@hasna/economy 0.3.28 → 0.5.0

package/dist/lib/cloud-storage.d.ts

@@ -1,8 +1,14 @@
-import { resolveStorageClient, type HasnaStorageClient } from "./contracts-client/storage.js";
-/** Transport overrides (test injection: fetchImpl, headers, timeout, retry). */
-type StorageClientOverrides = Parameters<typeof resolveStorageClient>[2];
+import { createClientTransport, type CredentialChainOptions } from "@hasna/contracts/client";
+import { type HasnaStorageClient } from "@hasna/contracts/client/storage";
+import type { ClientTransportResolution } from "@hasna/contracts/client";
 /** The economy app slug used for the HASNA_<APP>_* env lookups. */
 export declare const ECONOMY_APP = "economy";
+/**
+ * The @hasna/contracts transport overrides (test injection: fetchImpl, headers,
+ * timeout, retry, sleepImpl) plus the tier-1 credential chain options
+ * (`--api-key` / `--profile` and the injectable `security` runner tests use).
+ */
+export type EconomyStorageClientOverrides = Parameters<typeof createClientTransport>[2];
 export type EconomyCloudStorage = {
     /** True when reads/writes must go to the cloud HTTP API. */
     readonly active: true;
@@ -12,16 +18,130 @@ export type EconomyCloudStorage = {
     readonly active: false;
     readonly client: null;
 };
+/**
+ * Explicit local-store opt-in variables. The on-box SQLite store is served
+ * only when one of these is set to a truthy value; without either of them (and
+ * without a resolved credential) the client fails closed.
+ */
+export declare const LOCAL_STORAGE_OPT_IN_KEYS: readonly ["HASNA_ECONOMY_LOCAL", "ECONOMY_LOCAL"];
+/**
+ * Every env name that can configure an economy authority or credential,
+ * resolver-derived — the one spelling the resolver itself looks for, so a
+ * second copy can never fall behind it.
+ */
+export declare function economyAuthorityEnvKeys(): string[];
+/**
+ * Does the ENVIRONMENT itself configure an economy authority or credential?
+ *
+ * Deliberately narrower than "does a credential resolve": answering it must not
+ * touch the Keychain or the filesystem, because doing so would defeat the
+ * isolation the local-opt-in short-circuit exists to provide (the @hasna/todos
+ * `local-opt-in.ts` pattern, owner directive 2026-09-04). It reads the env
+ * dictionary and nothing else.
+ *
+ * A DECLARED-BUT-BLANK variable counts as absent HERE — a blank has always been
+ * this package's spelling for "not configured", and helpers in the wild blank
+ * rather than delete. It is NOT absent once we do go hosted: the resolver
+ * refuses a blank loudly rather than falling through to another identity, which
+ * is the behaviour that matters at that point.
+ */
+export declare function hasEconomyEnvAuthorityIntent(env: Record<string, string | undefined>): boolean;
+/**
+ * True when SOMETHING configures a hosted authority for economy: the
+ * `HASNA_ECONOMY_API_URL` env key (or its legacy alias), the Keychain
+ * `api-url` item, or the `~/.hasna/economy/config/credentials` file.
+ *
+ * It asks the SAME three sources, in the same order and through the same
+ * @hasna/contracts entry points, that `createClientTransport` consults before
+ * it falls back to the fleet gateway; the gateway default is deliberately NOT
+ * one of them, because a default that always applies would make this always
+ * true. It drives the fail-closed message's way-out branch: an opted-in run
+ * with a configured authority is a half-applied hosted run, and the error says
+ * so instead of inviting the operator to use a different dataset.
+ */
+export declare function hostedAuthorityConfigured(env: Record<string, string | undefined>, options?: EconomyStorageClientOverrides): boolean;
+/**
+ * The environment as the resolver should see it: every authority/credential
+ * variable that is DECLARED BUT BLANK removed.
+ *
+ * A blank has always been this package's spelling for "not configured" — it is
+ * how the CLI's spawned-process fixtures neutralise an inherited fleet
+ * environment and how consumer fixtures still write it. @hasna/contracts takes
+ * the opposite and, for its purposes, correct view: a declared-but-blank
+ * credential is a misconfiguration it refuses loudly rather than resolving
+ * around. Both are right at their own layer: a blank that means "unset" at the
+ * economy seam is not a credential the operator named.
+ */
+export declare function economyResolverEnv<T extends Record<string, string | undefined>>(env: T): T;
+/**
+ * Build the resolver's inputs: the normalised environment AND the credential
+ * options that keep the machine's Keychain tier reachable across it.
+ *
+ * Dropping a declared-but-blank variable hands @hasna/contracts a COPY, and
+ * the resolver gates its ambient tiers on object identity (`env === process.env`,
+ * or the registry symbol its own snapshot carries). A copy is, by that test, a
+ * caller-built world — the hermetic seam — so the Keychain is outside it and
+ * tier 3 turns itself off silently, dropping a station from its Keychain
+ * identity to the next tier in the chain. The gate is decided HERE, on the
+ * original env, and carried across as the documented `keychain.enabled` control
+ * rather than being left to an identity test the copy cannot pass (hasna/apps#1788).
+ */
+export declare function economyResolverInputs<T extends Record<string, string | undefined>>(env: T, credentials?: CredentialChainOptions): {
+    env: T;
+    credentials: CredentialChainOptions;
+};
+/**
+ * Resolve the authenticated economy HTTP storage client for this environment.
+ *
+ * There is no `local` branch here on purpose: a client never infers a local
+ * dataset from missing configuration. When nothing resolves, the shared
+ * resolver THROWS and the caller decides (see {@link resolveEconomyCloudStorage}).
+ */
+export interface ResolvedEconomyStorageClient {
+    transport: "http";
+    client: HasnaStorageClient;
+    resolution: ClientTransportResolution;
+}
+/** The one call the storage seam makes: resolve the http client from the env. */
+export declare function resolveEconomyStorageClient(name: string, env: Record<string, string | undefined>, overrides?: EconomyStorageClientOverrides): ResolvedEconomyStorageClient;
+/**
+ * The one line a local run prints, so an unhosted run can never be mistaken for
+ * a hosted one that came back empty (owner directive 2026-09-04). It goes to
+ * stderr, so `--json` stdout stays machine-readable.
+ */
+export declare function localEconomyNotice(): string;
+/**
+ * The fail-closed error for a run with no credential and no local opt-in.
+ *
+ * The message is the documentation surface: it carries the resolver's own
+ * diagnostic (which names the Keychain item, the credentials file it looked
+ * for, and `HASNA_ECONOMY_API_KEY`) and adds the local opt-in, which the shared
+ * resolver cannot know about.
+ */
+export declare function credentialRequiredError(env: NodeJS.ProcessEnv, cause?: unknown): Error;
 /**
  * Resolve the economy client storage transport for the current environment.
  *
- * Returns `{ active: true, client }` only when the contracts seam resolves to
- * the http transport (HASNA_ECONOMY_API_URL + HASNA_ECONOMY_API_KEY set).
- * Otherwise `{ active: false }` (local store). Throws when an API URL is set
- * without a key (the seam reports the resolution as misconfigured).
+ * Returns `{ active: true, client }` only when @hasna/contracts resolves an
+ * authenticated HTTP transport (a credential from any tier, authority defaulted
+ * to the fleet gateway). Returns `{ active: false }` (local store) only when
+ * the explicit local opt-in (`HASNA_ECONOMY_LOCAL=1` / `ECONOMY_LOCAL=1`) is
+ * set AND no hosted authority or credential resolves. Throws in every other
+ * unconfigured case — the error names the required API environment so a
+ * missing-env run can never silently serve the local dataset.
+ */
+export declare function resolveEconomyCloudStorage(env?: NodeJS.ProcessEnv, overrides?: EconomyStorageClientOverrides): EconomyCloudStorage;
+/**
+ * Memoized {@link resolveEconomyCloudStorage} for the process lifetime.
+ *
+ * A local-mode resolution (the explicit opt-in) announces itself on stderr with
+ * one line, once per process, so an unhosted run is never mistaken for a hosted
+ * one that came back empty (owner directive 2026-09-04). The notice goes to
+ * stderr so `--json` stdout stays machine-readable. The memoization never
+ * stalls a credential rotation: the @hasna/contracts transport behind a hosted
+ * client re-resolves its credential on EVERY request, so a long-lived MCP
+ * server or SDK consumer picks up a new key without a restart.
  */
-export declare function resolveEconomyCloudStorage(env?: NodeJS.ProcessEnv, overrides?: StorageClientOverrides): EconomyCloudStorage;
-/** Memoized {@link resolveEconomyCloudStorage} for the process lifetime. */
 export declare function economyCloudStorage(env?: NodeJS.ProcessEnv): EconomyCloudStorage;
 /** Test-only: drop the memoized resolution so a new env can be resolved. */
 export declare function resetEconomyCloudStorageCache(): void;
@@ -44,5 +164,41 @@ export declare function cloudListItems<T = unknown>(storage: ActiveEconomyCloudS
  * body if the server does not use the `{ data }` envelope.
  */
 export declare function cloudObject<T = unknown>(storage: ActiveEconomyCloudStorage, path: string, query?: CloudQuery): Promise<T>;
-export {};
+/**
+ * The transport decision, rendered for operators (the `economy status` /
+ * `economy transport` surfaces and diagnostics). Reports WHERE the authority and
+ * credential came from — never the credential value.
+ */
+export interface EconomyTransportAuthority {
+    /** `<origin>/v1` base for the server API, or null when nothing resolved. */
+    baseUrl: string | null;
+    /** An env key NAME, a Keychain reference, a file PATH, or `"default"`. */
+    apiUrlSource: string | null;
+    /** An env key NAME, a Keychain reference, or a file PATH. Never a value. */
+    apiKeySource: string | null;
+    /** Which tier of the credential chain supplied the key. */
+    apiKeyTier: string | null;
+    /** Human-readable warning, or null. Never contains secret values. */
+    warning: string | null;
+}
+export interface EconomyTransportReport {
+    ok: boolean;
+    /** True when this process is a client of a resolved store (hosted or local). */
+    selected: boolean;
+    transport: "http" | "sqlite";
+    /** `"local-opt-in"` for the explicit local lane, else the http transport source. */
+    source: string | null;
+    authority: EconomyTransportAuthority | null;
+    /** Human-readable issues when `ok` is false (the fail-closed refusal). */
+    issues: string[];
+}
+/**
+ * Resolve the economy transport and report the decision WITHOUT throwing.
+ *
+ * The one surface that must not fail the process on a missing credential: a
+ * status command that throws would turn "tell me why I am unconfigured" into a
+ * crash. Everything else calls {@link resolveEconomyCloudStorage} and fails
+ * closed.
+ */
+export declare function economyTransportReport(env?: NodeJS.ProcessEnv, overrides?: EconomyStorageClientOverrides): EconomyTransportReport;
 //# sourceMappingURL=cloud-storage.d.ts.map

package/dist/lib/cloud-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-storage.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-storage.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAE9F,gFAAgF;AAChF,KAAK,sBAAsB,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzE,mEAAmE;AACnE,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC,MAAM,MAAM,mBAAmB,GAC3B;IACE,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;CACvB,CAAC;AAIN;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,sBAAsB,GACjC,mBAAmB,CAKrB;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,mBAAmB,CAG7F;AAED,4EAA4E;AAC5E,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED,+DAA+D;AAC/D,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAEvF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAYtF;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,OAAO,EAAE,yBAAyB,EAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAId;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,yBAAyB,EAClC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,CAAC,CAAC,CAOZ"}
+{"version":3,"file":"cloud-storage.d.ts","sourceRoot":"","sources":["../../src/lib/cloud-storage.ts"],"names":[],"mappings":"AAyCA,OAAO,EAIL,qBAAqB,EAMrB,KAAK,sBAAsB,EAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACpG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEzE,mEAAmE;AACnE,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC;;;;GAIG;AACH,MAAM,MAAM,6BAA6B,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AAExF,MAAM,MAAM,mBAAmB,GAC3B;IACE,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;CACvB,CAAC;AAEN;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,mDAAoD,CAAC;AAc3F;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CASlD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAE7F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAKT;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAQ1F;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAChF,GAAG,EAAE,CAAC,EACN,WAAW,GAAE,sBAA2B,GACvC;IAAE,GAAG,EAAE,CAAC,CAAC;IAAC,WAAW,EAAE,sBAAsB,CAAA;CAAE,CAQjD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,UAAU,EAAE,yBAAyB,CAAC;CACvC;AAED,iFAAiF;AACjF,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,GAAE,6BAAkC,GAC5C,4BAA4B,CAe9B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,KAAK,CAqBtF;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,6BAA6B,GACxC,mBAAmB,CA0BrB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,mBAAmB,CAS7F;AAED,4EAA4E;AAC5E,wBAAgB,6BAA6B,IAAI,IAAI,CAGpD;AAED,+DAA+D;AAC/D,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,mBAAmB,EAAE;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAEvF,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAYtF;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAC9C,OAAO,EAAE,yBAAyB,EAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,CAAC,EAAE,CAAC,CAId;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,yBAAyB,EAClC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qEAAqE;IACrE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,gFAAgF;IAChF,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,oFAAoF;IACpF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC5C,0EAA0E;IAC1E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,6BAA6B,GACxC,sBAAsB,CA2CxB"}

package/dist/lib/gatherer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatherer.d.ts","sourceRoot":"","sources":["../../src/lib/gatherer.ts"],"names":[],"mappings":"AAQA,UAAU,eAAe;IACvB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;IACrC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;CACd;AAED,UAAU,eAAe;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,IAAI,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,KAAK,oBAAoB,GAAG,CAAC,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;AAShF,eAAO,MAAM,kBAAkB,EAAE,oBAkNhC,CAAA"}
+{"version":3,"file":"gatherer.d.ts","sourceRoot":"","sources":["../../src/lib/gatherer.ts"],"names":[],"mappings":"AASA,UAAU,eAAe;IACvB,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;IACrC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,eAAe,EAAE,CAAA;CAC5B;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,KAAK,EAAE,MAAM,CAAA;CACd;AAED,UAAU,eAAe;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,IAAI,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,KAAK,oBAAoB,GAAG,CAAC,OAAO,CAAC,EAAE,eAAe,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;AAShF,eAAO,MAAM,kBAAkB,EAAE,oBAkNhC,CAAA"}

package/dist/lib/ingest-batches.d.ts

@@ -0,0 +1,21 @@
+export interface IngestBatch {
+    schema_version: 1;
+    idempotency_key: string;
+    [table: string]: unknown;
+}
+/** Stable table/PK order produces repeatable keys for the exact same staged
+ * observations. Each bounded command commits independently; there is no hidden
+ * retry or claim that a whole multi-command scan is a single transaction. */
+export declare function ingestBatches(body: Record<string, Record<string, unknown>[]>): Generator<IngestBatch>;
+export interface IngestBatchReceipt {
+    idempotency_key: string;
+    operation_key?: string;
+    replayed: boolean;
+}
+export declare class IngestBatchFailure extends Error {
+    readonly pending_key: string;
+    readonly completed: IngestBatchReceipt[];
+    readonly pending_command: IngestBatch;
+    constructor(pending_key: string, completed: IngestBatchReceipt[], pending_command: IngestBatch);
+}
+//# sourceMappingURL=ingest-batches.d.ts.map

package/dist/lib/ingest-batches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-batches.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-batches.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,CAAC,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CACzB;AACD;;6EAE6E;AAC7E,wBAAiB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CA2BtG;AAED,MAAM,WAAW,kBAAkB;IAAG,eAAe,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAC1G,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,EAAE;IAAE,QAAQ,CAAC,eAAe,EAAE,WAAW;gBAApG,WAAW,EAAE,MAAM,EAAW,SAAS,EAAE,kBAAkB,EAAE,EAAW,eAAe,EAAE,WAAW;CAI1H"}

package/dist/lib/ingest-journal-client.d.ts

@@ -0,0 +1,37 @@
+import { type IngestJournalOperation } from './ingest-journal-operation.js';
+/** Operational recovery state is local; Economy receipts and Trash custody are hosted. */
+export declare function ingestJournal(input: IngestJournalOperation): Promise<{
+    retired: number;
+    remaining: number;
+    target: string;
+    commands: number;
+    completed: number;
+    rejected: number;
+    pending: number;
+    bytes: number;
+    reserved_bytes: number;
+    schema: "economy.ingest-journal.v1";
+    action: "status" | "reconcile" | "maintain";
+} | {
+    retired: number;
+    target: string;
+    commands: number;
+    completed: number;
+    rejected: number;
+    pending: number;
+    bytes: number;
+    reserved_bytes: number;
+    schema: "economy.ingest-journal.v1";
+    action: "status" | "reconcile" | "maintain";
+}>;
+/** CLI/MCP errors never echo an upstream message, URL, credential or file body. */
+export declare function ingestJournalError(error: unknown): {
+    error: {
+        code: string;
+        message: string;
+        reason?: string;
+        target?: string;
+        fields?: string[];
+    };
+};
+//# sourceMappingURL=ingest-journal-client.d.ts.map

package/dist/lib/ingest-journal-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-journal-client.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal-client.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2D,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAEpI,0FAA0F;AAC1F,wBAAsB,aAAa,CAAC,KAAK,EAAE,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;GAKhE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,CAapJ"}

package/dist/lib/ingest-journal-lock.d.ts

@@ -0,0 +1,5 @@
+/** A kernel-owned lock: process exit releases ownership without deleting a
+ * lockfile or treating elapsed time as proof that another process is dead.
+ * The empty, permanent file must never be replaced while this target exists. */
+export declare function withIngestJournalLock<T>(directory: string, action: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=ingest-journal-lock.d.ts.map

package/dist/lib/ingest-journal-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-journal-lock.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal-lock.ts"],"names":[],"mappings":"AAGA;;gFAEgF;AAChF,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAsBtG"}

package/dist/lib/ingest-journal-maintenance.d.ts

@@ -0,0 +1,92 @@
+import type { ActiveEconomyCloudStorage } from './cloud-storage.js';
+import type { IngestBatch } from './ingest-batches.js';
+import { IngestJournal } from './ingest-journal.js';
+export declare class JournalMaintenanceError extends Error {
+    readonly reason: string;
+    readonly target: string;
+    readonly code = "INGEST_JOURNAL_MAINTENANCE_REQUIRED";
+    constructor(reason: string, target: string);
+}
+interface Entry {
+    id: string;
+    originalPath: string;
+    kind: string;
+    sha256: string;
+    sizeBytes: number;
+    mode: number;
+    state: string;
+    stationId: string;
+}
+interface Operation {
+    id: string;
+    entryId: string;
+    path: string;
+    kind: string;
+    phase: string;
+    receipt?: {
+        sha256: string;
+        sizeBytes: number;
+        mode: number;
+    };
+}
+export interface JournalRecovery {
+    snapshot(path: string): {
+        sha256: string;
+    };
+    doctor(): Promise<{
+        station: {
+            id: string;
+        } | null;
+        retentionDays: number;
+    }>;
+    pending(limit: number): Array<{
+        id: string;
+        path?: string;
+        phase: string;
+    }>;
+    journal: {
+        read(id: string): Operation;
+    };
+    api: {
+        get(id: string): Promise<Entry>;
+    };
+    put(path: string, options?: {
+        retentionDays?: number;
+    }): Promise<Entry>;
+    recover(id: string, options: {
+        takeAbandonedLock: boolean;
+    }): Promise<unknown>;
+}
+export type JournalRecoveryFactory = (root: string, checkpoint: (point: string, operation: Operation) => Promise<void>, deadline: number) => Promise<JournalRecovery>;
+/** A single permanent anchor prevents a changed principal from treating retired
+ * keys as new commands. It contains no credential and never grows with scans. */
+export declare function verifyJournalAuthority(journal: IngestJournal, cloud: ActiveEconomyCloudStorage): Promise<void>;
+/** Explicit opt-in precedes importing Trash or resolving any of its credentials.
+ * Non-fleet Economy authorities also require an explicit Trash URL. */
+export declare function recoveryFactory(cloud: ActiveEconomyCloudStorage, env?: NodeJS.ProcessEnv): JournalRecoveryFactory;
+/** All callers hold the target kernel lock. Only one immutable maintenance
+ * manifest exists at a time, and Trash captures that manifest after both files.
+ * Trash's own journal owns all transfer/staging/commit recovery. */
+export declare class IngestJournalMaintenance {
+    readonly journal: IngestJournal;
+    readonly cloud: ActiveEconomyCloudStorage;
+    readonly factory: JournalRecoveryFactory;
+    readonly control: string;
+    readonly operationRoot: string;
+    constructor(journal: IngestJournal, cloud: ActiveEconomyCloudStorage, factory?: JournalRecoveryFactory);
+    private manifest;
+    private pending;
+    private backend;
+    private entry;
+    private pairFile;
+    /** Recover only the exact current transaction, never another collector POST. */
+    recover(): Promise<void>;
+    private finish;
+    maintain(limit?: number): Promise<{
+        retired: number;
+        remaining: number;
+    }>;
+    admit(command: IngestBatch): Promise<void>;
+}
+export {};
+//# sourceMappingURL=ingest-journal-maintenance.d.ts.map

package/dist/lib/ingest-journal-maintenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-journal-maintenance.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal-maintenance.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAe,aAAa,EAAqF,MAAM,qBAAqB,CAAA;AAKnJ,qBAAa,uBAAwB,SAAQ,KAAK;IAEpC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;IAD5D,QAAQ,CAAC,IAAI,yCAAwC;gBAChC,MAAM,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAI7D;AACD,UAAU,KAAK;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACrJ,UAAU,SAAS;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AAC7J,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3E,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAA;IACxC,GAAG,EAAE;QAAE,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;KAAE,CAAA;IACxC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACvE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,iBAAiB,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/E;AACD,MAAM,MAAM,sBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;AAkCrK;iFACiF;AACjF,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWpH;AAED;uEACuE;AACvE,wBAAgB,eAAe,CAAC,KAAK,EAAE,yBAAyB,EAAE,GAAG,oBAAc,GAAG,sBAAsB,CAgB3G;AAED;;oEAEoE;AACpE,qBAAa,wBAAwB;IAGvB,QAAQ,CAAC,OAAO,EAAE,aAAa;IAAE,QAAQ,CAAC,KAAK,EAAE,yBAAyB;IACpF,QAAQ,CAAC,OAAO;IAHlB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBACT,OAAO,EAAE,aAAa,EAAW,KAAK,EAAE,yBAAyB,EAC3E,OAAO,yBAAyB;IAK3C,OAAO,CAAC,QAAQ;IAahB,OAAO,CAAC,OAAO;YAKD,OAAO;YAsBP,KAAK;YAML,QAAQ;IA2BtB,gFAAgF;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAQhB,MAAM;IA+Bd,QAAQ,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAgCrE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAWjD"}

package/dist/lib/ingest-journal-operation.d.ts

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+import type { ActiveEconomyCloudStorage } from './cloud-storage.js';
+/** Local operational journal controls; these never invoke the original ingest
+ * POST. CLI/MCP share this schema and return errors as nonzero/isError. */
+export declare const ingestJournalOperationSchema: z.ZodDiscriminatedUnion<"action", [z.ZodObject<{
+    action: z.ZodLiteral<"status">;
+}, "strict", z.ZodTypeAny, {
+    action: "status";
+}, {
+    action: "status";
+}>, z.ZodObject<{
+    action: z.ZodLiteral<"reconcile">;
+}, "strict", z.ZodTypeAny, {
+    action: "reconcile";
+}, {
+    action: "reconcile";
+}>, z.ZodObject<{
+    action: z.ZodLiteral<"maintain">;
+    confirm: z.ZodLiteral<true>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    limit: number;
+    action: "maintain";
+    confirm: true;
+}, {
+    action: "maintain";
+    confirm: true;
+    limit?: number | undefined;
+}>]>;
+export type IngestJournalOperation = z.input<typeof ingestJournalOperationSchema>;
+export declare function runIngestJournalOperation(cloud: ActiveEconomyCloudStorage, input: IngestJournalOperation): Promise<{
+    retired: number;
+    remaining: number;
+    target: string;
+    commands: number;
+    completed: number;
+    rejected: number;
+    pending: number;
+    bytes: number;
+    reserved_bytes: number;
+    schema: "economy.ingest-journal.v1";
+    action: "status" | "reconcile" | "maintain";
+} | {
+    retired: number;
+    target: string;
+    commands: number;
+    completed: number;
+    rejected: number;
+    pending: number;
+    bytes: number;
+    reserved_bytes: number;
+    schema: "economy.ingest-journal.v1";
+    action: "status" | "reconcile" | "maintain";
+}>;
+//# sourceMappingURL=ingest-journal-operation.d.ts.map

package/dist/lib/ingest-journal-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-journal-operation.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal-operation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAKnE;2EAC2E;AAC3E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;IAIvC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA;AACjF,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;GAgB9G"}

package/dist/lib/ingest-journal.d.ts

@@ -0,0 +1,73 @@
+import type { IngestBatch } from './ingest-batches.js';
+import type { ActiveEconomyCloudStorage } from './cloud-storage.js';
+export declare const MAX_COMMANDS = 1000;
+export declare const MAX_BYTES: number;
+export declare const RECEIPT_RESERVE = 4096;
+export declare const MAINTENANCE_RESERVE = 16384;
+export declare class PendingIngestError extends Error {
+    readonly pending_keys: string[];
+    readonly code = "INGEST_RECONCILIATION_REQUIRED";
+    constructor(pending_keys: string[]);
+}
+export interface Intent {
+    version: 1;
+    target: string;
+    body_hash: string;
+    command: IngestBatch;
+}
+export interface IngestRefusal {
+    status: 400 | 409 | 413 | 422;
+    code: 'ingest_refused' | 'legacy_aggregate_requires_migration';
+    reason: 'invalid_ingest' | 'ingest_conflict' | 'ingest_too_large' | 'unprocessable_ingest' | 'legacy_aggregate_requires_migration';
+}
+export declare function definitiveIngestRefusal(status: number, body: unknown): IngestRefusal | null;
+export declare function getIngestJournalPath(): string;
+export declare function secureDirectory(path: string): void;
+export declare function readJson(path: string, max: number): unknown;
+export declare function createExact(path: string, value: unknown): boolean;
+export declare function unwrap(raw: unknown): any;
+export declare function verifyIngestReceipt(raw: unknown, command: IngestBatch): any;
+export declare function sameReceipt(left: unknown, right: unknown): boolean;
+export declare function lookupJournalReceipt(cloud: ActiveEconomyCloudStorage, key: string, bodyHash: string, timeoutMs?: number): Promise<unknown | null>;
+/** Operational intent only. Immutable intent and receipt files are retained;
+ * absence of a receipt never authorizes another POST, including after restart. */
+export declare class IngestJournal {
+    readonly directory: string;
+    readonly target: string;
+    private inventoryBytes;
+    private readonly freshlyStaged;
+    constructor(cloud: ActiveEconomyCloudStorage, path?: string);
+    names(): string[];
+    file(key: string, kind: 'intent' | 'receipt' | 'refusal'): string;
+    intent(name: string): Intent;
+    status(): {
+        target: string;
+        commands: number;
+        completed: number;
+        rejected: number;
+        pending: number;
+        bytes: number;
+        reserved_bytes: number;
+    };
+    canStage(command: IngestBatch, status?: {
+        target: string;
+        commands: number;
+        completed: number;
+        rejected: number;
+        pending: number;
+        bytes: number;
+        reserved_bytes: number;
+    }): boolean;
+    receipt(command: IngestBatch): ReturnType<typeof verifyIngestReceipt>;
+    stage(command: IngestBatch): boolean;
+    accept(command: IngestBatch, raw: unknown): any;
+    /** Only the caller which staged this fresh intent may record its own first
+     * POST's definitive refusal. Existing uncertain intents cannot be converted. */
+    recordRefusal(command: IngestBatch, refusal: IngestRefusal): void;
+    refusal(command: IngestBatch): IngestRefusal | null;
+    reconcileCommand(cloud: ActiveEconomyCloudStorage, command: IngestBatch, timeoutMs?: number): Promise<any | null>;
+    assertCloud(cloud: ActiveEconomyCloudStorage): void;
+    lookupReceipt(cloud: ActiveEconomyCloudStorage, command: IngestBatch, timeoutMs?: number): Promise<ReturnType<typeof verifyIngestReceipt> | null>;
+    reconcilePending(cloud: ActiveEconomyCloudStorage): Promise<void>;
+}
+//# sourceMappingURL=ingest-journal.d.ts.map

package/dist/lib/ingest-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest-journal.d.ts","sourceRoot":"","sources":["../../src/lib/ingest-journal.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAEnE,eAAO,MAAM,YAAY,OAAK,CAAA;AAC9B,eAAO,MAAM,SAAS,QAAa,CAAA;AACnC,eAAO,MAAM,eAAe,OAAK,CAAA;AACjC,eAAO,MAAM,mBAAmB,QAAM,CAAA;AAEtC,qBAAa,kBAAmB,SAAQ,KAAK;IAEhC,QAAQ,CAAC,YAAY,EAAC,MAAM,EAAE;IAD1C,QAAQ,CAAC,IAAI,oCAAiC;gBACzB,YAAY,EAAC,MAAM,EAAE;CAC1C;AACD,MAAM,WAAW,MAAM;IAAE,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,WAAW,CAAA;CAAC;AACtF,MAAM,WAAW,aAAa;IAC7B,MAAM,EAAC,GAAG,GAAC,GAAG,GAAC,GAAG,GAAC,GAAG,CAAA;IACtB,IAAI,EAAC,gBAAgB,GAAC,qCAAqC,CAAA;IAC3D,MAAM,EAAC,gBAAgB,GAAC,iBAAiB,GAAC,kBAAkB,GAAC,sBAAsB,GAAC,qCAAqC,CAAA;CACzH;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,GAAE,aAAa,GAAC,IAAI,CAMrF;AACD,wBAAgB,oBAAoB,IAAG,MAAM,CAE5C;AAMD,wBAAgB,eAAe,CAAC,IAAI,EAAC,MAAM,GAAE,IAAI,CAIhD;AACD,wBAAgB,QAAQ,CAAC,IAAI,EAAC,MAAM,EAAC,GAAG,EAAC,MAAM,GAAE,OAAO,CAOvD;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAS7D;AACD,wBAAgB,MAAM,CAAC,GAAG,EAAC,OAAO,GAAE,GAAG,CAAyE;AAChH,wBAAgB,mBAAmB,CAAC,GAAG,EAAC,OAAO,EAAC,OAAO,EAAC,WAAW,GAAE,GAAG,CAiBvE;AACD,wBAAgB,WAAW,CAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,GAAE,OAAO,CAG9D;AACD,wBAAsB,oBAAoB,CAAC,KAAK,EAAC,yBAAyB,EAAC,GAAG,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,OAAO,GAAC,IAAI,CAAC,CAO5I;AACD;kFACkF;AAClF,qBAAa,aAAa;IACzB,QAAQ,CAAC,SAAS,EAAC,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAC,MAAM,CAAA;IACtB,OAAO,CAAC,cAAc,CAAE;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkB;gBACpC,KAAK,EAAC,yBAAyB,EAAC,IAAI,SAAuB;IAGvE,KAAK,IAAG,MAAM,EAAE;IAkBhB,IAAI,CAAC,GAAG,EAAC,MAAM,EAAC,IAAI,EAAC,QAAQ,GAAC,SAAS,GAAC,SAAS,GAAE,MAAM;IACzD,MAAM,CAAC,IAAI,EAAC,MAAM,GAAE,MAAM;IAO1B,MAAM,IAAG;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,SAAS,EAAC,MAAM,CAAC;QAAA,QAAQ,EAAC,MAAM,CAAC;QAAA,OAAO,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAA;KAAC;IAU3H,QAAQ,CAAC,OAAO,EAAC,WAAW,EAAC,MAAM;gBAVlB,MAAM;kBAAU,MAAM;mBAAW,MAAM;kBAAU,MAAM;iBAAS,MAAM;eAAO,MAAM;wBAAgB,MAAM;KAUzE,GAAE,OAAO;IAS1D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC;IAMnE,KAAK,CAAC,OAAO,EAAC,WAAW,GAAE,OAAO;IAWlC,MAAM,CAAC,OAAO,EAAC,WAAW,EAAC,GAAG,EAAC,OAAO,GAAE,GAAG;IAe3C;oFACgF;IAChF,aAAa,CAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,aAAa,GAAE,IAAI;IAa7D,OAAO,CAAC,OAAO,EAAC,WAAW,GAAE,aAAa,GAAC,IAAI;IAUzC,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,GAAG,GAAC,IAAI,CAAC;IAI9G,WAAW,CAAC,KAAK,EAAC,yBAAyB,GAAE,IAAI;IAC3C,aAAa,CAAC,KAAK,EAAC,yBAAyB,EAAC,OAAO,EAAC,WAAW,EAAC,SAAS,SAAO,GAAE,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,GAAC,IAAI,CAAC;IAKxI,gBAAgB,CAAC,KAAK,EAAC,yBAAyB,GAAE,OAAO,CAAC,IAAI,CAAC;CAiBrE"}

package/dist/lib/money-display.d.ts

@@ -0,0 +1,13 @@
+/** Unknown is a reporting state, never an implicit zero-dollar amount. */
+export declare function formatReportedUsd(value: number | null | undefined): string;
+export declare function formatSourcedUsd(value: number, basis?: string): string;
+export declare function formatPlanMoney(plan: {
+    monthly_fee_usd: number;
+    included_usage_usd: number;
+    fee_basis?: string;
+    included_basis?: string;
+}): {
+    fee: string;
+    included: string;
+};
+//# sourceMappingURL=money-display.d.ts.map

package/dist/lib/money-display.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"money-display.d.ts","sourceRoot":"","sources":["../../src/lib/money-display.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAG1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,eAAe,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjG,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAGpC"}

package/dist/lib/periods.d.ts

@@ -1,6 +1,18 @@
 import type { Period } from '../types/index.js';
+export interface CalendarPeriodBounds {
+    time_zone: 'UTC';
+    start_date: string | null;
+    end_date_exclusive: string | null;
+}
+/** Existing daily records use UTC. A week starts on Sunday; ranges are half-open. */
+export declare function calendarPeriodBounds(period: Period, now?: Date): CalendarPeriodBounds;
+/** Column names are code-owned identifiers; only generated ISO dates enter SQL. */
+export declare function calendarPeriodWhere(period: Period, column: string, now?: Date): string;
 export declare function usageSnapshotFilterForPeriod(period: Period): {
     date?: string;
     since?: string;
+    before?: string;
 };
+/** Lifetime aggregates overlap a period but cannot be allocated into its days. */
+export declare function sessionOverlapWhere(period: Period, alias: string, now?: Date): string;
 //# sourceMappingURL=periods.d.ts.map

package/dist/lib/periods.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"periods.d.ts","sourceRoot":"","sources":["../../src/lib/periods.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAM/C,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsB9F"}
+{"version":3,"file":"periods.d.ts","sourceRoot":"","sources":["../../src/lib/periods.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAM/C,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,KAAK,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,oBAAoB,CAgC3F;AAED,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAa,GAAG,MAAM,CAO5F;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAK/G;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,GAAG,OAAW,GAAE,MAAM,CAIpF"}

package/dist/lib/pricing.d.ts

@@ -8,6 +8,20 @@ export declare function getPricingFromDb(db: Database, model: string): ModelPric
 export declare function getPricing(model: string): ModelPricing | null;
 export declare function computeCost(model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number, cacheWrite1hTokens?: number, cacheStorageTokenHours?: number): number;
 export declare function computeCostFromDb(db: Database, model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number, cacheWrite1hTokens?: number, cacheStorageTokenHours?: number): number;
+export type CostAssessment = {
+    usd: number;
+    pricing: 'configured' | 'catalog' | 'explicit_free';
+} | {
+    usd: null;
+    pricing: 'missing';
+};
+export declare class UnknownModelPricingError extends Error {
+    readonly code = "MODEL_PRICING_UNAVAILABLE";
+    constructor();
+}
+/** Token estimates describe usage value, never the account's billing route. */
+export declare function assessCostFromDb(db: Database, model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number, cacheWrite1hTokens?: number, cacheStorageTokenHours?: number): CostAssessment;
 export declare function getPricingFromRows(rows: DbModelPricing[], model: string): ModelPricing | null;
 export declare function estimateCostFromRows(rows: DbModelPricing[], model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number, cacheWrite1hTokens?: number, cacheStorageTokenHours?: number): number;
+export declare function assessCostFromRows(rows: DbModelPricing[], model: string, inputTokens: number, outputTokens: number, cacheReadTokens?: number, cacheWriteTokens?: number, cacheWrite1hTokens?: number, cacheStorageTokenHours?: number): CostAssessment;
 //# sourceMappingURL=pricing.d.ts.map

package/dist/lib/pricing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../src/lib/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAA6E,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIlI,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA+FxD,CAAA;AAqND,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOtD;AA2CD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAMtD;AA+GD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAoBjF;AA4BD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAG7D;AAMD,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAIR;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAIR;AAMD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAW7F;AAMD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EAAE,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAIR"}
+{"version":3,"file":"pricing.d.ts","sourceRoot":"","sources":["../../src/lib/pricing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAA6E,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIlI,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CA+FxD,CAAA;AAqND,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOtD;AA2CD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAMtD;AA+GD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAoBjF;AA4BD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAG7D;AAMD,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAER;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,eAAe,CAAA;CAAE,GACpE;IAAE,GAAG,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,SAAS,CAAA;CAAE,CAAA;AAErC,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,+BAA8B;;CAK5C;AAOD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,cAAc,CAEhB;AAMD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAW7F;AAMD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,EAAE,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,MAAM,CAER;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,cAAc,EAAE,EACtB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,eAAe,SAAI,EACnB,gBAAgB,SAAI,EACpB,kBAAkB,SAAI,EACtB,sBAAsB,SAAI,GACzB,cAAc,CAEhB"}