@indigoai-us/hq-cloud 6.18.16 → 6.18.18

package/dist/plan-limit-pause.js

@@ -0,0 +1,252 @@
+/**
+ * Per-vault record of uploads the plan limit refused, so the sync runner does
+ * not presign the same refused files on every pass.
+ *
+ * File: `{stateDir}/plan-limit-pause.{scope}.json`, where `scope` is the
+ * vault's entity uid (`cmp_…` for a company, the person uid for the personal
+ * vault). Each paused path records when it was refused. A path is skipped
+ * until {@link PLAN_LIMIT_PAUSE_RETRY_MS} has passed or the plan state
+ * changes. The plan state has changed when:
+ *
+ *   - the runner's once-per-pass admission check says a company vault accepts
+ *     uploads again (see `share()`),
+ *   - any upload to the same vault succeeds (the server accepted a write, so
+ *     the files stop is no longer refusing; every pause for that vault is
+ *     dropped), or
+ *   - a client that changed the plan calls {@link clearPlanLimitPauses}.
+ *
+ * A pause whose stamp lies in the future (the clock moved backwards, or the
+ * record came from a machine with a skewed clock) has no effect and is pruned,
+ * so a pause can never last longer than {@link PLAN_LIMIT_PAUSE_RETRY_MS}.
+ *
+ * The record is advisory. A missing, unreadable or corrupt file means nothing
+ * is paused; the worst case is one extra presign per file, never a skipped
+ * upload that the server would have accepted for more than an hour.
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { getStateDir } from "./journal.js";
+import { parsePlanLimitRefusal } from "./plan-limit.js";
+/** A refused file is retried after this long even if nothing else changed. */
+export const PLAN_LIMIT_PAUSE_RETRY_MS = 60 * 60 * 1000;
+const FILE_PREFIX = "plan-limit-pause.";
+const FILE_SUFFIX = ".json";
+const SCHEMA_VERSION = 1;
+let clock = () => Date.now();
+/** Test-only clock override; `null` restores `Date.now`. */
+export function setPlanLimitPauseClockForTesting(now) {
+    clock = now ?? (() => Date.now());
+}
+/** Current time as the pause store sees it. */
+export function planLimitPauseNow() {
+    return clock();
+}
+function sanitizeScope(scope) {
+    const cleaned = scope.replace(/[^a-zA-Z0-9_-]/g, "_");
+    if (!cleaned || /^[_-]+$/.test(cleaned)) {
+        throw new Error(`plan-limit pause: scope "${scope}" sanitizes to an empty identifier`);
+    }
+    return cleaned;
+}
+/** Where the pause record for `scope` lives. */
+export function planLimitPausePath(scope) {
+    return path.join(getStateDir(), `${FILE_PREFIX}${sanitizeScope(scope)}${FILE_SUFFIX}`);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readPauseFile(file, scope) {
+    const empty = { version: SCHEMA_VERSION, scope, paths: {} };
+    let raw;
+    try {
+        raw = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        return empty;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!isRecord(parsed) ||
+            parsed.version !== SCHEMA_VERSION ||
+            !isRecord(parsed.paths)) {
+            return empty;
+        }
+        // Pauses are only honoured with the refusal that caused them: it is what
+        // the runner reports while it skips the files. A record without a valid
+        // refusal (a plan-limit marker and an https upgrade link) is ignored.
+        const refusal = parsePlanLimitRefusal(parsed.refusal);
+        if (!refusal)
+            return empty;
+        const paths = {};
+        for (const [key, entry] of Object.entries(parsed.paths)) {
+            if (isRecord(entry) &&
+                typeof entry.pausedAt === "string" &&
+                !Number.isNaN(Date.parse(entry.pausedAt))) {
+                paths[key] = { pausedAt: entry.pausedAt };
+            }
+        }
+        return { version: SCHEMA_VERSION, scope, refusal, paths };
+    }
+    catch {
+        return empty;
+    }
+}
+/** End of `entry`'s pause window if it is in effect at `now`. */
+function activeUntil(entry, now) {
+    const pausedAt = Date.parse(entry.pausedAt);
+    if (Number.isNaN(pausedAt) || pausedAt > now)
+        return undefined;
+    const until = pausedAt + PLAN_LIMIT_PAUSE_RETRY_MS;
+    if (until - now > PLAN_LIMIT_PAUSE_RETRY_MS || now >= until)
+        return undefined;
+    return until;
+}
+/**
+ * The pause record for one vault. Load once per push pass with
+ * {@link PlanLimitPauseStore.open}, consult {@link isPaused} while admitting
+ * uploads, then apply the pass's outcome and {@link save}.
+ */
+export class PlanLimitPauseStore {
+    /** Null when the scope cannot name a file; the store then never persists. */
+    file;
+    data;
+    dirty = false;
+    constructor(file, data) {
+        this.file = file;
+        this.data = data;
+    }
+    /** Read the record for `scope`; never throws. */
+    static open(scope) {
+        let file;
+        try {
+            file = planLimitPausePath(scope);
+        }
+        catch {
+            file = null;
+        }
+        const data = file
+            ? readPauseFile(file, scope)
+            : { version: SCHEMA_VERSION, scope, paths: {} };
+        return new PlanLimitPauseStore(file, data);
+    }
+    /** Last refusal recorded for this vault, if any path is still paused. */
+    get refusal() {
+        return this.data.refusal;
+    }
+    /** Number of recorded paths (including ones whose pause has lapsed). */
+    get size() {
+        return Object.keys(this.data.paths).length;
+    }
+    /**
+     * Epoch ms after which `relativePath` is retried, or undefined when it has
+     * no pause in effect at `now`. A pause is in effect only while
+     * `pausedAt <= now < pausedAt + PLAN_LIMIT_PAUSE_RETRY_MS`: a future stamp,
+     * or an end further than one retry window ahead, is a clock change and is
+     * ignored.
+     */
+    pausedUntil(relativePath, now = planLimitPauseNow()) {
+        const entry = this.data.paths[relativePath];
+        if (!entry)
+            return undefined;
+        return activeUntil(entry, now);
+    }
+    /** True while `relativePath` is inside its pause window at `now`. */
+    isPaused(relativePath, now = planLimitPauseNow()) {
+        return this.pausedUntil(relativePath, now) !== undefined;
+    }
+    /** True when any recorded path is paused at `now`. */
+    hasActivePauses(now = planLimitPauseNow()) {
+        return Object.values(this.data.paths).some((entry) => activeUntil(entry, now) !== undefined);
+    }
+    /**
+     * Replace the stored refusal details (for example with a fresh 402 from an
+     * admission check) without restarting any pause window.
+     */
+    refreshRefusal(refusal) {
+        if (this.size === 0)
+            return;
+        this.data.refusal = refusal;
+        this.dirty = true;
+    }
+    /** Record `paths` as refused at `now`, restarting their pause window. */
+    pause(paths, refusal, now) {
+        if (paths.length === 0)
+            return;
+        const pausedAt = new Date(now).toISOString();
+        for (const p of paths)
+            this.data.paths[p] = { pausedAt };
+        this.data.refusal = refusal;
+        this.dirty = true;
+    }
+    /** Drop every pause: the plan state changed. */
+    clear() {
+        if (this.size === 0 && this.data.refusal === undefined)
+            return;
+        this.data = { version: SCHEMA_VERSION, scope: this.data.scope, paths: {} };
+        this.dirty = true;
+    }
+    /**
+     * Persist the record. Lapsed entries are pruned first, so files that were
+     * deleted or uploaded elsewhere do not accumulate. An empty record removes
+     * the file. Write failures are swallowed: the record is advisory.
+     */
+    save(now = planLimitPauseNow()) {
+        for (const [key, entry] of Object.entries(this.data.paths)) {
+            // Lapsed, future-stamped and over-long entries all go.
+            if (activeUntil(entry, now) === undefined) {
+                delete this.data.paths[key];
+                this.dirty = true;
+            }
+        }
+        if (!this.dirty || this.file === null)
+            return;
+        this.dirty = false;
+        try {
+            if (this.size === 0) {
+                fs.rmSync(this.file, { force: true });
+                return;
+            }
+            fs.mkdirSync(path.dirname(this.file), { recursive: true });
+            const tmp = `${this.file}.${process.pid}.tmp`;
+            fs.writeFileSync(tmp, `${JSON.stringify(this.data)}\n`, { mode: 0o600 });
+            fs.renameSync(tmp, this.file);
+        }
+        catch {
+            // Advisory state: a failed write means the next pass presigns again.
+        }
+    }
+}
+/**
+ * Forget recorded plan-limit refusals so the next sync pass retries paused
+ * files at once. Call after a plan change (for example an upgrade). With no
+ * `scope`, clears every vault's record.
+ */
+export function clearPlanLimitPauses(scope) {
+    if (scope !== undefined) {
+        try {
+            fs.rmSync(planLimitPausePath(scope), { force: true });
+        }
+        catch {
+            // Advisory state.
+        }
+        return;
+    }
+    let names;
+    try {
+        names = fs.readdirSync(getStateDir());
+    }
+    catch {
+        return;
+    }
+    for (const name of names) {
+        if (!name.startsWith(FILE_PREFIX) || !name.endsWith(FILE_SUFFIX))
+            continue;
+        try {
+            fs.rmSync(path.join(getStateDir(), name), { force: true });
+        }
+        catch {
+            // Advisory state.
+        }
+    }
+}
+//# sourceMappingURL=plan-limit-pause.js.map

package/dist/plan-limit-pause.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-limit-pause.js","sourceRoot":"","sources":["../src/plan-limit-pause.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAyB,MAAM,iBAAiB,CAAC;AAE/E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,WAAW,GAAG,OAAO,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,CAAC;AAazB,IAAI,KAAK,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAE3C,4DAA4D;AAC5D,MAAM,UAAU,gCAAgC,CAC9C,GAA0B;IAE1B,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,oCAAoC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,IAAI,CAAC,IAAI,CACd,WAAW,EAAE,EACb,GAAG,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,WAAW,EAAE,CACtD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,KAAK,GAAc,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACvE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,MAAM,CAAC,OAAO,KAAK,cAAc;YACjC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACvB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAmC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,IACE,QAAQ,CAAC,KAAK,CAAC;gBACf,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAClC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EACzC,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,KAAqB,EAAE,GAAW;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,KAAK,GAAG,QAAQ,GAAG,yBAAyB,CAAC;IACnD,IAAI,KAAK,GAAG,GAAG,GAAG,yBAAyB,IAAI,GAAG,IAAI,KAAK;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAC9B,6EAA6E;IAC5D,IAAI,CAAgB;IAC7B,IAAI,CAAY;IAChB,KAAK,GAAG,KAAK,CAAC;IAEtB,YAAoB,IAAmB,EAAE,IAAe;QACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,iDAAiD;IACjD,MAAM,CAAC,IAAI,CAAC,KAAa;QACvB,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAc,IAAI;YAC1B,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAClD,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,yEAAyE;IACzE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;IAC3B,CAAC;IAED,wEAAwE;IACxE,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CACT,YAAoB,EACpB,MAAc,iBAAiB,EAAE;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,qEAAqE;IACrE,QAAQ,CAAC,YAAoB,EAAE,MAAc,iBAAiB,EAAE;QAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,SAAS,CAAC;IAC3D,CAAC;IAED,sDAAsD;IACtD,eAAe,CAAC,MAAc,iBAAiB,EAAE;QAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,SAAS,CACjD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,OAAyB;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,KAAwB,EAAE,OAAyB,EAAE,GAAW;QACpE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,gDAAgD;IAChD,KAAK;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QAC/D,IAAI,CAAC,IAAI,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,MAAc,iBAAiB,EAAE;QACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,uDAAuD;YACvD,IAAI,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAC9C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAS;QAC3E,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/plan-limit-pause.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plan-limit-pause.test.d.ts.map

package/dist/plan-limit-pause.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-limit-pause.test.d.ts","sourceRoot":"","sources":["../src/plan-limit-pause.test.ts"],"names":[],"mappings":""}

package/dist/plan-limit-pause.test.js

@@ -0,0 +1,150 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { PLAN_LIMIT_PAUSE_RETRY_MS, PlanLimitPauseStore, clearPlanLimitPauses, planLimitPausePath, } from "./plan-limit-pause.js";
+import { parsePlanLimitRefusal } from "./plan-limit.js";
+import { canonicalPlanLimitBody } from "./plan-limit.fixtures.js";
+const refusal = parsePlanLimitRefusal(canonicalPlanLimitBody());
+const T0 = Date.parse("2026-09-28T12:00:00.000Z");
+describe("PlanLimitPauseStore", () => {
+    let stateDir;
+    let previousStateDir;
+    beforeEach(() => {
+        previousStateDir = process.env.HQ_STATE_DIR;
+        stateDir = fs.mkdtempSync(path.join(os.tmpdir(), "hq-plan-limit-pause-"));
+        process.env.HQ_STATE_DIR = stateDir;
+    });
+    afterEach(() => {
+        if (previousStateDir === undefined)
+            delete process.env.HQ_STATE_DIR;
+        else
+            process.env.HQ_STATE_DIR = previousStateDir;
+        fs.rmSync(stateDir, { recursive: true, force: true });
+    });
+    it("starts empty when no record exists", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        expect(store.size).toBe(0);
+        expect(store.isPaused("a.md", T0)).toBe(false);
+        expect(store.refusal).toBeUndefined();
+    });
+    it("pauses refused paths for an hour and persists them per vault", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        store.pause(["a.md", "b.md"], refusal, T0);
+        store.save(T0);
+        const file = planLimitPausePath("cmp_acme");
+        expect(file).toBe(path.join(stateDir, "plan-limit-pause.cmp_acme.json"));
+        expect(fs.existsSync(file)).toBe(true);
+        const reopened = PlanLimitPauseStore.open("cmp_acme");
+        expect(reopened.isPaused("a.md", T0 + PLAN_LIMIT_PAUSE_RETRY_MS - 1)).toBe(true);
+        expect(reopened.isPaused("a.md", T0 + PLAN_LIMIT_PAUSE_RETRY_MS)).toBe(false);
+        expect(reopened.isPaused("c.md", T0)).toBe(false);
+        expect(reopened.pausedUntil("b.md", T0)).toBe(T0 + PLAN_LIMIT_PAUSE_RETRY_MS);
+        expect(reopened.refusal?.upgradeUrl).toBe(refusal.upgradeUrl);
+        // Another vault is untouched.
+        expect(PlanLimitPauseStore.open("cmp_other").isPaused("a.md", T0)).toBe(false);
+    });
+    it("clear drops every pause and removes the file", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        store.pause(["a.md"], refusal, T0);
+        store.save(T0);
+        const again = PlanLimitPauseStore.open("cmp_acme");
+        again.clear();
+        again.save(T0);
+        expect(fs.existsSync(planLimitPausePath("cmp_acme"))).toBe(false);
+        expect(PlanLimitPauseStore.open("cmp_acme").isPaused("a.md", T0)).toBe(false);
+    });
+    it("prunes lapsed entries on save", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        store.pause(["old.md"], refusal, T0);
+        store.pause(["new.md"], refusal, T0 + PLAN_LIMIT_PAUSE_RETRY_MS);
+        store.save(T0 + PLAN_LIMIT_PAUSE_RETRY_MS);
+        const reopened = PlanLimitPauseStore.open("cmp_acme");
+        expect(reopened.size).toBe(1);
+        expect(reopened.isPaused("new.md", T0 + PLAN_LIMIT_PAUSE_RETRY_MS)).toBe(true);
+    });
+    it("ignores a pause stamped in the future (clock moved backwards) and prunes it", () => {
+        fs.writeFileSync(planLimitPausePath("cmp_acme"), JSON.stringify({
+            version: 1,
+            scope: "cmp_acme",
+            refusal,
+            paths: {
+                "future.md": { pausedAt: new Date(T0 + 5 * 60 * 1000).toISOString() },
+                "current.md": { pausedAt: new Date(T0 - 5 * 60 * 1000).toISOString() },
+            },
+        }));
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        expect(store.isPaused("future.md", T0)).toBe(false);
+        expect(store.pausedUntil("future.md", T0)).toBeUndefined();
+        expect(store.isPaused("current.md", T0)).toBe(true);
+        store.save(T0);
+        expect(Object.keys(JSON.parse(fs.readFileSync(planLimitPausePath("cmp_acme"), "utf8")).paths)).toEqual([
+            "current.md",
+        ]);
+    });
+    it("ignores a pause whose end is further than one retry window ahead", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        // Refused at T0, then the clock is set back two hours: the pause would
+        // otherwise last three hours.
+        store.pause(["a.md"], refusal, T0);
+        const earlier = T0 - 2 * PLAN_LIMIT_PAUSE_RETRY_MS;
+        expect(store.pausedUntil("a.md", earlier)).toBeUndefined();
+        expect(store.isPaused("a.md", earlier)).toBe(false);
+        expect(store.hasActivePauses(earlier)).toBe(false);
+        expect(store.hasActivePauses(T0)).toBe(true);
+        // At the moment of the refusal the window is exactly one retry long.
+        expect(store.pausedUntil("a.md", T0)).toBe(T0 + PLAN_LIMIT_PAUSE_RETRY_MS);
+    });
+    it("ignores a record whose stored refusal is not a valid plan-limit refusal", () => {
+        for (const stored of [
+            undefined,
+            { upgradeUrl: "https://billing.example.test/x" }, // no marker
+            { ...refusal, upgradeUrl: "http://billing.example.test/x" }, // not https
+        ]) {
+            fs.writeFileSync(planLimitPausePath("cmp_acme"), JSON.stringify({
+                version: 1,
+                scope: "cmp_acme",
+                ...(stored ? { refusal: stored } : {}),
+                paths: { "a.md": { pausedAt: new Date(T0).toISOString() } },
+            }));
+            const store = PlanLimitPauseStore.open("cmp_acme");
+            expect(store.isPaused("a.md", T0)).toBe(false);
+            expect(store.refusal).toBeUndefined();
+        }
+    });
+    it("refreshRefusal replaces the stored details without restarting the window", () => {
+        const store = PlanLimitPauseStore.open("cmp_acme");
+        store.pause(["a.md"], refusal, T0);
+        store.refreshRefusal({ ...refusal, message: "Fresh sentence." });
+        store.save(T0 + 1000);
+        const reopened = PlanLimitPauseStore.open("cmp_acme");
+        expect(reopened.refusal?.message).toBe("Fresh sentence.");
+        expect(reopened.pausedUntil("a.md", T0 + 1000)).toBe(T0 + PLAN_LIMIT_PAUSE_RETRY_MS);
+    });
+    it("treats a corrupt or foreign-version record as empty", () => {
+        fs.writeFileSync(planLimitPausePath("cmp_acme"), "{not json");
+        expect(PlanLimitPauseStore.open("cmp_acme").size).toBe(0);
+        fs.writeFileSync(planLimitPausePath("cmp_acme"), JSON.stringify({ version: 99, paths: { "a.md": { pausedAt: new Date(T0).toISOString() } } }));
+        expect(PlanLimitPauseStore.open("cmp_acme").isPaused("a.md", T0)).toBe(false);
+    });
+    it("never throws for an unusable scope and never writes for it", () => {
+        const store = PlanLimitPauseStore.open("");
+        store.pause(["a.md"], refusal, T0);
+        expect(() => store.save(T0)).not.toThrow();
+        expect(fs.readdirSync(stateDir)).toEqual([]);
+    });
+    it("clearPlanLimitPauses clears one vault or all of them", () => {
+        for (const scope of ["cmp_a", "cmp_b", "prs_me"]) {
+            const store = PlanLimitPauseStore.open(scope);
+            store.pause(["a.md"], refusal, T0);
+            store.save(T0);
+        }
+        fs.writeFileSync(path.join(stateDir, "sync-journal.acme.json"), "{}");
+        clearPlanLimitPauses("cmp_a");
+        expect(fs.existsSync(planLimitPausePath("cmp_a"))).toBe(false);
+        expect(fs.existsSync(planLimitPausePath("cmp_b"))).toBe(true);
+        clearPlanLimitPauses();
+        expect(fs.readdirSync(stateDir)).toEqual(["sync-journal.acme.json"]);
+    });
+});
+//# sourceMappingURL=plan-limit-pause.test.js.map

package/dist/plan-limit-pause.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-limit-pause.test.js","sourceRoot":"","sources":["../src/plan-limit-pause.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,OAAO,GAAG,qBAAqB,CAAC,sBAAsB,EAAE,CAAE,CAAC;AACjE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAElD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,QAAgB,CAAC;IACrB,IAAI,gBAAoC,CAAC;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC5C,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,QAAQ,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,gBAAgB,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;;YAC/D,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,gBAAgB,CAAC;QACjD,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,yBAAyB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,yBAAyB,CAAC,CAAC;QAC9E,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9D,8BAA8B;QAC9B,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACrC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,yBAAyB,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,yBAAyB,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,EAAE,CAAC,aAAa,CACd,kBAAkB,CAAC,UAAU,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,UAAU;YACjB,OAAO;YACP,KAAK,EAAE;gBACL,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;gBACrE,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;aACvE;SACF,CAAC,CACH,CAAC;QACF,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YACrG,YAAY;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,uEAAuE;QACvE,8BAA8B;QAC9B,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,GAAG,yBAAyB,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,qEAAqE;QACrE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,yBAAyB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,KAAK,MAAM,MAAM,IAAI;YACnB,SAAS;YACT,EAAE,UAAU,EAAE,gCAAgC,EAAE,EAAE,YAAY;YAC9D,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,+BAA+B,EAAE,EAAE,YAAY;SAC1E,EAAE,CAAC;YACF,EAAE,CAAC,aAAa,CACd,kBAAkB,CAAC,UAAU,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,UAAU;gBACjB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE;aAC5D,CAAC,CACH,CAAC;YACF,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,yBAAyB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CACd,kBAAkB,CAAC,UAAU,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAC7F,CAAC;QACF,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9C,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,EAAE,IAAI,CAAC,CAAC;QAEtE,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9D,oBAAoB,EAAE,CAAC;QACvB,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/plan-limit.d.ts

@@ -0,0 +1,87 @@
+/**
+ * One parser for every shape the vault service uses to refuse a write because
+ * the company (or personal vault) is over its plan limits.
+ *
+ * Shapes accepted:
+ *
+ *   1. The canonical hard-stop body, sent with HTTP 402:
+ *      `{ error: "plan_limit_reached", code: "PLAN_LIMIT_EXCEEDED", status: 402,
+ *         blocked, resources: [{ resource, used, limit }], message, fixOptions,
+ *         freeMonth?, upgradeUrl }`
+ *   2. The legacy membership 402:
+ *      `{ code: "PLAN_LIMIT_EXCEEDED", resource, used, limit, requiredPlan, upgradeUrl }`
+ *   3. A per-item presign row: `{ key, op, error, code: "PLAN_LIMIT_REACHED" |
+ *      "PLAN_LIMIT_EXCEEDED", upgradeUrl }`. Here `error` is either the machine
+ *      value `plan_limit_reached` or a human sentence.
+ *   4. The sync mutation-prepare skip, sent with HTTP 200:
+ *      `{ skipped: true, code, message, error, blocked, resources, upgradeUrl }`
+ *
+ * A body is a plan-limit refusal only when it carries a plan-limit marker
+ * (`error: "plan_limit_reached"`, or `code` of `PLAN_LIMIT_EXCEEDED` /
+ * `PLAN_LIMIT_REACHED`) and an `https:` `upgradeUrl`. The HTTP status alone
+ * never makes a body a plan-limit refusal: other 402s (billing, payment
+ * method) keep their own handling.
+ *
+ * This module has no imports so the vault client, the presign transport and
+ * the mutation client can all share it without a cycle.
+ */
+/** Machine `error` value of the canonical hard-stop body. */
+export declare const PLAN_LIMIT_REACHED_ERROR = "plan_limit_reached";
+/** Machine `code` values that mark a plan-limit refusal (current and legacy). */
+export declare const PLAN_LIMIT_CODES: ReadonlySet<string>;
+/** One over-limit resource from the refusal body. */
+export interface PlanLimitResource {
+    resource: string;
+    used: number;
+    limit: number;
+}
+/**
+ * The parts of a plan-limit refusal a client can show: the server's sentence,
+ * the upgrade link, and which resources are over.
+ */
+export interface PlanLimitRefusal {
+    /** Server-selected billing destination. Always present. */
+    upgradeUrl: string;
+    /** Customer-facing sentence from the server, when it sent one. */
+    message?: string;
+    /** `PLAN_LIMIT_EXCEEDED` or `PLAN_LIMIT_REACHED` when the body carried one. */
+    code?: string;
+    /** `plan_limit_reached` when the body carried the machine error value. */
+    error?: string;
+    /** The refused action, e.g. `files.create`. */
+    blocked?: string;
+    /** Over-limit resources with their usage and limit. */
+    resources?: PlanLimitResource[];
+    /** Trim-back target per resource. */
+    fixOptions?: Record<string, number>;
+    /** Free-month offer details, passed through as the server sent them. */
+    freeMonth?: Record<string, unknown>;
+}
+/**
+ * True for an absolute `https:` URL. Upgrade links are opened in a browser
+ * or printed for the user to click, so any other scheme is rejected.
+ */
+export declare function isHttpsUpgradeUrl(value: unknown): value is string;
+/** True when `error` or `code` names a plan-limit refusal. */
+export declare function hasPlanLimitMarker(fields: {
+    error?: unknown;
+    code?: unknown;
+}): boolean;
+/**
+ * Parse a response body (already JSON-decoded), a per-item presign row, or a
+ * stored refusal into a plan-limit refusal. Returns null unless the body has a
+ * plan-limit marker and an `https:` upgrade link.
+ */
+export declare function parsePlanLimitRefusal(body: unknown): PlanLimitRefusal | null;
+/** Parse a raw response text; non-JSON text is never a plan-limit refusal. */
+export declare function parsePlanLimitRefusalText(text: string): PlanLimitRefusal | null;
+/**
+ * One console line for a `plan-limit` sync event: how many files were
+ * refused, the server's sentence, and the upgrade link.
+ */
+export declare function formatPlanLimitNotice(event: {
+    upgradeUrl: string;
+    count?: number;
+    message?: string;
+}): string;
+//# sourceMappingURL=plan-limit.d.ts.map

package/dist/plan-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-limit.d.ts","sourceRoot":"","sources":["../src/plan-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,uBAAuB,CAAC;AAE7D,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAG/C,CAAC;AAEH,qDAAqD;AACrD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAcD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOjE;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAKV;AAmCD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAyB5E;AAED,8EAA8E;AAC9E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAM/E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAOT"}

package/dist/plan-limit.fixtures.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Plan-limit refusal bodies as the vault service sends them, for tests.
+ *
+ * `canonicalPlanLimitBody` mirrors the hard-stop 402 body the server builds
+ * for a Starter company over storage (`error`, `status`, `blocked`,
+ * `resources`, `message`, `fixOptions`, `freeMonth`, `upgradeUrl`) plus the
+ * `code: "PLAN_LIMIT_EXCEEDED"` older clients key on. The other bodies are
+ * the legacy and per-item shapes clients must keep accepting.
+ */
+export declare const PLAN_LIMIT_UPGRADE_URL = "https://billing.example.test/companies/acme/billing";
+/** The canonical HTTP 402 hard-stop body for a company over storage. */
+export declare function canonicalPlanLimitBody(): Record<string, unknown>;
+/** The legacy membership 402 (seat limit). */
+export declare function legacyMembershipPlanLimitBody(): Record<string, unknown>;
+/** A per-item personal-scope presign refusal row. */
+export declare function personalPresignRefusalRow(key: string): Record<string, unknown>;
+/**
+ * A per-item company presign refusal row, exactly as the server builds it
+ * (`companyPresignRefusalItemError` in the presign handler): the refusal
+ * sentence in `error`, the legacy `PLAN_LIMIT_EXCEEDED` code and the upgrade
+ * link. The server sends it only for the puts of a MIXED batch; a put-only
+ * batch gets the whole-batch 402 body instead.
+ */
+export declare function companyPresignRefusalRow(key: string): Record<string, unknown>;
+/** The admission check's answer when the company is under its limits. */
+export declare function admissionAllowedBody(): Record<string, unknown>;
+/**
+ * Today's production answer to an admission body on a presign route that
+ * predates the admission check: the body names no `company`, so it is a 400.
+ */
+export declare function admissionUnsupportedBody(): Record<string, unknown>;
+/** Mutation-prepare's HTTP 200 skip body. */
+export declare function mutationPrepareSkippedBody(): Record<string, unknown>;
+//# sourceMappingURL=plan-limit.fixtures.d.ts.map

package/dist/plan-limit.fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-limit.fixtures.d.ts","sourceRoot":"","sources":["../src/plan-limit.fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,sBAAsB,wDACoB,CAAC;AAMxD,wEAAwE;AACxE,wBAAgB,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBhE;AAED,8CAA8C;AAC9C,wBAAgB,6BAA6B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASvE;AAED,qDAAqD;AACrD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ9E;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS7E;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAElE;AAED,6CAA6C;AAC7C,wBAAgB,0BAA0B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWpE"}