@noodleseed/one 0.110.0 → 0.111.0

package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.js

@@ -0,0 +1,181 @@
+import { createHash } from 'node:crypto';
+import { isSystemOwnedOrgSlug, validateMcpSubdomain, validateSlug } from './validation.js';
+const MCP_SUBDOMAIN_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
+export class McpSubdomainOwnerRequiredError extends Error {
+    constructor() {
+        super('organization owner required');
+        this.name = 'McpSubdomainOwnerRequiredError';
+    }
+}
+export class McpSubdomainUnavailableError extends Error {
+    constructor() {
+        super('MCP subdomain is unavailable');
+        this.name = 'McpSubdomainUnavailableError';
+    }
+}
+export class McpSubdomainIdempotencyConflictError extends Error {
+    constructor() {
+        super('idempotency key was already used for another MCP subdomain request');
+        this.name = 'McpSubdomainIdempotencyConflictError';
+    }
+}
+export class McpSubdomainCooldownError extends Error {
+    changeAllowedAt;
+    constructor(changeAllowedAt) {
+        super('MCP subdomain change is in cooldown');
+        this.name = 'McpSubdomainCooldownError';
+        this.changeAllowedAt = changeAllowedAt;
+    }
+}
+/** In-memory parity for active claim reads and organization-creation defaults. */
+export class InMemoryMcpSubdomainClaimStore {
+    #activeByOrg = new Map();
+    #activeBySubdomain = new Map();
+    #claimedSubdomains = new Set();
+    #lastChangedAtByOrg = new Map();
+    #mutations = new Map();
+    #now;
+    #mutationTail = Promise.resolve();
+    constructor(now = () => new Date()) {
+        this.#now = now;
+    }
+    ensureDefaultMcpSubdomain(org) {
+        const orgSlug = validateSlug('org', org);
+        if (isSystemOwnedOrgSlug(orgSlug))
+            return undefined;
+        const existing = this.#activeByOrg.get(orgSlug);
+        if (existing !== undefined)
+            return existing;
+        const mcpSubdomain = validateMcpSubdomain(orgSlug);
+        if (this.#claimedSubdomains.has(mcpSubdomain)) {
+            throw new McpSubdomainUnavailableError();
+        }
+        const record = {
+            mcpSubdomain,
+            orgSlug,
+            claimedAt: this.#now().toISOString(),
+        };
+        this.#activeByOrg.set(orgSlug, record);
+        this.#activeBySubdomain.set(mcpSubdomain, record);
+        this.#claimedSubdomains.add(mcpSubdomain);
+        return record;
+    }
+    getActiveMcpSubdomain(org) {
+        return Promise.resolve(this.#activeByOrg.get(validateSlug('org', org)));
+    }
+    resolveActiveMcpSubdomain(mcpSubdomain) {
+        return Promise.resolve(this.#activeBySubdomain.get(validateMcpSubdomain(mcpSubdomain)));
+    }
+    async getMcpSubdomainSetting(org) {
+        const claim = this.#activeByOrg.get(validateSlug('org', org));
+        if (claim === undefined)
+            return undefined;
+        const changeAllowedAt = this.#changeAllowedAt(claim.orgSlug);
+        return { ...claim, ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }) };
+    }
+    changeMcpSubdomain(input, isExactOwner) {
+        return this.#serialize(async () => {
+            const org = validateSlug('org', input.org);
+            if (!(await isExactOwner()))
+                throw new McpSubdomainOwnerRequiredError();
+            if (input.idempotencyKey.length === 0) {
+                throw new Error('idempotency key must not be empty');
+            }
+            const keyHash = digest(input.idempotencyKey);
+            const fingerprint = `v1:${digest(input.mcpSubdomain)}`;
+            const recordKey = `${org}\u0000${keyHash}`;
+            const replay = this.#mutations.get(recordKey);
+            if (replay !== undefined) {
+                if (replay.fingerprint !== fingerprint) {
+                    throw new McpSubdomainIdempotencyConflictError();
+                }
+                return { ...replay.result, replayed: true };
+            }
+            const mcpSubdomain = validateMcpSubdomain(input.mcpSubdomain);
+            const current = this.#activeByOrg.get(org);
+            if (current === undefined) {
+                throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
+            }
+            const changeAllowedAt = this.#changeAllowedAt(org);
+            if (mcpSubdomain === current.mcpSubdomain) {
+                const result = {
+                    orgSlug: org,
+                    previousMcpSubdomain: current.mcpSubdomain,
+                    mcpSubdomain,
+                    changed: false,
+                    replayed: false,
+                    ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
+                    auditCommitted: false,
+                };
+                this.#mutations.set(recordKey, { fingerprint, result });
+                return result;
+            }
+            const now = this.#now();
+            if (changeAllowedAt !== undefined && now.getTime() < Date.parse(changeAllowedAt)) {
+                throw new McpSubdomainCooldownError(changeAllowedAt);
+            }
+            if (this.#claimedSubdomains.has(mcpSubdomain)) {
+                throw new McpSubdomainUnavailableError();
+            }
+            const changedAt = now.toISOString();
+            const nextChangeAllowedAt = new Date(now.getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
+            const next = {
+                orgSlug: org,
+                mcpSubdomain,
+                claimedAt: changedAt,
+            };
+            this.#activeBySubdomain.delete(current.mcpSubdomain);
+            this.#activeByOrg.set(org, next);
+            this.#activeBySubdomain.set(mcpSubdomain, next);
+            this.#claimedSubdomains.add(mcpSubdomain);
+            this.#lastChangedAtByOrg.set(org, changedAt);
+            const result = {
+                orgSlug: org,
+                previousMcpSubdomain: current.mcpSubdomain,
+                mcpSubdomain,
+                changed: true,
+                replayed: false,
+                changedAt,
+                changeAllowedAt: nextChangeAllowedAt,
+                auditCommitted: false,
+            };
+            this.#mutations.set(recordKey, { fingerprint, result });
+            return result;
+        });
+    }
+    #changeAllowedAt(org) {
+        const changedAt = this.#lastChangedAtByOrg.get(org);
+        return changedAt === undefined
+            ? undefined
+            : new Date(Date.parse(changedAt) + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
+    }
+    #serialize(operation) {
+        const result = this.#mutationTail.then(operation, operation);
+        this.#mutationTail = result.then(() => undefined, () => undefined);
+        return result;
+    }
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+export async function resolveMcpSubdomainTenant(store, ref) {
+    const claim = await store.resolveActiveMcpSubdomain(ref.mcpSubdomain);
+    if (claim === undefined)
+        return undefined;
+    return {
+        org: claim.orgSlug,
+        app: ref.app,
+        env: ref.env,
+        ...(ref.serverVersion === undefined ? {} : { serverVersion: ref.serverVersion }),
+    };
+}
+export async function mcpSubdomainEndpointOptions(store, org, publicBaseDomain) {
+    if (publicBaseDomain === undefined)
+        return {};
+    const claim = await store.getActiveMcpSubdomain(org);
+    if (claim === undefined) {
+        throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
+    }
+    return { publicBaseDomain, mcpSubdomain: claim.mcpSubdomain };
+}
+//# sourceMappingURL=mcp-subdomain-claims.js.map

package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-subdomain-claims.js","sourceRoot":"","sources":["../src/mcp-subdomain-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE3F,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD;QACE,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAC7D;QACE,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,eAAe,CAAS;IAEjC,YAAY,eAAuB;QACjC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;CACF;AAOD,kFAAkF;AAClF,MAAM,OAAO,8BAA8B;IAChC,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,kBAAkB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAChE,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;IACvD,IAAI,CAAa;IAC1B,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEjD,YAAY,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,yBAAyB,CAAC,GAAW;QACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,oBAAoB,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,MAAM,GAA4B;YACtC,YAAY;YACZ,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qBAAqB,CAAC,GAAW;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,yBAAyB,CAAC,YAAoB;QAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAW;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,kBAAkB,CAChB,KAA8B,EAC9B,YAA8C;QAE9C,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;YACxE,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,GAAG,SAAS,OAAO,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;oBACvC,MAAM,IAAI,oCAAoC,EAAE,CAAC;gBACnD,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAA+B;oBACzC,OAAO,EAAE,GAAG;oBACZ,oBAAoB,EAAE,OAAO,CAAC,YAAY;oBAC1C,YAAY;oBACZ,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,KAAK;oBACf,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;oBAC7D,cAAc,EAAE,KAAK;iBACtB,CAAC;gBACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,yBAAyB,CAAC,eAAe,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,4BAA4B,EAAE,CAAC;YAC3C,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9F,MAAM,IAAI,GAA4B;gBACpC,OAAO,EAAE,GAAG;gBACZ,YAAY;gBACZ,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAA+B;gBACzC,OAAO,EAAE,GAAG;gBACZ,oBAAoB,EAAE,OAAO,CAAC,YAAY;gBAC1C,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,SAAS;gBACT,eAAe,EAAE,mBAAmB;gBACpC,cAAc,EAAE,KAAK;aACtB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,CAAC;IAED,UAAU,CAAI,SAA2B;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAC9B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAA2D,EAC3D,GAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,OAAO;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAuD,EACvD,GAAW,EACX,gBAAoC;IAEpC,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAChE,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.d.ts

@@ -0,0 +1,13 @@
+import type { SignupAllowlistKind } from './contracts.js';
+export declare function memberKey(org: string, subject: string): string;
+export declare function domainKey(org: string, domain: string): string;
+export declare function domainFromEmail(email: string): string | undefined;
+export declare function normalizeSignupAllowlistValue(kind: SignupAllowlistKind, value: string): string;
+export declare function signupKey(kind: SignupAllowlistKind, value: string): string;
+export declare function personalOrgSlug(identity: {
+    readonly subject: string;
+    readonly email: string;
+}): string;
+/** Immutable suffix used to discover and bind legacy email-derived personal organization slugs. */
+export declare function personalOrgSlugSuffix(subject: string): string;
+//# sourceMappingURL=organization-helpers.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-helpers.d.ts","sourceRoot":"","sources":["../src/organization-helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQjE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAIT;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js

@@ -0,0 +1,41 @@
+import { createHash } from 'node:crypto';
+import { validateDomain, validateSlug } from './validation.js';
+export function memberKey(org, subject) {
+    return `${org}/${subject}`;
+}
+export function domainKey(org, domain) {
+    return `${org}/${domain}`;
+}
+export function domainFromEmail(email) {
+    const at = email.lastIndexOf('@');
+    if (at < 0)
+        return undefined;
+    try {
+        return validateDomain(email.slice(at + 1));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function normalizeSignupAllowlistValue(kind, value) {
+    return kind === 'domain' ? validateDomain(value) : value.trim().toLowerCase();
+}
+export function signupKey(kind, value) {
+    return `${kind}/${value}`;
+}
+export function personalOrgSlug(identity) {
+    const localPart = identity.email.split('@')[0] ?? 'user';
+    const base = slugPart(localPart).slice(0, 52) || 'user';
+    return validateSlug('org', `u-${base}${personalOrgSlugSuffix(identity.subject)}`);
+}
+/** Immutable suffix used to discover and bind legacy email-derived personal organization slugs. */
+export function personalOrgSlugSuffix(subject) {
+    return `-${createHash('sha256').update(subject).digest('hex').slice(0, 8)}`;
+}
+function slugPart(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+}
+//# sourceMappingURL=organization-helpers.js.map

package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-helpers.js","sourceRoot":"","sources":["../src/organization-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,OAAe;IACpD,OAAO,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IACnD,OAAO,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAyB,EAAE,KAAa;IACpF,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAyB,EAAE,KAAa;IAChE,OAAO,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAG/B;IACC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IACxD,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,qBAAqB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts

@@ -0,0 +1,18 @@
+import type { Pool, PoolClient } from 'pg';
+import type { ActiveMcpSubdomainClaim, ChangeMcpSubdomainInput, McpSubdomainMutationResult, McpSubdomainSetting } from './contracts.js';
+type ChangedMcpSubdomainResult = Omit<McpSubdomainMutationResult, 'changed' | 'changedAt'> & {
+    readonly changed: true;
+    readonly changedAt: string;
+};
+export interface PostgresMcpSubdomainMutationOptions {
+    readonly now?: () => Date;
+    /** Called after state and mutation rows are staged but before commit. */
+    readonly recordAudit?: (client: Pick<PoolClient, 'query'>, result: ChangedMcpSubdomainResult, input: ChangeMcpSubdomainInput) => Promise<void>;
+}
+export declare function getActiveMcpSubdomainRow(pool: Pool, org: string): Promise<ActiveMcpSubdomainClaim | undefined>;
+export declare function resolveActiveMcpSubdomainRow(pool: Pool, mcpSubdomain: string): Promise<ActiveMcpSubdomainClaim | undefined>;
+export declare function getMcpSubdomainSettingRow(pool: Pool, org: string): Promise<McpSubdomainSetting | undefined>;
+/** Exact-owner, globally unique, permanently retiring mutation in one PostgreSQL transaction. */
+export declare function changeMcpSubdomainRow(pool: Pool, input: ChangeMcpSubdomainInput, options?: PostgresMcpSubdomainMutationOptions): Promise<McpSubdomainMutationResult>;
+export {};
+//# sourceMappingURL=postgres-mcp-subdomain-claims.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-claims.d.ts","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-claims.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAWxB,KAAK,yBAAyB,GAAG,IAAI,CAAC,0BAA0B,EAAE,SAAS,GAAG,WAAW,CAAC,GAAG;IAC3F,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAqBF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,yBAAyB,EACjC,KAAK,EAAE,uBAAuB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAQ9C;AAED,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAQ9C;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAe1C;AAED,iGAAiG;AACjG,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE,mCAAwC,GAChD,OAAO,CAAC,0BAA0B,CAAC,CAqHrC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js

@@ -0,0 +1,173 @@
+import { createHash } from 'node:crypto';
+import { McpSubdomainCooldownError, McpSubdomainIdempotencyConflictError, McpSubdomainOwnerRequiredError, McpSubdomainUnavailableError, } from './mcp-subdomain-claims.js';
+import { validateMcpSubdomain, validateSlug } from './validation.js';
+const MCP_SUBDOMAIN_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
+export async function getActiveMcpSubdomainRow(pool, org) {
+    const { rows } = await pool.query(`SELECT subdomain, org_slug, claimed_at
+     FROM org_mcp_subdomain_claims
+     WHERE org_slug = $1 AND state = 'active'`, [validateSlug('org', org)]);
+    return rows[0] === undefined ? undefined : claimRowToRecord(rows[0]);
+}
+export async function resolveActiveMcpSubdomainRow(pool, mcpSubdomain) {
+    const { rows } = await pool.query(`SELECT subdomain, org_slug, claimed_at
+     FROM org_mcp_subdomain_claims
+     WHERE subdomain = $1 AND state = 'active'`, [validateMcpSubdomain(mcpSubdomain)]);
+    return rows[0] === undefined ? undefined : claimRowToRecord(rows[0]);
+}
+export async function getMcpSubdomainSettingRow(pool, org) {
+    const { rows } = await pool.query(`SELECT claims.subdomain, claims.org_slug, claims.claimed_at,
+       (SELECT max(changed_at)
+        FROM org_mcp_subdomain_mutations
+        WHERE org_slug = claims.org_slug AND outcome = 'changed') AS last_changed_at
+     FROM org_mcp_subdomain_claims AS claims
+     WHERE claims.org_slug = $1 AND claims.state = 'active'`, [validateSlug('org', org)]);
+    const row = rows[0];
+    if (row === undefined)
+        return undefined;
+    const claim = claimRowToRecord(row);
+    const changeAllowedAt = cooldownBoundary(row.last_changed_at);
+    return { ...claim, ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }) };
+}
+/** Exact-owner, globally unique, permanently retiring mutation in one PostgreSQL transaction. */
+export async function changeMcpSubdomainRow(pool, input, options = {}) {
+    const org = validateSlug('org', input.org);
+    if (input.idempotencyKey.length === 0)
+        throw new Error('idempotency key must not be empty');
+    const keyHash = `sha256:${digest(input.idempotencyKey)}`;
+    const fingerprint = `v1:${digest(input.mcpSubdomain)}`;
+    const now = (options.now ?? (() => new Date()))();
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        const { rowCount: orgCount } = await client.query('SELECT slug FROM orgs WHERE slug = $1 FOR UPDATE', [org]);
+        if (orgCount !== 1)
+            throw new McpSubdomainOwnerRequiredError();
+        const { rows: memberRows } = await client.query(`SELECT role FROM org_members
+       WHERE org_slug = $1 AND subject = $2
+       FOR UPDATE`, [org, input.actor.subject]);
+        if (memberRows[0]?.role !== 'owner')
+            throw new McpSubdomainOwnerRequiredError();
+        const { rows: replayRows } = await client.query(`SELECT request_fingerprint, outcome, previous_subdomain, current_subdomain,
+              recorded_at, changed_at
+       FROM org_mcp_subdomain_mutations
+       WHERE org_slug = $1 AND idempotency_key_hash = $2
+       FOR UPDATE`, [org, keyHash]);
+        const replay = replayRows[0];
+        if (replay !== undefined) {
+            if (replay.request_fingerprint !== fingerprint) {
+                throw new McpSubdomainIdempotencyConflictError();
+            }
+            const result = await replayResult(client, org, replay);
+            await client.query('COMMIT');
+            return result;
+        }
+        const mcpSubdomain = validateMcpSubdomain(input.mcpSubdomain);
+        const { rows: claimRows } = await client.query(`SELECT subdomain, org_slug, claimed_at
+       FROM org_mcp_subdomain_claims
+       WHERE org_slug = $1 AND state = 'active'
+       FOR UPDATE`, [org]);
+        const current = claimRows[0];
+        if (current === undefined) {
+            throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
+        }
+        const lastChangedAt = await latestChangedAt(client, org);
+        const changeAllowedAt = cooldownBoundary(lastChangedAt);
+        if (mcpSubdomain === current.subdomain) {
+            await client.query(`INSERT INTO org_mcp_subdomain_mutations
+           (org_slug, idempotency_key_hash, request_fingerprint, outcome,
+            previous_subdomain, current_subdomain, actor_principal_id, recorded_at, changed_at)
+         VALUES ($1, $2, $3, 'noop', $4, $4, $5, $6, NULL)`, [org, keyHash, fingerprint, current.subdomain, input.actor.subject, now]);
+            const result = {
+                orgSlug: org,
+                previousMcpSubdomain: current.subdomain,
+                mcpSubdomain,
+                changed: false,
+                replayed: false,
+                ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
+                auditCommitted: false,
+            };
+            await client.query('COMMIT');
+            return result;
+        }
+        if (changeAllowedAt !== undefined && now.getTime() < Date.parse(changeAllowedAt)) {
+            throw new McpSubdomainCooldownError(changeAllowedAt);
+        }
+        await client.query(`UPDATE org_mcp_subdomain_claims
+       SET state = 'retired', retired_at = $2, retired_by_principal = $3
+       WHERE org_slug = $1 AND state = 'active'`, [org, now, input.actor.subject]);
+        await client.query(`INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+       VALUES ($1, $2, 'active', $3)`, [mcpSubdomain, org, now]);
+        await client.query(`INSERT INTO org_mcp_subdomain_mutations
+         (org_slug, idempotency_key_hash, request_fingerprint, outcome,
+          previous_subdomain, current_subdomain, actor_principal_id, recorded_at, changed_at)
+       VALUES ($1, $2, $3, 'changed', $4, $5, $6, $7, $7)`, [org, keyHash, fingerprint, current.subdomain, mcpSubdomain, input.actor.subject, now]);
+        const changedAt = now.toISOString();
+        const result = {
+            orgSlug: org,
+            previousMcpSubdomain: current.subdomain,
+            mcpSubdomain,
+            changed: true,
+            replayed: false,
+            changedAt,
+            changeAllowedAt: new Date(now.getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString(),
+            auditCommitted: options.recordAudit !== undefined,
+        };
+        if (options.recordAudit !== undefined)
+            await options.recordAudit(client, result, input);
+        await client.query('COMMIT');
+        return result;
+    }
+    catch (error) {
+        await client.query('ROLLBACK').catch(() => undefined);
+        if (isUniqueViolation(error))
+            throw new McpSubdomainUnavailableError();
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+async function replayResult(client, org, row) {
+    const changed = row.outcome === 'changed';
+    const changedAt = row.changed_at === null ? undefined : new Date(row.changed_at).toISOString();
+    const priorChangedAt = changed
+        ? row.changed_at
+        : await latestChangedAt(client, org, new Date(row.recorded_at));
+    const changeAllowedAt = cooldownBoundary(priorChangedAt);
+    return {
+        orgSlug: org,
+        previousMcpSubdomain: row.previous_subdomain,
+        mcpSubdomain: row.current_subdomain,
+        changed,
+        replayed: true,
+        ...(changedAt === undefined ? {} : { changedAt }),
+        ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
+        auditCommitted: changed,
+    };
+}
+async function latestChangedAt(queryable, org, atOrBefore) {
+    const { rows } = await queryable.query(`SELECT max(changed_at) AS changed_at
+     FROM org_mcp_subdomain_mutations
+     WHERE org_slug = $1 AND outcome = 'changed'
+       AND ($2::timestamptz IS NULL OR changed_at <= $2)`, [org, atOrBefore ?? null]);
+    return rows[0]?.changed_at ?? null;
+}
+function cooldownBoundary(value) {
+    return value === null
+        ? undefined
+        : new Date(new Date(value).getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function isUniqueViolation(error) {
+    return typeof error === 'object' && error !== null && 'code' in error && error.code === '23505';
+}
+function claimRowToRecord(row) {
+    return {
+        mcpSubdomain: row.subdomain,
+        orgSlug: row.org_slug,
+        claimedAt: new Date(row.claimed_at).toISOString(),
+    };
+}
+//# sourceMappingURL=postgres-mcp-subdomain-claims.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-claims.js","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,8BAA8B,EAC9B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAoC3D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;8CAE0C,EAC1C,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAU,EACV,YAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;+CAE2C,EAC3C,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CACrC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAU,EACV,GAAW;IAEX,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B;;;;;4DAKwD,EACxD,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAC3B,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,eAAe,GAAG,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAU,EACV,KAA8B,EAC9B,UAA+C,EAAE;IAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,UAAU,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;IACzD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/C,kDAAkD,EAClD,CAAC,GAAG,CAAC,CACN,CAAC;QACF,IAAI,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAC/D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7C;;kBAEY,EACZ,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAC3B,CAAC;QACF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;QAEhF,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC7C;;;;kBAIY,EACZ,CAAC,GAAG,EAAE,OAAO,CAAC,CACf,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,mBAAmB,KAAK,WAAW,EAAE,CAAC;gBAC/C,MAAM,IAAI,oCAAoC,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5C;;;kBAGY,EACZ,CAAC,GAAG,CAAC,CACN,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,YAAY,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,MAAM,CAAC,KAAK,CAChB;;;2DAGmD,EACnD,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CACzE,CAAC;YACF,MAAM,MAAM,GAA+B;gBACzC,OAAO,EAAE,GAAG;gBACZ,oBAAoB,EAAE,OAAO,CAAC,SAAS;gBACvC,YAAY;gBACZ,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;gBAC7D,cAAc,EAAE,KAAK;aACtB,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,yBAAyB,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,CAAC,KAAK,CAChB;;gDAE0C,EAC1C,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAChC,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;qCAC+B,EAC/B,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,CAAC,CACzB,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;;;0DAGoD,EACpD,CAAC,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CACvF,CAAC;QACF,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAA8B;YACxC,OAAO,EAAE,GAAG;YACZ,oBAAoB,EAAE,OAAO,CAAC,SAAS;YACvC,YAAY;YACZ,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,KAAK;YACf,SAAS;YACT,eAAe,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE;YAClF,cAAc,EAAE,OAAO,CAAC,WAAW,KAAK,SAAS;SAClD,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,iBAAiB,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,4BAA4B,EAAE,CAAC;QACvE,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAiC,EACjC,GAAW,EACX,GAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/F,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACzD,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,oBAAoB,EAAE,GAAG,CAAC,kBAAkB;QAC5C,YAAY,EAAE,GAAG,CAAC,iBAAiB;QACnC,OAAO;QACP,QAAQ,EAAE,IAAI;QACd,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,cAAc,EAAE,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAoC,EACpC,GAAW,EACX,UAAiB;IAEjB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CACpC;;;yDAGqD,EACrD,CAAC,GAAG,EAAE,UAAU,IAAI,IAAI,CAAC,CAC1B,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA2B;IACnD,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAClG,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA+B;IACvD,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,SAAS;QAC3B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAClD,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Install and reconcile the append-only MCP-subdomain claim ledger in one organization-locked migration. */
+export declare function ensureMcpSubdomainClaimSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-mcp-subdomain-schema.d.ts.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-schema.d.ts","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,6GAA6G;AAC7G,wBAAsB,6BAA6B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAiI7E"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js

@@ -0,0 +1,134 @@
+/** Install and reconcile the append-only MCP-subdomain claim ledger in one organization-locked migration. */
+export async function ensureMcpSubdomainClaimSchema(pool) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        await client.query('LOCK TABLE orgs IN SHARE ROW EXCLUSIVE MODE');
+        await client.query(`
+      CREATE TABLE IF NOT EXISTS org_mcp_subdomain_claims (
+        subdomain            text PRIMARY KEY,
+        org_slug             text NOT NULL REFERENCES orgs(slug) ON DELETE RESTRICT,
+        state                text NOT NULL CHECK (state IN ('active', 'retired')),
+        claimed_at           timestamptz NOT NULL DEFAULT now(),
+        retired_at           timestamptz,
+        retired_by_principal text,
+        CONSTRAINT org_mcp_subdomain_claim_label_valid CHECK (
+          subdomain ~ '^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$'
+          AND subdomain NOT IN ('deploy', 'healthz', 'readyz', 'v1', 'o', 'mcp', 'local')
+        ),
+        CONSTRAINT org_mcp_subdomain_claim_retirement_valid CHECK (
+          (state = 'active' AND retired_at IS NULL AND retired_by_principal IS NULL)
+          OR
+          (state = 'retired' AND retired_at IS NOT NULL AND retired_by_principal IS NOT NULL)
+        )
+      )
+    `);
+        await client.query(`
+      CREATE UNIQUE INDEX IF NOT EXISTS org_mcp_subdomain_claims_one_active_org_idx
+      ON org_mcp_subdomain_claims (org_slug)
+      WHERE state = 'active'
+    `);
+        await client.query(`
+      CREATE TABLE IF NOT EXISTS org_mcp_subdomain_mutations (
+        org_slug              text NOT NULL REFERENCES orgs(slug) ON DELETE RESTRICT,
+        idempotency_key_hash  text NOT NULL,
+        request_fingerprint   text NOT NULL,
+        outcome               text NOT NULL CHECK (outcome IN ('changed', 'noop')),
+        previous_subdomain    text NOT NULL,
+        current_subdomain     text NOT NULL,
+        actor_principal_id    text NOT NULL,
+        recorded_at           timestamptz NOT NULL,
+        changed_at            timestamptz,
+        PRIMARY KEY (org_slug, idempotency_key_hash),
+        CONSTRAINT org_mcp_subdomain_mutation_change_valid CHECK (
+          (outcome = 'changed' AND changed_at IS NOT NULL)
+          OR (outcome = 'noop' AND changed_at IS NULL)
+        )
+      )
+    `);
+        await client.query(`
+      CREATE OR REPLACE FUNCTION guard_org_mcp_subdomain_claim_mutation()
+      RETURNS trigger
+      LANGUAGE plpgsql
+      AS $function$
+      BEGIN
+        IF TG_OP = 'DELETE' THEN
+          RAISE EXCEPTION 'MCP subdomain claims are append-only' USING ERRCODE = '23514';
+        END IF;
+        IF OLD.subdomain IS DISTINCT FROM NEW.subdomain
+          OR OLD.org_slug IS DISTINCT FROM NEW.org_slug
+          OR OLD.claimed_at IS DISTINCT FROM NEW.claimed_at
+          OR OLD.state <> 'active'
+          OR NEW.state <> 'retired'
+          OR OLD.retired_at IS NOT NULL
+          OR OLD.retired_by_principal IS NOT NULL
+          OR NEW.retired_at IS NULL
+          OR NEW.retired_by_principal IS NULL THEN
+          RAISE EXCEPTION 'invalid MCP subdomain claim transition' USING ERRCODE = '23514';
+        END IF;
+        RETURN NEW;
+      END
+      $function$
+    `);
+        await client.query(`
+      DROP TRIGGER IF EXISTS guard_org_mcp_subdomain_claim_mutation
+      ON org_mcp_subdomain_claims
+    `);
+        await client.query(`
+      CREATE TRIGGER guard_org_mcp_subdomain_claim_mutation
+      BEFORE UPDATE OR DELETE ON org_mcp_subdomain_claims
+      FOR EACH ROW EXECUTE FUNCTION guard_org_mcp_subdomain_claim_mutation()
+    `);
+        await client.query(`
+      INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+      SELECT slug, slug, 'active', created_at
+      FROM orgs
+      WHERE slug <> 'local'
+      ON CONFLICT (subdomain) DO NOTHING
+    `);
+        const { rows } = await client.query(`
+      SELECT count(*)::text AS invalid_count
+      FROM (
+        SELECT orgs.slug
+        FROM orgs
+        LEFT JOIN org_mcp_subdomain_claims AS claims
+          ON claims.org_slug = orgs.slug AND claims.state = 'active'
+        WHERE orgs.slug <> 'local'
+        GROUP BY orgs.slug
+        HAVING count(claims.subdomain) <> 1
+      ) AS invalid_orgs
+    `);
+        if (rows[0]?.invalid_count !== '0') {
+            throw new Error('MCP subdomain backfill did not establish one active claim per hosted org');
+        }
+        await client.query(`
+      CREATE OR REPLACE FUNCTION claim_default_org_mcp_subdomain()
+      RETURNS trigger
+      LANGUAGE plpgsql
+      AS $function$
+      BEGIN
+        IF NEW.slug <> 'local' THEN
+          INSERT INTO org_mcp_subdomain_claims (subdomain, org_slug, state, claimed_at)
+          VALUES (NEW.slug, NEW.slug, 'active', NEW.created_at);
+        END IF;
+        RETURN NEW;
+      END
+      $function$
+    `);
+        await client.query('DROP TRIGGER IF EXISTS claim_default_org_mcp_subdomain ON orgs');
+        await client.query(`
+      CREATE TRIGGER claim_default_org_mcp_subdomain
+      AFTER INSERT ON orgs
+      FOR EACH ROW EXECUTE FUNCTION claim_default_org_mcp_subdomain()
+    `);
+        await client.query('COMMIT');
+    }
+    catch (error) {
+        await client.query('ROLLBACK').catch(() => undefined);
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+//# sourceMappingURL=postgres-mcp-subdomain-schema.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-mcp-subdomain-schema.js","sourceRoot":"","sources":["../src/postgres-mcp-subdomain-schema.ts"],"names":[],"mappings":"AAEA,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAAU;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;KAkBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;KAiBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;KAuBlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;KAGlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;KAMlB,CAAC,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAA4B;;;;;;;;;;;KAW9D,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;KAalB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACrF,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../src/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,sFAAsF;AACtF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAqFxE"}
+{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../src/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,sFAAsF;AACtF,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsFxE"}

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.js

@@ -1,3 +1,4 @@
+import { ensureMcpSubdomainClaimSchema } from './postgres-mcp-subdomain-schema.js';
 /** Idempotent organization, membership, signup, and onboarding persistence schema. */
 export async function ensureOrganizationSchema(pool) {
     await pool.query(`
@@ -84,5 +85,6 @@ export async function ensureOrganizationSchema(pool) {
       CREATE INDEX IF NOT EXISTS org_invitations_org_email_idx
       ON org_invitations (org_slug, email, expires_at)
     `);
+    await ensureMcpSubdomainClaimSchema(pool);
 }
 //# sourceMappingURL=postgres-schema.js.map

package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../src/postgres-schema.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAU;IACvD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;KAMd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;KAcd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC9F,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;KAUd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../src/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAU;IACvD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;KAMd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;KASd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;KAcd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC9F,MAAM,IAAI,CAAC,KAAK,CAAC;;;;KAId,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;KAUd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;KAQd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;KAYd,CAAC,CAAC;IACL,MAAM,IAAI,CAAC,KAAK,CAAC;;;KAGd,CAAC,CAAC;IACL,MAAM,6BAA6B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}