@noodleseed/one 0.38.0 → 0.39.0

package/node_modules/@noodle-borg/module-audit/dist/postgres-audit.js

@@ -32,6 +32,33 @@ export async function ensureAuditSchema(pool) {
       ON audit_events (org_slug, app_slug, environment, seq DESC)
   `);
 }
+/**
+ * Insert one canonical, redacted audit row through either a pool or an already-open transaction client.
+ * This helper deliberately does not manage a transaction: callers using a `PoolClient` keep the audit
+ * evidence in the same commit boundary as the state change it records.
+ */
+export async function insertAuditEvent(queryable, input, options = {}) {
+    const details = redactDetails(input.details);
+    await queryable.query(`INSERT INTO audit_events
+      (id, event_type, org_slug, app_slug, environment, deployment_id, actor_subject, actor_email,
+       decision, status, reason_code, schema_version, details, created_at)
+     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)`, [
+        (options.id ?? randomUUID)(),
+        input.eventType,
+        input.org,
+        input.app ?? null,
+        input.env ?? null,
+        input.deploymentId ?? null,
+        input.actorSubject ?? null,
+        input.actorEmail ?? null,
+        input.decision ?? null,
+        input.status !== undefined ? String(input.status) : null,
+        input.reasonCode ?? null,
+        AUDIT_SCHEMA_VERSION,
+        details !== undefined ? JSON.stringify(details) : null,
+        (options.now ?? (() => new Date()))(),
+    ]);
+}
 /**
  * Relational system of record for {@link AuditEvent}s (parallels {@link InMemoryAuditStore}). The `pg.Pool`
  * is injected; this class is pure SQL and unit-testable against any local Postgres.
@@ -39,34 +66,17 @@ export async function ensureAuditSchema(pool) {
 export class PostgresAuditStore {
     #pool;
     #now;
+    #id;
     constructor(pool, options = {}) {
         this.#pool = pool;
         this.#now = options.now ?? (() => new Date());
+        this.#id = options.id ?? randomUUID;
     }
     ensureSchema() {
         return ensureAuditSchema(this.#pool);
     }
     async emit(input) {
-        const details = redactDetails(input.details);
-        await this.#pool.query(`INSERT INTO audit_events
-        (id, event_type, org_slug, app_slug, environment, deployment_id, actor_subject, actor_email,
-         decision, status, reason_code, schema_version, details, created_at)
-       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11, $12, $13, $14)`, [
-            randomUUID(),
-            input.eventType,
-            input.org,
-            input.app ?? null,
-            input.env ?? null,
-            input.deploymentId ?? null,
-            input.actorSubject ?? null,
-            input.actorEmail ?? null,
-            input.decision ?? null,
-            input.status !== undefined ? String(input.status) : null,
-            input.reasonCode ?? null,
-            AUDIT_SCHEMA_VERSION,
-            details !== undefined ? JSON.stringify(details) : null,
-            this.#now(),
-        ]);
+        await insertAuditEvent(this.#pool, input, { now: this.#now, id: this.#id });
     }
     async list(filter) {
         const org = validateSlug('org', filter.org);

package/node_modules/@noodle-borg/module-audit/dist/postgres-audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgres-audit.js","sourceRoot":"","sources":["../src/postgres-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,oBAAoB,EAOpB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAG7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;AACL,CAAC;AAmBD;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAsB;QAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;;4EAGsE,EACtE;YACE,UAAU,EAAE;YACZ,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,GAAG;YACT,KAAK,CAAC,GAAG,IAAI,IAAI;YACjB,KAAK,CAAC,GAAG,IAAI,IAAI;YACjB,KAAK,CAAC,YAAY,IAAI,IAAI;YAC1B,KAAK,CAAC,YAAY,IAAI,IAAI;YAC1B,KAAK,CAAC,UAAU,IAAI,IAAI;YACxB,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YACxD,KAAK,CAAC,UAAU,IAAI,IAAI;YACxB,oBAAoB;YACpB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YACtD,IAAI,CAAC,IAAI,EAAE;SACZ,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAmB;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,MAAM,GAAc,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,oCAAoC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,KAAK,EAAE,EACrF,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAa;IAC/B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;QACvC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"postgres-audit.js","sourceRoot":"","sources":["../src/postgres-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,oBAAoB,EAOpB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAU7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;AACL,CAAC;AAmBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiC,EACjC,KAAsB,EACtB,UAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,CAAC,KAAK,CACnB;;;0EAGsE,EACtE;QACE,CAAC,OAAO,CAAC,EAAE,IAAI,UAAU,CAAC,EAAE;QAC5B,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,GAAG;QACT,KAAK,CAAC,GAAG,IAAI,IAAI;QACjB,KAAK,CAAC,GAAG,IAAI,IAAI;QACjB,KAAK,CAAC,YAAY,IAAI,IAAI;QAC1B,KAAK,CAAC,YAAY,IAAI,IAAI;QAC1B,KAAK,CAAC,UAAU,IAAI,IAAI;QACxB,KAAK,CAAC,QAAQ,IAAI,IAAI;QACtB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACxD,KAAK,CAAC,UAAU,IAAI,IAAI;QACxB,oBAAoB;QACpB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;QACtD,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;KACtC,CACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAO;IACZ,IAAI,CAAa;IACjB,GAAG,CAAe;IAE3B,YAAY,IAAU,EAAE,UAAsC,EAAE;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,UAAU,CAAC;IACtC,CAAC;IAED,YAAY;QACV,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAsB;QAC/B,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAmB;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,MAAM,GAAc,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,oCAAoC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,KAAK,EAAE,EACrF,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAa;IAC/B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;QACvC,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/in-memory-serialization.d.ts

@@ -0,0 +1,6 @@
+/** Small per-key queue used only to give the in-memory adapter database-like bootstrap semantics. */
+export declare class InMemorySerialQueue {
+    #private;
+    run<T>(key: string, operation: () => T | Promise<T>): Promise<T>;
+}
+//# sourceMappingURL=in-memory-serialization.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/in-memory-serialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-serialization.d.ts","sourceRoot":"","sources":["../../src/billing/in-memory-serialization.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,qBAAa,mBAAmB;;IAGxB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAgBvE"}

package/node_modules/@noodle-borg/service/dist/billing/in-memory-serialization.js

@@ -0,0 +1,23 @@
+/** Small per-key queue used only to give the in-memory adapter database-like bootstrap semantics. */
+export class InMemorySerialQueue {
+    #tails = new Map();
+    async run(key, operation) {
+        const previous = this.#tails.get(key) ?? Promise.resolve();
+        let release = () => undefined;
+        const turn = new Promise((resolve) => {
+            release = resolve;
+        });
+        const tail = previous.then(() => turn);
+        this.#tails.set(key, tail);
+        await previous;
+        try {
+            return await operation();
+        }
+        finally {
+            release();
+            if (this.#tails.get(key) === tail)
+                this.#tails.delete(key);
+        }
+    }
+}
+//# sourceMappingURL=in-memory-serialization.js.map

package/node_modules/@noodle-borg/service/dist/billing/in-memory-serialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-serialization.js","sourceRoot":"","sources":["../../src/billing/in-memory-serialization.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,MAAM,OAAO,mBAAmB;IACrB,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,SAA+B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3D,IAAI,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/billing/in-memory.d.ts

@@ -0,0 +1,32 @@
+import { type BillingAccountMemberRecord, type BillingAccountRecord, type BillingIdentityRef, type EntitlementSnapshotRecord, type OrgBillingLinkRecord, type PlanVersionRecord } from './model.js';
+import type { BillingAccountStore, EnsureDefaultBillingAccountInput, EnsureOrgBillingLinkInput } from './store.js';
+export declare abstract class InMemoryBillingAccountStore implements BillingAccountStore {
+    #private;
+    protected constructor(options: {
+        readonly now?: () => Date;
+        readonly orgExists: (org: string) => boolean;
+        readonly isOrgOwner: (org: string, subject: string) => boolean;
+    });
+    /** Commit the in-memory default-account + initial org-link tuple without an async visibility gap. */
+    protected ensureDefaultAccountAndOrgLinkAtomic(input: {
+        readonly org: string;
+        readonly owner: {
+            readonly identityIssuer?: string;
+            readonly subject: string;
+            readonly email: string;
+        };
+        readonly reason: string;
+    }, createdAt: string): void;
+    ensureDefaultBillingAccount(input: EnsureDefaultBillingAccountInput): Promise<BillingAccountRecord>;
+    getBillingAccount(id: string): Promise<BillingAccountRecord | undefined>;
+    getDefaultBillingAccount(identity: BillingIdentityRef): Promise<BillingAccountRecord | undefined>;
+    listBillingAccountMembers(id: string): Promise<readonly BillingAccountMemberRecord[]>;
+    removeBillingAccountMember(input: BillingIdentityRef & {
+        readonly billingAccountId: string;
+    }): Promise<boolean>;
+    getPlanVersion(id: string): Promise<PlanVersionRecord | undefined>;
+    getActiveEntitlementSnapshot(billingAccountId: string): Promise<EntitlementSnapshotRecord | undefined>;
+    ensureOrgBillingLink(input: EnsureOrgBillingLinkInput): Promise<OrgBillingLinkRecord>;
+    getOrgBillingLink(org: string): Promise<OrgBillingLinkRecord | undefined>;
+}
+//# sourceMappingURL=in-memory.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/in-memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory.d.ts","sourceRoot":"","sources":["../../src/billing/in-memory.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EAIvB,KAAK,yBAAyB,EAK9B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,mBAAmB,EACnB,gCAAgC,EAChC,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAEpB,8BAAsB,2BAA4B,YAAW,mBAAmB;;IAW9E,SAAS,aAAa,OAAO,EAAE;QAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;KAChE;IAMD,qGAAqG;IACrG,SAAS,CAAC,oCAAoC,CAC5C,KAAK,EAAE;QACL,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,KAAK,EAAE;YACd,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;YACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;SACxB,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,EACD,SAAS,EAAE,MAAM,GAChB,IAAI;IAuCD,2BAA2B,CAC/B,KAAK,EAAE,gCAAgC,GACtC,OAAO,CAAC,oBAAoB,CAAC;IA6ChC,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAIxE,wBAAwB,CACtB,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAK5C,yBAAyB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,0BAA0B,EAAE,CAAC;IAc/E,0BAA0B,CAC9B,KAAK,EAAE,kBAAkB,GAAG;QAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,OAAO,CAAC;IAoBnB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAIlE,4BAA4B,CAC1B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAM3C,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0D3F,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;CAG1E"}

package/node_modules/@noodle-borg/service/dist/billing/in-memory.js

@@ -0,0 +1,185 @@
+import { validateSlug } from '../store/validate.js';
+import { billingIdentityKey, billingMemberKey, createDefaultFreeBillingRecords, FREE_PLAN_VERSION, GOOGLE_CONTROL_PLANE_ISSUER, normalizeBillingEmail, normalizeBillingIdentity, validateBillingAccountId, validateBillingLinkReason, } from './model.js';
+export class InMemoryBillingAccountStore {
+    #accounts = new Map();
+    #defaults = new Map();
+    #members = new Map();
+    #snapshots = new Map();
+    #activeSnapshots = new Map();
+    #orgLinks = new Map();
+    #now;
+    #orgExists;
+    #isOrgOwner;
+    constructor(options) {
+        this.#now = options.now ?? (() => new Date());
+        this.#orgExists = options.orgExists;
+        this.#isOrgOwner = options.isOrgOwner;
+    }
+    /** Commit the in-memory default-account + initial org-link tuple without an async visibility gap. */
+    ensureDefaultAccountAndOrgLinkAtomic(input, createdAt) {
+        const identity = normalizeBillingIdentity({
+            identityIssuer: input.owner.identityIssuer ?? GOOGLE_CONTROL_PLANE_ISSUER,
+            subject: input.owner.subject,
+        });
+        const accounts = new Map(this.#accounts);
+        const defaults = new Map(this.#defaults);
+        const members = new Map(this.#members);
+        const snapshots = new Map(this.#snapshots);
+        const activeSnapshots = new Map(this.#activeSnapshots);
+        const orgLinks = new Map(this.#orgLinks);
+        try {
+            const account = this.#ensureDefaultBillingAccount({ ...identity, email: input.owner.email }, () => createdAt);
+            this.#ensureOrgBillingLink({
+                org: input.org,
+                billingAccountId: account.id,
+                homeFreeBillingAccountId: account.id,
+                homeOwner: identity,
+                linkedBy: identity,
+                reason: input.reason,
+            }, () => createdAt, true);
+        }
+        catch (error) {
+            restoreMap(this.#accounts, accounts);
+            restoreMap(this.#defaults, defaults);
+            restoreMap(this.#members, members);
+            restoreMap(this.#snapshots, snapshots);
+            restoreMap(this.#activeSnapshots, activeSnapshots);
+            restoreMap(this.#orgLinks, orgLinks);
+            throw error;
+        }
+    }
+    async ensureDefaultBillingAccount(input) {
+        return this.#ensureDefaultBillingAccount(input, () => this.#now().toISOString());
+    }
+    #ensureDefaultBillingAccount(input, createdAt) {
+        const identity = normalizeBillingIdentity(input);
+        const identityKey = billingIdentityKey(identity);
+        const existingId = this.#defaults.get(identityKey);
+        if (existingId !== undefined) {
+            const account = this.#accounts.get(existingId);
+            const snapshotId = this.#activeSnapshots.get(existingId);
+            const memberKey = billingMemberKey({ billingAccountId: existingId, ...identity });
+            const member = this.#members.get(memberKey);
+            if (account === undefined ||
+                snapshotId === undefined ||
+                !this.#snapshots.has(snapshotId) ||
+                member?.role !== 'owner') {
+                throw new Error('default billing account is incomplete');
+            }
+            this.#members.set(memberKey, { ...member, email: normalizeBillingEmail(input.email) });
+            return account;
+        }
+        const created = createDefaultFreeBillingRecords({
+            identity,
+            email: input.email,
+            ...(input.displayName !== undefined ? { displayName: input.displayName } : {}),
+            createdAt: createdAt(),
+        });
+        this.#accounts.set(created.account.id, created.account);
+        this.#defaults.set(identityKey, created.account.id);
+        this.#members.set(billingMemberKey({ billingAccountId: created.account.id, ...identity }), created.member);
+        this.#snapshots.set(created.snapshot.id, created.snapshot);
+        this.#activeSnapshots.set(created.account.id, created.snapshot.id);
+        return created.account;
+    }
+    getBillingAccount(id) {
+        return Promise.resolve(this.#accounts.get(validateBillingAccountId(id)));
+    }
+    getDefaultBillingAccount(identity) {
+        const id = this.#defaults.get(billingIdentityKey(normalizeBillingIdentity(identity)));
+        return Promise.resolve(id === undefined ? undefined : this.#accounts.get(id));
+    }
+    listBillingAccountMembers(id) {
+        const billingAccountId = validateBillingAccountId(id);
+        return Promise.resolve([...this.#members.values()]
+            .filter((member) => member.billingAccountId === billingAccountId)
+            .sort((a, b) => a.createdAt.localeCompare(b.createdAt) ||
+            a.identityIssuer.localeCompare(b.identityIssuer) ||
+            a.subject.localeCompare(b.subject)));
+    }
+    async removeBillingAccountMember(input) {
+        const billingAccountId = validateBillingAccountId(input.billingAccountId);
+        const identity = normalizeBillingIdentity(input);
+        const key = billingMemberKey({ billingAccountId, ...identity });
+        const existing = this.#members.get(key);
+        if (existing === undefined)
+            return false;
+        if (existing.role === 'owner') {
+            // Keep the owner-count check and delete in the same synchronous turn. Awaiting the public list
+            // method here lets two removals observe the same pre-delete owner set.
+            const ownerCount = [...this.#members.values()].filter((member) => member.billingAccountId === billingAccountId && member.role === 'owner').length;
+            if (ownerCount <= 1)
+                throw new Error('cannot remove the last billing owner');
+        }
+        if (this.#defaults.get(billingIdentityKey(identity)) === billingAccountId) {
+            throw new Error('cannot remove the default billing owner without an atomic default transfer');
+        }
+        return this.#members.delete(key);
+    }
+    getPlanVersion(id) {
+        return Promise.resolve(id === FREE_PLAN_VERSION.id ? FREE_PLAN_VERSION : undefined);
+    }
+    getActiveEntitlementSnapshot(billingAccountId) {
+        const id = validateBillingAccountId(billingAccountId);
+        const snapshotId = this.#activeSnapshots.get(id);
+        return Promise.resolve(snapshotId === undefined ? undefined : this.#snapshots.get(snapshotId));
+    }
+    async ensureOrgBillingLink(input) {
+        return this.#ensureOrgBillingLink(input, () => this.#now().toISOString());
+    }
+    #ensureOrgBillingLink(input, linkedAt, pendingOrg = false) {
+        const org = validateSlug('org', input.org);
+        if (!pendingOrg && !this.#orgExists(org)) {
+            throw new Error('organization not found');
+        }
+        const reason = validateBillingLinkReason(input.reason);
+        const accountId = validateBillingAccountId(input.billingAccountId);
+        const homeFreeAccountId = validateBillingAccountId(input.homeFreeBillingAccountId);
+        if (accountId !== homeFreeAccountId) {
+            throw new Error('initial billing-account link must use the organization home Free account');
+        }
+        if (!this.#accounts.has(accountId))
+            throw new Error('billing account not found');
+        const homeOwner = normalizeBillingIdentity(input.homeOwner);
+        const ownerDefaultId = this.#defaults.get(billingIdentityKey(homeOwner));
+        const ownerMember = this.#members.get(billingMemberKey({ billingAccountId: homeFreeAccountId, ...homeOwner }));
+        if (ownerDefaultId !== homeFreeAccountId || ownerMember?.role !== 'owner') {
+            throw new Error('organization home Free account must be the home owner default account');
+        }
+        if (!pendingOrg && !this.#isOrgOwner(org, homeOwner.subject)) {
+            throw new Error('organization home Free owner must be a current organization owner');
+        }
+        const linkedBy = normalizeBillingIdentity(input.linkedBy);
+        const existing = this.#orgLinks.get(org);
+        if (existing !== undefined) {
+            if (existing.billingAccountId !== accountId ||
+                existing.homeFreeBillingAccountId !== homeFreeAccountId) {
+                throw new Error('organization already has an active billing-account link');
+            }
+            return existing;
+        }
+        const record = {
+            orgSlug: org,
+            billingAccountId: accountId,
+            homeFreeBillingAccountId: homeFreeAccountId,
+            homeOwner,
+            fallbackBillingAccountId: homeFreeAccountId,
+            version: 1,
+            active: true,
+            linkedAt: linkedAt(),
+            linkedBy,
+            reason,
+        };
+        this.#orgLinks.set(org, record);
+        return record;
+    }
+    getOrgBillingLink(org) {
+        return Promise.resolve(this.#orgLinks.get(validateSlug('org', org)));
+    }
+}
+function restoreMap(target, source) {
+    target.clear();
+    for (const [key, value] of source)
+        target.set(key, value);
+}
+//# sourceMappingURL=in-memory.js.map

package/node_modules/@noodle-borg/service/dist/billing/in-memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory.js","sourceRoot":"","sources":["../../src/billing/in-memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAIL,kBAAkB,EAClB,gBAAgB,EAChB,+BAA+B,EAE/B,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACrB,wBAAwB,EAGxB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAOpB,MAAM,OAAgB,2BAA2B;IACtC,SAAS,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpD,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IACzD,UAAU,GAAG,IAAI,GAAG,EAAqC,CAAC;IAC1D,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,SAAS,GAAG,IAAI,GAAG,EAAgC,CAAC;IACpD,IAAI,CAAa;IACjB,UAAU,CAA2B;IACrC,WAAW,CAA4C;IAEhE,YAAsB,OAIrB;QACC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IACxC,CAAC;IAED,qGAAqG;IAC3F,oCAAoC,CAC5C,KAQC,EACD,SAAiB;QAEjB,MAAM,QAAQ,GAAG,wBAAwB,CAAC;YACxC,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,IAAI,2BAA2B;YACzE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;SAC7B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,4BAA4B,CAC/C,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EACzC,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;YACF,IAAI,CAAC,qBAAqB,CACxB;gBACE,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,gBAAgB,EAAE,OAAO,CAAC,EAAE;gBAC5B,wBAAwB,EAAE,OAAO,CAAC,EAAE;gBACpC,SAAS,EAAE,QAAQ;gBACnB,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,GAAG,EAAE,CAAC,SAAS,EACf,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,KAAuC;QAEvC,OAAO,IAAI,CAAC,4BAA4B,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,4BAA4B,CAC1B,KAAuC,EACvC,SAAuB;QAEvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,IACE,OAAO,KAAK,SAAS;gBACrB,UAAU,KAAK,SAAS;gBACxB,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;gBAChC,MAAM,EAAE,IAAI,KAAK,OAAO,EACxB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvF,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,+BAA+B,CAAC;YAC9C,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,SAAS,EAAE,SAAS,EAAE;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,EACvE,OAAO,CAAC,MAAM,CACf,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,EAAU;QAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,wBAAwB,CACtB,QAA4B;QAE5B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,yBAAyB,CAAC,EAAU;QAClC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,CAAC;aAChE,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACtC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;YAChD,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CACrC,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,KAAiE;QAEjE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,+FAA+F;YAC/F,uEAAuE;YACvE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CACpF,CAAC,MAAM,CAAC;YACT,IAAI,UAAU,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,CAAC;IAED,4BAA4B,CAC1B,gBAAwB;QAExB,MAAM,EAAE,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAAgC;QACzD,OAAO,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,qBAAqB,CACnB,KAAgC,EAChC,QAAsB,EACtB,UAAU,GAAG,KAAK;QAElB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACnE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnF,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CACnC,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GAAG,SAAS,EAAE,CAAC,CACxE,CAAC;QACF,IAAI,cAAc,KAAK,iBAAiB,IAAI,WAAW,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IACE,QAAQ,CAAC,gBAAgB,KAAK,SAAS;gBACvC,QAAQ,CAAC,wBAAwB,KAAK,iBAAiB,EACvD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAyB;YACnC,OAAO,EAAE,GAAG;YACZ,gBAAgB,EAAE,SAAS;YAC3B,wBAAwB,EAAE,iBAAiB;YAC3C,SAAS;YACT,wBAAwB,EAAE,iBAAiB;YAC3C,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ,EAAE;YACpB,QAAQ;YACR,MAAM;SACP,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB,CAAC,GAAW;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;CACF;AAED,SAAS,UAAU,CAAO,MAAiB,EAAE,MAAyB;IACpE,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/migration-apply.d.ts

@@ -0,0 +1,98 @@
+import type { AuditEventInput } from '@noodle-borg/module';
+import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
+import { type LegacyBillingMigrationMapping } from './migration.js';
+export interface LegacyBillingPlanEvidence {
+    readonly schemaVersion: 1;
+    readonly service: string;
+    readonly capturedAt: string;
+    readonly authoritativeOrganizationCount: number;
+    readonly projections: readonly {
+        readonly org: string;
+        readonly response: {
+            readonly ok: true;
+            readonly service: string;
+            readonly plan: {
+                readonly org: string;
+                readonly plan: 'free';
+                readonly state: 'active';
+                readonly source: 'default';
+            };
+        };
+    }[];
+    readonly reconciliation: {
+        readonly complete: true;
+        readonly treatment: 'preserve_as_free';
+        readonly counts: {
+            readonly freeActiveDefault: number;
+            readonly exceptions: 0;
+        };
+    };
+}
+export interface LegacyBillingMigrationApplyRequest {
+    readonly schemaVersion: 1;
+    readonly mode: 'shadow';
+    readonly mappings: readonly LegacyBillingMigrationMapping[];
+    readonly expectedPreviewChecksum: string;
+    readonly legacyPlanEvidence: LegacyBillingPlanEvidence;
+    readonly idempotencyKey: string;
+    readonly reason: string;
+    readonly confirmed: true;
+}
+export interface LegacyBillingMigrationApplyResult {
+    readonly schemaVersion: 1;
+    readonly migrationId: string;
+    readonly mode: 'shadow';
+    readonly state: 'prepared';
+    readonly replayed: boolean;
+    readonly preparedAt: string;
+    readonly enforcementMode: 'legacy_unchanged';
+    readonly meteringMode: 'not_started';
+    readonly grantMode: 'pending_activation';
+    readonly mappingChecksum: string;
+    readonly previewChecksum: string;
+    readonly planEvidenceChecksum: string;
+    readonly counts: {
+        readonly organizations: number;
+        readonly accountsCreated: number;
+        readonly accountsReused: number;
+        readonly linksCreated: number;
+        readonly linksPreserved: number;
+        readonly productionApps: number;
+        readonly grantCandidateFundingSets: number;
+    };
+    readonly fundingSets: readonly {
+        readonly billingAccountId: string;
+        readonly accountDisposition: 'created' | 'existing';
+        readonly snapshotId: string;
+        readonly organizations: number;
+        readonly productionApps: number;
+        readonly grantCandidate: boolean;
+    }[];
+    readonly links: readonly {
+        readonly org: string;
+        readonly billingAccountId: string;
+        readonly version: number;
+        readonly disposition: 'created' | 'preserved';
+    }[];
+}
+export interface LegacyBillingMigrationStore {
+    /** PostgreSQL stores persist success audit events in-transaction; callers then fan out mirrors only. */
+    readonly successAuditMode?: 'transactional';
+    prepareLegacyBillingMigration(input: {
+        readonly request: LegacyBillingMigrationApplyRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<LegacyBillingMigrationApplyResult>;
+}
+export type LegacyBillingMigrationConflictCode = 'preview_not_ready' | 'preview_checksum_mismatch' | 'legacy_plan_evidence_drift' | 'incomplete_billing_destination' | 'idempotency_key_conflict' | 'migration_already_prepared' | 'serialization_conflict';
+export declare class LegacyBillingMigrationConflictError extends Error {
+    readonly code: LegacyBillingMigrationConflictCode;
+    constructor(code: LegacyBillingMigrationConflictCode, message: string);
+}
+export declare function parseLegacyBillingMigrationPlanEvidence(value: unknown): LegacyBillingPlanEvidence;
+export declare function parseLegacyBillingMigrationApplyRequest(value: unknown): LegacyBillingMigrationApplyRequest;
+export declare function legacyBillingMigrationPlanEvidenceChecksum(evidence: LegacyBillingPlanEvidence): string;
+export declare function legacyBillingMigrationRequestFingerprint(request: LegacyBillingMigrationApplyRequest, actor: Pick<ControlPlaneIdentity, 'subject' | 'email'>, service: string): string;
+export declare function legacyBillingMigrationSuccessAudit(result: LegacyBillingMigrationApplyResult, actor: Pick<ControlPlaneIdentity, 'subject' | 'email'>): AuditEventInput;
+export declare function normalizeBillingMigrationServiceUrl(value: string): string;
+//# sourceMappingURL=migration-apply.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/migration-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migration-apply.d.ts","sourceRoot":"","sources":["../../src/billing/migration-apply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EACL,KAAK,6BAA6B,EAInC,MAAM,gBAAgB,CAAC;AAGxB,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,QAAQ,EAAE;YACjB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;YAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE;gBACb,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;aAC5B,CAAC;SACH,CAAC;KACH,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACvC,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;YACnC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;SACxB,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,kBAAkB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;KAC5C,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,GAAG,UAAU,CAAC;QACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;KAClC,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,EAAE,SAAS;QACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,WAAW,CAAC;KAC/C,EAAE,CAAC;CACL;AAED,MAAM,WAAW,2BAA2B;IAC1C,wGAAwG;IACxG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAC5C,6BAA6B,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;QACrD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,kCAAkC,GAC1C,mBAAmB,GACnB,2BAA2B,GAC3B,4BAA4B,GAC5B,gCAAgC,GAChC,0BAA0B,GAC1B,4BAA4B,GAC5B,wBAAwB,CAAC;AAE7B,qBAAa,mCAAoC,SAAQ,KAAK;IAC5D,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;gBAEtC,IAAI,EAAE,kCAAkC,EAAE,OAAO,EAAE,MAAM;CAKtE;AA2DD,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CA4CjG;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,OAAO,GACb,kCAAkC,CA4BpC;AAED,wBAAgB,0CAA0C,CACxD,QAAQ,EAAE,yBAAyB,GAClC,MAAM,CAKR;AAED,wBAAgB,wCAAwC,CACtD,OAAO,EAAE,kCAAkC,EAC3C,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,CAAC,EACtD,OAAO,EAAE,MAAM,GACd,MAAM,CAYR;AAED,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,iCAAiC,EACzC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,CAAC,GACrD,eAAe,CAwBjB;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAazE"}