 +30,7 @@ interface ConfigProviderProps {
     /** @internal Override retry backoff delays (ms). Default: [500, 1000, 2000]. */
     retryBackoff?: number[];
 }
-declare function ConfigProvider({ children, retryBackoff, }: ConfigProviderProps): react_jsx_runtime.JSX.Element | null;
+declare function ConfigProvider({ children, retryBackoff, }: ConfigProviderProps): react.JSX.Element | null;
 declare function useConfig(): RuntimeConfig;
 declare function useConfigLoaded(): boolean;
 
@@ -47,7 +46,7 @@ interface ThemeProviderProps {
     children: ReactNode;
     defaultTheme?: ThemePreference;
 }
-declare function ThemeProvider({ children, defaultTheme }: ThemeProviderProps): react_jsx_runtime.JSX.Element;
+declare function ThemeProvider({ children, defaultTheme }: ThemeProviderProps): react.JSX.Element;
 declare function useTheme(): ThemeApi;
 
 interface Binding {
@@ -68,7 +67,7 @@ declare function useCapabilities(): CapabilitiesResponse;
 type EnrichedMember = WorkspaceMember & {
     user: Pick<User, 'id' | 'email' | 'name' | 'image'>;
 };
-declare function useWorkspaceMembers(workspaceId: string): _tanstack_react_query.UseQueryResult<EnrichedMember[], Error>;
+declare function useWorkspaceMembers(workspaceId: string): _tanstack_react_query.UseQueryResult<NoInfer<EnrichedMember[]>, Error>;
 
 type WorkspaceRouteStatus = {
     status: 'idle';
@@ -102,7 +101,7 @@ interface WorkspaceAuthProviderProps {
     workspaceRoute?: string;
     workspaceIdParam?: string;
 }
-declare function WorkspaceAuthProvider({ children, workspaceRoute, workspaceIdParam, }: WorkspaceAuthProviderProps): react_jsx_runtime.JSX.Element;
+declare function WorkspaceAuthProvider({ children, workspaceRoute, workspaceIdParam, }: WorkspaceAuthProviderProps): react.JSX.Element;
 declare function useCurrentWorkspace(): Workspace | null;
 declare function useWorkspaceRole(): MemberRole | null;
 declare function useWorkspaceRouteStatus(): WorkspaceRouteStatus;
@@ -115,7 +114,7 @@ interface AuthProviderProps {
     };
     navigate?: (path: string) => void;
 }
-declare function AuthProvider({ children, baseURL, queryClient, navigate, }: AuthProviderProps): react_jsx_runtime.JSX.Element;
+declare function AuthProvider({ children, baseURL, queryClient, navigate, }: AuthProviderProps): react.JSX.Element;
 declare function useSession(): SessionState;
 declare function useSignIn(): {
     magicLink: <FetchOptions extends better_auth.ClientFetchOption<Partial<{
@@ -367,7 +366,7 @@ interface UserIdentity {
 interface UserIdentityProviderProps {
     children: ReactNode;
 }
-declare function UserIdentityProvider({ children }: UserIdentityProviderProps): react_jsx_runtime.JSX.Element;
+declare function UserIdentityProvider({ children }: UserIdentityProviderProps): react.JSX.Element;
 declare function useUser(): UserIdentity | null;
 
 type InferAuthClient = ReturnType<typeof createAuthClient<{
@@ -384,17 +383,17 @@ interface GoogleAuthButtonProps {
     errorCallbackURL?: string;
     onError?: (message?: string) => void;
 }
-declare function GoogleAuthButton({ callbackURL, errorCallbackURL, onError, }: GoogleAuthButtonProps): react_jsx_runtime.JSX.Element;
+declare function GoogleAuthButton({ callbackURL, errorCallbackURL, onError, }: GoogleAuthButtonProps): react.JSX.Element;
 
-declare function SignInPage(): react_jsx_runtime.JSX.Element;
+declare function SignInPage(): react.JSX.Element;
 
-declare function SignUpPage(): react_jsx_runtime.JSX.Element;
+declare function SignUpPage(): react.JSX.Element;
 
-declare function ForgotPasswordPage(): react_jsx_runtime.JSX.Element;
+declare function ForgotPasswordPage(): react.JSX.Element;
 
-declare function ResetPasswordPage(): react_jsx_runtime.JSX.Element;
+declare function ResetPasswordPage(): react.JSX.Element;
 
-declare function VerifyEmailPage(): react_jsx_runtime.JSX.Element;
+declare function VerifyEmailPage(): react.JSX.Element;
 
 /** A host-provided settings section inserted after the profile panel, with its own
  * nav entry. Lets a host add feature sections (e.g. billing) WITHOUT this page —
@@ -412,9 +411,9 @@ interface UserSettingsPageProps {
      * profile panel. Omitted entirely when not provided. */
     extraSections?: UserSettingsSection[];
 }
-declare function UserSettingsPage({ topBar, extraSections }?: UserSettingsPageProps): react_jsx_runtime.JSX.Element;
+declare function UserSettingsPage({ topBar, extraSections }?: UserSettingsPageProps): react.JSX.Element;
 
-declare function InviteAcceptPage(): react_jsx_runtime.JSX.Element | null;
+declare function InviteAcceptPage(): react.JSX.Element | null;
 
 declare function setApiBase(base: string): void;
 declare function getApiBase(): string;
@@ -442,6 +441,7 @@ type RouteMap = {
     workspaceMembers: '/w/:id/members';
     workspaceInvites: '/w/:id/invites';
     workspaceSettings: '/w/:id/settings';
+    companyAdmin: '/w/:id/admin';
     inviteAccept: '/invites/:token';
 };
 declare const routes: RouteMap;
@@ -463,7 +463,7 @@ interface AuthGateProps {
     now?: () => number;
     requireEmailVerification?: boolean;
 }
-declare function AuthGate({ children, publicPaths, graceMs, location, navigate, now, requireEmailVerification, }: AuthGateProps): react_jsx_runtime.JSX.Element | null;
+declare function AuthGate({ children, publicPaths, graceMs, location, navigate, now, requireEmailVerification, }: AuthGateProps): react.JSX.Element | null;
 
 interface CoreCommand {
     id: string;
@@ -476,14 +476,16 @@ interface CoreCommand {
 }
 declare function useCoreCommands(): CoreCommand[];
 
-declare function InvitesPage(): react_jsx_runtime.JSX.Element;
+declare function InvitesPage(): react.JSX.Element;
 
-declare function MembersPage(): react_jsx_runtime.JSX.Element;
+declare function MembersPage(): react.JSX.Element;
 
 interface WorkspaceSettingsPageProps {
     topBar?: ReactNode;
 }
-declare function WorkspaceSettingsPage({ topBar }?: WorkspaceSettingsPageProps): react_jsx_runtime.JSX.Element;
+declare function WorkspaceSettingsPage({ topBar }?: WorkspaceSettingsPageProps): react.JSX.Element;
+
+declare function CompanyAdminPage(): react.JSX.Element | null;
 
 interface WorkspaceCommand {
     id: string;
@@ -503,7 +505,7 @@ interface UserMenuProps {
      * avatar + name + chevron, for the app-left footer account row. */
     variant?: 'compact' | 'bar';
 }
-declare function UserMenu({ contentSide, contentAlign, variant }?: UserMenuProps): react_jsx_runtime.JSX.Element;
+declare function UserMenu({ contentSide, contentAlign, variant }?: UserMenuProps): react.JSX.Element;
 
 interface WorkspaceSwitcherProps {
     appTitle?: string;
@@ -515,7 +517,7 @@ interface WorkspaceSwitcherProps {
      */
     displayMode?: 'full' | 'workspace';
 }
-declare function WorkspaceSwitcher({ appTitle, workspacePathPrefix, displayMode, }: WorkspaceSwitcherProps): react_jsx_runtime.JSX.Element;
+declare function WorkspaceSwitcher({ appTitle, workspacePathPrefix, displayMode, }: WorkspaceSwitcherProps): react.JSX.Element;
 
 interface CreateWorkspaceDialogProps {
     open: boolean;
@@ -534,13 +536,13 @@ interface CreateWorkspaceDialogProps {
  * `open`/`onOpenChange`; primes the workspaces cache and calls `onCreated`
  * (e.g. to navigate to the new workspace).
  */
-declare function CreateWorkspaceDialog({ open, onOpenChange, onCreated, title, description, entityNoun, }: CreateWorkspaceDialogProps): react_jsx_runtime.JSX.Element;
+declare function CreateWorkspaceDialog({ open, onOpenChange, onCreated, title, description, entityNoun, }: CreateWorkspaceDialogProps): react.JSX.Element;
 
-declare function ThemeToggle(): react_jsx_runtime.JSX.Element;
+declare function ThemeToggle(): react.JSX.Element;
 
 declare function sanitizeMarkdown(input: string): string;
 declare function sanitizeToolOutput(input: string): string;
 
 declare function debounce<T extends (...args: unknown[]) => unknown>(fn: T, ms: number): T;
 
-export { AppErrorBoundary, type AuthClient, AuthGate, type AuthGateProps, AuthProvider, type AuthProviderProps, type Binding, type Breakpoint, ConfigProvider, type ConfigProviderProps, type CoreCommand, CreateWorkspaceDialog, type CreateWorkspaceDialogProps, type EnrichedMember, ForgotPasswordPage, GoogleAuthButton, type GoogleAuthButtonProps, InviteAcceptPage, InvitesPage, MembersPage, ResetPasswordPage, type RouteMap, SignInPage, SignUpPage, type ThemeApi, ThemeProvider, type ThemeProviderProps, ThemeToggle, type UserIdentity, UserIdentityProvider, type UserIdentityProviderProps, UserMenu, UserSettingsPage, VerifyEmailPage, WorkspaceAuthProvider, type WorkspaceAuthProviderProps, type WorkspaceCommand, type WorkspaceRouteStatus, WorkspaceSettingsPage, WorkspaceSwitcher, apiFetch, apiFetchJson, buildApiUrl, buildWsUrl, debounce, getApiBase, getAuthClient, getHttpErrorDetail, getWorkspaceCommands, getWsBase, openWebSocket, routeHref, routes, sanitizeMarkdown, sanitizeToolOutput, setApiBase, useBlobUrl, useCapabilities, useChangePassword, useConfig, useConfigLoaded, useCoreCommands, useCurrentWorkspace, useKeyboardShortcuts, useReducedMotion, useSendVerificationEmail, useSession, useSignIn, useSignOut, useSignUp, useTheme, useUser, useVerifyEmail, useViewportBreakpoint, useWorkspaceMembers, useWorkspaceRole, useWorkspaceRouteStatus };
+export { AppErrorBoundary, type AuthClient, AuthGate, type AuthGateProps, AuthProvider, type AuthProviderProps, type Binding, type Breakpoint, CompanyAdminPage, ConfigProvider, type ConfigProviderProps, type CoreCommand, CreateWorkspaceDialog, type CreateWorkspaceDialogProps, type EnrichedMember, ForgotPasswordPage, GoogleAuthButton, type GoogleAuthButtonProps, InviteAcceptPage, InvitesPage, MembersPage, ResetPasswordPage, type RouteMap, SignInPage, SignUpPage, type ThemeApi, ThemeProvider, type ThemeProviderProps, ThemeToggle, type UserIdentity, UserIdentityProvider, type UserIdentityProviderProps, UserMenu, UserSettingsPage, VerifyEmailPage, WorkspaceAuthProvider, type WorkspaceAuthProviderProps, type WorkspaceCommand, type WorkspaceRouteStatus, WorkspaceSettingsPage, WorkspaceSwitcher, apiFetch, apiFetchJson, buildApiUrl, buildWsUrl, debounce, getApiBase, getAuthClient, getHttpErrorDetail, getWorkspaceCommands, getWsBase, openWebSocket, routeHref, routes, sanitizeMarkdown, sanitizeToolOutput, setApiBase, useBlobUrl, useCapabilities, useChangePassword, useConfig, useConfigLoaded, useCoreCommands, useCurrentWorkspace, useKeyboardShortcuts, useReducedMotion, useSendVerificationEmail, useSession, useSignIn, useSignOut, useSignUp, useTheme, useUser, useVerifyEmail, useViewportBreakpoint, useWorkspaceMembers, useWorkspaceRole, useWorkspaceRouteStatus };

package/dist/front/index.js

@@ -2,6 +2,8 @@ import {
   AppErrorBoundary,
   AuthGate,
   AuthProvider,
+  CompanyAdminPage,
+  CompanyAdminProvider,
   ConfigProvider,
   CoreFront,
   CreateWorkspaceDialog,
@@ -41,6 +43,7 @@ import {
   useBlobUrl,
   useCapabilities,
   useChangePassword,
+  useCompanyAdminStatus,
   useConfig,
   useConfigLoaded,
   useCoreCommands,
@@ -59,7 +62,7 @@ import {
   useWorkspaceMembers,
   useWorkspaceRole,
   useWorkspaceRouteStatus
-} from "../chunk-NC46VGXS.js";
+} from "../chunk-3B7LU76T.js";
 import {
   TopBarSlotProvider,
   useTopBarSlot
@@ -71,6 +74,8 @@ export {
   AppErrorBoundary,
   AuthGate,
   AuthProvider,
+  CompanyAdminPage,
+  CompanyAdminProvider,
   ConfigProvider,
   CoreFront,
   CreateWorkspaceDialog,
@@ -111,6 +116,7 @@ export {
   useBlobUrl,
   useCapabilities,
   useChangePassword,
+  useCompanyAdminStatus,
   useConfig,
   useConfigLoaded,
   useCoreCommands,

package/dist/front/top-bar-slot.d.ts

@@ -1,10 +1,10 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 
 declare function TopBarSlotProvider({ children, slot, }: {
     children: ReactNode;
     slot: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 declare function useTopBarSlot(): ReactNode | null;
 
 export { TopBarSlotProvider, useTopBarSlot };

package/dist/server/db/index.d.ts

@@ -1,7 +1,7 @@
-import { U as UserStore, W as WorkspaceStore } from '../../connection-B1iC6B-w.js';
-export { D as Database, d as createDatabase } from '../../connection-B1iC6B-w.js';
-export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, P as PostgresMeteringStore, R as RecordUsageInput, a as RecordUsageResult, b as ReservationFinalStatus, c as ReserveInput, d as ReserveResult, e as RunMigrationsOptions, r as runMigrations } from '../../PostgresMeteringStore-qjKGmVFr.js';
-import { U as User, c as Workspace, E as ERROR_CODES, M as MemberRole, d as WorkspaceMember, e as WorkspaceInvite, f as WorkspaceRuntime, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../../types-Bb7I-83I.js';
+import { U as UserStore, W as WorkspaceStore } from '../../connection-D9s7Td0I.js';
+export { D as Database, d as createDatabase } from '../../connection-D9s7Td0I.js';
+export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, a as ModelBudgetExceededError, P as PostgresMeteringStore, b as PostgresModelBudgetStore, R as RecordUsageInput, c as RecordUsageResult, d as ReservationFinalStatus, e as ReserveInput, f as ReserveResult, g as RunMigrationsOptions, r as runMigrations } from '../../PostgresModelBudgetStore-CFbEEdQL.js';
+import { U as User, c as Workspace, E as ERROR_CODES, M as MemberRole, d as WorkspaceMember, e as WorkspaceInvite, f as WorkspaceRuntime, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../../types-DVgeIw1d.js';
 import { PostgresJsDatabase } from 'drizzle-orm/postgres-js';
 import 'postgres';
 
@@ -41,9 +41,13 @@ declare class LocalWorkspaceStore implements WorkspaceStore {
     constructor(userStore: LocalUserStore);
     create(userId: string, name: string, appId: string, opts?: {
         isDefault?: boolean;
+        id?: string;
+        managedBy?: string;
     }): Promise<Workspace>;
     list(userId: string, appId: string): Promise<Workspace[]>;
     get(id: string): Promise<Workspace | null>;
+    getIncludingDeleted(id: string): Promise<Workspace | null>;
+    restore(id: string): Promise<Workspace | null>;
     update(id: string, updates: Partial<Pick<Workspace, 'name'>>): Promise<Workspace | null>;
     delete(id: string): Promise<{
         removed: boolean;
@@ -60,7 +64,9 @@ declare class LocalWorkspaceStore implements WorkspaceStore {
         member?: WorkspaceMember;
         code?: typeof ERROR_CODES.LAST_OWNER | typeof ERROR_CODES.NOT_MEMBER;
     }>;
-    removeMember(workspaceId: string, userId: string): Promise<{
+    removeMember(workspaceId: string, userId: string, opts?: {
+        allowLastOwner?: boolean;
+    }): Promise<{
         removed: boolean;
         code?: typeof ERROR_CODES.LAST_OWNER | typeof ERROR_CODES.NOT_MEMBER;
     }>;
@@ -115,9 +121,13 @@ declare class PostgresWorkspaceStore implements WorkspaceStore {
     private getWorkspaceAppId;
     create(userId: string, name: string, appId: string, opts?: {
         isDefault?: boolean;
+        id?: string;
+        managedBy?: string;
     }): Promise<Workspace>;
     list(userId: string, appId: string): Promise<Workspace[]>;
     get(id: string): Promise<Workspace | null>;
+    getIncludingDeleted(id: string): Promise<Workspace | null>;
+    restore(id: string): Promise<Workspace | null>;
     update(id: string, updates: Partial<Pick<Workspace, 'name'>>): Promise<Workspace | null>;
     delete(id: string): Promise<{
         removed: boolean;
@@ -134,7 +144,9 @@ declare class PostgresWorkspaceStore implements WorkspaceStore {
         member?: WorkspaceMember;
         code?: typeof ERROR_CODES.LAST_OWNER | typeof ERROR_CODES.NOT_MEMBER;
     }>;
-    removeMember(workspaceId: string, userId: string): Promise<{
+    removeMember(workspaceId: string, userId: string, opts?: {
+        allowLastOwner?: boolean;
+    }): Promise<{
         removed: boolean;
         code?: typeof ERROR_CODES.LAST_OWNER | typeof ERROR_CODES.NOT_MEMBER;
     }>;
@@ -204,6 +216,19 @@ declare class PostgresUserStore implements UserStore {
         email: string;
         settings: Record<string, unknown>;
     }>;
+    putClientUserSettings(userId: string, appId: string, updates: {
+        displayName?: string;
+        settings?: Record<string, unknown>;
+    }): Promise<{
+        displayName: string;
+        email: string;
+        settings: Record<string, unknown>;
+    }>;
+    patchUserSettingsJsonPath(userId: string, appId: string, path: string[], value: unknown): Promise<{
+        displayName: string;
+        email: string;
+        settings: Record<string, unknown>;
+    }>;
 }
 
 export { LocalUserStore, LocalWorkspaceStore, PostgresUserStore, PostgresWorkspaceStore };

package/dist/server/db/index.js

@@ -2,19 +2,23 @@ import {
   InsufficientCreditError,
   LocalUserStore,
   LocalWorkspaceStore,
+  ModelBudgetExceededError,
   PostgresMeteringStore,
+  PostgresModelBudgetStore,
   PostgresUserStore,
   PostgresWorkspaceStore,
   createDatabase,
   runMigrations
-} from "../../chunk-BVZ2YT3M.js";
+} from "../../chunk-EFM5IWTK.js";
 import "../../chunk-QZGYKLXB.js";
 import "../../chunk-MLKGABMK.js";
 export {
   InsufficientCreditError,
   LocalUserStore,
   LocalWorkspaceStore,
+  ModelBudgetExceededError,
   PostgresMeteringStore,
+  PostgresModelBudgetStore,
   PostgresUserStore,
   PostgresWorkspaceStore,
   createDatabase,

package/dist/server/index.d.ts

@@ -1,16 +1,16 @@
-import { L as LoadConfigOptions } from '../authHook-BbgCBHjP.js';
-export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../authHook-BbgCBHjP.js';
+import { L as LoadConfigOptions } from '../authHook-BUSGTx_o.js';
+export { A as AuthHookOptions, B as BetterAuthInstance, C as CreateAuthOptions, a as authHook, b as buildRuntimeConfigPayload, c as createAuth, l as loadConfig, v as validateConfig, d as validatePasswordStrength } from '../authHook-BUSGTx_o.js';
 import { z } from 'zod';
-import { C as CoreConfig, M as MemberRole, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../types-Bb7I-83I.js';
+import { C as CoreConfig, M as MemberRole, W as WorkspaceRuntimeResourceSelector, a as WorkspaceRuntimeResource, b as WorkspaceRuntimeResourceInput } from '../types-DVgeIw1d.js';
 import * as fastify from 'fastify';
 import { FastifyInstance, FastifyPluginAsync, preHandlerHookHandler, FastifyRequest, FastifyReply } from 'fastify';
 import * as http from 'http';
 import { IncomingMessage } from 'node:http';
-import { C as CreateCoreAppOptions, D as Database, U as UserStore, W as WorkspaceStore, a as WorkspaceProvisioner } from '../connection-B1iC6B-w.js';
-export { A as AuthProvider, b as CapabilitiesContributor, P as ProvisionContext, c as ProvisionResult, d as createDatabase } from '../connection-B1iC6B-w.js';
+import { C as CreateCoreAppOptions, D as Database, U as UserStore, W as WorkspaceStore, a as WorkspaceProvisioner } from '../connection-D9s7Td0I.js';
+export { A as AuthProvider, b as CapabilitiesContributor, P as ProvisionContext, c as ProvisionResult, d as createDatabase } from '../connection-D9s7Td0I.js';
 import postgres from 'postgres';
-import { P as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresMeteringStore-qjKGmVFr.js';
-export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, R as RecordUsageInput, a as RecordUsageResult, b as ReservationFinalStatus, c as ReserveInput, d as ReserveResult, r as runMigrations } from '../PostgresMeteringStore-qjKGmVFr.js';
+import { P as PostgresMeteringStore, C as CreditLedgerEntry } from '../PostgresModelBudgetStore-CFbEEdQL.js';
+export { F as FinishReservationInput, G as GrantOnceInput, I as InsufficientCreditError, M as MeteringBalance, a as ModelBudgetExceededError, b as PostgresModelBudgetStore, R as RecordUsageInput, c as RecordUsageResult, d as ReservationFinalStatus, e as ReserveInput, f as ReserveResult, r as runMigrations } from '../PostgresModelBudgetStore-CFbEEdQL.js';
 import { T as TelemetrySink } from '../telemetry-DR18MeI0.js';
 import { AgentMeteringSink } from '@hachej/boring-agent/server';
 import 'better-auth';
@@ -285,6 +285,8 @@ interface RoutesOptions {
 }
 declare const registerRoutes: FastifyPluginAsync<RoutesOptions>;
 
+declare function withUserSettingsWriteLock<T>(userId: string, appId: string, fn: () => Promise<T>): Promise<T>;
+
 interface RenderedEmail {
     to: string;
     subject: string;
@@ -573,6 +575,7 @@ interface CreditUsageRecord {
     runId?: string;
     messageId?: string;
     reservationId?: string;
+    metadata?: Record<string, unknown>;
     provider?: string;
     model?: string;
     usage: {
@@ -1019,4 +1022,4 @@ interface CreditsRoutesOptions {
  */
 declare function registerCreditsRoutes(app: FastifyInstance, options: CreditsRoutesOptions): void;
 
-export { CONSERVATIVE_DEFAULT_RATE, type CreateCheckoutInput, CreateCoreAppOptions, type CreditBalance, type CreditCost, CreditExhaustedError, type CreditPricingConfig, type CreditUsageInput, type CreditUsageRecord, type CreditsConfig, type CreditsMeteringStore, type CreditsRoutesOptions, CreditsService, DEFAULT_CREDITS_CONFIG, DEFAULT_MODEL_RATES, Database, type FsProvisionerOptions, type IdempotencyEntry, type IdempotencyKeyStore, type LemonSqueezyCheckoutConfig, type LemonSqueezyOrder, type LemonSqueezyRouteOptions, type LemonSqueezyWebhookOptions, type LemonSqueezyWebhookResult, LoadConfigOptions, MailDeliveryError, type MailTransport, type ModelTokenRate, type PostSignupHookDeps, PostgresMeteringStore, type RenderedEmail, type RoutesOptions, type RunCoreMigrationsFromEnvOptions, SIGNUP_GRANT_REASON, UserStore, WorkspaceProvisioner, WorkspaceRuntimeSandboxHandleStore, type WorkspaceRuntimeStoreLike, type WorkspaceSandboxHandleRecord, WorkspaceStore, buildCheckoutRequestBody, coreConfigSchema, createCoreApp, createCreditsMeteringSink, createDrizzleIdempotencyStore, createFsProvisioner, createIdempotencyMiddleware, createLemonSqueezyCheckout, createMailTransport, createPostSignupHook, estimateProviderCost, handleLemonSqueezyWebhook, maxEffectiveRate, maxServedRate, parseLemonSqueezyOrder, registerCreditsRoutes, registerInviteRoutes, registerMemberRoutes, registerRoutes, registerSettingsRoutes, registerWorkspaceRoutes, renderMagicLink, renderResetPassword, renderVerifyEmail, renderWelcome, renderWorkspaceInvite, requireWorkspaceMember, runCoreMigrationsFromEnv, safeRedirect, signUserAttribution, usageToCredits, verifyLemonSqueezySignature, verifyUserAttribution };
+export { CONSERVATIVE_DEFAULT_RATE, type CreateCheckoutInput, CreateCoreAppOptions, type CreditBalance, type CreditCost, CreditExhaustedError, type CreditPricingConfig, type CreditUsageInput, type CreditUsageRecord, type CreditsConfig, type CreditsMeteringStore, type CreditsRoutesOptions, CreditsService, DEFAULT_CREDITS_CONFIG, DEFAULT_MODEL_RATES, Database, type FsProvisionerOptions, type IdempotencyEntry, type IdempotencyKeyStore, type LemonSqueezyCheckoutConfig, type LemonSqueezyOrder, type LemonSqueezyRouteOptions, type LemonSqueezyWebhookOptions, type LemonSqueezyWebhookResult, LoadConfigOptions, MailDeliveryError, type MailTransport, type ModelTokenRate, type PostSignupHookDeps, PostgresMeteringStore, type RenderedEmail, type RoutesOptions, type RunCoreMigrationsFromEnvOptions, SIGNUP_GRANT_REASON, UserStore, WorkspaceProvisioner, WorkspaceRuntimeSandboxHandleStore, type WorkspaceRuntimeStoreLike, type WorkspaceSandboxHandleRecord, WorkspaceStore, buildCheckoutRequestBody, coreConfigSchema, createCoreApp, createCreditsMeteringSink, createDrizzleIdempotencyStore, createFsProvisioner, createIdempotencyMiddleware, createLemonSqueezyCheckout, createMailTransport, createPostSignupHook, estimateProviderCost, handleLemonSqueezyWebhook, maxEffectiveRate, maxServedRate, parseLemonSqueezyOrder, registerCreditsRoutes, registerInviteRoutes, registerMemberRoutes, registerRoutes, registerSettingsRoutes, registerWorkspaceRoutes, renderMagicLink, renderResetPassword, renderVerifyEmail, renderWelcome, renderWorkspaceInvite, requireWorkspaceMember, runCoreMigrationsFromEnv, safeRedirect, signUserAttribution, usageToCredits, verifyLemonSqueezySignature, verifyUserAttribution, withUserSettingsWriteLock };

package/dist/server/index.js

@@ -23,14 +23,17 @@ import {
   renderWorkspaceInvite,
   requireWorkspaceMember,
   validateConfig,
-  validatePasswordStrength
-} from "../chunk-ZMS6O4CY.js";
+  validatePasswordStrength,
+  withUserSettingsWriteLock
+} from "../chunk-CIRY3ZLU.js";
 import {
   InsufficientCreditError,
+  ModelBudgetExceededError,
   PostgresMeteringStore,
+  PostgresModelBudgetStore,
   createDatabase,
   runMigrations
-} from "../chunk-BVZ2YT3M.js";
+} from "../chunk-EFM5IWTK.js";
 import {
   noopTelemetry,
   safeCapture
@@ -422,7 +425,7 @@ var CreditsService = class {
       stopReason: input.stopReason,
       // reservationId tags the row to THIS run attempt so the fallback top-up can
       // scope to the current reservation (runId is reused on client-nonce replay).
-      metadata: { currency: "credits", ...input.reservationId ? { reservationId: input.reservationId } : {} }
+      metadata: { currency: "credits", ...input.metadata ?? {}, ...input.reservationId ? { reservationId: input.reservationId } : {} }
     });
     return { billedMicros: cost.billedCreditMicros };
   }
@@ -483,6 +486,7 @@ function authRequiredError() {
 }
 function createCreditsMeteringSink(getService) {
   return {
+    isEnabled: () => getService().config.enabled,
     async reserveRun(input) {
       const service = getService();
       if (!service.config.enabled) return {};
@@ -505,6 +509,7 @@ function createCreditsMeteringSink(getService) {
         runId: input.runId,
         messageId: input.messageId,
         reservationId: input.reservationId,
+        metadata: input.metadata,
         provider: input.model?.provider,
         model: input.model?.id,
         usage: input.usage,
@@ -1592,7 +1597,9 @@ export {
   DEFAULT_MODEL_RATES,
   InsufficientCreditError,
   MailDeliveryError,
+  ModelBudgetExceededError,
   PostgresMeteringStore,
+  PostgresModelBudgetStore,
   SIGNUP_GRANT_REASON,
   WorkspaceRuntimeSandboxHandleStore,
   authHook,
@@ -1635,5 +1642,6 @@ export {
   validateConfig,
   validatePasswordStrength,
   verifyLemonSqueezySignature,
-  verifyUserAttribution
+  verifyUserAttribution,
+  withUserSettingsWriteLock
 };

package/dist/shared/index.d.ts

@@ -1,5 +1,5 @@
-import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-Bb7I-83I.js';
-export { g as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, c as Workspace, e as WorkspaceInvite, d as WorkspaceMember, f as WorkspaceRuntime } from '../types-Bb7I-83I.js';
+import { U as User, C as CoreConfig, R as RuntimeConfig } from '../types-DVgeIw1d.js';
+export { g as CapabilitiesResponse, h as ConfigFetchError, i as ConfigValidationError, j as CoreCapabilities, E as ERROR_CODES, k as ErrorCode, H as HttpError, J as JsonValue, M as MemberRole, l as RateLimitEndpointOverride, m as SessionPayload, S as SessionState, c as Workspace, e as WorkspaceInvite, d as WorkspaceMember, f as WorkspaceRuntime } from '../types-DVgeIw1d.js';
 export { a as TelemetryEvent, T as TelemetrySink, n as noopTelemetry, s as safeCapture } from '../telemetry-DR18MeI0.js';
 
 declare function isCoreEmailVerificationEnabled(config: Pick<CoreConfig, 'auth'>): boolean;

package/dist/{types-Bb7I-83I.d.ts → types-DVgeIw1d.d.ts}

@@ -72,6 +72,7 @@ type Workspace = {
     createdAt: string;
     deletedAt: string | null;
     isDefault: boolean;
+    managedBy?: string | null;
 };
 type WorkspaceMember = {
     workspaceId: string;

package/drizzle/0015_model_budget_reservations.sql

@@ -0,0 +1,22 @@
+CREATE TABLE IF NOT EXISTS "boring_model_budget_reservations" (
+  "id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
+  "user_id" text NOT NULL,
+  "workspace_id" text,
+  "session_id" text,
+  "run_id" text NOT NULL,
+  "provider" text NOT NULL,
+  "model" text NOT NULL,
+  "period" text NOT NULL,
+  "amount_micros" bigint NOT NULL,
+  "status" text DEFAULT 'active' NOT NULL,
+  "created_at" timestamp DEFAULT now() NOT NULL,
+  "expires_at" timestamp NOT NULL,
+  CONSTRAINT "boring_model_budget_reservations_amount_check" CHECK ("boring_model_budget_reservations"."amount_micros" > 0),
+  CONSTRAINT "boring_model_budget_reservations_status_check" CHECK ("boring_model_budget_reservations"."status" IN ('active', 'settled', 'released', 'expired'))
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX IF NOT EXISTS "boring_model_budget_reservations_active_user_run_idx" ON "boring_model_budget_reservations" USING btree ("user_id","run_id") WHERE "boring_model_budget_reservations"."status" = 'active';
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "boring_model_budget_reservations_budget_idx" ON "boring_model_budget_reservations" USING btree ("user_id","provider","model","period","status");
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "boring_model_budget_reservations_stale_idx" ON "boring_model_budget_reservations" USING btree ("status","expires_at");

package/drizzle/0016_workspace_managed_by.sql

@@ -0,0 +1 @@
+ALTER TABLE "workspaces" ADD COLUMN IF NOT EXISTS "managed_by" text;

package/drizzle/meta/_journal.json

@@ -106,6 +106,20 @@
       "when": 1781568000000,
       "tag": "0014_reservation_charge_on_expire",
       "breakpoints": true
+    },
+    {
+      "idx": 15,
+      "version": "7",
+      "when": 1781654400000,
+      "tag": "0015_model_budget_reservations",
+      "breakpoints": true
+    },
+    {
+      "idx": 16,
+      "version": "7",
+      "when": 1783123200000,
+      "tag": "0016_workspace_managed_by",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hachej/boring-core",
-  "version": "0.1.63",
+  "version": "0.1.65",
   "type": "module",
   "license": "MIT",
   "description": "Foundation package for boring-ui-v2 apps: DB, auth, config, HTTP app factory, and frontend app shell.",
@@ -55,50 +55,50 @@
   "dependencies": {
     "@fastify/cors": "^11.0.0",
     "@fastify/helmet": "^13.0.1",
-    "@fastify/rate-limit": "^10.3.0",
-    "@hookform/resolvers": "^5.2.2",
+    "@fastify/rate-limit": "^11.0.0",
+    "@hookform/resolvers": "^5.4.0",
     "@react-email/components": "^1.0.12",
-    "@react-email/render": "^2.0.7",
-    "@tanstack/react-query": "^5.0.0",
-    "@zxcvbn-ts/core": "^3.0.4",
-    "@zxcvbn-ts/language-common": "^3.0.4",
-    "@zxcvbn-ts/language-en": "^3.0.2",
-    "better-auth": "^1.6.11",
+    "@react-email/render": "^2.0.9",
+    "@tanstack/react-query": "^5.101.1",
+    "@zxcvbn-ts/core": "^4.1.2",
+    "@zxcvbn-ts/language-common": "^4.1.2",
+    "@zxcvbn-ts/language-en": "^4.1.1",
+    "better-auth": "^1.6.22",
     "close-with-grace": "^2.2.0",
     "drizzle-orm": "^0.45.2",
-    "fastify": "^5.3.3",
-    "fastify-plugin": "^5.1.0",
-    "isomorphic-dompurify": "^3.10.0",
-    "lucide-react": "^1.8.0",
-    "nodemailer": "^8.0.9",
+    "fastify": "^5.9.0",
+    "fastify-plugin": "^6.0.0",
+    "isomorphic-dompurify": "^3.18.0",
+    "lucide-react": "^1.21.0",
+    "nodemailer": "^9.0.1",
     "pino": "^10.3.1",
     "postgres": "^3.4.9",
-    "posthog-node": "^5.35.1",
-    "react-helmet-async": "^2.0.5",
-    "react-hook-form": "^7.74.0",
-    "react-router-dom": "^7.14.2",
-    "smol-toml": "^1.6.1",
+    "posthog-node": "^5.38.5",
+    "react-helmet-async": "^3.0.0",
+    "react-hook-form": "^7.80.0",
+    "react-router-dom": "^7.18.0",
+    "smol-toml": "^1.7.0",
     "zod": "^3.25.76",
-    "@hachej/boring-agent": "0.1.63",
-    "@hachej/boring-ui-kit": "0.1.63",
-    "@hachej/boring-workspace": "0.1.63"
+    "@hachej/boring-agent": "0.1.65",
+    "@hachej/boring-ui-kit": "0.1.65",
+    "@hachej/boring-workspace": "0.1.65"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
-    "@types/node": "^22.15.3",
+    "@types/node": "^22.20.0",
     "@types/nodemailer": "^8.0.0",
-    "@types/react": "^19.1.2",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^19.1.3",
     "drizzle-kit": "^0.31.10",
-    "jsdom": "^29.0.2",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0",
+    "jsdom": "^29.1.1",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
     "tsup": "^8.4.0",
-    "tsx": "^4.21.0",
-    "typescript": "^5.8.3",
-    "vitest": "^3.2.6"
+    "tsx": "^4.22.4",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",

package/dist/CoreFront-N0QJSYaM.d.ts

@@ -1,23 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { ReactNode } from 'react';
-
-interface CoreFrontAuthPagesOverride {
-    signIn?: React.FC;
-    signUp?: React.FC;
-    forgotPassword?: React.FC;
-    resetPassword?: React.FC;
-    verifyEmail?: React.FC;
-    authError?: React.FC;
-    userSettings?: React.FC;
-}
-interface CoreFrontProps {
-    children?: ReactNode;
-    authPages?: CoreFrontAuthPagesOverride;
-    cspNonce?: string;
-    workspaceRoute?: string;
-    workspaceIdParam?: string;
-    publicPaths?: string[];
-}
-declare function CoreFront({ children, authPages, cspNonce, workspaceRoute, workspaceIdParam, publicPaths }: CoreFrontProps): react_jsx_runtime.JSX.Element;
-
-export { type CoreFrontAuthPagesOverride as C, CoreFront as a, type CoreFrontProps as b };