@noodleseed/one 0.45.0 → 0.47.0

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-profile.js

@@ -0,0 +1,341 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { insertAuditEvent } from '@noodle-borg/module-audit';
+import { BILLING_ENFORCEMENT_COHORT_KIND, BillingEnforcementCohortConflictError, BillingEnforcementCohortSealResponseSchema, BillingEnforcementCohortStatusResponseSchema, billingEnforcementCohortRequestFingerprint, billingEnforcementCohortSuccessAudit, normalizeBillingEnforcementServiceUrl, parseBillingEnforcementCohortSealRequest, } from './enforcement-profile.js';
+import { normalizeBillingEmail, validateBillingAccountId } from './model.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { validateScalarId } from './postgres-records.js';
+export const BILLING_ENFORCEMENT_COHORT_LIFECYCLE_LOCK_KEY = 'billing-enforcement-cohort-seal:legacy-internal-v1';
+export async function getEnforcementCohortStatusRow(pool) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN ISOLATION LEVEL REPEATABLE READ READ ONLY');
+        const response = await readEnforcementCohortStatus(client);
+        await client.query('COMMIT');
+        return response;
+    }
+    catch (error) {
+        await rollbackQuietly(client);
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+export function getActiveBillingAccountEnforcementProfileRow(pool, billingAccountId) {
+    return getActiveBillingAccountEnforcementProfileQuery(pool, validateBillingAccountId(billingAccountId));
+}
+export async function sealEnforcementCohortRow(pool, input) {
+    const request = parseBillingEnforcementCohortSealRequest(input.request);
+    const actor = normalizeActor(input.actor);
+    const service = normalizeBillingEnforcementServiceUrl(input.service);
+    const fingerprint = billingEnforcementCohortRequestFingerprint({
+        action: 'seal',
+        request,
+        actor,
+        service,
+    });
+    const idempotencyHash = hashIdempotencyKey(request.idempotencyKey);
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN ISOLATION LEVEL READ COMMITTED');
+        await lockLifecycle(client);
+        const replay = await findOperation(client, idempotencyHash);
+        if (replay !== undefined) {
+            const response = replayOperation(replay, fingerprint);
+            const replayedAt = await readBillingMeterTransactionTime(client);
+            await insertAuditEvent(client, billingEnforcementCohortSuccessAudit(response, actor), {
+                now: () => new Date(replayedAt),
+            });
+            await client.query('COMMIT');
+            return response;
+        }
+        const existing = await findSeal(client);
+        if (existing !== undefined) {
+            throw new BillingEnforcementCohortConflictError('enforcement_cohort_already_sealed', 'the legacy internal enforcement cohort was already sealed under a different key');
+        }
+        // The order matches normal workspace provisioning (organization, account, billing tuple). A writer
+        // already holding an insert lock finishes first and is included; later writers wait and observe the seal.
+        await client.query(`
+      LOCK TABLE orgs, billing_accounts, billing_entitlement_snapshots,
+                 billing_account_active_snapshots, org_billing_links
+      IN SHARE ROW EXCLUSIVE MODE
+    `);
+        const attributionBlockerCount = await countAttributionBlockers(client);
+        if (attributionBlockerCount !== 0) {
+            throw new BillingEnforcementCohortConflictError('billing_attribution_incomplete', 'every managed organization must have verified billing attribution before sealing');
+        }
+        const sealedAt = await readBillingMeterTransactionTime(client);
+        const sealId = `becs_${randomUUID()}`;
+        await client.query(`INSERT INTO billing_enforcement_cohort_seals
+         (id, singleton, schema_version, cohort_kind, state, legacy_account_profile,
+          post_seal_account_profile, sealed_at, sealed_by_subject, sealed_by_email,
+          service_origin, reason)
+       VALUES ($1, true, 1, $2, 'sealed', 'legacy_internal_exempt', 'enforced',
+               $3, $4, $5, $6, $7)`, [
+            sealId,
+            BILLING_ENFORCEMENT_COHORT_KIND,
+            sealedAt,
+            actor.subject,
+            actor.email,
+            service,
+            request.reason,
+        ]);
+        const profiles = await client.query(`INSERT INTO billing_account_enforcement_profiles
+         (billing_account_id, version, schema_version, mode, cohort_kind, cohort_seal_id,
+          source, effective_from, created_at)
+       SELECT id, 1, 1, 'legacy_internal_exempt', $2, $1,
+              'legacy_cohort_seal', $3, $3
+       FROM billing_accounts
+       ORDER BY id`, [sealId, BILLING_ENFORCEMENT_COHORT_KIND, sealedAt]);
+        await client.query(`INSERT INTO billing_account_active_enforcement_profiles
+         (billing_account_id, profile_version)
+       SELECT billing_account_id, version
+       FROM billing_account_enforcement_profiles
+       WHERE cohort_seal_id = $1`, [sealId]);
+        const status = await readEnforcementCohortStatus(client);
+        if (status.state !== 'sealed' ||
+            status.sealId !== sealId ||
+            status.billingAccountCount !== profiles.rowCount ||
+            status.unprofiledAccountCount !== 0 ||
+            status.enforcedAccountCount !== 0) {
+            throw new BillingEnforcementCohortConflictError('enforcement_profile_state_conflict', 'the legacy internal cohort could not be classified completely');
+        }
+        const response = BillingEnforcementCohortSealResponseSchema.parse({
+            ...status,
+            replayed: false,
+            activationState: 'not_active',
+        });
+        await insertOperation(client, {
+            response,
+            idempotencyHash,
+            fingerprint,
+            actor,
+            service,
+            reason: request.reason,
+            createdAt: sealedAt,
+        });
+        await insertAuditEvent(client, billingEnforcementCohortSuccessAudit(response, actor), {
+            now: () => new Date(sealedAt),
+        });
+        await client.query('COMMIT');
+        return response;
+    }
+    catch (error) {
+        await rollbackQuietly(client);
+        throw translateTransactionError(error);
+    }
+    finally {
+        client.release();
+    }
+}
+/**
+ * Application-side defense in depth after account insertion. The database trigger normally creates the
+ * profile first; the active-profile lookup keeps this helper idempotent with that trigger-created state.
+ */
+export async function ensurePostSealBillingAccountEnforcementProfileTx(client, billingAccountId) {
+    const accountId = validateBillingAccountId(billingAccountId);
+    const seal = await findSeal(client);
+    if (seal === undefined)
+        return undefined;
+    const existing = await getActiveBillingAccountEnforcementProfileQuery(client, accountId);
+    if (existing !== undefined)
+        return existing;
+    const effectiveFrom = await readBillingMeterTransactionTime(client);
+    const { rows } = await client.query(`INSERT INTO billing_account_enforcement_profiles
+       (billing_account_id, version, schema_version, mode, cohort_kind, cohort_seal_id,
+        source, effective_from, created_at)
+     VALUES ($1, 1, 1, 'enforced', $2, $3, 'post_seal_account', $4, $4)
+     RETURNING *`, [accountId, BILLING_ENFORCEMENT_COHORT_KIND, seal.id, effectiveFrom]);
+    await client.query(`INSERT INTO billing_account_active_enforcement_profiles
+       (billing_account_id, profile_version)
+     VALUES ($1, 1)`, [accountId]);
+    return profileRowToRecord(rows[0]);
+}
+export async function requireBillingAccountEnforcementProfileIfSealedTx(client, billingAccountId) {
+    if ((await findSeal(client)) === undefined)
+        return;
+    if ((await getActiveBillingAccountEnforcementProfileQuery(client, billingAccountId)) === undefined) {
+        throw new Error('default billing account is incomplete');
+    }
+}
+async function readEnforcementCohortStatus(queryable) {
+    const seal = await findSeal(queryable);
+    const counts = await queryable.query(`
+      SELECT
+        count(account.id)::text AS billing_account_count,
+        count(profile.billing_account_id)::text AS profiled_account_count,
+        count(*) FILTER (WHERE profile.mode = 'legacy_internal_exempt')::text
+          AS legacy_internal_exempt_account_count,
+        count(*) FILTER (WHERE profile.mode = 'enforced')::text AS enforced_account_count,
+        count(*) FILTER (WHERE profile.billing_account_id IS NULL)::text AS unprofiled_account_count
+      FROM billing_accounts AS account
+      LEFT JOIN billing_account_active_enforcement_profiles AS active
+        ON active.billing_account_id = account.id
+      LEFT JOIN billing_account_enforcement_profiles AS profile
+        ON profile.billing_account_id = active.billing_account_id
+       AND profile.version = active.profile_version
+    `);
+    const attributionBlockerCount = await countAttributionBlockers(queryable);
+    const row = counts.rows[0];
+    return BillingEnforcementCohortStatusResponseSchema.parse({
+        schemaVersion: 1,
+        cohortKind: BILLING_ENFORCEMENT_COHORT_KIND,
+        state: seal === undefined ? 'unsealed' : 'sealed',
+        sealId: seal?.id ?? null,
+        sealedAt: seal === undefined ? null : toIso(seal.sealed_at),
+        legacyAccountProfile: 'legacy_internal_exempt',
+        postSealAccountProfile: 'enforced',
+        billingAccountCount: parseCount(row?.billing_account_count),
+        profiledAccountCount: parseCount(row?.profiled_account_count),
+        legacyInternalExemptAccountCount: parseCount(row?.legacy_internal_exempt_account_count),
+        enforcedAccountCount: parseCount(row?.enforced_account_count),
+        unprofiledAccountCount: parseCount(row?.unprofiled_account_count),
+        billingAttributionComplete: attributionBlockerCount === 0,
+        attributionBlockerCount,
+    });
+}
+async function countAttributionBlockers(queryable) {
+    const { rows } = await queryable.query(`
+    SELECT count(*)::text AS incomplete
+    FROM (
+      -- Blocker units are distinct entities: each unlinked managed organization and each incomplete
+      -- account used by at least one active non-local organization link contributes exactly once.
+      -- Unlinked draft/snapshotless accounts are valid and do not block the cohort seal.
+      SELECT 'organization' AS blocker_kind, org.slug AS blocker_id
+      FROM orgs AS org
+      WHERE org.slug <> 'local'
+        AND NOT EXISTS (
+          SELECT 1
+          FROM org_billing_links AS link
+          WHERE link.org_slug = org.slug AND link.active
+        )
+      UNION ALL
+      SELECT DISTINCT 'billing_account' AS blocker_kind, link.billing_account_id AS blocker_id
+      FROM org_billing_links AS link
+      JOIN orgs AS org ON org.slug = link.org_slug
+      WHERE org.slug <> 'local'
+        AND link.active
+        AND NOT EXISTS (
+          SELECT 1
+          FROM billing_account_active_snapshots AS active
+          JOIN billing_entitlement_snapshots AS snapshot
+            ON snapshot.billing_account_id = active.billing_account_id
+           AND snapshot.id = active.snapshot_id
+          WHERE active.billing_account_id = link.billing_account_id
+            AND snapshot.verification_status = 'verified'
+        )
+    ) AS blockers
+  `);
+    return parseCount(rows[0]?.incomplete);
+}
+async function findSeal(queryable) {
+    const { rows } = await queryable.query(`SELECT id, cohort_kind, state, legacy_account_profile,
+            post_seal_account_profile, sealed_at
+     FROM billing_enforcement_cohort_seals
+     WHERE singleton = true`);
+    return rows[0];
+}
+async function getActiveBillingAccountEnforcementProfileQuery(queryable, billingAccountId) {
+    const { rows } = await queryable.query(`SELECT profile.*
+     FROM billing_account_active_enforcement_profiles AS active
+     JOIN billing_account_enforcement_profiles AS profile
+       ON profile.billing_account_id = active.billing_account_id
+      AND profile.version = active.profile_version
+     WHERE active.billing_account_id = $1`, [validateBillingAccountId(billingAccountId)]);
+    return rows[0] === undefined ? undefined : profileRowToRecord(rows[0]);
+}
+function profileRowToRecord(row) {
+    if (row.schema_version !== 1 ||
+        row.cohort_kind !== BILLING_ENFORCEMENT_COHORT_KIND ||
+        !((row.mode === 'legacy_internal_exempt' && row.source === 'legacy_cohort_seal') ||
+            (row.mode === 'enforced' && row.source === 'post_seal_account'))) {
+        throw new Error('billing enforcement profile is invalid');
+    }
+    return {
+        schemaVersion: 1,
+        billingAccountId: validateBillingAccountId(row.billing_account_id),
+        version: row.version,
+        mode: row.mode,
+        cohortKind: row.cohort_kind,
+        cohortSealId: validateScalarId('billing enforcement cohort seal id', row.cohort_seal_id),
+        source: row.source,
+        effectiveFrom: toIso(row.effective_from),
+        createdAt: toIso(row.created_at),
+    };
+}
+function normalizeActor(actor) {
+    return {
+        ...actor,
+        subject: validateScalarId('billing enforcement actor subject', actor.subject),
+        email: normalizeBillingEmail(actor.email),
+    };
+}
+function hashIdempotencyKey(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function lockLifecycle(client) {
+    return client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [
+        BILLING_ENFORCEMENT_COHORT_LIFECYCLE_LOCK_KEY,
+    ]);
+}
+async function findOperation(client, idempotencyHash) {
+    const { rows } = await client.query(`SELECT action, request_fingerprint, result
+     FROM billing_enforcement_cohort_operations
+     WHERE idempotency_key_hash = $1`, [idempotencyHash]);
+    return rows[0];
+}
+function replayOperation(row, fingerprint) {
+    if (row.action !== 'seal' || row.request_fingerprint !== fingerprint) {
+        throw new BillingEnforcementCohortConflictError('idempotency_key_conflict', 'idempotency key was already used by a different request or actor');
+    }
+    const response = BillingEnforcementCohortSealResponseSchema.parse(row.result);
+    return { ...response, replayed: true };
+}
+async function insertOperation(client, input) {
+    await client.query(`INSERT INTO billing_enforcement_cohort_operations
+       (operation_id, action, idempotency_key_hash, request_fingerprint, cohort_seal_id,
+        result, actor_subject, actor_email, service_origin, reason, created_at)
+     VALUES ($1, 'seal', $2, $3, $4, $5::jsonb, $6, $7, $8, $9, $10)`, [
+        `beco_${randomUUID()}`,
+        input.idempotencyHash,
+        input.fingerprint,
+        input.response.sealId,
+        JSON.stringify(input.response),
+        input.actor.subject,
+        input.actor.email,
+        input.service,
+        input.reason,
+        input.createdAt,
+    ]);
+}
+function parseCount(value) {
+    const parsed = Number(value ?? '0');
+    if (!Number.isSafeInteger(parsed) || parsed < 0) {
+        throw new Error('billing enforcement aggregate count is invalid');
+    }
+    return parsed;
+}
+function translateTransactionError(error) {
+    const code = typeof error === 'object' && error !== null && 'code' in error
+        ? String(error.code)
+        : undefined;
+    if (code === '40001' || code === '40P01') {
+        return new BillingEnforcementCohortConflictError('serialization_conflict', 'billing enforcement cohort state changed concurrently; retry the exact request');
+    }
+    return error;
+}
+function toIso(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw new Error('billing enforcement timestamp is invalid');
+    return date.toISOString();
+}
+async function rollbackQuietly(client) {
+    try {
+        await client.query('ROLLBACK');
+    }
+    catch {
+        // Preserve the original transaction failure.
+    }
+}
+//# sourceMappingURL=postgres-enforcement-profile.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-profile.js","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EACL,+BAA+B,EAE/B,qCAAqC,EAGrC,0CAA0C,EAE1C,4CAA4C,EAC5C,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,EACrC,wCAAwC,GACzC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,CAAC,MAAM,6CAA6C,GACxD,oDAAoD,CAAC;AA6BvD,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAU;IAEV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,IAAU,EACV,gBAAwB;IAExB,OAAO,8CAA8C,CACnD,IAAI,EACJ,wBAAwB,CAAC,gBAAgB,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAU,EACV,KAIC;IAED,MAAM,OAAO,GAAG,wCAAwC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,qCAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,0CAA0C,CAAC;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO;QACP,KAAK;QACL,OAAO;KACR,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC3D,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACjE,MAAM,gBAAgB,CAAC,MAAM,EAAE,oCAAoC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;gBACpF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,qCAAqC,CAC7C,mCAAmC,EACnC,iFAAiF,CAClF,CAAC;QACJ,CAAC;QAED,mGAAmG;QACnG,0GAA0G;QAC1G,MAAM,MAAM,CAAC,KAAK,CAAC;;;;KAIlB,CAAC,CAAC;QACH,MAAM,uBAAuB,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,uBAAuB,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,EAChC,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,KAAK,CAChB;;;;;mCAK6B,EAC7B;YACE,MAAM;YACN,+BAA+B;YAC/B,QAAQ;YACR,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,KAAK;YACX,OAAO;YACP,OAAO,CAAC,MAAM;SACf,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;mBAMa,EACb,CAAC,MAAM,EAAE,+BAA+B,EAAE,QAAQ,CAAC,CACpD,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,CAChB;;;;iCAI2B,EAC3B,CAAC,MAAM,CAAC,CACT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACzD,IACE,MAAM,CAAC,KAAK,KAAK,QAAQ;YACzB,MAAM,CAAC,MAAM,KAAK,MAAM;YACxB,MAAM,CAAC,mBAAmB,KAAK,QAAQ,CAAC,QAAQ;YAChD,MAAM,CAAC,sBAAsB,KAAK,CAAC;YACnC,MAAM,CAAC,oBAAoB,KAAK,CAAC,EACjC,CAAC;YACD,MAAM,IAAI,qCAAqC,CAC7C,oCAAoC,EACpC,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,0CAA0C,CAAC,KAAK,CAAC;YAChE,GAAG,MAAM;YACT,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,YAAY;SAC9B,CAAC,CAAC;QACH,MAAM,eAAe,CAAC,MAAM,EAAE;YAC5B,QAAQ;YACR,eAAe;YACf,WAAW;YACX,KAAK;YACL,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,MAAM,gBAAgB,CAAC,MAAM,EAAE,oCAAoC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;YACpF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gDAAgD,CACpE,MAAkB,EAClB,gBAAwB;IAExB,MAAM,SAAS,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,QAAQ,GAAG,MAAM,8CAA8C,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,aAAa,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;iBAIa,EACb,CAAC,SAAS,EAAE,+BAA+B,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CACrE,CAAC;IACF,MAAM,MAAM,CAAC,KAAK,CAChB;;oBAEgB,EAChB,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iDAAiD,CACrE,MAAkB,EAClB,gBAAwB;IAExB,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO;IACnD,IACE,CAAC,MAAM,8CAA8C,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,KAAK,SAAS,EAC9F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAA4B;IAE5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAMjC;;;;;;;;;;;;;;KAcA,CAAC,CAAC;IACL,MAAM,uBAAuB,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,OAAO,4CAA4C,CAAC,KAAK,CAAC;QACxD,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,+BAA+B;QAC3C,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QACjD,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;QACxB,QAAQ,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3D,oBAAoB,EAAE,wBAAwB;QAC9C,sBAAsB,EAAE,UAAU;QAClC,mBAAmB,EAAE,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC;QAC3D,oBAAoB,EAAE,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC;QAC7D,gCAAgC,EAAE,UAAU,CAAC,GAAG,EAAE,oCAAoC,CAAC;QACvF,oBAAoB,EAAE,UAAU,CAAC,GAAG,EAAE,sBAAsB,CAAC;QAC7D,sBAAsB,EAAE,UAAU,CAAC,GAAG,EAAE,wBAAwB,CAAC;QACjE,0BAA0B,EAAE,uBAAuB,KAAK,CAAC;QACzD,uBAAuB;KACxB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,SAA4B;IAClE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BvE,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAA4B;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CACpC;;;4BAGwB,CACzB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,8CAA8C,CAC3D,SAA4B,EAC5B,gBAAwB;IAExB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CACpC;;;;;0CAKsC,EACtC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAC7C,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAe;IACzC,IACE,GAAG,CAAC,cAAc,KAAK,CAAC;QACxB,GAAG,CAAC,WAAW,KAAK,+BAA+B;QACnD,CAAC,CACC,CAAC,GAAG,CAAC,IAAI,KAAK,wBAAwB,IAAI,GAAG,CAAC,MAAM,KAAK,oBAAoB,CAAC;YAC9E,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB,CAAC,CAChE,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClE,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,YAAY,EAAE,gBAAgB,CAAC,oCAAoC,EAAE,GAAG,CAAC,cAAc,CAAC;QACxF,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QACxC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA2B;IACjD,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,gBAAgB,CAAC,mCAAmC,EAAE,KAAK,CAAC,OAAO,CAAC;QAC7E,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,MAAkB;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;QAC3E,6CAA6C;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAkB,EAClB,eAAuB;IAEvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;qCAEiC,EACjC,CAAC,eAAe,CAAC,CAClB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CACtB,GAAiB,EACjB,WAAmB;IAEnB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,mBAAmB,KAAK,WAAW,EAAE,CAAC;QACrE,MAAM,IAAI,qCAAqC,CAC7C,0BAA0B,EAC1B,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,0CAA0C,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9E,OAAO,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAkB,EAClB,KAQC;IAED,MAAM,MAAM,CAAC,KAAK,CAChB;;;qEAGiE,EACjE;QACE,QAAQ,UAAU,EAAE,EAAE;QACtB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,QAAQ,CAAC,MAAM;QACrB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9B,KAAK,CAAC,KAAK,CAAC,OAAO;QACnB,KAAK,CAAC,KAAK,CAAC,KAAK;QACjB,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS;KAChB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAC5D,CAAC,CAAC,MAAM,CAAE,KAAoC,CAAC,IAAI,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,OAAO,IAAI,qCAAqC,CAC9C,wBAAwB,EACxB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-clock.d.ts

@@ -0,0 +1,3 @@
+import type { Pool, PoolClient } from 'pg';
+export declare function readBillingMeterTransactionTime(client: Pool | PoolClient): Promise<string>;
+//# sourceMappingURL=postgres-meter-clock.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-clock.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-clock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAG3C,wBAAsB,+BAA+B,CAAC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAUhG"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-clock.js

@@ -0,0 +1,9 @@
+import { normalizeBillingUsageInstant } from './usage-window.js';
+export async function readBillingMeterTransactionTime(client) {
+    const result = await client.query('SELECT billing_meter_transaction_time() AS transaction_time');
+    const value = result.rows[0]?.transaction_time;
+    if (value === undefined)
+        throw new Error('billing meter database clock returned no result');
+    return normalizeBillingUsageInstant('billing meter database transaction time', value instanceof Date ? value.toISOString() : value);
+}
+//# sourceMappingURL=postgres-meter-clock.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-clock.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-clock.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AAEjE,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,MAAyB;IAC7E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,6DAA6D,CAC9D,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5F,OAAO,4BAA4B,CACjC,yCAAyC,EACzC,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CACpD,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epoch-fixtures.d.ts

@@ -0,0 +1,13 @@
+import type { Pool } from 'pg';
+/** Internal fixture setup only; production lifecycle mutations use the audited epoch store. */
+export declare function prepareBillingMeterValidationEpoch(pool: Pool, input: {
+    readonly epochId: string;
+    readonly keyGeneration: string;
+    readonly releaseSha: string;
+    readonly retryIdentityVersion: number;
+    readonly writerContractVersion?: number;
+}): Promise<void>;
+export declare function retireBillingMeterValidationEpoch(pool: Pool, input: {
+    readonly epochId: string;
+}): Promise<void>;
+//# sourceMappingURL=postgres-meter-epoch-fixtures.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epoch-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-epoch-fixtures.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-epoch-fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAK3C,+FAA+F;AAC/F,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IACL,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC,GACA,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,wBAAsB,iCAAiC,CACrD,IAAI,EAAE,IAAI,EACV,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epoch-fixtures.js

@@ -0,0 +1,102 @@
+import { BILLING_METER_VALIDATION_WRITER_CONTRACT_VERSION } from './meter-validation-epoch.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { validateScalarId } from './postgres-records.js';
+/** Internal fixture setup only; production lifecycle mutations use the audited epoch store. */
+export async function prepareBillingMeterValidationEpoch(pool, input) {
+    const epochId = validateScalarId('billing meter epoch id', input.epochId);
+    const generation = validateGeneration(input.keyGeneration);
+    const releaseSha = validateReleaseSha(input.releaseSha);
+    const writerContractVersion = validatePositiveVersion('billing meter writer contract version', input.writerContractVersion ?? BILLING_METER_VALIDATION_WRITER_CONTRACT_VERSION);
+    if (!Number.isSafeInteger(input.retryIdentityVersion) || input.retryIdentityVersion < 1) {
+        throw new Error('billing meter retry identity version must be positive');
+    }
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        const preparedAt = await readBillingMeterTransactionTime(client);
+        const existing = await client.query('SELECT * FROM billing_meter_epochs WHERE id = $1 FOR UPDATE', [epochId]);
+        const row = existing.rows[0];
+        if (row === undefined) {
+            await client.query(`INSERT INTO billing_meter_epochs
+           (id, schema_version, state, key_generation, release_sha, retry_identity_version,
+            writer_contract_version, prepared_at)
+         VALUES ($1, 1, 'prepared', $2, $3, $4, $5, $6)`, [
+                epochId,
+                generation,
+                releaseSha,
+                input.retryIdentityVersion,
+                writerContractVersion,
+                preparedAt,
+            ]);
+        }
+        else if (row.state !== 'prepared' ||
+            row.key_generation !== generation ||
+            row.release_sha !== releaseSha ||
+            row.retry_identity_version !== input.retryIdentityVersion ||
+            row.writer_contract_version !== writerContractVersion) {
+            throw new Error('billing meter validation epoch already exists with different semantics');
+        }
+        await client.query('COMMIT');
+    }
+    catch (error) {
+        await rollbackQuietly(client);
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+export async function retireBillingMeterValidationEpoch(pool, input) {
+    const epochId = validateScalarId('billing meter epoch id', input.epochId);
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        const retiredAt = await readBillingMeterTransactionTime(client);
+        const existing = await client.query('SELECT state FROM billing_meter_epochs WHERE id = $1 FOR UPDATE', [epochId]);
+        const state = existing.rows[0]?.state;
+        if (state === undefined)
+            throw new Error('billing meter validation epoch does not exist');
+        if (state === 'prepared') {
+            await client.query(`UPDATE billing_meter_epochs
+         SET state = 'retired', retired_at = $2
+         WHERE id = $1`, [epochId, retiredAt]);
+        }
+        else if (state !== 'retired') {
+            throw new Error('billing meter validation epoch cannot be retired from its current state');
+        }
+        await client.query('COMMIT');
+    }
+    catch (error) {
+        await rollbackQuietly(client);
+        throw error;
+    }
+    finally {
+        client.release();
+    }
+}
+function validateGeneration(value) {
+    if (!/^[0-9a-f]{64}$/.test(value)) {
+        throw new Error('billing meter key generation must be a SHA-256 digest');
+    }
+    return value;
+}
+function validateReleaseSha(value) {
+    if (!/^[0-9a-f]{40}$/.test(value)) {
+        throw new Error('billing meter release SHA must be a full 40-character commit digest');
+    }
+    return value;
+}
+function validatePositiveVersion(name, value) {
+    if (!Number.isSafeInteger(value) || value < 1)
+        throw new Error(`${name} must be positive`);
+    return value;
+}
+async function rollbackQuietly(client) {
+    try {
+        await client.query('ROLLBACK');
+    }
+    catch {
+        // Preserve the original transaction failure.
+    }
+}
+//# sourceMappingURL=postgres-meter-epoch-fixtures.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epoch-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-epoch-fixtures.js","sourceRoot":"","sources":["../../src/billing/postgres-meter-epoch-fixtures.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gDAAgD,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAU,EACV,KAMC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,qBAAqB,GAAG,uBAAuB,CACnD,uCAAuC,EACvC,KAAK,CAAC,qBAAqB,IAAI,gDAAgD,CAChF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAMhC,6DAA6D,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,KAAK,CAChB;;;wDAGgD,EAChD;gBACE,OAAO;gBACP,UAAU;gBACV,UAAU;gBACV,KAAK,CAAC,oBAAoB;gBAC1B,qBAAqB;gBACrB,UAAU;aACX,CACF,CAAC;QACJ,CAAC;aAAM,IACL,GAAG,CAAC,KAAK,KAAK,UAAU;YACxB,GAAG,CAAC,cAAc,KAAK,UAAU;YACjC,GAAG,CAAC,WAAW,KAAK,UAAU;YAC9B,GAAG,CAAC,sBAAsB,KAAK,KAAK,CAAC,oBAAoB;YACzD,GAAG,CAAC,uBAAuB,KAAK,qBAAqB,EACrD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAU,EACV,KAAmC;IAEnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,iEAAiE,EACjE,CAAC,OAAO,CAAC,CACV,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC1F,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,MAAM,CAAC,KAAK,CAChB;;uBAEe,EACf,CAAC,OAAO,EAAE,SAAS,CAAC,CACrB,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAkB;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epochs.d.ts

@@ -0,0 +1,41 @@
+import type { Pool, PoolClient } from 'pg';
+import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
+import { type BillingMeterValidationEpochPrepareRequest, type BillingMeterValidationEpochResult, type BillingMeterValidationEpochRetireRequest, type BillingMeterValidationEpochStore } from './meter-validation-epoch.js';
+export declare const BILLING_METER_VALIDATION_EPOCH_LIFECYCLE_LOCK_KEY = "billing-meter-validation-epoch-lifecycle:v1";
+export interface BillingMeterValidationEpochPrepareBindings {
+    readonly keyGeneration: string;
+    readonly releaseSha: string;
+    readonly retryIdentityVersion: number;
+    readonly writerContractVersion: number;
+}
+export type BillingMeterValidationEpochPreparePreflight = (input: {
+    readonly client: PoolClient;
+    readonly epochId: string;
+    readonly bindings: BillingMeterValidationEpochPrepareBindings;
+}) => Promise<boolean>;
+export interface PostgresBillingMeterValidationEpochStoreOptions {
+    readonly billingUsageHmacKey?: string;
+    readonly releaseSha?: string;
+    readonly retryIdentityVersion?: number;
+    readonly writerContractVersion?: number;
+    /** Required for prepare; retirement and exact replay remain available while health is degraded. */
+    readonly preparePreflight?: BillingMeterValidationEpochPreparePreflight;
+    readonly id?: () => string;
+}
+/** Durable, validation-only lifecycle. It never creates an active meter epoch. */
+export declare class PostgresBillingMeterValidationEpochStore implements BillingMeterValidationEpochStore {
+    #private;
+    readonly successAuditMode: "transactional";
+    constructor(pool: Pool, options: PostgresBillingMeterValidationEpochStoreOptions);
+    prepareValidationEpoch(input: {
+        readonly request: BillingMeterValidationEpochPrepareRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingMeterValidationEpochResult>;
+    retireValidationEpoch(input: {
+        readonly request: BillingMeterValidationEpochRetireRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingMeterValidationEpochResult>;
+}
+//# sourceMappingURL=postgres-meter-epochs.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-meter-epochs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-meter-epochs.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-meter-epochs.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAKnE,OAAO,EAGL,KAAK,yCAAyC,EAC9C,KAAK,iCAAiC,EAEtC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EAMtC,MAAM,6BAA6B,CAAC;AAKrC,eAAO,MAAM,iDAAiD,gDACf,CAAC;AAEhD,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,MAAM,2CAA2C,GAAG,CAAC,KAAK,EAAE;IAChE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,0CAA0C,CAAC;CAC/D,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvB,MAAM,WAAW,+CAA+C;IAC9D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,2CAA2C,CAAC;IACxE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAmBD,kFAAkF;AAClF,qBAAa,wCAAyC,YAAW,gCAAgC;;IAC/F,QAAQ,CAAC,gBAAgB,EAAG,eAAe,CAAU;gBAIzC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,+CAA+C;IAKhF,sBAAsB,CAAC,KAAK,EAAE;QAC5B,QAAQ,CAAC,OAAO,EAAE,yCAAyC,CAAC;QAC5D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAS9C,qBAAqB,CAAC,KAAK,EAAE;QAC3B,QAAQ,CAAC,OAAO,EAAE,wCAAwC,CAAC;QAC3D,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,iCAAiC,CAAC;CAuP/C"}