@noodleseed/one 0.37.0 → 0.38.1

package/node_modules/@noodle-borg/service/dist/billing/model.d.ts

@@ -0,0 +1,85 @@
+/** Authority that assigned every current hosted control-plane subject, including Noodle OAuth tokens. */
+export declare const GOOGLE_CONTROL_PLANE_ISSUER = "https://accounts.google.com";
+export type BillingAccountState = 'active' | 'draft' | 'inactive';
+export type BillingAccountMemberRole = 'owner' | 'admin' | 'viewer';
+export interface BillingIdentityRef {
+    readonly identityIssuer: string;
+    readonly subject: string;
+}
+export interface BillingIdentityInput extends BillingIdentityRef {
+    readonly email?: string;
+}
+export type BillingEntitlementValue = boolean | number | string | null;
+export type BillingEntitlements = Readonly<Record<string, BillingEntitlementValue>>;
+export interface BillingAccountRecord {
+    readonly id: string;
+    readonly displayName: string;
+    readonly state: BillingAccountState;
+    readonly createdAt: string;
+}
+export interface BillingAccountMemberRecord extends BillingIdentityRef {
+    readonly billingAccountId: string;
+    readonly email: string;
+    readonly role: BillingAccountMemberRole;
+    readonly createdAt: string;
+}
+export interface PlanVersionRecord {
+    readonly id: string;
+    readonly planCode: string;
+    readonly version: number;
+    readonly effectiveFrom: string;
+    readonly entitlements: BillingEntitlements;
+    readonly contentChecksum: string;
+    readonly createdAt: string;
+}
+export interface EntitlementSnapshotRecord {
+    readonly id: string;
+    readonly billingAccountId: string;
+    readonly version: number;
+    readonly planVersionId: string;
+    readonly planCode: string;
+    readonly planVersion: number;
+    readonly sourceKind: 'system-free';
+    readonly generationReason: 'default-account-created';
+    readonly verificationStatus: 'verified';
+    readonly effectiveFrom: string;
+    readonly monthlyUsageAnchor: string;
+    readonly entitlements: BillingEntitlements;
+    readonly contentChecksum: string;
+    readonly verifiedAt: string;
+    readonly createdAt: string;
+}
+export interface OrgBillingLinkRecord {
+    readonly orgSlug: string;
+    readonly billingAccountId: string;
+    readonly homeFreeBillingAccountId: string;
+    readonly homeOwner: BillingIdentityRef;
+    readonly fallbackBillingAccountId: string;
+    readonly version: number;
+    readonly active: true;
+    readonly linkedAt: string;
+    readonly linkedBy: BillingIdentityRef;
+    readonly reason: string;
+}
+export declare const FREE_ENTITLEMENTS: BillingEntitlements;
+export declare const FREE_PLAN_VERSION: PlanVersionRecord;
+export declare function createDefaultFreeBillingRecords(input: {
+    readonly identity: BillingIdentityRef;
+    readonly email: string;
+    readonly displayName?: string;
+    readonly createdAt: string;
+}): {
+    readonly account: BillingAccountRecord;
+    readonly member: BillingAccountMemberRecord;
+    readonly snapshot: EntitlementSnapshotRecord;
+};
+export declare function billingIdentityKey(identity: BillingIdentityRef): string;
+export declare function billingMemberKey(input: BillingIdentityRef & {
+    readonly billingAccountId: string;
+}): string;
+export declare function normalizeBillingIdentity(identity: BillingIdentityRef): BillingIdentityRef;
+export declare function normalizeBillingEmail(email: string): string;
+export declare function validateBillingAccountId(value: string): string;
+export declare function validateBillingLinkReason(value: string): string;
+export declare function billingContentChecksum(value: unknown): string;
+//# sourceMappingURL=model.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/billing/model.ts"],"names":[],"mappings":"AAGA,yGAAyG;AACzG,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAEzE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;AAClE,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AACvE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAEpF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IACpE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,iBAAiB,EAAE,mBAmB9B,CAAC;AAUH,eAAO,MAAM,iBAAiB,EAAE,iBAI9B,CAAC;AAEH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GAAG;IACF,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;CAC9C,CAsCA;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAIvE;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,GAAG;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,GAChE,MAAM,CAER;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,kBAAkB,CAKzF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAyB3D;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9D;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7D"}

package/node_modules/@noodle-borg/service/dist/billing/model.js

@@ -0,0 +1,134 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { canonicalJsonFingerprint } from '../policy-idempotency.js';
+/** Authority that assigned every current hosted control-plane subject, including Noodle OAuth tokens. */
+export const GOOGLE_CONTROL_PLANE_ISSUER = 'https://accounts.google.com';
+export const FREE_ENTITLEMENTS = Object.freeze({
+    'usage.mcp_calls.included': 1_000_000,
+    'usage.mcp_calls.overage': false,
+    'apps.production.max': 1,
+    'access.owner_or_public': true,
+    'access.org_members': false,
+    'config.managed_secrets': false,
+    'deploy.history_rollback': 'basic',
+    'assets.packaged': 'basic',
+    'domains.custom': false,
+    'governance.policy': false,
+    'governance.audit': false,
+    'support.email': 'community',
+    'support.priority': false,
+    'deployment.dedicated': false,
+    'deployment.byo_cloud': false,
+    'identity.sso_scim': false,
+    'connectivity.private': false,
+    sla: false,
+});
+const FREE_PLAN_CONTENT = {
+    id: 'free@1',
+    planCode: 'free',
+    version: 1,
+    effectiveFrom: '2026-07-11T00:00:00.000Z',
+    entitlements: FREE_ENTITLEMENTS,
+};
+export const FREE_PLAN_VERSION = Object.freeze({
+    ...FREE_PLAN_CONTENT,
+    contentChecksum: billingContentChecksum(FREE_PLAN_CONTENT),
+    createdAt: FREE_PLAN_CONTENT.effectiveFrom,
+});
+export function createDefaultFreeBillingRecords(input) {
+    const billingAccountId = `ba_${randomUUID()}`;
+    const snapshotId = `es_${randomUUID()}`;
+    const email = normalizeBillingEmail(input.email);
+    const account = {
+        id: billingAccountId,
+        displayName: input.displayName?.trim() || email,
+        state: 'active',
+        createdAt: input.createdAt,
+    };
+    const member = {
+        billingAccountId,
+        ...input.identity,
+        email,
+        role: 'owner',
+        createdAt: input.createdAt,
+    };
+    const snapshotContent = {
+        billingAccountId,
+        version: 1,
+        planVersionId: FREE_PLAN_VERSION.id,
+        effectiveFrom: input.createdAt,
+        monthlyUsageAnchor: input.createdAt,
+        entitlements: FREE_ENTITLEMENTS,
+    };
+    const snapshot = {
+        id: snapshotId,
+        ...snapshotContent,
+        planCode: FREE_PLAN_VERSION.planCode,
+        planVersion: FREE_PLAN_VERSION.version,
+        sourceKind: 'system-free',
+        generationReason: 'default-account-created',
+        verificationStatus: 'verified',
+        contentChecksum: billingContentChecksum(snapshotContent),
+        verifiedAt: input.createdAt,
+        createdAt: input.createdAt,
+    };
+    return { account, member, snapshot };
+}
+export function billingIdentityKey(identity) {
+    const issuer = normalizeIdentityPart('identityIssuer', identity.identityIssuer);
+    const subject = normalizeIdentityPart('subject', identity.subject);
+    return `${issuer}\u0000${subject}`;
+}
+export function billingMemberKey(input) {
+    return `${validateBillingAccountId(input.billingAccountId)}\u0000${billingIdentityKey(input)}`;
+}
+export function normalizeBillingIdentity(identity) {
+    return {
+        identityIssuer: normalizeIdentityPart('identityIssuer', identity.identityIssuer),
+        subject: normalizeIdentityPart('subject', identity.subject),
+    };
+}
+export function normalizeBillingEmail(email) {
+    const value = email.trim().toLowerCase();
+    const parts = value.split('@');
+    const local = parts[0] ?? '';
+    const domain = parts[1] ?? '';
+    const validLocal = local.length > 0 &&
+        local.length <= 64 &&
+        !local.startsWith('.') &&
+        !local.endsWith('.') &&
+        !local.includes('..') &&
+        /^[a-z0-9.!#$%&'*+/=?^_`{|}~-]+$/.test(local);
+    const validDomain = domain.length > 0 &&
+        domain.length <= 255 &&
+        domain
+            .split('.')
+            .every((label) => label.length > 0 && label.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label));
+    if (value.length > 320 || parts.length !== 2 || !validLocal || !validDomain) {
+        throw new Error('billing email must be a valid non-empty address');
+    }
+    return value;
+}
+export function validateBillingAccountId(value) {
+    if (!/^ba_[0-9a-f-]{36}$/.test(value))
+        throw new Error('invalid billing account id');
+    return value;
+}
+export function validateBillingLinkReason(value) {
+    return normalizeIdentityPart('billing link reason', value);
+}
+export function billingContentChecksum(value) {
+    return createHash('sha256').update(canonicalJsonFingerprint(value)).digest('hex');
+}
+function normalizeIdentityPart(name, value) {
+    const normalized = value.trim();
+    if (normalized.length === 0 ||
+        normalized.length > 512 ||
+        [...normalized].some((character) => {
+            const code = character.charCodeAt(0);
+            return code <= 0x1f || code === 0x7f;
+        })) {
+        throw new Error(`${name} must be a non-empty scalar identifier`);
+    }
+    return normalized;
+}
+//# sourceMappingURL=model.js.map

package/node_modules/@noodle-borg/service/dist/billing/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/billing/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,yGAAyG;AACzG,MAAM,CAAC,MAAM,2BAA2B,GAAG,6BAA6B,CAAC;AAwEzE,MAAM,CAAC,MAAM,iBAAiB,GAAwB,MAAM,CAAC,MAAM,CAAC;IAClE,0BAA0B,EAAE,SAAS;IACrC,yBAAyB,EAAE,KAAK;IAChC,qBAAqB,EAAE,CAAC;IACxB,wBAAwB,EAAE,IAAI;IAC9B,oBAAoB,EAAE,KAAK;IAC3B,wBAAwB,EAAE,KAAK;IAC/B,yBAAyB,EAAE,OAAO;IAClC,iBAAiB,EAAE,OAAO;IAC1B,gBAAgB,EAAE,KAAK;IACvB,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,KAAK;IACzB,eAAe,EAAE,WAAW;IAC5B,kBAAkB,EAAE,KAAK;IACzB,sBAAsB,EAAE,KAAK;IAC7B,sBAAsB,EAAE,KAAK;IAC7B,mBAAmB,EAAE,KAAK;IAC1B,sBAAsB,EAAE,KAAK;IAC7B,GAAG,EAAE,KAAK;CACX,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG;IACxB,EAAE,EAAE,QAAQ;IACZ,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,0BAA0B;IACzC,YAAY,EAAE,iBAAiB;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAChE,GAAG,iBAAiB;IACpB,eAAe,EAAE,sBAAsB,CAAC,iBAAiB,CAAC;IAC1D,SAAS,EAAE,iBAAiB,CAAC,aAAa;CAC3C,CAAC,CAAC;AAEH,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IAKC,MAAM,gBAAgB,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAyB;QACpC,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,KAAK;QAC/C,KAAK,EAAE,QAAQ;QACf,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,MAAM,GAA+B;QACzC,gBAAgB;QAChB,GAAG,KAAK,CAAC,QAAQ;QACjB,KAAK;QACL,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,eAAe,GAAG;QACtB,gBAAgB;QAChB,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,iBAAiB,CAAC,EAAE;QACnC,aAAa,EAAE,KAAK,CAAC,SAAS;QAC9B,kBAAkB,EAAE,KAAK,CAAC,SAAS;QACnC,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,MAAM,QAAQ,GAA8B;QAC1C,EAAE,EAAE,UAAU;QACd,GAAG,eAAe;QAClB,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,WAAW,EAAE,iBAAiB,CAAC,OAAO;QACtC,UAAU,EAAE,aAAa;QACzB,gBAAgB,EAAE,yBAAyB;QAC3C,kBAAkB,EAAE,UAAU;QAC9B,eAAe,EAAE,sBAAsB,CAAC,eAAe,CAAC;QACxD,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAA4B;IAC7D,MAAM,MAAM,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,GAAG,MAAM,SAAS,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAiE;IAEjE,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,gBAAgB,CAAC,SAAS,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAA4B;IACnE,OAAO;QACL,cAAc,EAAE,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAAC;QAChF,OAAO,EAAE,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,UAAU,GACd,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,MAAM,IAAI,GAAG;QACpB,MAAM;aACH,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CACJ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAC5F,CAAC;IACN,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,qBAAqB,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,KAAa;IACxD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,UAAU,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;QACvC,CAAC,CAAC,EACF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-records.d.ts

@@ -0,0 +1,66 @@
+import { type BillingAccountMemberRecord, type BillingAccountRecord, type EntitlementSnapshotRecord, type OrgBillingLinkRecord, type PlanVersionRecord } from './model.js';
+export declare function accountRowToRecord(row: AccountRow): BillingAccountRecord;
+export declare function memberRowToRecord(row: MemberRow): BillingAccountMemberRecord;
+export declare function planVersionRowToRecord(row: PlanVersionRow): PlanVersionRecord;
+export declare function entitlementSnapshotRowToRecord(row: EntitlementSnapshotRow): EntitlementSnapshotRecord;
+export declare function orgBillingLinkRowToRecord(row: OrgBillingLinkRow): OrgBillingLinkRecord;
+export declare function validateScalarId(name: string, value: string): string;
+export interface AccountRow {
+    readonly id: string;
+    readonly display_name: string;
+    readonly state: string;
+    readonly created_at: Date | string;
+}
+export interface MemberRow {
+    readonly billing_account_id: string;
+    readonly identity_issuer: string;
+    readonly subject: string;
+    readonly email: string;
+    readonly role: string;
+    readonly created_at: Date | string;
+}
+export interface PlanVersionRow {
+    readonly id: string;
+    readonly plan_code: string;
+    readonly version: number;
+    readonly effective_from: Date | string;
+    readonly entitlements: unknown;
+    readonly content_checksum: string;
+    readonly created_at: Date | string;
+}
+export interface EntitlementSnapshotRow {
+    readonly id: string;
+    readonly billing_account_id: string;
+    readonly version: number;
+    readonly plan_version_id: string;
+    readonly plan_code: string;
+    readonly plan_version: number;
+    readonly plan_effective_from: Date | string;
+    readonly plan_entitlements: unknown;
+    readonly plan_content_checksum: string;
+    readonly plan_created_at: Date | string;
+    readonly source_kind: string;
+    readonly generation_reason: string;
+    readonly verification_status: string;
+    readonly effective_from: Date | string;
+    readonly monthly_usage_anchor: Date | string;
+    readonly entitlements: unknown;
+    readonly content_checksum: string;
+    readonly verified_at: Date | string;
+    readonly created_at: Date | string;
+}
+export interface OrgBillingLinkRow {
+    readonly org_slug: string;
+    readonly billing_account_id: string;
+    readonly home_free_billing_account_id: string;
+    readonly home_owner_identity_issuer: string;
+    readonly home_owner_subject: string;
+    readonly fallback_billing_account_id: string;
+    readonly version: number;
+    readonly active: boolean;
+    readonly linked_at: Date | string;
+    readonly linked_by_identity_issuer: string;
+    readonly linked_by_subject: string;
+    readonly reason: string;
+}
+//# sourceMappingURL=postgres-records.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-records.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-records.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAGzB,KAAK,yBAAyB,EAG9B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAEvB,MAAM,YAAY,CAAC;AAEpB,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,UAAU,GAAG,oBAAoB,CAUxE;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,GAAG,0BAA0B,CAc5E;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,iBAAiB,CAuB7E;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,sBAAsB,GAC1B,yBAAyB,CAiD3B;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,iBAAiB,GAAG,oBAAoB,CAoBtF;AA2BD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAapE;AAQD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,mBAAmB,EAAE,IAAI,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,IAAI,GAAG,MAAM,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,IAAI,GAAG,MAAM,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-records.js

@@ -0,0 +1,163 @@
+import { validateSlug } from '../store/validate.js';
+import { billingContentChecksum, normalizeBillingEmail, normalizeBillingIdentity, validateBillingAccountId, } from './model.js';
+export function accountRowToRecord(row) {
+    if (row.state !== 'active' && row.state !== 'draft' && row.state !== 'inactive') {
+        throw new Error('persisted billing account has an invalid state');
+    }
+    return {
+        id: validateBillingAccountId(row.id),
+        displayName: row.display_name,
+        state: row.state,
+        createdAt: toIsoString(row.created_at),
+    };
+}
+export function memberRowToRecord(row) {
+    if (row.role !== 'owner' && row.role !== 'admin' && row.role !== 'viewer') {
+        throw new Error('persisted billing member has an invalid role');
+    }
+    return {
+        billingAccountId: validateBillingAccountId(row.billing_account_id),
+        ...normalizeBillingIdentity({
+            identityIssuer: row.identity_issuer,
+            subject: row.subject,
+        }),
+        email: normalizeBillingEmail(row.email),
+        role: row.role,
+        createdAt: toIsoString(row.created_at),
+    };
+}
+export function planVersionRowToRecord(row) {
+    const effectiveFrom = toIsoString(row.effective_from);
+    const entitlements = parseEntitlements(row.entitlements);
+    const record = {
+        id: validateScalarId('plan version id', row.id),
+        planCode: validateScalarId('plan code', row.plan_code),
+        version: validatePositiveInteger('plan version', row.version),
+        effectiveFrom,
+        entitlements,
+        contentChecksum: row.content_checksum,
+        createdAt: toIsoString(row.created_at),
+    };
+    const checksum = billingContentChecksum({
+        id: record.id,
+        planCode: record.planCode,
+        version: record.version,
+        effectiveFrom: record.effectiveFrom,
+        entitlements: record.entitlements,
+    });
+    if (checksum !== record.contentChecksum) {
+        throw new Error(`persisted plan version ${record.id} failed checksum verification`);
+    }
+    return record;
+}
+export function entitlementSnapshotRowToRecord(row) {
+    if (row.source_kind !== 'system-free' ||
+        row.generation_reason !== 'default-account-created' ||
+        row.verification_status !== 'verified') {
+        throw new Error('persisted entitlement snapshot has an unsupported provenance');
+    }
+    const effectiveFrom = toIsoString(row.effective_from);
+    const monthlyUsageAnchor = toIsoString(row.monthly_usage_anchor);
+    const entitlements = parseEntitlements(row.entitlements);
+    const plan = planVersionRowToRecord({
+        id: row.plan_version_id,
+        plan_code: row.plan_code,
+        version: row.plan_version,
+        effective_from: row.plan_effective_from,
+        entitlements: row.plan_entitlements,
+        content_checksum: row.plan_content_checksum,
+        created_at: row.plan_created_at,
+    });
+    const record = {
+        id: validateScalarId('entitlement snapshot id', row.id),
+        billingAccountId: validateBillingAccountId(row.billing_account_id),
+        version: validatePositiveInteger('entitlement snapshot version', row.version),
+        planVersionId: validateScalarId('plan version id', row.plan_version_id),
+        planCode: plan.planCode,
+        planVersion: plan.version,
+        sourceKind: row.source_kind,
+        generationReason: row.generation_reason,
+        verificationStatus: row.verification_status,
+        effectiveFrom,
+        monthlyUsageAnchor,
+        entitlements,
+        contentChecksum: row.content_checksum,
+        verifiedAt: toIsoString(row.verified_at),
+        createdAt: toIsoString(row.created_at),
+    };
+    const checksum = billingContentChecksum({
+        billingAccountId: record.billingAccountId,
+        version: record.version,
+        planVersionId: record.planVersionId,
+        effectiveFrom: record.effectiveFrom,
+        monthlyUsageAnchor: record.monthlyUsageAnchor,
+        entitlements: record.entitlements,
+    });
+    if (checksum !== record.contentChecksum) {
+        throw new Error(`persisted entitlement snapshot ${record.id} failed checksum verification`);
+    }
+    return record;
+}
+export function orgBillingLinkRowToRecord(row) {
+    if (!row.active)
+        throw new Error('persisted current billing-account link is inactive');
+    return {
+        orgSlug: validateSlug('org', row.org_slug),
+        billingAccountId: validateBillingAccountId(row.billing_account_id),
+        homeFreeBillingAccountId: validateBillingAccountId(row.home_free_billing_account_id),
+        homeOwner: normalizeBillingIdentity({
+            identityIssuer: row.home_owner_identity_issuer,
+            subject: row.home_owner_subject,
+        }),
+        fallbackBillingAccountId: validateBillingAccountId(row.fallback_billing_account_id),
+        version: validatePositiveInteger('billing link version', row.version),
+        active: true,
+        linkedAt: toIsoString(row.linked_at),
+        linkedBy: normalizeBillingIdentity({
+            identityIssuer: row.linked_by_identity_issuer,
+            subject: row.linked_by_subject,
+        }),
+        reason: validateScalarId('billing link reason', row.reason),
+    };
+}
+function parseEntitlements(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('persisted entitlements must be an object');
+    }
+    const entitlements = {};
+    for (const [key, candidate] of Object.entries(value)) {
+        validateScalarId('entitlement key', key);
+        if (candidate !== null &&
+            typeof candidate !== 'boolean' &&
+            typeof candidate !== 'string' &&
+            (typeof candidate !== 'number' || !Number.isFinite(candidate))) {
+            throw new Error(`persisted entitlement ${key} has an invalid value`);
+        }
+        entitlements[key] = candidate;
+    }
+    return Object.freeze(entitlements);
+}
+function validatePositiveInteger(name, value) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error(`${name} must be positive`);
+    return value;
+}
+export function validateScalarId(name, value) {
+    const normalized = value.trim();
+    if (normalized.length === 0 ||
+        normalized.length > 512 ||
+        [...normalized].some((character) => {
+            const code = character.charCodeAt(0);
+            return code <= 0x1f || code === 0x7f;
+        })) {
+        throw new Error(`${name} must be a non-empty scalar identifier`);
+    }
+    return normalized;
+}
+function toIsoString(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw new Error('persisted billing timestamp is invalid');
+    return date.toISOString();
+}
+//# sourceMappingURL=postgres-records.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-records.js","sourceRoot":"","sources":["../../src/billing/postgres-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAIL,sBAAsB,EAEtB,qBAAqB,EACrB,wBAAwB,EAGxB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAEpB,MAAM,UAAU,kBAAkB,CAAC,GAAe;IAChD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAc;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,GAAG,wBAAwB,CAAC;YAC1B,cAAc,EAAE,GAAG,CAAC,eAAe;YACnC,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC;QACF,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC;QACvC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAmB;IACxD,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,MAAM,GAAsB;QAChC,EAAE,EAAE,gBAAgB,CAAC,iBAAiB,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/C,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC;QACtD,OAAO,EAAE,uBAAuB,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC;QAC7D,aAAa;QACb,YAAY;QACZ,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC;IACF,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACtC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,MAAM,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAA2B;IAE3B,IACE,GAAG,CAAC,WAAW,KAAK,aAAa;QACjC,GAAG,CAAC,iBAAiB,KAAK,yBAAyB;QACnD,GAAG,CAAC,mBAAmB,KAAK,UAAU,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,kBAAkB,GAAG,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,sBAAsB,CAAC;QAClC,EAAE,EAAE,GAAG,CAAC,eAAe;QACvB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,YAAY;QACzB,cAAc,EAAE,GAAG,CAAC,mBAAmB;QACvC,YAAY,EAAE,GAAG,CAAC,iBAAiB;QACnC,gBAAgB,EAAE,GAAG,CAAC,qBAAqB;QAC3C,UAAU,EAAE,GAAG,CAAC,eAAe;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAA8B;QACxC,EAAE,EAAE,gBAAgB,CAAC,yBAAyB,EAAE,GAAG,CAAC,EAAE,CAAC;QACvD,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,OAAO,EAAE,uBAAuB,CAAC,8BAA8B,EAAE,GAAG,CAAC,OAAO,CAAC;QAC7E,aAAa,EAAE,gBAAgB,CAAC,iBAAiB,EAAE,GAAG,CAAC,eAAe,CAAC;QACvE,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,OAAO;QACzB,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;QACvC,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;QAC3C,aAAa;QACb,kBAAkB;QAClB,YAAY;QACZ,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;KACvC,CAAC;IACF,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACtC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,YAAY,EAAE,MAAM,CAAC,YAAY;KAClC,CAAC,CAAC;IACH,IAAI,QAAQ,KAAK,MAAM,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAsB;IAC9D,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvF,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC;QAC1C,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,wBAAwB,EAAE,wBAAwB,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACpF,SAAS,EAAE,wBAAwB,CAAC;YAClC,cAAc,EAAE,GAAG,CAAC,0BAA0B;YAC9C,OAAO,EAAE,GAAG,CAAC,kBAAkB;SAChC,CAAC;QACF,wBAAwB,EAAE,wBAAwB,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACnF,OAAO,EAAE,uBAAuB,CAAC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC;QACrE,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC;QACpC,QAAQ,EAAE,wBAAwB,CAAC;YACjC,cAAc,EAAE,GAAG,CAAC,yBAAyB;YAC7C,OAAO,EAAE,GAAG,CAAC,iBAAiB;SAC/B,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,YAAY,GAAqD,EAAE,CAAC;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,gBAAgB,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACzC,IACE,SAAS,KAAK,IAAI;YAClB,OAAO,SAAS,KAAK,SAAS;YAC9B,OAAO,SAAS,KAAK,QAAQ;YAC7B,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,uBAAuB,CAAC,CAAC;QACvE,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IACE,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,UAAU,CAAC,MAAM,GAAG,GAAG;QACvB,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;QACvC,CAAC,CAAC,EACF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Additive BA-1 schema. No existing organization is linked or otherwise migrated here. */
+export declare function ensureBillingSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-schema.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-schema.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAI/B,2FAA2F;AAC3F,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAwJnE"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.js

@@ -0,0 +1,148 @@
+import { FREE_PLAN_VERSION } from './model.js';
+import { planVersionRowToRecord } from './postgres-records.js';
+/** Additive BA-1 schema. No existing organization is linked or otherwise migrated here. */
+export async function ensureBillingSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_plan_versions (
+      id               text PRIMARY KEY,
+      plan_code        text NOT NULL,
+      version          integer NOT NULL CHECK (version > 0),
+      effective_from   timestamptz NOT NULL,
+      entitlements     jsonb NOT NULL,
+      content_checksum text NOT NULL,
+      created_at       timestamptz NOT NULL,
+      UNIQUE (plan_code, version)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_accounts (
+      id           text PRIMARY KEY,
+      display_name text NOT NULL,
+      state        text NOT NULL CHECK (state IN ('active', 'draft', 'inactive')),
+      created_at   timestamptz NOT NULL
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_account_defaults (
+      identity_issuer   text NOT NULL,
+      subject           text NOT NULL,
+      billing_account_id text NOT NULL UNIQUE REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      PRIMARY KEY (identity_issuer, subject)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_account_members (
+      billing_account_id text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      identity_issuer    text NOT NULL,
+      subject            text NOT NULL,
+      email              text NOT NULL,
+      role               text NOT NULL CHECK (role IN ('owner', 'admin', 'viewer')),
+      created_at         timestamptz NOT NULL,
+      PRIMARY KEY (billing_account_id, identity_issuer, subject)
+    )
+  `);
+    await pool.query(`
+    CREATE UNIQUE INDEX IF NOT EXISTS billing_account_members_default_owner_key
+      ON billing_account_members (identity_issuer, subject, billing_account_id)
+  `);
+    await pool.query(`
+    CREATE UNIQUE INDEX IF NOT EXISTS billing_account_defaults_owner_account_key
+      ON billing_account_defaults (identity_issuer, subject, billing_account_id)
+  `);
+    await pool.query(`
+    DO $billing_default_owner$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1
+        FROM pg_constraint
+        WHERE conname = 'billing_account_defaults_owner_member_fk'
+          AND conrelid = 'billing_account_defaults'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_account_defaults
+            ADD CONSTRAINT billing_account_defaults_owner_member_fk
+            FOREIGN KEY (identity_issuer, subject, billing_account_id)
+            REFERENCES billing_account_members (identity_issuer, subject, billing_account_id)
+            ON DELETE RESTRICT;
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_default_owner$
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_entitlement_snapshots (
+      id                  text PRIMARY KEY,
+      billing_account_id  text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      version             integer NOT NULL CHECK (version > 0),
+      plan_version_id     text NOT NULL REFERENCES billing_plan_versions(id) ON DELETE RESTRICT,
+      source_kind         text NOT NULL CHECK (source_kind IN ('system-free')),
+      generation_reason   text NOT NULL CHECK (generation_reason IN ('default-account-created')),
+      verification_status text NOT NULL CHECK (verification_status IN ('verified')),
+      effective_from      timestamptz NOT NULL,
+      monthly_usage_anchor timestamptz NOT NULL,
+      entitlements        jsonb NOT NULL,
+      content_checksum    text NOT NULL,
+      verified_at         timestamptz NOT NULL,
+      created_at          timestamptz NOT NULL,
+      UNIQUE (billing_account_id, version),
+      UNIQUE (billing_account_id, id)
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_account_active_snapshots (
+      billing_account_id text PRIMARY KEY REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      snapshot_id        text NOT NULL UNIQUE,
+      FOREIGN KEY (billing_account_id, snapshot_id)
+        REFERENCES billing_entitlement_snapshots(billing_account_id, id) ON DELETE RESTRICT
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS org_billing_home_accounts (
+      org_slug                    text PRIMARY KEY REFERENCES orgs(slug) ON DELETE RESTRICT,
+      billing_account_id          text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      home_owner_identity_issuer  text NOT NULL,
+      home_owner_subject          text NOT NULL,
+      UNIQUE (org_slug, billing_account_id),
+      FOREIGN KEY (home_owner_identity_issuer, home_owner_subject, billing_account_id)
+        REFERENCES billing_account_defaults(identity_issuer, subject, billing_account_id)
+        ON DELETE RESTRICT
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS org_billing_links (
+      org_slug                     text PRIMARY KEY REFERENCES orgs(slug) ON DELETE RESTRICT,
+      billing_account_id           text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      home_free_billing_account_id text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      fallback_billing_account_id  text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      version                      integer NOT NULL CHECK (version > 0),
+      active                       boolean NOT NULL DEFAULT true CHECK (active),
+      linked_at                    timestamptz NOT NULL,
+      linked_by_identity_issuer    text NOT NULL,
+      linked_by_subject            text NOT NULL,
+      reason                       text NOT NULL,
+      FOREIGN KEY (org_slug, home_free_billing_account_id)
+        REFERENCES org_billing_home_accounts(org_slug, billing_account_id) ON DELETE RESTRICT
+    )
+  `);
+    await pool.query(`INSERT INTO billing_plan_versions
+       (id, plan_code, version, effective_from, entitlements, content_checksum, created_at)
+     VALUES ($1, $2, $3, $4, $5::jsonb, $6, $7)
+     ON CONFLICT (id) DO NOTHING`, [
+        FREE_PLAN_VERSION.id,
+        FREE_PLAN_VERSION.planCode,
+        FREE_PLAN_VERSION.version,
+        FREE_PLAN_VERSION.effectiveFrom,
+        JSON.stringify(FREE_PLAN_VERSION.entitlements),
+        FREE_PLAN_VERSION.contentChecksum,
+        FREE_PLAN_VERSION.createdAt,
+    ]);
+    const { rows } = await pool.query('SELECT * FROM billing_plan_versions WHERE id = $1', [FREE_PLAN_VERSION.id]);
+    const persistedFree = rows[0] ? planVersionRowToRecord(rows[0]) : undefined;
+    if (persistedFree === undefined ||
+        persistedFree.contentChecksum !== FREE_PLAN_VERSION.contentChecksum) {
+        throw new Error('persisted Free plan version does not match the immutable platform definition');
+    }
+}
+//# sourceMappingURL=postgres-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAuB,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpF,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAU;IAClD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;GAUhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;GAOhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IAEH,MAAM,IAAI,CAAC,KAAK,CACd;;;iCAG6B,EAC7B;QACE,iBAAiB,CAAC,EAAE;QACpB,iBAAiB,CAAC,QAAQ;QAC1B,iBAAiB,CAAC,OAAO;QACzB,iBAAiB,CAAC,aAAa;QAC/B,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,YAAY,CAAC;QAC9C,iBAAiB,CAAC,eAAe;QACjC,iBAAiB,CAAC,SAAS;KAC5B,CACF,CAAC;IACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,mDAAmD,EACnD,CAAC,iBAAiB,CAAC,EAAE,CAAC,CACvB,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IACE,aAAa,KAAK,SAAS;QAC3B,aAAa,CAAC,eAAe,KAAK,iBAAiB,CAAC,eAAe,EACnE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}