@noodleseed/one 0.109.0 → 0.111.0

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js

@@ -0,0 +1,41 @@
+import { createHash } from 'node:crypto';
+import { validateDomain, validateSlug } from './validation.js';
+export function memberKey(org, subject) {
+    return `${org}/${subject}`;
+}
+export function domainKey(org, domain) {
+    return `${org}/${domain}`;
+}
+export function domainFromEmail(email) {
+    const at = email.lastIndexOf('@');
+    if (at < 0)
+        return undefined;
+    try {
+        return validateDomain(email.slice(at + 1));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function normalizeSignupAllowlistValue(kind, value) {
+    return kind === 'domain' ? validateDomain(value) : value.trim().toLowerCase();
+}
+export function signupKey(kind, value) {
+    return `${kind}/${value}`;
+}
+export function personalOrgSlug(identity) {
+    const localPart = identity.email.split('@')[0] ?? 'user';
+    const base = slugPart(localPart).slice(0, 52) || 'user';
+    return validateSlug('org', `u-${base}${personalOrgSlugSuffix(identity.subject)}`);
+}
+/** Immutable suffix used to discover and bind legacy email-derived personal organization slugs. */
+export function personalOrgSlugSuffix(subject) {
+    return `-${createHash('sha256').update(subject).digest('hex').slice(0, 8)}`;
+}
+function slugPart(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+}
+//# sourceMappingURL=organization-helpers.js.map

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-helpers.js","sourceRoot":"","sources":["../src/organization-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,OAAe;IACpD,OAAO,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IACnD,OAAO,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAyB,EAAE,KAAa;IACpF,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAyB,EAAE,KAAa;IAChE,OAAO,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAG/B;IACC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACxD,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.d.ts

@@ -0,0 +1,11 @@
+import type { PoolClient } from 'pg';
+export type EnsureDefaultOrgBillingTx = (client: PoolClient, input: {
+    readonly org: string;
+    readonly owner: {
+        readonly identityIssuer?: string;
+        readonly subject: string;
+        readonly email: string;
+    };
+    readonly reason: 'organization-created';
+}, createdAt: Date) => Promise<void>;
+//# sourceMappingURL=postgres-contracts.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-contracts.d.ts","sourceRoot":"","sources":["../src/postgres-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAErC,MAAM,MAAM,yBAAyB,GAAG,CACtC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE;IACL,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC,EACD,SAAS,EAAE,IAAI,KACZ,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=postgres-contracts.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-contracts.js","sourceRoot":"","sources":["../src/postgres-contracts.ts"],"names":[],"mappings":""}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts

@@ -0,0 +1,18 @@
+import type { Pool, PoolClient } from 'pg';
+import type { ActiveMcpSubdomainClaim, ChangeMcpSubdomainInput, McpSubdomainMutationResult, McpSubdomainSetting } from './contracts.js';
+type ChangedMcpSubdomainResult = Omit<McpSubdomainMutationResult, 'changed' | 'changedAt'> & {
+    readonly changed: true;
+    readonly changedAt: string;
+};
+export interface PostgresMcpSubdomainMutationOptions {
+    readonly now?: () => Date;
+    /** Called after state and mutation rows are staged but before commit. */
+    readonly recordAudit?: (client: Pick<PoolClient, 'query'>, result: ChangedMcpSubdomainResult, input: ChangeMcpSubdomainInput) => Promise<void>;
+}
+export declare function getActiveMcpSubdomainRow(pool: Pool, org: string): Promise<ActiveMcpSubdomainClaim | undefined>;
+export declare function resolveActiveMcpSubdomainRow(pool: Pool, mcpSubdomain: string): Promise<ActiveMcpSubdomainClaim | undefined>;
+export declare function getMcpSubdomainSettingRow(pool: Pool, org: string): Promise<McpSubdomainSetting | undefined>;
+/** Exact-owner, globally unique, permanently retiring mutation in one PostgreSQL transaction. */
+export declare function changeMcpSubdomainRow(pool: Pool, input: ChangeMcpSubdomainInput, options?: PostgresMcpSubdomainMutationOptions): Promise<McpSubdomainMutationResult>;
+export {};
+//# sourceMappingURL=postgres-mcp-subdomain-claims.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-claims.d.ts","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-claims.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAWxB,KAAK,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,SAAS,GAAG,WAAW,CAAC,GAAG;IAC3F,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAqBF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,yBAAyB,EACjC,KAAK,EAAE,uBAAuB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAQ9C;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAQ9C;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAe1C;AAED,iGAAiG;AACjG,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE,mCAAwC,GAChD,OAAO,CAAC,0BAA0B,CAAC,CAqHrC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js

@@ -0,0 +1,173 @@
+import { createHash } from 'node:crypto';
+import { McpSubdomainCooldownError, McpSubdomainIdempotencyConflictError, McpSubdomainOwnerRequiredError, McpSubdomainUnavailableError, } from './mcp-subdomain-claims.js';
+import { validateMcpSubdomain, validateSlug } from './validation.js';
+const MCP_SUBDOMAIN_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
+export async function getActiveMcpSubdomainRow(pool, org) {
+    const { rows } = await pool.query(`SELECT subdomain, org_slug, claimed_at
+     FROM org_mcp_subdomain_claims
+     WHERE org_slug = $1 AND state = 'active'`, [validateSlug('org', org)]);
+    return rows[0] === undefined ? undefined : claimRowToRecord(rows[0]);
+}
+export async function resolveActiveMcpSubdomainRow(pool, mcpSubdomain) {
+    const { rows } = await pool.query(`SELECT subdomain, org_slug, claimed_at
+     FROM org_mcp_subdomain_claims
+     WHERE subdomain = $1 AND state = 'active'`, [validateMcpSubdomain(mcpSubdomain)]);
+    return rows[0] === undefined ? undefined : claimRowToRecord(rows[0]);
+}
+export async function getMcpSubdomainSettingRow(pool, org) {
+    const { rows } = await pool.query(`SELECT claims.subdomain, claims.org_slug, claims.claimed_at,
+       (SELECT max(changed_at)
+        FROM org_mcp_subdomain_mutations
+        WHERE org_slug = claims.org_slug AND outcome = 'changed') AS last_changed_at
+     FROM org_mcp_subdomain_claims AS claims
+     WHERE claims.org_slug = $1 AND claims.state = 'active'`, [validateSlug('org', org)]);
+    const row = rows[0];
+    if (row === undefined)
+        return undefined;
+    const claim = claimRowToRecord(row);
+    const changeAllowedAt = cooldownBoundary(row.last_changed_at);
+    return { ...claim, ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }) };
+}
+/** Exact-owner, globally unique, permanently retiring mutation in one PostgreSQL transaction. */
+export async function changeMcpSubdomainRow(pool, input, options = {}) {
+    const org = validateSlug('org', input.org);
+    if (input.idempotencyKey.length === 0)
+        throw new Error('idempotency key must not be empty');
+    const keyHash = `sha256:${digest(input.idempotencyKey)}`;
+    const fingerprint = `v1:${digest(input.mcpSubdomain)}`;
+    const now = (options.now ?? (() => new Date()))();
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        const { rowCount: orgCount } = await client.query('SELECT slug FROM orgs WHERE slug = $1 FOR UPDATE', [org]);
+        if (orgCount !== 1)
+            throw new McpSubdomainOwnerRequiredError();
+        const { rows: memberRows } = await client.query(`SELECT role FROM org_members
+       WHERE org_slug = $1 AND subject = $2
+       FOR UPDATE`, [org, input.actor.subject]);
+        if (memberRows[0]?.role !== 'owner')
+            throw new McpSubdomainOwnerRequiredError();
+        const { rows: replayRows } = await client.query(`SELECT request_fingerprint, outcome, previous_subdomain, current_subdomain,
+              recorded_at, changed_at
+       FROM org_mcp_subdomain_mutations
+       WHERE org_slug = $1 AND idempotency_key_hash = $2
+       FOR UPDATE`, [org, keyHash]);
+        const replay = replayRows[0];
+        if (replay !== undefined) {
+            if (replay.request_fingerprint !== fingerprint) {
+                throw new McpSubdomainIdempotencyConflictError();
+            }
+            const result = await replayResult(client, org, replay);
+            await client.query('COMMIT');
+            return result;
+        }
+        const mcpSubdomain = validateMcpSubdomain(input.mcpSubdomain);
+        const { rows: claimRows } = await client.query(`SELECT subdomain, org_slug, claimed_at
+       FROM org_mcp_subdomain_claims
+       WHERE org_slug = $1 AND state = 'active'
+       FOR UPDATE`, [org]);
+        const current = claimRows[0];
+        if (current === undefined) {
+            throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
+        }
+        const lastChangedAt = await latestChangedAt(client, org);
+        const changeAllowedAt = cooldownBoundary(lastChangedAt);
+        if (mcpSubdomain === current.subdomain) {
+            await client.query(`INSERT INTO org_mcp_subdomain_mutations
+           (org_slug, idempotency_key_hash, request_fingerprint, outcome,
+            previous_subdomain, current_subdomain, actor_principal_id, recorded_at, changed_at)
+         VALUES ($1, $2, $3, 'noop', $4, $4, $5, $6, NULL)`, [org, keyHash, fingerprint, current.subdomain, input.actor.subject, now]);
+            const result = {
+                orgSlug: org,
+                previousMcpSubdomain: current.subdomain,
+                mcpSubdomain,
+                changed: false,
+                replayed: false,
+                ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
+                auditCommitted: false,
+            };
+            await client.query('COMMIT');
+            return result;
+        }
+        if (changeAllowedAt !== undefined && now.getTime() < Date.parse(changeAllowedAt)) {
+            throw new McpSubdomainCooldownError(changeAllowedAt);
+        }
+        await client.query(`UPDATE org_mcp_subdomain_claims
+       SET state = 'retired', retired_at = $2, retired_by_principal = $3
+       WHERE org_slug = $1 AND state = 'active'`, [org, now, input.actor.subject]);
+        await client.query(`INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+       VALUES ($1, $2, 'active', $3)`, [mcpSubdomain, org, now]);
+        await client.query(`INSERT INTO org_mcp_subdomain_mutations
+         (org_slug, idempotency_key_hash, request_fingerprint, outcome,
+          previous_subdomain, current_subdomain, actor_principal_id, recorded_at, changed_at)
+       VALUES ($1, $2, $3, 'changed', $4, $5, $6, $7, $7)`, [org, keyHash, fingerprint, current.subdomain, mcpSubdomain, input.actor.subject, now]);
+        const changedAt = now.toISOString();
+        const result = {
+            orgSlug: org,
+            previousMcpSubdomain: current.subdomain,
+            mcpSubdomain,
+            changed: true,
+            replayed: false,
+            changedAt,
+            changeAllowedAt: new Date(now.getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString(),
+            auditCommitted: options.recordAudit !== undefined,
+        };
+        if (options.recordAudit !== undefined)
+            await options.recordAudit(client, result, input);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        await client.query('ROLLBACK').catch(() => undefined);
+        if (isUniqueViolation(error))
+            throw new McpSubdomainUnavailableError();
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+async function replayResult(client, org, row) {
+    const changed = row.outcome === 'changed';
+    const changedAt = row.changed_at === null ? undefined : new Date(row.changed_at).toISOString();
+    const priorChangedAt = changed
+        ? row.changed_at
+        : await latestChangedAt(client, org, new Date(row.recorded_at));
+    const changeAllowedAt = cooldownBoundary(priorChangedAt);
+    return {
+        orgSlug: org,
+        previousMcpSubdomain: row.previous_subdomain,
+        mcpSubdomain: row.current_subdomain,
+        changed,
+        replayed: true,
+        ...(changedAt === undefined ? {} : { changedAt }),
+        ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
+        auditCommitted: changed,
+    };
+}
+async function latestChangedAt(queryable, org, atOrBefore) {
+    const { rows } = await queryable.query(`SELECT max(changed_at) AS changed_at
+     FROM org_mcp_subdomain_mutations
+     WHERE org_slug = $1 AND outcome = 'changed'
+       AND ($2::timestamptz IS NULL OR changed_at <= $2)`, [org, atOrBefore ?? null]);
+    return rows[0]?.changed_at ?? null;
+}
+function cooldownBoundary(value) {
+    return value === null
+        ? undefined
+        : new Date(new Date(value).getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function isUniqueViolation(error) {
+    return typeof error === 'object' && error !== null && 'code' in error && error.code === '23505';
+}
+function claimRowToRecord(row) {
+    return {
+        mcpSubdomain: row.subdomain,
+        orgSlug: row.org_slug,
+        claimedAt: new Date(row.claimed_at).toISOString(),
+    };
+}
+//# sourceMappingURL=postgres-mcp-subdomain-claims.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-claims.js","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAoC3D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;8CAE0C,EAC1C,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAU,EACV,YAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;+CAE2C,EAC3C,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CACrC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;4DAKwD,EACxD,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,KAA8B,EAC9B,UAA+C,EAAE;IAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/C,kDAAkD,EAClD,CAAC,GAAG,CAAC,CACN,CAAC;QACF,IAAI,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC/D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7C;;kBAEY,EACZ,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAC3B,CAAC;QACF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAEhF,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7C;;;;kBAIY,EACZ,CAAC,GAAG,EAAE,OAAO,CAAC,CACf,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,EAAE,CAAC;gBAC/C,MAAM,IAAI,oCAAoC,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5C;;;kBAGY,EACZ,CAAC,GAAG,CAAC,CACN,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,YAAY,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,KAAK,CAChB;;;2DAGmD,EACnD,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CACzE,CAAC;YACF,MAAM,MAAM,GAA+B;gBACzC,OAAO,EAAE,GAAG;gBACZ,oBAAoB,EAAE,OAAO,CAAC,SAAS;gBACvC,YAAY;gBACZ,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;gBAC7D,cAAc,EAAE,KAAK;aACtB,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,yBAAyB,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,CAChB;;gDAE0C,EAC1C,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;qCAC+B,EAC/B,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CACzB,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;;;0DAGoD,EACpD,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CACvF,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAA8B;YACxC,OAAO,EAAE,GAAG;YACZ,oBAAoB,EAAE,OAAO,CAAC,SAAS;YACvC,YAAY;YACZ,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,SAAS;YACT,eAAe,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE;YAClF,cAAc,EAAE,OAAO,CAAC,WAAW,KAAK,SAAS;SAClD,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,4BAA4B,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAiC,EACjC,GAAW,EACX,GAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACzD,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,oBAAoB,EAAE,GAAG,CAAC,kBAAkB;QAC5C,YAAY,EAAE,GAAG,CAAC,iBAAiB;QACnC,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,cAAc,EAAE,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAoC,EACpC,GAAW,EACX,UAAiB;IAEjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CACpC;;;yDAGqD,EACrD,CAAC,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC,CAC1B,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA2B;IACnD,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAClG,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA+B;IACvD,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,SAAS;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Install and reconcile the append-only MCP-subdomain claim ledger in one organization-locked migration. */
+export declare function ensureMcpSubdomainClaimSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-mcp-subdomain-schema.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-schema.d.ts","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,6GAA6G;AAC7G,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAiI7E"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js

@@ -0,0 +1,134 @@
+/** Install and reconcile the append-only MCP-subdomain claim ledger in one organization-locked migration. */
+export async function ensureMcpSubdomainClaimSchema(pool) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        await client.query('LOCK TABLE orgs IN SHARE ROW EXCLUSIVE MODE');
+        await client.query(`
+      CREATE TABLE IF NOT EXISTS org_mcp_subdomain_claims (
+        subdomain            text PRIMARY KEY,
+        org_slug             text NOT NULL REFERENCES orgs(slug) ON DELETE RESTRICT,
+        state                text NOT NULL CHECK (state IN ('active', 'retired')),
+        claimed_at           timestamptz NOT NULL DEFAULT now(),
+        retired_at           timestamptz,
+        retired_by_principal text,
+        CONSTRAINT org_mcp_subdomain_claim_label_valid CHECK (
+          subdomain ~ '^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$'
+          AND subdomain NOT IN ('deploy', 'healthz', 'readyz', 'v1', 'o', 'mcp', 'local')
+        ),
+        CONSTRAINT org_mcp_subdomain_claim_retirement_valid CHECK (
+          (state = 'active' AND retired_at IS NULL AND retired_by_principal IS NULL)
+          OR
+          (state = 'retired' AND retired_at IS NOT NULL AND retired_by_principal IS NOT NULL)
+        )
+      )
+    `);
+        await client.query(`
+      CREATE UNIQUE INDEX IF NOT EXISTS org_mcp_subdomain_claims_one_active_org_idx
+      ON org_mcp_subdomain_claims (org_slug)
+      WHERE state = 'active'
+    `);
+        await client.query(`
+      CREATE TABLE IF NOT EXISTS org_mcp_subdomain_mutations (
+        org_slug              text NOT NULL REFERENCES orgs(slug) ON DELETE RESTRICT,
+        idempotency_key_hash  text NOT NULL,
+        request_fingerprint   text NOT NULL,
+        outcome               text NOT NULL CHECK (outcome IN ('changed', 'noop')),
+        previous_subdomain    text NOT NULL,
+        current_subdomain     text NOT NULL,
+        actor_principal_id    text NOT NULL,
+        recorded_at           timestamptz NOT NULL,
+        changed_at            timestamptz,
+        PRIMARY KEY (org_slug, idempotency_key_hash),
+        CONSTRAINT org_mcp_subdomain_mutation_change_valid CHECK (
+          (outcome = 'changed' AND changed_at IS NOT NULL)
+          OR (outcome = 'noop' AND changed_at IS NULL)
+        )
+      )
+    `);
+        await client.query(`
+      CREATE OR REPLACE FUNCTION guard_org_mcp_subdomain_claim_mutation()
+      RETURNS trigger
+      LANGUAGE plpgsql
+      AS $function$
+      BEGIN
+        IF TG_OP = 'DELETE' THEN
+          RAISE EXCEPTION 'MCP subdomain claims are append-only' USING ERRCODE = '23514';
+        END IF;
+        IF OLD.subdomain IS DISTINCT FROM NEW.subdomain
+          OR OLD.org_slug IS DISTINCT FROM NEW.org_slug
+          OR OLD.claimed_at IS DISTINCT FROM NEW.claimed_at
+          OR OLD.state <> 'active'
+          OR NEW.state <> 'retired'
+          OR OLD.retired_at IS NOT NULL
+          OR OLD.retired_by_principal IS NOT NULL
+          OR NEW.retired_at IS NULL
+          OR NEW.retired_by_principal IS NULL THEN
+          RAISE EXCEPTION 'invalid MCP subdomain claim transition' USING ERRCODE = '23514';
+        END IF;
+        RETURN NEW;
+      END
+      $function$
+    `);
+        await client.query(`
+      DROP TRIGGER IF EXISTS guard_org_mcp_subdomain_claim_mutation
+      ON org_mcp_subdomain_claims
+    `);
+        await client.query(`
+      CREATE TRIGGER guard_org_mcp_subdomain_claim_mutation
+      BEFORE UPDATE OR DELETE ON org_mcp_subdomain_claims
+      FOR EACH ROW EXECUTE FUNCTION guard_org_mcp_subdomain_claim_mutation()
+    `);
+        await client.query(`
+      INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+      SELECT slug, slug, 'active', created_at
+      FROM orgs
+      WHERE slug <> 'local'
+      ON CONFLICT (subdomain) DO NOTHING
+    `);
+        const { rows } = await client.query(`
+      SELECT count(*)::text AS invalid_count
+      FROM (
+        SELECT orgs.slug
+        FROM orgs
+        LEFT JOIN org_mcp_subdomain_claims AS claims
+          ON claims.org_slug = orgs.slug AND claims.state = 'active'
+        WHERE orgs.slug <> 'local'
+        GROUP BY orgs.slug
+        HAVING count(claims.subdomain) <> 1
+      ) AS invalid_orgs
+    `);
+        if (rows[0]?.invalid_count !== '0') {
+            throw new Error('MCP subdomain backfill did not establish one active claim per hosted org');
+        }
+        await client.query(`
+      CREATE OR REPLACE FUNCTION claim_default_org_mcp_subdomain()
+      RETURNS trigger
+      LANGUAGE plpgsql
+      AS $function$
+      BEGIN
+        IF NEW.slug <> 'local' THEN
+          INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+          VALUES (NEW.slug, NEW.slug, 'active', NEW.created_at);
+        END IF;
+        RETURN NEW;
+      END
+      $function$
+    `);
+        await client.query('DROP TRIGGER IF EXISTS claim_default_org_mcp_subdomain ON orgs');
+        await client.query(`
+      CREATE TRIGGER claim_default_org_mcp_subdomain
+      AFTER INSERT ON orgs
+      FOR EACH ROW EXECUTE FUNCTION claim_default_org_mcp_subdomain()
+    `);
+        await client.query('COMMIT');
+    }
+    catch (error) {
+        await client.query('ROLLBACK').catch(() => undefined);
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+//# sourceMappingURL=postgres-mcp-subdomain-schema.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-schema.js","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-schema.ts"],"names":[],"mappings":"AAEA,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAU;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;KAkBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;KAiBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;KAuBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;KAGlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;KAMlB,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAA4B;;;;;;;;;;;KAW9D,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;KAalB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACrF,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/{service/dist/store/postgres-control-plane.d.ts → control-plane/dist/postgres-organization-store.d.ts}

@@ -1,5 +1,6 @@
 import type { Pool } from 'pg';
-import type { CreateOrgWithOwnerInput, OrgDomainRecord, OrgInvitationRecord, OrgMemberRecord, OrgOpenAIAppsChallengeRecord, OrgRecord, OrgRole, SignupAllowlistKind, SignupAllowlistRecord, WelcomeEmailRecord } from '../store.js';
+import type { CreateOrgWithOwnerInput, OrgDomainRecord, OrgInvitationRecord, OrgMemberRecord, OrgOpenAIAppsChallengeRecord, OrgRecord, OrgRole, SignupAllowlistKind, SignupAllowlistRecord, WelcomeEmailRecord } from './contracts.js';
+import type { EnsureDefaultOrgBillingTx } from './postgres-contracts.js';
 export declare function createOrgRow(pool: Pool, input: {
     readonly slug: string;
     readonly displayName?: string;
@@ -17,7 +18,7 @@ export declare function markWelcomeEmailFailedRow(pool: Pool, input: {
     readonly nextAttemptAt: Date;
 }): Promise<void>;
 export declare function getWelcomeEmailRow(pool: Pool, subject: string): Promise<WelcomeEmailRecord | undefined>;
-export declare function createOrgWithOwnerRow(pool: Pool, input: CreateOrgWithOwnerInput, now: () => Date): Promise<OrgRecord>;
+export declare function createOrgWithOwnerRow(pool: Pool, input: CreateOrgWithOwnerInput, now: () => Date, ensureDefaultOrgBilling: EnsureDefaultOrgBillingTx): Promise<OrgRecord>;
 export declare function getOrgRow(pool: Pool, slug: string): Promise<OrgRecord | undefined>;
 export declare function updateOrgRow(pool: Pool, input: {
     readonly slug: string;
@@ -106,4 +107,4 @@ export declare function revokeOrgInvitationRows(pool: Pool, input: {
     readonly org: string;
     readonly email: string;
 }): Promise<number>;
-//# sourceMappingURL=postgres-control-plane.d.ts.map
+//# sourceMappingURL=postgres-organization-store.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-organization-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-organization-store.d.ts","sourceRoot":"","sources":["../src/postgres-organization-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EACV,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,4BAA4B,EAC5B,SAAS,EACT,OAAO,EACP,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAWzE,wBAAsB,YAAY,CAChC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9D,OAAO,CAAC,SAAS,CAAC,CAWpB;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAoBzC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GACtE,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAA;CAAE,GAChE,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAMzC;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,uBAAuB,EAC9B,GAAG,EAAE,MAAM,IAAI,EACf,uBAAuB,EAAE,yBAAyB,GACjD,OAAO,CAAC,SAAS,CAAC,CAiDpB;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAKxF;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAMhC;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAG3E;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAU/B;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,GACA,OAAO,CAAC,eAAe,CAAC,CAc1B;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAChF,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAMtC;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAMtC;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAMrC;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACpF,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACnF,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAUtC;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAMrC;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,GACA,OAAO,CAAC,4BAA4B,CAAC,CA+BvC;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAMnD;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAM9F;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,wBAAsB,cAAc,CAClC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC,GACA,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAK3C;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE;IACL,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B,GACA,OAAO,CAAC,mBAAmB,CAAC,CAoB9B;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAO1C;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,IAAI,EACf,KAAK,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAS1C;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAMzC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/node_modules/@noodle-borg/{service/dist/store/postgres-control-plane.js → control-plane/dist/postgres-organization-store.js}

@@ -1,6 +1,5 @@
 import { randomUUID } from 'node:crypto';
-import { ensureDefaultOrgBillingTx } from '../billing/postgres.js';
-import { validateDomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from '../store.js';
+import { validateDomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from './validation.js';
 export async function createOrgRow(pool, input) {
     const slug = validateSlug('org', input.slug);
     const { rows } = await pool.query(`INSERT INTO orgs (slug, display_name)
@@ -42,7 +41,7 @@ export async function getWelcomeEmailRow(pool, subject) {
     const { rows } = await pool.query('SELECT * FROM welcome_email_outbox WHERE subject = $1', [subject]);
     return rows[0] ? welcomeEmailRowToRecord(rows[0]) : undefined;
 }
-export async function createOrgWithOwnerRow(pool, input, now) {
+export async function createOrgWithOwnerRow(pool, input, now, ensureDefaultOrgBilling) {
     const slug = validateUserOwnedOrgSlug(input.slug);
     const client = await pool.connect();
     try {
@@ -64,7 +63,7 @@ export async function createOrgWithOwnerRow(pool, input, now) {
            email = EXCLUDED.email,
            role = 'owner'`, [slug, input.owner.subject, input.owner.email.toLowerCase()]);
             const billingCreatedAt = now();
-            await ensureDefaultOrgBillingTx(client, {
+            await ensureDefaultOrgBilling(client, {
                 org: slug,
                 owner: input.owner,
                 reason: 'organization-created',
@@ -351,4 +350,4 @@ function welcomeEmailRowToRecord(row) {
         ...(row.last_error_code === 'delivery_failed' ? { lastErrorCode: 'delivery_failed' } : {}),
     };
 }
-//# sourceMappingURL=postgres-control-plane.js.map
+//# sourceMappingURL=postgres-organization-store.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-organization-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-organization-store.js","sourceRoot":"","sources":["../src/postgres-organization-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAezC,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,KAA+D;IAE/D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;iBAIa,EACb,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAClC,CAAC;IACF,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAU,EACV,KAAuD;IAEvD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;;;;;;;;wBAcoB,EACpB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAC3D,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,KAAuE;IAEvE,MAAM,IAAI,CAAC,KAAK,CACd;;wBAEoB,EACpB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAU,EACV,KAAiE;IAEjE,MAAM,IAAI,CAAC,KAAK,CACd;;wBAEoB,EACpB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,OAAe;IAEf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,uDAAuD,EACvD,CAAC,OAAO,CAAC,CACV,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,KAA8B,EAC9B,GAAe,EACf,uBAAkD;IAElD,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,sGAAsG;QACtG,0FAA0F;QAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;mBAIa,EACb,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAClC,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5C;;mBAEa,EACb,CAAC,IAAI,CAAC,CACP,CAAC;QACF,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,CAAC,KAAK,CAChB;;;;0BAIkB,EAClB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAC7D,CAAC;YACF,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC;YAC/B,MAAM,uBAAuB,CAC3B,MAAM,EACN;gBACE,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,sBAAsB;aAC/B,EACD,gBAAgB,CACjB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAU,EAAE,IAAY;IACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAS,oCAAoC,EAAE;QAC9E,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAU,EACV,KAA8D;IAE9D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,+DAA+D,EAC/D,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CACrD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAU;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAS,kCAAkC,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,OAAe;IAEf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;wBAIoB,EACpB,CAAC,OAAO,CAAC,CACV,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,KAKC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;iBAKa,EACb,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CACtD,CAAC;IACF,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAiB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,KAAyD;IAEzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,8DAA8D,EAC9D,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAChD,CAAC;IACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,KAAiF;IAEjF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mFAAmF,EACnF,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,KAAyD;IAEzD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,gEAAgE,EAChE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAChD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,8DAA8D,EAC9D,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAU,EACV,KAAyD;IAEzD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,+EAA+E,EAC/E,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAChD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,KAAqF;IAErF,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;iBAIa,EACb,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,UAAU,UAAU,EAAE,EAAE,CAAC,CAC3D,CAAC;IACF,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAiB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAU,EACV,GAAe,EACf,KAAoF;IAEpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;iBAIa,EACb,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CACtF,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAU,EACV,KAAwD;IAExD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,6DAA6D,EAC7D,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAC/D,CAAC;IACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,+DAA+D,EAC/D,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAU,EACV,KAKC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;;;;;;;;;;;;;;iBAkBa,EACb;QACE,GAAG;QACH,2BAA2B,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,KAAK,CAAC,gBAAgB,IAAI,IAAI;QAC9B,KAAK,CAAC,cAAc,IAAI,IAAI;KAC7B,CACF,CAAC;IACF,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAA8B,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,8DAA8D,EAC9D,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAAU,EAAE,GAAW;IAC1E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,4DAA4D,EAC5D,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,KAAuD;IAEvD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;OAGG,EACH,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAU,EACV,KAIC;IAED,MAAM,IAAI,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjG,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;iBAGa,EACb,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAC9C,CAAC;IACF,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAuB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU;IAEV,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,qDAAqD,CACtD,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,KAA2D;IAE3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;OAIG,EACH,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAU,EACV,GAAe,EACf,KAQC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;iBAGa,EACb;QACE,KAAK,CAAC,SAAS;QACf,GAAG;QACH,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QACzB,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,GAAG,EAAE;QACL,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,cAAc,IAAI,IAAI;KAC7B,CACF,CAAC;IACF,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAqB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAU,EACV,GAAe,EACf,KAAqC;IAErC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;uEACmE,EACnE,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACzB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,GAAe,EACf,KAAqC;IAErC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;iBAGa,EACb,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CACzB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mFAAmF,EACnF,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAU,EACV,KAAuD;IAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC,wFAAwF,EACxF,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAC5D,CAAC;IACF,OAAO,QAAQ,IAAI,CAAC,CAAC;AACvB,CAAC;AAiED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAiB;IAC1C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAiB;IAC1C,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,IAAI;YAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,GAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAuB;IAChD,OAAO;QACL,IAAI,EAAE,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC;QAC3C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAqB;IAClD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;QAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAoB;IACnD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,aAAa,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE;QAC1D,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI;YAC/B,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,iBAAiB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Idempotent organization, membership, signup, and onboarding persistence schema. */
+export declare function ensureOrganizationSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-schema.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../src/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,sFAAsF;AACtF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFxE"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.js

@@ -0,0 +1,90 @@
+import { ensureMcpSubdomainClaimSchema } from './postgres-mcp-subdomain-schema.js';
+/** Idempotent organization, membership, signup, and onboarding persistence schema. */
+export async function ensureOrganizationSchema(pool) {
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS orgs (
+        slug        text PRIMARY KEY,
+        display_name text,
+        created_at  timestamptz NOT NULL DEFAULT now()
+      )
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS org_members (
+        org_slug    text NOT NULL REFERENCES orgs(slug) ON DELETE CASCADE,
+        subject     text NOT NULL,
+        email       text NOT NULL,
+        role        text NOT NULL,
+        created_at  timestamptz NOT NULL DEFAULT now(),
+        PRIMARY KEY (org_slug, subject)
+      )
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS welcome_email_outbox (
+        subject             text PRIMARY KEY,
+        org_slug            text NOT NULL REFERENCES orgs(slug) ON DELETE CASCADE,
+        email               text NOT NULL,
+        first_name          text,
+        created_at          timestamptz NOT NULL DEFAULT now(),
+        attempt_count       integer NOT NULL DEFAULT 0,
+        next_attempt_at     timestamptz NOT NULL DEFAULT now(),
+        lease_expires_at    timestamptz,
+        sent_at             timestamptz,
+        provider_message_id text,
+        last_error_code     text
+      )
+    `);
+    await pool.query(`ALTER TABLE welcome_email_outbox ADD COLUMN IF NOT EXISTS first_name text`);
+    await pool.query(`
+      CREATE INDEX IF NOT EXISTS welcome_email_outbox_pending_idx
+      ON welcome_email_outbox (next_attempt_at, created_at)
+      WHERE sent_at IS NULL
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS org_domains (
+        org_slug        text NOT NULL REFERENCES orgs(slug) ON DELETE CASCADE,
+        domain          text NOT NULL,
+        challenge       text NOT NULL,
+        created_at      timestamptz NOT NULL DEFAULT now(),
+        verified_at     timestamptz,
+        last_checked_at timestamptz,
+        PRIMARY KEY (org_slug, domain)
+      )
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS org_openai_apps_challenges (
+        org_slug            text PRIMARY KEY REFERENCES orgs(slug) ON DELETE CASCADE,
+        challenge           text NOT NULL,
+        updated_at          timestamptz NOT NULL DEFAULT now(),
+        updated_by_subject  text,
+        updated_by_email    text
+      )
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS signup_allowlist (
+        kind               text NOT NULL CHECK (kind IN ('subject', 'domain')),
+        value              text NOT NULL,
+        created_at         timestamptz NOT NULL DEFAULT now(),
+        created_by_subject text,
+        PRIMARY KEY (kind, value)
+      )
+    `);
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS org_invitations (
+        token_hash        text PRIMARY KEY,
+        org_slug          text NOT NULL REFERENCES orgs(slug) ON DELETE CASCADE,
+        email             text NOT NULL,
+        role              text NOT NULL,
+        created_at        timestamptz NOT NULL DEFAULT now(),
+        expires_at        timestamptz NOT NULL,
+        created_by_subject text NOT NULL,
+        created_by_email  text,
+        accepted_at       timestamptz
+      )
+    `);
+    await pool.query(`
+      CREATE INDEX IF NOT EXISTS org_invitations_org_email_idx
+      ON org_invitations (org_slug, email, expires_at)
+    `);
+    await ensureMcpSubdomainClaimSchema(pool);
+}
+//# sourceMappingURL=postgres-schema.js.map