@noodleseed/one 0.10.0 → 0.11.0

package/node_modules/@noodle-borg/service/dist/archive-sweeper.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Opportunistic retention sweeper for archived apps (ADR 0117 §3). No scheduler: the service
+ * handler fires one sweep at construction (boot) and piggybacks a throttled, fire-and-forget
+ * `maybeSweep()` on the deploy and deployments-list control-plane paths. A sweep hard-deletes
+ * every deployment record archived before the retention cutoff, reclaims the purged app's managed
+ * config (app scope + the swept environments' env scopes — org scope is shared and untouched),
+ * and emits one `app.purged` audit event per org/app.
+ */
+import { type Logger } from '@noodle-borg/transport-http';
+import type { ServerRegistry } from './registry.js';
+import type { AuditSink } from './store/audit.js';
+import { type ConfigStore } from './store.js';
+/** Platform default retention: archived apps are hard-deleted after this many days. */
+export declare const DEFAULT_ARCHIVE_RETENTION_DAYS = 30;
+/** Piggybacked sweeps run at most this often per instance; boot always sweeps once. */
+export declare const ARCHIVE_SWEEP_INTERVAL_MS: number;
+/** Resolve the retention override from env. Fails closed on a malformed value (boot-time error). */
+export declare function resolveArchiveRetentionDays(env: NodeJS.ProcessEnv): number;
+export interface ArchiveSweeperOptions {
+    readonly registry: ServerRegistry;
+    readonly configStore: ConfigStore;
+    readonly audit: AuditSink;
+    readonly retentionDays: number;
+    /** Injectable clock for deterministic retention tests. Default: `new Date()`. */
+    readonly clock?: () => Date;
+    readonly logger?: Logger;
+    /** Throttle for {@link maybeSweep}. Default {@link ARCHIVE_SWEEP_INTERVAL_MS}. */
+    readonly intervalMs?: number;
+}
+export declare class ArchiveSweeper {
+    #private;
+    constructor(options: ArchiveSweeperOptions);
+    /**
+     * Throttled, fire-and-forget sweep for request-path piggybacking: never blocks or fails the
+     * carrying request. The first call (boot) always sweeps.
+     */
+    maybeSweep(): void;
+    sweepNow(): Promise<{
+        readonly deletedDeployments: number;
+        readonly purgedApps: number;
+    }>;
+}
+//# sourceMappingURL=archive-sweeper.d.ts.map

package/node_modules/@noodle-borg/service/dist/archive-sweeper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-sweeper.d.ts","sourceRoot":"","sources":["../src/archive-sweeper.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EACL,KAAK,WAAW,EAIjB,MAAM,YAAY,CAAC;AAEpB,uFAAuF;AACvF,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,uFAAuF;AACvF,eAAO,MAAM,yBAAyB,QAAqB,CAAC;AAK5D,oGAAoG;AACpG,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAQ1E;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AASD,qBAAa,cAAc;;gBAUb,OAAO,EAAE,qBAAqB;IAU1C;;;OAGG;IACH,UAAU,IAAI,IAAI;IAgBZ,QAAQ,IAAI,OAAO,CAAC;QAAE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CA0ChG"}

package/node_modules/@noodle-borg/service/dist/archive-sweeper.js

@@ -0,0 +1,122 @@
+/**
+ * Opportunistic retention sweeper for archived apps (ADR 0117 §3). No scheduler: the service
+ * handler fires one sweep at construction (boot) and piggybacks a throttled, fire-and-forget
+ * `maybeSweep()` on the deploy and deployments-list control-plane paths. A sweep hard-deletes
+ * every deployment record archived before the retention cutoff, reclaims the purged app's managed
+ * config (app scope + the swept environments' env scopes — org scope is shared and untouched),
+ * and emits one `app.purged` audit event per org/app.
+ */
+import { noopLogger } from '@noodle-borg/transport-http';
+import { resolveConfigScope, } from './store.js';
+/** Platform default retention: archived apps are hard-deleted after this many days. */
+export const DEFAULT_ARCHIVE_RETENTION_DAYS = 30;
+/** Piggybacked sweeps run at most this often per instance; boot always sweeps once. */
+export const ARCHIVE_SWEEP_INTERVAL_MS = 6 * 60 * 60 * 1000;
+const DAY_MS = 24 * 60 * 60 * 1000;
+const CONFIG_KINDS = ['secret', 'variable'];
+/** Resolve the retention override from env. Fails closed on a malformed value (boot-time error). */
+export function resolveArchiveRetentionDays(env) {
+    const raw = env.NOODLE_ARCHIVE_RETENTION_DAYS;
+    if (raw === undefined || raw.trim() === '')
+        return DEFAULT_ARCHIVE_RETENTION_DAYS;
+    const parsed = Number(raw);
+    if (!Number.isInteger(parsed) || parsed < 1) {
+        throw new Error('NOODLE_ARCHIVE_RETENTION_DAYS must be a positive integer number of days');
+    }
+    return parsed;
+}
+export class ArchiveSweeper {
+    #registry;
+    #configStore;
+    #audit;
+    #retentionDays;
+    #clock;
+    #logger;
+    #intervalMs;
+    #lastSweepStartedAt;
+    constructor(options) {
+        this.#registry = options.registry;
+        this.#configStore = options.configStore;
+        this.#audit = options.audit;
+        this.#retentionDays = options.retentionDays;
+        this.#clock = options.clock ?? (() => new Date());
+        this.#logger = options.logger ?? noopLogger;
+        this.#intervalMs = options.intervalMs ?? ARCHIVE_SWEEP_INTERVAL_MS;
+    }
+    /**
+     * Throttled, fire-and-forget sweep for request-path piggybacking: never blocks or fails the
+     * carrying request. The first call (boot) always sweeps.
+     */
+    maybeSweep() {
+        const now = this.#clock().getTime();
+        if (this.#lastSweepStartedAt !== undefined &&
+            now - this.#lastSweepStartedAt < this.#intervalMs) {
+            return;
+        }
+        this.#lastSweepStartedAt = now;
+        void this.sweepNow().catch((error) => {
+            this.#logger.warn('archive.sweep.failed', {
+                message: error instanceof Error ? error.message : String(error),
+            });
+        });
+    }
+    async sweepNow() {
+        const cutoff = new Date(this.#clock().getTime() - this.#retentionDays * DAY_MS).toISOString();
+        const deleted = await this.#registry.sweepArchived(cutoff);
+        if (deleted.length === 0)
+            return { deletedDeployments: 0, purgedApps: 0 };
+        const apps = groupByApp(deleted);
+        for (const entry of apps.values()) {
+            await this.#deleteAppConfig(entry);
+            await this.#audit.emit({
+                eventType: 'app.purged',
+                org: entry.org,
+                app: entry.app,
+                decision: 'allow',
+                reasonCode: 'retention_elapsed',
+                details: {
+                    deletedDeployments: entry.count,
+                    retentionDays: this.#retentionDays,
+                    archivedBefore: cutoff,
+                },
+            });
+        }
+        this.#logger.info('archive.sweep.completed', {
+            deletedDeployments: deleted.length,
+            purgedApps: apps.size,
+        });
+        return { deletedDeployments: deleted.length, purgedApps: apps.size };
+    }
+    /** Reclaim the purged app's managed config: app scope + each swept environment's env scope. */
+    async #deleteAppConfig(entry) {
+        const scopes = [
+            resolveConfigScope({ org: entry.org, app: entry.app }),
+            ...[...entry.envs].map((env) => resolveConfigScope({ org: entry.org, app: entry.app, env })),
+        ];
+        for (const scope of scopes) {
+            for (const kind of CONFIG_KINDS) {
+                const values = await this.#configStore.listConfigValues(kind, scope);
+                for (const value of values) {
+                    await this.#configStore.deleteConfigValue(kind, scope, value.name);
+                }
+            }
+        }
+    }
+}
+function groupByApp(deleted) {
+    const apps = new Map();
+    for (const record of deleted) {
+        const key = `${record.orgSlug}/${record.appSlug}`;
+        const entry = apps.get(key) ?? {
+            org: record.orgSlug,
+            app: record.appSlug,
+            envs: new Set(),
+            count: 0,
+        };
+        entry.envs.add(record.environment);
+        entry.count += 1;
+        apps.set(key, entry);
+    }
+    return apps;
+}
+//# sourceMappingURL=archive-sweeper.js.map

package/node_modules/@noodle-borg/service/dist/archive-sweeper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-sweeper.js","sourceRoot":"","sources":["../src/archive-sweeper.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAe,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAGtE,OAAO,EAIL,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,uFAAuF;AACvF,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AACjD,uFAAuF;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,YAAY,GAAiC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE1E,oGAAoG;AACpG,MAAM,UAAU,2BAA2B,CAAC,GAAsB;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,6BAA6B,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,8BAA8B,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAqBD,MAAM,OAAO,cAAc;IAChB,SAAS,CAAiB;IAC1B,YAAY,CAAc;IAC1B,MAAM,CAAY;IAClB,cAAc,CAAS;IACvB,MAAM,CAAa;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IAC7B,mBAAmB,CAAqB;IAExC,YAAY,OAA8B;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,yBAAyB,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,IACE,IAAI,CAAC,mBAAmB,KAAK,SAAS;YACtC,GAAG,GAAG,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,WAAW,EACjD,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC;QAC/B,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBACxC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBACrB,SAAS,EAAE,YAAY;gBACvB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,mBAAmB;gBAC/B,OAAO,EAAE;oBACP,kBAAkB,EAAE,KAAK,CAAC,KAAK;oBAC/B,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,cAAc,EAAE,MAAM;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;YAC3C,kBAAkB,EAAE,OAAO,CAAC,MAAM;YAClC,UAAU,EAAE,IAAI,CAAC,IAAI;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,gBAAgB,CAAC,KAAgB;QACrC,MAAM,MAAM,GAAG;YACb,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACtD,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;SAC7F,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,SAAS,UAAU,CAAC,OAAgC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;YAC7B,GAAG,EAAE,MAAM,CAAC,OAAO;YACnB,GAAG,EAAE,MAAM,CAAC,OAAO;YACnB,IAAI,EAAE,IAAI,GAAG,EAAU;YACvB,KAAK,EAAE,CAAC;SACT,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@noodle-borg/service/dist/commercial-plans.d.ts

@@ -0,0 +1,11 @@
+import type { PolicyDocument } from './policy.js';
+export type CommercialPlanName = 'free' | 'pro' | 'scale' | 'enterprise';
+export type CommercialPlanCatalog = Readonly<Record<CommercialPlanName, PolicyDocument>>;
+export declare const COMMERCIAL_PLAN_NAMES: readonly CommercialPlanName[];
+export declare const DEFAULT_COMMERCIAL_PLAN_CATALOG: CommercialPlanCatalog;
+export declare function commercialPlanPolicyId(org: string): string;
+export declare function isCommercialPlanPolicyId(id: string): boolean;
+export declare function isCommercialPlanName(value: unknown): value is CommercialPlanName;
+export declare function resolveCommercialPlanCatalog(override: CommercialPlanCatalog | undefined): CommercialPlanCatalog;
+export declare function planNameForPolicy(policy: PolicyDocument, catalog: CommercialPlanCatalog): CommercialPlanName | undefined;
+//# sourceMappingURL=commercial-plans.d.ts.map

package/node_modules/@noodle-borg/service/dist/commercial-plans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commercial-plans.d.ts","sourceRoot":"","sources":["../src/commercial-plans.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,YAAY,CAAC;AAEzE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzF,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAK9D,CAAC;AAEF,eAAO,MAAM,+BAA+B,EAAE,qBAwE7C,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAS5D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF;AAED,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,qBAAqB,GAAG,SAAS,GAC1C,qBAAqB,CAEvB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,GAC7B,kBAAkB,GAAG,SAAS,CAMhC"}

package/node_modules/@noodle-borg/service/dist/commercial-plans.js

@@ -0,0 +1,119 @@
+import { validateSlug } from './store.js';
+export const COMMERCIAL_PLAN_NAMES = [
+    'free',
+    'pro',
+    'scale',
+    'enterprise',
+];
+export const DEFAULT_COMMERCIAL_PLAN_CATALOG = {
+    free: {
+        schemaVersion: 1,
+        categories: {
+            execute: {
+                reason: 'free_plan_quota',
+                quota: { limit: 1_000_000, windowSeconds: 2_592_000 },
+                rate: {
+                    algorithm: 'token-bucket',
+                    limit: 60,
+                    refillSeconds: 60,
+                    burst: 120,
+                    partitionBy: 'subject',
+                },
+            },
+            discovery: { rate: commonReadRate() },
+            read: { rate: commonReadRate() },
+        },
+    },
+    pro: {
+        schemaVersion: 1,
+        categories: {
+            execute: {
+                reason: 'pro_plan_quota',
+                quota: { limit: 10_000_000, windowSeconds: 2_592_000 },
+                rate: {
+                    algorithm: 'token-bucket',
+                    limit: 300,
+                    refillSeconds: 60,
+                    burst: 600,
+                    partitionBy: 'subject',
+                },
+            },
+            discovery: { rate: commonReadRate() },
+            read: { rate: commonReadRate() },
+        },
+    },
+    scale: {
+        schemaVersion: 1,
+        categories: {
+            execute: {
+                reason: 'scale_plan_quota',
+                quota: { limit: 100_000_000, windowSeconds: 2_592_000 },
+                rate: {
+                    algorithm: 'token-bucket',
+                    limit: 1_000,
+                    refillSeconds: 60,
+                    burst: 2_000,
+                    partitionBy: 'subject',
+                },
+            },
+            discovery: { rate: commonReadRate() },
+            read: { rate: commonReadRate() },
+        },
+    },
+    enterprise: {
+        schemaVersion: 1,
+        categories: {
+            execute: {
+                reason: 'enterprise_plan_rate',
+                rate: {
+                    algorithm: 'token-bucket',
+                    limit: 2_000,
+                    refillSeconds: 60,
+                    burst: 4_000,
+                    partitionBy: 'subject',
+                },
+            },
+            discovery: { rate: commonReadRate() },
+            read: { rate: commonReadRate() },
+        },
+    },
+};
+export function commercialPlanPolicyId(org) {
+    return `org:${validateSlug('org', org)}:commercial-plan`;
+}
+export function isCommercialPlanPolicyId(id) {
+    const match = /^org:([^:]+):commercial-plan$/.exec(id);
+    if (!match)
+        return false;
+    try {
+        validateSlug('org', match[1]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function isCommercialPlanName(value) {
+    return typeof value === 'string' && COMMERCIAL_PLAN_NAMES.includes(value);
+}
+export function resolveCommercialPlanCatalog(override) {
+    return override ?? DEFAULT_COMMERCIAL_PLAN_CATALOG;
+}
+export function planNameForPolicy(policy, catalog) {
+    const fingerprint = JSON.stringify(policy);
+    for (const name of COMMERCIAL_PLAN_NAMES) {
+        if (JSON.stringify(catalog[name]) === fingerprint)
+            return name;
+    }
+    return undefined;
+}
+function commonReadRate() {
+    return {
+        algorithm: 'token-bucket',
+        limit: 120,
+        refillSeconds: 60,
+        burst: 240,
+        partitionBy: 'subject',
+    };
+}
+//# sourceMappingURL=commercial-plans.js.map

package/node_modules/@noodle-borg/service/dist/commercial-plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commercial-plans.js","sourceRoot":"","sources":["../src/commercial-plans.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM1C,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,MAAM;IACN,KAAK;IACL,OAAO;IACP,YAAY;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,IAAI,EAAE;QACJ,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE;gBACrD,IAAI,EAAE;oBACJ,SAAS,EAAE,cAAc;oBACzB,KAAK,EAAE,EAAE;oBACT,aAAa,EAAE,EAAE;oBACjB,KAAK,EAAE,GAAG;oBACV,WAAW,EAAE,SAAS;iBACvB;aACF;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;SACjC;KACF;IACD,GAAG,EAAE;QACH,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE;gBACtD,IAAI,EAAE;oBACJ,SAAS,EAAE,cAAc;oBACzB,KAAK,EAAE,GAAG;oBACV,aAAa,EAAE,EAAE;oBACjB,KAAK,EAAE,GAAG;oBACV,WAAW,EAAE,SAAS;iBACvB;aACF;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;SACjC;KACF;IACD,KAAK,EAAE;QACL,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE;gBACvD,IAAI,EAAE;oBACJ,SAAS,EAAE,cAAc;oBACzB,KAAK,EAAE,KAAK;oBACZ,aAAa,EAAE,EAAE;oBACjB,KAAK,EAAE,KAAK;oBACZ,WAAW,EAAE,SAAS;iBACvB;aACF;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;SACjC;KACF;IACD,UAAU,EAAE;QACV,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,sBAAsB;gBAC9B,IAAI,EAAE;oBACJ,SAAS,EAAE,cAAc;oBACzB,KAAK,EAAE,KAAK;oBACZ,aAAa,EAAE,EAAE;oBACjB,KAAK,EAAE,KAAK;oBACZ,WAAW,EAAE,SAAS;iBACvB;aACF;YACD,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;SACjC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,OAAO,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,kBAAkB,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,qBAAqB,CAAC,QAAQ,CAAC,KAA2B,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,QAA2C;IAE3C,OAAO,QAAQ,IAAI,+BAA+B,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,OAA8B;IAE9B,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,SAAS,EAAE,cAAuB;QAClC,KAAK,EAAE,GAAG;QACV,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,GAAG;QACV,WAAW,EAAE,SAAkB;KAChC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/deployment-versioning.d.ts

@@ -5,6 +5,8 @@ export interface DeploymentVersionRecord {
     readonly active: boolean;
     readonly deploymentVersion: number;
     readonly serverVersion?: string;
+    /** Soft-delete stamp (ADR 0117). An archived record never resolves as an active deployment. */
+    readonly archivedAt?: string;
 }
 export interface TenantVersionRef {
     readonly org: string;

package/node_modules/@noodle-borg/service/dist/deployment-versioning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-versioning.d.ts","sourceRoot":"","sources":["../src/deployment-versioning.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC,EAC5E,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC,GAC9F,OAAO,CAaT;AAED,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,uBAAuB,EAC1B,CAAC,EAAE,uBAAuB,GACzB,OAAO,CAET;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,uBAAuB,EACnE,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,GAAG,EAAE,gBAAgB,GACpB,CAAC,GAAG,SAAS,CAWf;AAED,wBAAgB,oCAAoC,CAAC,CAAC,SAAS,uBAAuB,EACpF,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,GACH,MAAM,CAGR"}
+{"version":3,"file":"deployment-versioning.d.ts","sourceRoot":"","sources":["../src/deployment-versioning.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC,EAC5E,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC,GAC9F,OAAO,CAaT;AAED,wBAAgB,mBAAmB,CACjC,CAAC,EAAE,uBAAuB,EAC1B,CAAC,EAAE,uBAAuB,GACzB,OAAO,CAET;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,uBAAuB,EACnE,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,GAAG,EAAE,gBAAgB,GACpB,CAAC,GAAG,SAAS,CAaf;AAED,wBAAgB,oCAAoC,CAAC,CAAC,SAAS,uBAAuB,EACpF,CAAC,EAAE,CAAC,EACJ,CAAC,EAAE,CAAC,GACH,MAAM,CAGR"}

package/node_modules/@noodle-borg/service/dist/deployment-versioning.js

@@ -13,7 +13,7 @@ export function sameDeploymentScope(a, b) {
     return sameTenantRecord(a, b) && a.serverVersion === b.serverVersion;
 }
 export function defaultActiveRecord(records, ref) {
-    const active = records.filter((record) => record.active && sameTenantRecord(record, ref));
+    const active = records.filter((record) => record.active && record.archivedAt === undefined && sameTenantRecord(record, ref));
     const versioned = active
         .filter((record) => record.serverVersion !== undefined)
         .sort(compareDeployRecordVersionDescending);

package/node_modules/@noodle-borg/service/dist/deployment-versioning.js.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-versioning.js","sourceRoot":"","sources":["../src/deployment-versioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAiB5D,MAAM,UAAU,gBAAgB,CAC9B,MAA4E,EAC5E,MAA+F;IAE/F,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG;YAC7B,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG;YAC7B,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,GAAG,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,CAA0B,EAC1B,CAA0B;IAE1B,OAAO,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAqB,EACrB,GAAqB;IAErB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;SACtD,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC9C,OAAO,CACL,SAAS,CAAC,CAAC,CAAC;QACZ,MAAM;aACH,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,CAAI,EACJ,CAAI;IAEJ,MAAM,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,aAAuB,EAAE,CAAC,CAAC,aAAuB,CAAC,CAAC;IAC9F,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;AACjF,CAAC"}
+{"version":3,"file":"deployment-versioning.js","sourceRoot":"","sources":["../src/deployment-versioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAmB5D,MAAM,UAAU,gBAAgB,CAC9B,MAA4E,EAC5E,MAA+F;IAE/F,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG;YAC7B,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG;YAC7B,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,GAAG,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACjC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,CAA0B,EAC1B,CAA0B;IAE1B,OAAO,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAqB,EACrB,GAAqB;IAErB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAC9F,CAAC;IACF,MAAM,SAAS,GAAG,MAAM;SACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;SACtD,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC9C,OAAO,CACL,SAAS,CAAC,CAAC,CAAC;QACZ,MAAM;aACH,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,CAAI,EACJ,CAAI;IAEJ,MAAM,SAAS,GAAG,qBAAqB,CAAC,CAAC,CAAC,aAAuB,EAAE,CAAC,CAAC,aAAuB,CAAC,CAAC;IAC9F,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;AACjF,CAAC"}

package/node_modules/@noodle-borg/service/dist/index.d.ts

@@ -1,8 +1,10 @@
 export { ensureAuditSchema, PostgresAuditStore } from '@noodle-borg/module-audit';
+export { ARCHIVE_SWEEP_INTERVAL_MS, ArchiveSweeper, type ArchiveSweeperOptions, DEFAULT_ARCHIVE_RETENTION_DAYS, resolveArchiveRetentionDays, } from './archive-sweeper.js';
 export { type AssetAdapterKind, type AssetConfigInput, type AssetConfigResolution, type AssetQuotaOverride, createAssetStore, type ResolvedAssetConfig, resolveAssetConfig, } from './asset-config.js';
 export { type AssetStore, type AssetUploadPlan, type AssetUploadTarget, InMemoryAssetStore, type InMemoryAssetStoreOptions, } from './assets.js';
 export { allowAllGate, bearerToken, type ControlPlaneAuthResult, type ControlPlaneIdentity, constantTimeEqual, type DeployAuthGate, GoogleControlPlaneGate, type GoogleIdTokenVerifier, NoodleOAuthControlPlaneGate, } from './auth/deploy-gate.js';
 export { type BuildInfo, resolveBuildInfo } from './build-info.js';
+export { COMMERCIAL_PLAN_NAMES, type CommercialPlanCatalog, type CommercialPlanName, commercialPlanPolicyId, DEFAULT_COMMERCIAL_PLAN_CATALOG, isCommercialPlanName, isCommercialPlanPolicyId, planNameForPolicy, resolveCommercialPlanCatalog, } from './commercial-plans.js';
 export { type CustomerVerifierFactoryOptions, createCustomerVerifierFactory, createFirebaseIdTokenVerifier, } from './customer-verifier.js';
 export { ORG_DOMAIN_TXT_LABEL, type OrgDomainVerificationResult, type TxtResolver, verifyOrgDomainDns, } from './domain-verification.js';
 export { type EnsureFreeTierDefaultOptions, ensureFreeTierDefault, FREE_TIER_PLAN, FREE_TIER_POLICY_ID, } from './free-tier.js';
@@ -20,5 +22,5 @@ export { InMemoryControlPlaneStore } from './store/control-plane.js';
 export { PostgresArtifactStore, type PostgresStoreOptions } from './store/postgres.js';
 export { ensureStateHandleSchema, PostgresStateHandleStore, type PostgresStateHandleStoreOptions, } from './store/postgres-state-handles.js';
 export { InMemoryUserAppLogStore, type InMemoryUserAppLogStoreOptions, type UserAppLogEvent, type UserAppLogFilter, type UserAppLogInput, type UserAppLogLevel, type UserAppLogSink, type UserAppLogStore, } from './store/user-app-logs.js';
-export { type ArtifactStore, CONFIG_NAME_PATTERN, type ConfigScope, type ConfigStore, type ConfigValueMetadata, type ControlPlaneStore, DEPLOYMENT_ID_PATTERN, type DeploymentSummary, type DeployRecord, DOMAIN_PATTERN, InMemoryArtifactStore, InMemoryConfigStore, JsonFileArtifactStore, type ManagedConfigKind, type OrgDomainRecord, type OrgInvitationRecord, type OrgMemberRecord, type OrgRecord, type OrgRole, resolveConfigScope, type SecretEnvelope, type SignupAllowlistKind, type SignupAllowlistRecord, SLUG_PATTERN, scopeChain, type TenantAuthConfig, type TenantRef, validateConfigName, validateConfigScope, validateDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateTenantRef, } from './store.js';
+export { type AppArchiveResult, type AppRestoreResult, type ArtifactStore, CONFIG_NAME_PATTERN, type ConfigScope, type ConfigStore, type ConfigValueMetadata, type ControlPlaneStore, DEPLOYMENT_ID_PATTERN, type DeploymentListFilter, type DeploymentSummary, type DeployRecord, DOMAIN_PATTERN, InMemoryArtifactStore, InMemoryConfigStore, JsonFileArtifactStore, type ManagedConfigKind, type OrgDomainRecord, type OrgInvitationRecord, type OrgMemberRecord, type OrgRecord, type OrgRole, resolveConfigScope, type SecretEnvelope, type SignupAllowlistKind, type SignupAllowlistRecord, SLUG_PATTERN, scopeChain, type TenantAuthConfig, type TenantRef, validateConfigName, validateConfigScope, validateDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateTenantRef, } from './store.js';
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@noodle-borg/service/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,4BAA4B,EACjC,qBAAqB,EACrB,cAAc,EACd,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,qBAAqB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,qBAAqB,EAC1B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,4BAA4B,EACjC,qBAAqB,EACrB,cAAc,EACd,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/node_modules/@noodle-borg/service/dist/index.js

@@ -1,8 +1,10 @@
 export { ensureAuditSchema, PostgresAuditStore } from '@noodle-borg/module-audit';
+export { ARCHIVE_SWEEP_INTERVAL_MS, ArchiveSweeper, DEFAULT_ARCHIVE_RETENTION_DAYS, resolveArchiveRetentionDays, } from './archive-sweeper.js';
 export { createAssetStore, resolveAssetConfig, } from './asset-config.js';
 export { InMemoryAssetStore, } from './assets.js';
 export { allowAllGate, bearerToken, constantTimeEqual, GoogleControlPlaneGate, NoodleOAuthControlPlaneGate, } from './auth/deploy-gate.js';
 export { resolveBuildInfo } from './build-info.js';
+export { COMMERCIAL_PLAN_NAMES, commercialPlanPolicyId, DEFAULT_COMMERCIAL_PLAN_CATALOG, isCommercialPlanName, isCommercialPlanPolicyId, planNameForPolicy, resolveCommercialPlanCatalog, } from './commercial-plans.js';
 export { createCustomerVerifierFactory, createFirebaseIdTokenVerifier, } from './customer-verifier.js';
 export { ORG_DOMAIN_TXT_LABEL, verifyOrgDomainDns, } from './domain-verification.js';
 export { ensureFreeTierDefault, FREE_TIER_PLAN, FREE_TIER_POLICY_ID, } from './free-tier.js';

package/node_modules/@noodle-borg/service/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAKL,gBAAgB,EAEhB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,WAAW,EAGX,iBAAiB,EAEjB,sBAAsB,EAEtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAEL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EAGpB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,8BAA8B,EAE9B,6BAA6B,EAC7B,wBAAwB,EAIxB,mBAAmB,EAQnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAKL,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAMpB,sBAAsB,EACtB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EAQpB,kBAAkB,EAElB,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uBAAuB,GAQxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,mBAAmB,EAKnB,qBAAqB,EAGrB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EAOrB,kBAAkB,EAIlB,YAAY,EACZ,UAAU,EAGV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,yBAAyB,EACzB,cAAc,EAEd,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAKL,gBAAgB,EAEhB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,WAAW,EAGX,iBAAiB,EAEjB,sBAAsB,EAEtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EAGrB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oBAAoB,EAGpB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,qBAAqB,EACrB,cAAc,EACd,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,8BAA8B,EAE9B,6BAA6B,EAC7B,wBAAwB,EAIxB,mBAAmB,EAQnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAKL,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAMpB,sBAAsB,EACtB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EAQpB,kBAAkB,EAElB,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,uBAAuB,GAQxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,mBAAmB,EAKnB,qBAAqB,EAIrB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EAOrB,kBAAkB,EAIlB,YAAY,EACZ,UAAU,EAGV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/node_modules/@noodle-borg/service/dist/options.d.ts

@@ -4,6 +4,7 @@ import type { JSONWebKeySet } from 'jose';
 import type { AssetStore } from './assets.js';
 import type { ControlPlaneSignupMode, DeployAuthGate } from './auth/deploy-gate.js';
 import type { BuildInfo } from './build-info.js';
+import type { CommercialPlanCatalog } from './commercial-plans.js';
 import type { LoadedServiceModule } from './modules/host.js';
 import type { PolicyAssignmentStore, PolicyCounterStore } from './policy.js';
 import type { AuditSink } from './store/audit.js';
@@ -32,6 +33,12 @@ export interface ServiceOptions {
     readonly assetPublicBaseUrl?: string;
     /** Optional service clock for deterministic tests around time-windowed policy and admission behavior. */
     readonly clock?: () => Date;
+    /**
+     * Retention window for archived apps (ADR 0117): the opportunistic sweeper hard-deletes an app's
+     * deployment records + managed config this many days after it was archived, and restores past the
+     * window answer 410 Gone. Default: 30, overridable via `NOODLE_ARCHIVE_RETENTION_DAYS`.
+     */
+    readonly archiveRetentionDays?: number;
     /** Structured logger for deploy + request lifecycle events. Default: a no-op logger. */
     readonly logger?: Logger;
     /**
@@ -75,6 +82,8 @@ export interface ServiceOptions {
     readonly policyCacheTtlMs?: number;
     /** Mutable quota/rate counter plane for managed policy enforcement. */
     readonly policyCounterStore?: PolicyCounterStore;
+    /** Override the commercial plan catalog for deterministic tests or self-hosted policy tuning. */
+    readonly commercialPlanCatalog?: CommercialPlanCatalog;
     /**
      * Tenant-safe developer-facing app log store (M3, [ADR 0101](../../../docs/decisions/0101-tenant-safe-user-app-logs.md)).
      * Backs `GET /v1/orgs/{org}/apps/{app}/envs/{env}/logs` and `noodle logs`. Records are tenant-scoped and

package/node_modules/@noodle-borg/service/dist/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,oGAAoG;IACpG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACzD"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,oGAAoG;IACpG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,iGAAiG;IACjG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACzD"}

package/node_modules/@noodle-borg/service/dist/registry-state.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Registry state operations that work over the {@link ServerRegistry}'s private maps: the no-store
+ * in-memory activation fallback and the app archive/restore/sweep cache reconciliation (ADR 0117).
+ * The registry passes a {@link RegistryStateView} of its private fields; store-backed calls hit the
+ * durable store first, then reconcile the in-process caches so no instance keeps serving stale state.
+ */
+import type { ServedTarget } from '@noodle-borg/transport-http';
+import type { AppArchiveResult, AppRestoreResult, ArtifactStore, DeployRecord, TenantRef } from './store.js';
+export interface RegistryStateView {
+    readonly store: ArtifactStore | undefined;
+    readonly records: Map<string, DeployRecord>;
+    readonly servers: Map<string, ServedTarget>;
+    readonly activeTenants: Map<string, string>;
+}
+/** No-store activation fallback (moved verbatim from `ServerRegistry.#activateInMemory`). */
+export declare function activateInMemory(records: Map<string, DeployRecord>, ref: TenantRef, deploymentId: string): {
+    readonly active: DeployRecord;
+    readonly previousActive?: DeployRecord;
+    readonly alreadyActive: boolean;
+} | undefined;
+export declare function registryAppArchivedAt(state: RegistryStateView, org: string, app: string): Promise<string | undefined>;
+export declare function registryArchiveApp(state: RegistryStateView, org: string, app: string, at: string): Promise<AppArchiveResult | undefined>;
+export declare function registryRestoreApp(state: RegistryStateView, org: string, app: string): Promise<AppRestoreResult | undefined>;
+export declare function registrySweepArchived(state: RegistryStateView, before: string): Promise<readonly DeployRecord[]>;
+//# sourceMappingURL=registry-state.d.ts.map

package/node_modules/@noodle-borg/service/dist/registry-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-state.d.ts","sourceRoot":"","sources":["../src/registry-state.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAShE,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,SAAS,EACV,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAClC,GAAG,EAAE,SAAS,EACd,YAAY,EAAE,MAAM,GAElB;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC,GACD,SAAS,CAyBZ;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK7B;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAYvC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,iBAAiB,EACxB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAYvC;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAgBlC"}

package/node_modules/@noodle-borg/service/dist/registry-state.js

@@ -0,0 +1,119 @@
+import { recordMatchesTenant } from './registry-targets.js';
+import { appArchivedAt, planAppArchive, planAppRestore, withoutArchiveStamp, } from './store/records.js';
+import { validateSlug } from './store/validate.js';
+/** No-store activation fallback (moved verbatim from `ServerRegistry.#activateInMemory`). */
+export function activateInMemory(records, ref, deploymentId) {
+    const target = records.get(deploymentId);
+    if (target === undefined || !recordMatchesTenant(target, ref))
+        return undefined;
+    const previousActive = [...records.values()]
+        .filter((record) => record.active && recordMatchesTenant(record, ref))
+        .filter((record) => record.serverVersion === target.serverVersion)
+        .sort((a, b) => b.deploymentVersion - a.deploymentVersion)[0];
+    const alreadyActive = previousActive?.deploymentId === deploymentId;
+    if (!alreadyActive) {
+        for (const [id, record] of records) {
+            if (record.active &&
+                recordMatchesTenant(record, ref) &&
+                record.serverVersion === target.serverVersion) {
+                records.set(id, { ...record, active: false });
+            }
+        }
+        records.set(deploymentId, { ...target, active: true });
+    }
+    return {
+        active: { ...target, active: true },
+        ...(previousActive !== undefined ? { previousActive } : {}),
+        alreadyActive,
+    };
+}
+export function registryAppArchivedAt(state, org, app) {
+    const safeOrg = validateSlug('org', org);
+    const safeApp = validateSlug('app', app);
+    if (state.store !== undefined)
+        return state.store.getAppArchivedAt(safeOrg, safeApp);
+    return Promise.resolve(appArchivedAt(appRecordsFromMap(state.records, safeOrg, safeApp)));
+}
+export async function registryArchiveApp(state, org, app, at) {
+    const safeOrg = validateSlug('org', org);
+    const safeApp = validateSlug('app', app);
+    if (state.store !== undefined) {
+        const result = await state.store.archiveApp(safeOrg, safeApp, at);
+        if (result !== undefined)
+            evictArchivedApp(state, safeOrg, safeApp, result.archivedAt);
+        return result;
+    }
+    const plan = planAppArchive(appRecordsFromMap(state.records, safeOrg, safeApp), at);
+    if (plan === undefined)
+        return undefined;
+    evictArchivedApp(state, safeOrg, safeApp, plan.result.archivedAt);
+    return plan.result;
+}
+export async function registryRestoreApp(state, org, app) {
+    const safeOrg = validateSlug('org', org);
+    const safeApp = validateSlug('app', app);
+    if (state.store !== undefined) {
+        const result = await state.store.restoreApp(safeOrg, safeApp);
+        if (result !== undefined)
+            clearCachedArchiveStamps(state, safeOrg, safeApp);
+        return result;
+    }
+    const plan = planAppRestore(appRecordsFromMap(state.records, safeOrg, safeApp));
+    if (plan === undefined)
+        return undefined;
+    clearCachedArchiveStamps(state, safeOrg, safeApp);
+    return plan.result;
+}
+export async function registrySweepArchived(state, before) {
+    let deleted;
+    if (state.store !== undefined) {
+        deleted = await state.store.sweepArchived(before);
+    }
+    else {
+        deleted = [...state.records.values()].filter((record) => record.archivedAt !== undefined && record.archivedAt < before);
+    }
+    const ids = new Set(deleted.map((record) => record.deploymentId));
+    for (const id of ids) {
+        state.records.delete(id);
+        state.servers.delete(id);
+    }
+    purgeActiveTenantEntries(state, ids);
+    return deleted;
+}
+function appRecordsFromMap(records, org, app) {
+    return [...records.values()].filter((record) => record.orgSlug === org && record.appSlug === app);
+}
+/**
+ * Stamp cached records and drop the app's active-tenant pointers so this instance stops serving
+ * immediately (`ServerRegistry.get` fails closed on a stamped record). With a durable store the
+ * compiled servers are also dropped — a restore recompiles lazily from the store. Without a store
+ * the compiled servers are the only copy, so they stay cached (blocked by the record stamp) and
+ * restore resumes serving instantly. Records already stamped keep their original stamp.
+ */
+function evictArchivedApp(state, org, app, archivedAt) {
+    const ids = new Set();
+    for (const [id, record] of state.records) {
+        if (record.orgSlug !== org || record.appSlug !== app)
+            continue;
+        ids.add(id);
+        if (record.archivedAt === undefined)
+            state.records.set(id, { ...record, archivedAt });
+        if (state.store !== undefined)
+            state.servers.delete(id);
+    }
+    purgeActiveTenantEntries(state, ids);
+}
+function clearCachedArchiveStamps(state, org, app) {
+    for (const [id, record] of state.records) {
+        if (record.orgSlug === org && record.appSlug === app && record.archivedAt !== undefined) {
+            state.records.set(id, withoutArchiveStamp(record));
+        }
+    }
+}
+function purgeActiveTenantEntries(state, ids) {
+    for (const [key, id] of state.activeTenants) {
+        if (ids.has(id))
+            state.activeTenants.delete(key);
+    }
+}
+//# sourceMappingURL=registry-state.js.map