@noodleseed/one 0.17.0 → 0.18.0

package/node_modules/@noodle-borg/service/dist/options.d.ts

@@ -10,9 +10,10 @@ import type { GitHubAppClient, GithubAppConfig } from './github/app-client.js';
 import type { PendingGithubInstallationStore } from './github/pending-installations.js';
 import type { LoadedServiceModule } from './modules/host.js';
 import type { PolicyAssignmentStore, PolicyCounterStore } from './policy.js';
+import type { AlertRuleStore } from './store/alert-rules.js';
 import type { AuditSink } from './store/audit.js';
 import type { UserAppLogStore } from './store/user-app-logs.js';
-import type { ConfigStore, ControlPlaneStore, GithubConnectionStore } from './store.js';
+import type { ConfigStore, ControlPlaneStore, GithubConnectionStore, GithubDeployRunStore } from './store.js';
 export interface ServiceOptions {
     /** Public base URL used to build returned endpoint URLs. Defaults to the request's Host header. */
     readonly publicBaseUrl?: string;
@@ -109,6 +110,19 @@ export interface ServiceOptions {
      * tiered by-plan retention is a later stage). Default 30.
      */
     readonly requestEventRetentionDays?: number;
+    /**
+     * Analytics alert-rule store (E2, ADR 0130). Backs the tenant `alerts` CRUD/test routes and the
+     * periodic evaluator. Default: in-memory in the handler; `serveService` selects Postgres when
+     * persistence is configured, else a `dataDir` JSON-file store, else in-memory (mirrors the
+     * request-event store selection).
+     */
+    readonly alertRuleStore?: AlertRuleStore;
+    /**
+     * Dev/test-only carve-out allowing `http://localhost` / `http://127.0.0.1` / `[::1]` alert
+     * webhook targets (mirrors `customerVerifierAllowInsecureLocalhost`). Production leaves this
+     * unset: webhooks are https-only and delivery is SSRF-guarded (DNS-pinned public unicast).
+     */
+    readonly alertWebhookAllowLoopback?: boolean;
     /**
      * The self-hosted authorization server issuer (OA-2) advertised in protected-resource metadata so an
      * MCP client can discover where to authenticate. When unset, the metadata omits `authorization_servers`.
@@ -143,6 +157,11 @@ export interface ServiceOptions {
      * store, else in-memory (mirrors `controlPlaneStore`/`configStore`).
      */
     readonly githubConnectionStore?: GithubConnectionStore;
+    /**
+     * GHD-2 deploy-run store (ADR 0111 §6): webhook-accepted runs, replay-safe. Same backend-selection
+     * rule as `githubConnectionStore`.
+     */
+    readonly githubDeployRunStore?: GithubDeployRunStore;
     /**
      * Non-secret Noodle Seed GitHub App identity (ADR 0111). Everything is optional — the whole GHD-1
      * connection feature is off (install-url 409s) when absent. Long-lived credentials

package/node_modules/@noodle-borg/service/dist/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExF,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,oGAAoG;IACpG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,iGAAiG;IACjG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;CAC1E"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,cAAc;IAC7B,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC,oGAAoG;IACpG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,iGAAiG;IACjG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;CAC1E"}

package/node_modules/@noodle-borg/service/dist/routes/alerts-dispatch.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Dispatch for the analytics alerting routes (E2, ADR 0130), extracted the same way as
+ * `analytics-dispatch.ts`/`github-dispatch.ts` so `service.ts` stays a thin composition root
+ * under the size gate. The three path shapes are mutually exclusive by regex (the item pattern's
+ * final `[^/]+$` can never match the `/test` suffix), so dispatch order carries no behavior.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { TlsPosture } from '@noodle-borg/transport-http';
+import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import type { AlertRuleStore } from '../store/alert-rules.js';
+import type { AuditSink } from '../store/audit.js';
+import type { ControlPlaneStore } from '../store.js';
+export interface AlertsDispatchDeps {
+    readonly gate: DeployAuthGate;
+    readonly controlPlane: ControlPlaneStore;
+    readonly alertRuleStore: AlertRuleStore;
+    readonly audit: AuditSink;
+    readonly maxBody: number;
+    readonly allowLoopbackWebhooks: boolean;
+    readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
+    readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
+    readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
+    readonly tls: TlsPosture;
+    readonly clock?: () => Date;
+}
+/** Try the alerting routes; returns true when the request was handled (or a guard ended it). */
+export declare function dispatchAlertRoutes(req: IncomingMessage, res: ServerResponse, url: URL, deps: AlertsDispatchDeps): boolean;
+//# sourceMappingURL=alerts-dispatch.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/alerts-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/alerts-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQrD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,kBAAkB,GACvB,OAAO,CA2CT"}

package/node_modules/@noodle-borg/service/dist/routes/alerts-dispatch.js

@@ -0,0 +1,50 @@
+import { handleAlertRuleDelete, handleAlertRules, handleAlertRuleTest } from './alerts.js';
+import { parseTenantAlertItemPath, parseTenantAlertsPath, parseTenantAlertTestPath, } from './paths.js';
+/** Try the alerting routes; returns true when the request was handled (or a guard ended it). */
+export function dispatchAlertRoutes(req, res, url, deps) {
+    const { applySecurityHeaders, enforceHttps, sendJson, tls } = deps;
+    const routeDeps = {
+        gate: deps.gate,
+        controlPlane: deps.controlPlane,
+        store: deps.alertRuleStore,
+        audit: deps.audit,
+        maxBody: deps.maxBody,
+        allowLoopbackWebhooks: deps.allowLoopbackWebhooks,
+        ...(deps.clock !== undefined ? { clock: deps.clock } : {}),
+    };
+    const collectionRef = parseTenantAlertsPath(url.pathname);
+    if (collectionRef !== undefined && (req.method === 'GET' || req.method === 'POST')) {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleAlertRules(req, res, collectionRef, routeDeps).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    const testRef = parseTenantAlertTestPath(url.pathname);
+    if (testRef !== undefined && req.method === 'POST') {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleAlertRuleTest(req, res, testRef.ref, testRef.id, routeDeps).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    const itemRef = parseTenantAlertItemPath(url.pathname);
+    if (itemRef !== undefined && req.method === 'DELETE') {
+        applySecurityHeaders(res, tls);
+        if (enforceHttps(req, res, tls))
+            return true;
+        handleAlertRuleDelete(req, res, itemRef.ref, itemRef.id, routeDeps).catch(() => {
+            if (!res.headersSent)
+                sendJson(res, 500, { error: 'internal error' });
+        });
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=alerts-dispatch.js.map

package/node_modules/@noodle-borg/service/dist/routes/alerts-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts-dispatch.js","sourceRoot":"","sources":["../../src/routes/alerts-dispatch.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAgBpB,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAAwB;IAExB,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnE,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,KAAK,EAAE,IAAI,CAAC,cAAc;QAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IAEF,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACnF,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC9D,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACnD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3E,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC7E,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/alerts.d.ts

@@ -0,0 +1,39 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import { type AlertRuleStore } from '../store/alert-rules.js';
+import type { AuditSink } from '../store/audit.js';
+import type { ControlPlaneStore, TenantRef } from '../store.js';
+/**
+ * Analytics alerting routes (E2, ADR 0130): `GET`/`POST .../alerts`, `DELETE .../alerts/{id}`,
+ * and `POST .../alerts/{id}/test`. Reads are org-MEMBER gated (`authorizeTenantControl`, like the
+ * neighbouring analytics reads); mutations and test-fires are org-OWNER gated (`canManageMembers`,
+ * like the GHD-1 connection writes) and emit audit events with scalar details only.
+ *
+ * The webhook URL enters once through `POST` (validated by `validateAlertWebhookUrl`) and never
+ * leaves again: responses serialize rules through {@link publicAlertRule} and the strict Zod
+ * contract has no field that could carry it.
+ */
+export interface AlertRouteDeps {
+    readonly gate: DeployAuthGate;
+    readonly controlPlane: ControlPlaneStore;
+    readonly store: AlertRuleStore;
+    readonly audit: AuditSink;
+    readonly maxBody: number;
+    /** Dev/test-only loopback webhook carve-out (`alertWebhookAllowLoopback`). */
+    readonly allowLoopbackWebhooks: boolean;
+    /** Injectable clock for deterministic test-fire timestamps. */
+    readonly clock?: () => Date;
+}
+/** Redact a webhook URL to its origin — path/query (where tokens live) never leave the service. */
+export declare function redactWebhookUrl(url: string): string;
+/** `GET` (member) / `POST` (owner) on the alert-rule collection. */
+export declare function handleAlertRules(req: IncomingMessage, res: ServerResponse, ref: TenantRef, deps: AlertRouteDeps): Promise<void>;
+/** `DELETE .../alerts/{id}` — org OWNER only; 404 when the rule is not in this tenant scope. */
+export declare function handleAlertRuleDelete(req: IncomingMessage, res: ServerResponse, ref: TenantRef, id: string, deps: AlertRouteDeps): Promise<void>;
+/**
+ * `POST .../alerts/{id}/test` — org OWNER only: sends a synthetic `event: "test"` payload through
+ * the exact guarded delivery path a real breach uses. The response carries only the closed-code
+ * delivery outcome; a failed delivery is still a 200 (the route worked, the endpoint did not).
+ */
+export declare function handleAlertRuleTest(req: IncomingMessage, res: ServerResponse, ref: TenantRef, id: string, deps: AlertRouteDeps): Promise<void>;
+//# sourceMappingURL=alerts.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/routes/alerts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAKL,KAAK,cAAc,EAGpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAMhE;;;;;;;;;GASG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,mGAAmG;AACnG,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMpD;AAsBD,oEAAoE;AACpE,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,SAAS,EACd,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf;AAmHD,gGAAgG;AAChG,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,SAAS,EACd,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,IAAI,CAAC,CA2Bf"}

package/node_modules/@noodle-borg/service/dist/routes/alerts.js

@@ -0,0 +1,204 @@
+import { buildAlertWebhookPayload, deliverAlertWebhook, validateAlertWebhookUrl, } from '../alert-webhook.js';
+import { readJsonBody, sendForbidden, sendJson } from '../http-util.js';
+import { ALERT_METRICS, ALERT_WINDOWS_MINUTES, MAX_ALERT_RULES_PER_ENV, } from '../store/alert-rules.js';
+import { sendContract } from './apps.js';
+import { AlertRuleResponseSchema, AlertRulesListResponseSchema } from './contracts.js';
+import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
+import { canManageMembers } from './org-admin.js';
+/** Redact a webhook URL to its origin — path/query (where tokens live) never leave the service. */
+export function redactWebhookUrl(url) {
+    try {
+        return `${new URL(url).origin}/…`;
+    }
+    catch {
+        return '<redacted>';
+    }
+}
+/** The redacted public view of a rule; the only shape routes may serialize. */
+function publicAlertRule(record) {
+    return {
+        id: record.id,
+        ...(record.name !== undefined ? { name: record.name } : {}),
+        metric: record.metric,
+        threshold: record.threshold,
+        windowMinutes: record.windowMinutes,
+        comparison: record.comparison,
+        webhook: redactWebhookUrl(record.webhookUrl),
+        enabled: record.enabled,
+        cooldownMinutes: record.cooldownMinutes,
+        breaching: record.breaching,
+        ...(record.lastObserved !== undefined ? { lastObserved: record.lastObserved } : {}),
+        ...(record.lastFiredAt !== undefined ? { lastFiredAt: record.lastFiredAt } : {}),
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+    };
+}
+/** `GET` (member) / `POST` (owner) on the alert-rule collection. */
+export async function handleAlertRules(req, res, ref, deps) {
+    if (req.method === 'GET') {
+        const identity = await authorizeTenantControl(req, res, deps.gate, deps.controlPlane, ref.org);
+        if (identity === false)
+            return;
+        const rules = await deps.store.listAlertRules(ref);
+        return sendContract(res, () => AlertRulesListResponseSchema.parse({ ok: true, data: { rules: rules.map(publicAlertRule) } }));
+    }
+    if (req.method === 'POST')
+        return handleCreate(req, res, ref, deps);
+    return sendJson(res, 404, { error: 'not found' });
+}
+async function handleCreate(req, res, ref, deps) {
+    const identity = await authorizeOwner(req, res, ref, deps);
+    if (identity === undefined)
+        return;
+    const body = await readJsonBody(req, deps.maxBody);
+    if (!body.ok)
+        return sendJson(res, body.status, { error: body.error });
+    const parsed = body.value;
+    if (typeof parsed.metric !== 'string' ||
+        !ALERT_METRICS.includes(parsed.metric)) {
+        return sendJson(res, 400, {
+            error: `"metric" must be one of ${ALERT_METRICS.join(', ')}`,
+        });
+    }
+    if (typeof parsed.threshold !== 'number' ||
+        !Number.isFinite(parsed.threshold) ||
+        parsed.threshold < 0) {
+        return sendJson(res, 400, { error: '"threshold" must be a finite number >= 0' });
+    }
+    if (typeof parsed.windowMinutes !== 'number' ||
+        !ALERT_WINDOWS_MINUTES.includes(parsed.windowMinutes)) {
+        return sendJson(res, 400, {
+            error: `"windowMinutes" must be one of ${ALERT_WINDOWS_MINUTES.join(', ')}`,
+        });
+    }
+    if (parsed.name !== undefined &&
+        (typeof parsed.name !== 'string' || parsed.name.length === 0 || parsed.name.length > 100)) {
+        return sendJson(res, 400, { error: '"name" must be a string of 1-100 characters' });
+    }
+    if (parsed.cooldownMinutes !== undefined &&
+        (typeof parsed.cooldownMinutes !== 'number' ||
+            !Number.isInteger(parsed.cooldownMinutes) ||
+            parsed.cooldownMinutes < 1 ||
+            parsed.cooldownMinutes > 24 * 60)) {
+        return sendJson(res, 400, { error: '"cooldownMinutes" must be an integer from 1 to 1440' });
+    }
+    if (parsed.enabled !== undefined && typeof parsed.enabled !== 'boolean') {
+        return sendJson(res, 400, { error: '"enabled" must be a boolean' });
+    }
+    if (typeof parsed.webhookUrl !== 'string') {
+        return sendJson(res, 400, { error: '"webhookUrl" must be a string' });
+    }
+    const webhook = validateAlertWebhookUrl(parsed.webhookUrl, {
+        allowLoopback: deps.allowLoopbackWebhooks,
+    });
+    if (!webhook.ok)
+        return sendJson(res, 400, { error: webhook.error });
+    // Soft abuse cap, checked read-then-write: two concurrent owner creates can overshoot by a
+    // request or two, which is acceptable for a bound whose only job is preventing webhook floods —
+    // a hard transactional cap is not worth a table lock here (unlike the GHD-1 uniqueness rules).
+    const existing = await deps.store.listAlertRules(ref);
+    if (existing.length >= MAX_ALERT_RULES_PER_ENV) {
+        return sendJson(res, 409, {
+            error: `alert rule limit reached (${MAX_ALERT_RULES_PER_ENV} per environment); remove one first`,
+        });
+    }
+    const record = await deps.store.createAlertRule({
+        orgSlug: ref.org,
+        appSlug: ref.app,
+        environment: ref.env,
+        ...(parsed.name !== undefined ? { name: parsed.name } : {}),
+        metric: parsed.metric,
+        threshold: parsed.threshold,
+        windowMinutes: parsed.windowMinutes,
+        webhookUrl: parsed.webhookUrl,
+        ...(parsed.enabled !== undefined ? { enabled: parsed.enabled } : {}),
+        ...(parsed.cooldownMinutes !== undefined ? { cooldownMinutes: parsed.cooldownMinutes } : {}),
+        createdBySubject: identity.subject,
+    });
+    // Audit details are scalar-only and NEVER include the webhook URL or its host.
+    await deps.audit.emit({
+        eventType: 'alert.rule.created',
+        org: ref.org,
+        app: ref.app,
+        env: ref.env,
+        decision: 'allow',
+        status: 200,
+        actorSubject: identity.subject,
+        ...(identity.email !== undefined ? { actorEmail: identity.email } : {}),
+        details: {
+            ruleId: record.id,
+            metric: record.metric,
+            threshold: record.threshold,
+            windowMinutes: record.windowMinutes,
+        },
+    });
+    return sendContract(res, () => AlertRuleResponseSchema.parse({ ok: true, data: publicAlertRule(record) }));
+}
+/** `DELETE .../alerts/{id}` — org OWNER only; 404 when the rule is not in this tenant scope. */
+export async function handleAlertRuleDelete(req, res, ref, id, deps) {
+    const identity = await authorizeOwner(req, res, ref, deps);
+    if (identity === undefined)
+        return;
+    const deleted = await deps.store.deleteAlertRule(ref, id);
+    if (!deleted)
+        return sendJson(res, 404, { error: 'not found' });
+    await deps.audit.emit({
+        eventType: 'alert.rule.deleted',
+        org: ref.org,
+        app: ref.app,
+        env: ref.env,
+        decision: 'allow',
+        status: 200,
+        actorSubject: identity.subject,
+        ...(identity.email !== undefined ? { actorEmail: identity.email } : {}),
+        details: { ruleId: id },
+    });
+    return sendJson(res, 200, { ok: true, data: { deleted: true } });
+}
+/**
+ * `POST .../alerts/{id}/test` — org OWNER only: sends a synthetic `event: "test"` payload through
+ * the exact guarded delivery path a real breach uses. The response carries only the closed-code
+ * delivery outcome; a failed delivery is still a 200 (the route worked, the endpoint did not).
+ */
+export async function handleAlertRuleTest(req, res, ref, id, deps) {
+    const identity = await authorizeOwner(req, res, ref, deps);
+    if (identity === undefined)
+        return;
+    const rule = await deps.store.getAlertRule(ref, id);
+    if (rule === undefined)
+        return sendJson(res, 404, { error: 'not found' });
+    const firedAt = (deps.clock?.() ?? new Date()).toISOString();
+    const payload = buildAlertWebhookPayload(rule, 'test', rule.lastObserved ?? 0, firedAt);
+    const delivery = await deliverAlertWebhook(rule.webhookUrl, payload, {
+        allowLoopback: deps.allowLoopbackWebhooks,
+    });
+    await deps.audit.emit({
+        eventType: 'alert.rule.test_fired',
+        org: ref.org,
+        app: ref.app,
+        env: ref.env,
+        decision: 'allow',
+        status: 200,
+        actorSubject: identity.subject,
+        ...(identity.email !== undefined ? { actorEmail: identity.email } : {}),
+        details: {
+            ruleId: rule.id,
+            delivered: delivery.delivered,
+            ...(delivery.status !== undefined ? { httpStatus: delivery.status } : {}),
+            ...(delivery.reason !== undefined ? { reason: delivery.reason } : {}),
+        },
+    });
+    return sendJson(res, 200, { ok: true, data: { delivery } });
+}
+/** Owner gate shared by every alert mutation (mirrors the GHD-1 write posture). */
+async function authorizeOwner(req, res, ref, deps) {
+    const identity = await authorizeControlPlane(req, res, deps.gate, { requireIdentity: true });
+    if (identity === false)
+        return undefined;
+    if (!(await canManageMembers(deps.controlPlane, ref.org, identity))) {
+        sendForbidden(res, 'forbidden');
+        return undefined;
+    }
+    return identity;
+}
+//# sourceMappingURL=alerts.js.map

package/node_modules/@noodle-borg/service/dist/routes/alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../src/routes/alerts.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EACL,aAAa,EACb,qBAAqB,EAKrB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAyBlD,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,MAAuB;IAC9C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;QAC5C,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,GAAmB,EACnB,GAAc,EACd,IAAoB;IAEpB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/F,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAC5B,4BAA4B,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAoB,EACpB,GAAmB,EACnB,GAAc,EACd,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAQnB,CAAC;IACF,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,CAAE,aAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7D,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,2BAA2B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QAClC,MAAM,CAAC,SAAS,GAAG,CAAC,EACpB,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IACE,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ;QACxC,CAAE,qBAA2C,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAC5E,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,kCAAkC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,IACE,MAAM,CAAC,IAAI,KAAK,SAAS;QACzB,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,EACzF,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IACE,MAAM,CAAC,eAAe,KAAK,SAAS;QACpC,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;YACzC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC;YACzC,MAAM,CAAC,eAAe,GAAG,CAAC;YAC1B,MAAM,CAAC,eAAe,GAAG,EAAE,GAAG,EAAE,CAAC,EACnC,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACxE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,UAAU,EAAE;QACzD,aAAa,EAAE,IAAI,CAAC,qBAAqB;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAErE,2FAA2F;IAC3F,gGAAgG;IAChG,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;QAC/C,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,6BAA6B,uBAAuB,qCAAqC;SACjG,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QAC9C,OAAO,EAAE,GAAG,CAAC,GAAG;QAChB,OAAO,EAAE,GAAG,CAAC,GAAG;QAChB,WAAW,EAAE,GAAG,CAAC,GAAG;QACpB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,EAAE,MAAM,CAAC,MAAqB;QACpC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,aAAa,EAAE,MAAM,CAAC,aAAmC;QACzD,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,gBAAgB,EAAE,QAAQ,CAAC,OAAO;KACnC,CAAC,CAAC;IACH,+EAA+E;IAC/E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,oBAAoB;QAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,EAAE;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC;KACF,CAAC,CAAC;IACH,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAC5B,uBAAuB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAoB,EACpB,GAAmB,EACnB,GAAc,EACd,EAAU,EACV,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,oBAAoB;QAC/B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KACxB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAoB,EACpB,GAAmB,EACnB,GAAc,EACd,EAAU,EACV,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE;QACnE,aAAa,EAAE,IAAI,CAAC,qBAAqB;KAC1C,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,uBAAuB;QAClC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE;YACP,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE;KACF,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,cAAc,CAC3B,GAAoB,EACpB,GAAmB,EACnB,GAAc,EACd,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACpE,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts

@@ -305,6 +305,76 @@ export declare const GithubConnectionResponseSchema: z.ZodObject<{
         updatedAt: z.ZodString;
     }, z.core.$strict>;
 }, z.core.$strict>;
+/** One webhook-accepted deploy run (GHD-2) — mirrors `DeployRunRecord` in `../store.ts`. */
+export declare const DeployRunSchema: z.ZodObject<{
+    runId: z.ZodString;
+    orgSlug: z.ZodString;
+    appSlug: z.ZodString;
+    envName: z.ZodString;
+    sourceEvent: z.ZodEnum<{
+        push: "push";
+        pull_request: "pull_request";
+    }>;
+    deliveryId: z.ZodString;
+    githubRepositoryId: z.ZodNumber;
+    commitSha: z.ZodString;
+    ref: z.ZodString;
+    prNumber: z.ZodOptional<z.ZodNumber>;
+    status: z.ZodEnum<{
+        queued: "queued";
+        building: "building";
+        deploying: "deploying";
+        deployed: "deployed";
+        failed: "failed";
+        canceled: "canceled";
+        superseded: "superseded";
+    }>;
+    blockedReason: z.ZodOptional<z.ZodString>;
+    deploymentId: z.ZodOptional<z.ZodString>;
+    actorLogin: z.ZodString;
+    errorSummary: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    startedAt: z.ZodOptional<z.ZodString>;
+    finishedAt: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/github/runs` response body. */
+export declare const GithubRunsListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        runs: z.ZodArray<z.ZodObject<{
+            runId: z.ZodString;
+            orgSlug: z.ZodString;
+            appSlug: z.ZodString;
+            envName: z.ZodString;
+            sourceEvent: z.ZodEnum<{
+                push: "push";
+                pull_request: "pull_request";
+            }>;
+            deliveryId: z.ZodString;
+            githubRepositoryId: z.ZodNumber;
+            commitSha: z.ZodString;
+            ref: z.ZodString;
+            prNumber: z.ZodOptional<z.ZodNumber>;
+            status: z.ZodEnum<{
+                queued: "queued";
+                building: "building";
+                deploying: "deploying";
+                deployed: "deployed";
+                failed: "failed";
+                canceled: "canceled";
+                superseded: "superseded";
+            }>;
+            blockedReason: z.ZodOptional<z.ZodString>;
+            deploymentId: z.ZodOptional<z.ZodString>;
+            actorLogin: z.ZodString;
+            errorSummary: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodString>;
+            finishedAt: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
 /** The full `GET /v1/github/install-url` response body. */
 export declare const GithubInstallUrlResponseSchema: z.ZodObject<{
     ok: z.ZodLiteral<true>;
@@ -313,4 +383,83 @@ export declare const GithubInstallUrlResponseSchema: z.ZodObject<{
         state: z.ZodString;
     }, z.core.$strict>;
 }, z.core.$strict>;
+/**
+ * The redacted public view of an alert rule (analytics alerting E2, ADR 0130). Deliberately has
+ * NO `webhookUrl` field and is `.strict()`: the sensitive URL structurally cannot pass this
+ * contract, so a would-be leak fails the parse (a 500) instead of reaching the wire. `webhook`
+ * carries only the redacted origin form (e.g. `https://hooks.example.com/…`).
+ */
+export declare const AlertRuleSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    metric: z.ZodEnum<{
+        error_share: "error_share";
+        error_count: "error_count";
+        calls: "calls";
+        p95_ms: "p95_ms";
+    }>;
+    threshold: z.ZodNumber;
+    windowMinutes: z.ZodNumber;
+    comparison: z.ZodLiteral<">=">;
+    webhook: z.ZodString;
+    enabled: z.ZodBoolean;
+    cooldownMinutes: z.ZodNumber;
+    breaching: z.ZodBoolean;
+    lastObserved: z.ZodOptional<z.ZodNumber>;
+    lastFiredAt: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+/** The full `POST /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export declare const AlertRuleResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        metric: z.ZodEnum<{
+            error_share: "error_share";
+            error_count: "error_count";
+            calls: "calls";
+            p95_ms: "p95_ms";
+        }>;
+        threshold: z.ZodNumber;
+        windowMinutes: z.ZodNumber;
+        comparison: z.ZodLiteral<">=">;
+        webhook: z.ZodString;
+        enabled: z.ZodBoolean;
+        cooldownMinutes: z.ZodNumber;
+        breaching: z.ZodBoolean;
+        lastObserved: z.ZodOptional<z.ZodNumber>;
+        lastFiredAt: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/** The full `GET /v1/orgs/{org}/apps/{app}/envs/{env}/alerts` response body. */
+export declare const AlertRulesListResponseSchema: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    data: z.ZodObject<{
+        rules: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            metric: z.ZodEnum<{
+                error_share: "error_share";
+                error_count: "error_count";
+                calls: "calls";
+                p95_ms: "p95_ms";
+            }>;
+            threshold: z.ZodNumber;
+            windowMinutes: z.ZodNumber;
+            comparison: z.ZodLiteral<">=">;
+            webhook: z.ZodString;
+            enabled: z.ZodBoolean;
+            cooldownMinutes: z.ZodNumber;
+            breaching: z.ZodBoolean;
+            lastObserved: z.ZodOptional<z.ZodNumber>;
+            lastFiredAt: z.ZodOptional<z.ZodString>;
+            createdAt: z.ZodString;
+            updatedAt: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
 //# sourceMappingURL=contracts.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/routes/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,yDAAyD;AACzD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;kBAezB,CAAC;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYlB,CAAC;AAEZ,wDAAwD;AACxD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUxB,CAAC;AAEZ,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAalB,CAAC;AAEZ,iHAAiH;AACjH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASxB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,mGAAmG;AACnG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;kBAK1B,CAAC;AAEZ,qGAAqG;AACrG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;kBAetB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;kBAKhC,CAAC;AAEZ,2DAA2D;AAC3D,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC"}
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/routes/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,yDAAyD;AACzD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;kBAezB,CAAC;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYlB,CAAC;AAEZ,wDAAwD;AACxD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUxB,CAAC;AAEZ,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,kDAAkD;AAClD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAalB,CAAC;AAEZ,iHAAiH;AACjH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASxB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAKnB,CAAC;AAEZ,mGAAmG;AACnG,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;kBAK1B,CAAC;AAEZ,qGAAqG;AACrG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;kBAetB,CAAC;AAEZ,uFAAuF;AACvF,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;kBAKhC,CAAC;AAEZ,4FAA4F;AAC5F,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6BjB,CAAC;AAEZ,0EAA0E;AAC1E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAU9B,CAAC;AAEZ,2DAA2D;AAC3D,eAAO,MAAM,8BAA8B;;;;;;kBAUhC,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;kBAiBjB,CAAC;AAEZ,iFAAiF;AACjF,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;kBAKzB,CAAC;AAEZ,gFAAgF;AAChF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;kBAK9B,CAAC"}