@noodleseed/one 0.47.0 → 0.49.0

package/node_modules/@noodle-borg/service/dist/billing/enforcement-activation-support.js

@@ -0,0 +1,125 @@
+export const BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS = Object.freeze({
+    trafficFleetConvergence: 60 * 60 * 1_000,
+    planVolumeCapacity: 24 * 60 * 60 * 1_000,
+    nonproductionFailClosedDrill: 24 * 60 * 60 * 1_000,
+    protectedProductionApproval: 60 * 60 * 1_000,
+});
+export const BILLING_ENFORCEMENT_ACTIVATION_EFFECTS = Object.freeze({
+    profileScope: 'enforced',
+    commercialScope: 'free_v1',
+    paidPlans: false,
+    startsFreshAuthoritativeEpochAtZero: true,
+    productionAppEnforcement: true,
+    legacyInternalExemptBypass: true,
+    stripe: false,
+    migrationGrants: false,
+    invoiceEvidence: false,
+});
+export function validateActivationStatus(status, context) {
+    const hasProvenance = status.lastEpochId !== null &&
+        status.activatedAt !== null &&
+        status.activationServiceReleaseSha !== null &&
+        status.admissionContractVersion !== null &&
+        status.approvalChecksum !== null;
+    if (status.state === 'not_activated') {
+        if (status.generation !== 0 ||
+            status.activeEpochId !== null ||
+            status.lastEpochId !== null ||
+            status.activatedAt !== null ||
+            status.rolledBackAt !== null ||
+            status.activationServiceReleaseSha !== null ||
+            status.admissionContractVersion !== null ||
+            status.approvalChecksum !== null) {
+            context.addIssue({
+                code: 'custom',
+                path: ['state'],
+                message: 'not-activated state cannot contain activation history',
+            });
+        }
+        return;
+    }
+    if (status.generation < 1 || !hasProvenance) {
+        context.addIssue({
+            code: 'custom',
+            path: ['generation'],
+            message: 'activated state requires complete provenance',
+        });
+    }
+    if (status.state === 'active' &&
+        (status.activeEpochId === null ||
+            status.activeEpochId !== status.lastEpochId ||
+            status.rolledBackAt !== null)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['activeEpochId'],
+            message: 'active state is invalid',
+        });
+    }
+    if (status.state === 'rolled_back' &&
+        (status.activeEpochId !== null || status.rolledBackAt === null)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['rolledBackAt'],
+            message: 'rolled-back state is invalid',
+        });
+    }
+    if (status.rolledBackAt !== null &&
+        status.activatedAt !== null &&
+        Date.parse(status.rolledBackAt) < Date.parse(status.activatedAt)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['rolledBackAt'],
+            message: 'rollback cannot predate activation',
+        });
+    }
+}
+export function normalizeActivationSignals(signals) {
+    for (const [label, value] of [
+        ['unprofiled account count', signals.unprofiledAccountCount],
+        ['activation generation', signals.activationGeneration],
+        ['supported admission contract', signals.supportedAdmissionContractVersion],
+        ['invalid enforced entitlement account count', signals.invalidEnforcedEntitlementAccountCount],
+        ['non-Free enforced account count', signals.nonFreeEnforcedAccountCount],
+        ['enforced over-capacity account count', signals.enforcedOverCapacityAccountCount],
+        [
+            'legacy exempt over-capacity account count',
+            signals.legacyInternalExemptOverCapacityAccountCount,
+        ],
+    ]) {
+        if (!Number.isSafeInteger(value) || value < 0)
+            throw new Error(`${label} must be non-negative`);
+    }
+    return { ...signals };
+}
+export function activationEvidenceIsCurrent(approval, checkedAt) {
+    const checkedAtMs = Date.parse(checkedAt);
+    const evidence = [
+        [
+            approval.evidence.trafficFleetConvergence.verifiedAt,
+            BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS.trafficFleetConvergence,
+        ],
+        [
+            approval.evidence.planVolumeCapacity.approvedAt,
+            BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS.planVolumeCapacity,
+        ],
+        [
+            approval.evidence.nonproductionFailClosedDrill.verifiedAt,
+            BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS.nonproductionFailClosedDrill,
+        ],
+        [
+            approval.evidence.protectedProductionApproval.approvedAt,
+            BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS.protectedProductionApproval,
+        ],
+    ];
+    return evidence.every(([instant, maxAgeMs]) => {
+        const ageMs = checkedAtMs - Date.parse(instant);
+        return ageMs >= 0 && ageMs <= maxAgeMs;
+    });
+}
+export function hasActivationControlCharacters(value) {
+    return [...value].some((character) => {
+        const code = character.charCodeAt(0);
+        return code <= 0x1f || code === 0x7f;
+    });
+}
+//# sourceMappingURL=enforcement-activation-support.js.map

package/node_modules/@noodle-borg/service/dist/billing/enforcement-activation-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcement-activation-support.js","sourceRoot":"","sources":["../../src/billing/enforcement-activation-support.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,kDAAkD,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9E,uBAAuB,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;IACxC,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;IACxC,4BAA4B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK;IAClD,2BAA2B,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAAC;IAClE,YAAY,EAAE,UAAmB;IACjC,eAAe,EAAE,SAAkB;IACnC,SAAS,EAAE,KAAc;IACzB,mCAAmC,EAAE,IAAa;IAClD,wBAAwB,EAAE,IAAa;IACvC,0BAA0B,EAAE,IAAa;IACzC,MAAM,EAAE,KAAc;IACtB,eAAe,EAAE,KAAc;IAC/B,eAAe,EAAE,KAAc;CAChC,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CACtC,MAUC,EACD,OAAwB;IAExB,MAAM,aAAa,GACjB,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,MAAM,CAAC,2BAA2B,KAAK,IAAI;QAC3C,MAAM,CAAC,wBAAwB,KAAK,IAAI;QACxC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QACrC,IACE,MAAM,CAAC,UAAU,KAAK,CAAC;YACvB,MAAM,CAAC,aAAa,KAAK,IAAI;YAC7B,MAAM,CAAC,WAAW,KAAK,IAAI;YAC3B,MAAM,CAAC,WAAW,KAAK,IAAI;YAC3B,MAAM,CAAC,YAAY,KAAK,IAAI;YAC5B,MAAM,CAAC,2BAA2B,KAAK,IAAI;YAC3C,MAAM,CAAC,wBAAwB,KAAK,IAAI;YACxC,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAChC,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,CAAC;gBACf,OAAO,EAAE,uDAAuD;aACjE,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IACE,MAAM,CAAC,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI;YAC5B,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW;YAC3C,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,EAC/B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,IACE,MAAM,CAAC,KAAK,KAAK,aAAa;QAC9B,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,EAC/D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,8BAA8B;SACxC,CAAC,CAAC;IACL,CAAC;IACD,IACE,MAAM,CAAC,YAAY,KAAK,IAAI;QAC5B,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAChE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,oCAAoC;SAC9C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAA4C;IAE5C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI;QAC3B,CAAC,0BAA0B,EAAE,OAAO,CAAC,sBAAsB,CAAC;QAC5D,CAAC,uBAAuB,EAAE,OAAO,CAAC,oBAAoB,CAAC;QACvD,CAAC,8BAA8B,EAAE,OAAO,CAAC,iCAAiC,CAAC;QAC3E,CAAC,4CAA4C,EAAE,OAAO,CAAC,sCAAsC,CAAC;QAC9F,CAAC,iCAAiC,EAAE,OAAO,CAAC,2BAA2B,CAAC;QACxE,CAAC,sCAAsC,EAAE,OAAO,CAAC,gCAAgC,CAAC;QAClF;YACE,2CAA2C;YAC3C,OAAO,CAAC,4CAA4C;SACrD;KACO,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAA8C,EAC9C,SAAiB;IAEjB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf;YACE,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,UAAU;YACpD,kDAAkD,CAAC,uBAAuB;SAC3E;QACD;YACE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,UAAU;YAC/C,kDAAkD,CAAC,kBAAkB;SACtE;QACD;YACE,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,UAAU;YACzD,kDAAkD,CAAC,4BAA4B;SAChF;QACD;YACE,QAAQ,CAAC,QAAQ,CAAC,2BAA2B,CAAC,UAAU;YACxD,kDAAkD,CAAC,2BAA2B;SAC/E;KACO,CAAC;IACX,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/enforcement-activation.d.ts

@@ -0,0 +1,265 @@
+import type { AuditEventInput } from '@noodle-borg/module';
+import type { PoolClient } from 'pg';
+import { z } from 'zod';
+import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
+import { BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS } from './enforcement-activation-support.js';
+export declare const BILLING_ENFORCEMENT_ACTIVATION_SCHEMA_VERSION: 1;
+export declare const BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION: 1;
+export declare const BILLING_ENFORCEMENT_COMMERCIAL_SCOPE: "free_v1";
+export declare const BILLING_ENFORCEMENT_PAID_PLANS: false;
+export { BILLING_ENFORCEMENT_ACTIVATION_EVIDENCE_MAX_AGE_MS };
+export declare const BillingEnforcementActivationApprovalSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    targetEnvironment: z.ZodLiteral<"production">;
+    commercialScope: z.ZodLiteral<"free_v1">;
+    paidPlans: z.ZodLiteral<false>;
+    service: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    expectedState: z.ZodEnum<{
+        not_activated: "not_activated";
+        rolled_back: "rolled_back";
+    }>;
+    expectedGeneration: z.ZodNumber;
+    expectedCohortSealId: z.ZodString;
+    expectedValidationEpochId: z.ZodString;
+    expectedServiceReleaseSha: z.ZodString;
+    evidence: z.ZodObject<{
+        trafficFleetConvergence: z.ZodObject<{
+            serviceReleaseSha: z.ZodString;
+            verifiedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+            checksum: z.ZodString;
+        }, z.core.$strict>;
+        planVolumeCapacity: z.ZodObject<{
+            serviceReleaseSha: z.ZodString;
+            topology: z.ZodLiteral<"production">;
+            approvedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+            checksum: z.ZodString;
+        }, z.core.$strict>;
+        nonproductionFailClosedDrill: z.ZodObject<{
+            serviceReleaseSha: z.ZodString;
+            environment: z.ZodLiteral<"staging">;
+            verifiedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+            checksum: z.ZodString;
+        }, z.core.$strict>;
+        protectedProductionApproval: z.ZodObject<{
+            serviceReleaseSha: z.ZodString;
+            systemReleaseId: z.ZodString;
+            approvedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+            checksum: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type BillingEnforcementActivationApproval = z.infer<typeof BillingEnforcementActivationApprovalSchema>;
+export declare const BillingEnforcementActivationStatusSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    state: z.ZodEnum<{
+        active: "active";
+        not_activated: "not_activated";
+        rolled_back: "rolled_back";
+    }>;
+    generation: z.ZodNumber;
+    cohortSealId: z.ZodString;
+    activeEpochId: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    lastEpochId: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    activatedAt: z.ZodUnion<readonly [z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>, z.ZodNull]>;
+    rolledBackAt: z.ZodUnion<readonly [z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>, z.ZodNull]>;
+    activationServiceReleaseSha: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    admissionContractVersion: z.ZodUnion<readonly [z.ZodNumber, z.ZodNull]>;
+    approvalChecksum: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>;
+export type BillingEnforcementActivationStatus = z.infer<typeof BillingEnforcementActivationStatusSchema>;
+export declare const BILLING_ENFORCEMENT_ACTIVATION_BLOCKER_CODES: readonly ["cohort_not_sealed", "cohort_seal_mismatch", "billing_attribution_incomplete", "unprofiled_billing_accounts", "activation_state_mismatch", "activation_generation_mismatch", "active_epoch_exists", "prepared_validation_epoch_mismatch", "service_origin_mismatch", "service_release_mismatch", "admission_contract_mismatch", "approval_evidence_not_current", "technical_readiness_blocked", "production_preflight_unavailable", "invalid_enforced_entitlements", "enforced_account_not_free_v1", "enforced_account_over_capacity"];
+export declare const BillingEnforcementActivationPreviewSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    ready: z.ZodBoolean;
+    commercialScope: z.ZodLiteral<"free_v1">;
+    paidPlans: z.ZodLiteral<false>;
+    checkedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+    approvalChecksum: z.ZodString;
+    previewChecksum: z.ZodString;
+    blockers: z.ZodArray<z.ZodObject<{
+        code: z.ZodEnum<{
+            cohort_not_sealed: "cohort_not_sealed";
+            cohort_seal_mismatch: "cohort_seal_mismatch";
+            billing_attribution_incomplete: "billing_attribution_incomplete";
+            unprofiled_billing_accounts: "unprofiled_billing_accounts";
+            activation_state_mismatch: "activation_state_mismatch";
+            activation_generation_mismatch: "activation_generation_mismatch";
+            active_epoch_exists: "active_epoch_exists";
+            prepared_validation_epoch_mismatch: "prepared_validation_epoch_mismatch";
+            service_origin_mismatch: "service_origin_mismatch";
+            service_release_mismatch: "service_release_mismatch";
+            admission_contract_mismatch: "admission_contract_mismatch";
+            approval_evidence_not_current: "approval_evidence_not_current";
+            technical_readiness_blocked: "technical_readiness_blocked";
+            production_preflight_unavailable: "production_preflight_unavailable";
+            invalid_enforced_entitlements: "invalid_enforced_entitlements";
+            enforced_account_not_free_v1: "enforced_account_not_free_v1";
+            enforced_account_over_capacity: "enforced_account_over_capacity";
+        }>;
+    }, z.core.$strict>>;
+    effects: z.ZodObject<{
+        profileScope: z.ZodLiteral<"enforced">;
+        commercialScope: z.ZodLiteral<"free_v1">;
+        paidPlans: z.ZodLiteral<false>;
+        startsFreshAuthoritativeEpochAtZero: z.ZodLiteral<true>;
+        productionAppEnforcement: z.ZodLiteral<true>;
+        legacyInternalExemptBypass: z.ZodLiteral<true>;
+        stripe: z.ZodLiteral<false>;
+        migrationGrants: z.ZodLiteral<false>;
+        invoiceEvidence: z.ZodLiteral<false>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type BillingEnforcementActivationPreview = z.infer<typeof BillingEnforcementActivationPreviewSchema>;
+export interface BillingEnforcementActivationSignals {
+    readonly cohortState: 'unsealed' | 'sealed';
+    readonly cohortSealId: string | null;
+    readonly billingAttributionComplete: boolean;
+    readonly unprofiledAccountCount: number;
+    readonly activationState: 'not_activated' | 'active' | 'rolled_back';
+    readonly activationGeneration: number;
+    readonly activeEpochId: string | null;
+    readonly preparedValidationEpochId: string | null;
+    readonly preparedValidationEpochReleaseSha: string | null;
+    readonly preparedValidationEpochAdmissionContractVersion: number | null;
+    readonly currentServiceOrigin: string;
+    readonly currentServiceReleaseSha: string;
+    readonly supportedAdmissionContractVersion: number;
+    readonly technicalReadiness: 'ready' | 'blocked' | 'unavailable';
+    readonly invalidEnforcedEntitlementAccountCount: number;
+    readonly nonFreeEnforcedAccountCount: number;
+    readonly enforcedOverCapacityAccountCount: number;
+    readonly legacyInternalExemptOverCapacityAccountCount: number;
+}
+export declare function billingEnforcementActivationApprovalChecksum(value: unknown): string;
+export declare function buildBillingEnforcementActivationPreview(input: {
+    readonly approval: BillingEnforcementActivationApproval;
+    readonly checkedAt: string;
+    readonly signals: BillingEnforcementActivationSignals;
+}): BillingEnforcementActivationPreview;
+declare const activateRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    approval: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        targetEnvironment: z.ZodLiteral<"production">;
+        commercialScope: z.ZodLiteral<"free_v1">;
+        paidPlans: z.ZodLiteral<false>;
+        service: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        expectedState: z.ZodEnum<{
+            not_activated: "not_activated";
+            rolled_back: "rolled_back";
+        }>;
+        expectedGeneration: z.ZodNumber;
+        expectedCohortSealId: z.ZodString;
+        expectedValidationEpochId: z.ZodString;
+        expectedServiceReleaseSha: z.ZodString;
+        evidence: z.ZodObject<{
+            trafficFleetConvergence: z.ZodObject<{
+                serviceReleaseSha: z.ZodString;
+                verifiedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+                checksum: z.ZodString;
+            }, z.core.$strict>;
+            planVolumeCapacity: z.ZodObject<{
+                serviceReleaseSha: z.ZodString;
+                topology: z.ZodLiteral<"production">;
+                approvedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+                checksum: z.ZodString;
+            }, z.core.$strict>;
+            nonproductionFailClosedDrill: z.ZodObject<{
+                serviceReleaseSha: z.ZodString;
+                environment: z.ZodLiteral<"staging">;
+                verifiedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+                checksum: z.ZodString;
+            }, z.core.$strict>;
+            protectedProductionApproval: z.ZodObject<{
+                serviceReleaseSha: z.ZodString;
+                systemReleaseId: z.ZodString;
+                approvedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+                checksum: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    expectedPreviewChecksum: z.ZodString;
+    reason: z.ZodString;
+    idempotencyKey: z.ZodString;
+    confirmed: z.ZodLiteral<true>;
+}, z.core.$strict>;
+declare const rollbackRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    expectedState: z.ZodLiteral<"active">;
+    expectedGeneration: z.ZodNumber;
+    expectedEpochId: z.ZodString;
+    reason: z.ZodString;
+    idempotencyKey: z.ZodString;
+    confirmed: z.ZodLiteral<true>;
+}, z.core.$strict>;
+export type BillingEnforcementActivateRequest = z.infer<typeof activateRequestSchema>;
+export type BillingEnforcementRollbackRequest = z.infer<typeof rollbackRequestSchema>;
+export declare function parseBillingEnforcementActivateRequest(value: unknown): BillingEnforcementActivateRequest;
+export declare function parseBillingEnforcementRollbackRequest(value: unknown): BillingEnforcementRollbackRequest;
+export declare const BillingEnforcementActivationMutationResultSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    action: z.ZodEnum<{
+        activate: "activate";
+        rollback: "rollback";
+    }>;
+    state: z.ZodEnum<{
+        active: "active";
+        rolled_back: "rolled_back";
+    }>;
+    generation: z.ZodNumber;
+    replayed: z.ZodBoolean;
+    cohortSealId: z.ZodString;
+    activeEpochId: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    lastEpochId: z.ZodString;
+    retiredValidationEpochId: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+    activatedAt: z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>;
+    rolledBackAt: z.ZodUnion<readonly [z.ZodPipe<z.ZodISODateTime, z.ZodTransform<string, string>>, z.ZodNull]>;
+    activationServiceReleaseSha: z.ZodString;
+    admissionContractVersion: z.ZodNumber;
+    approvalChecksum: z.ZodString;
+    previewChecksum: z.ZodUnion<readonly [z.ZodString, z.ZodNull]>;
+}, z.core.$strict>;
+export type BillingEnforcementActivationMutationResult = z.infer<typeof BillingEnforcementActivationMutationResultSchema>;
+export type BillingEnforcementActivationPreflight = (input: {
+    readonly client: PoolClient;
+    readonly approval: BillingEnforcementActivationApproval;
+    readonly checkedAt: string;
+}) => Promise<BillingEnforcementActivationPreview>;
+export interface BillingEnforcementActivationStore {
+    /** PostgreSQL stores commit canonical success audits with the lifecycle mutation. */
+    readonly successAuditMode?: 'transactional';
+    getActivationStatus(): Promise<BillingEnforcementActivationStatus>;
+    previewActivation(input: {
+        readonly approval: BillingEnforcementActivationApproval;
+    }): Promise<BillingEnforcementActivationPreview>;
+    activateEnforcement(input: {
+        readonly request: BillingEnforcementActivateRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingEnforcementActivationMutationResult>;
+    rollbackEnforcement(input: {
+        readonly request: BillingEnforcementRollbackRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingEnforcementActivationMutationResult>;
+}
+export type BillingEnforcementActivationConflictCode = 'idempotency_key_conflict' | 'activation_state_conflict' | 'activation_epoch_conflict' | 'activation_preflight_blocked' | 'activation_preview_changed' | 'activation_configuration_unavailable' | 'activation_lock_timeout' | 'serialization_conflict';
+export declare class BillingEnforcementActivationConflictError extends Error {
+    readonly code: BillingEnforcementActivationConflictCode;
+    constructor(code: BillingEnforcementActivationConflictCode, message: string);
+}
+type FingerprintInput = {
+    readonly action: 'activate';
+    readonly request: BillingEnforcementActivateRequest;
+    readonly actor: Pick<ControlPlaneIdentity, 'subject' | 'email'>;
+    readonly service: string;
+} | {
+    readonly action: 'rollback';
+    readonly request: BillingEnforcementRollbackRequest;
+    readonly actor: Pick<ControlPlaneIdentity, 'subject' | 'email'>;
+    readonly service: string;
+};
+export declare function billingEnforcementActivationRequestFingerprint(input: FingerprintInput): string;
+export declare function billingEnforcementActivationSuccessAudit(result: BillingEnforcementActivationMutationResult, actor: Pick<ControlPlaneIdentity, 'subject' | 'email'>): AuditEventInput;
+export declare function normalizeActivationServiceUrl(value: string): string;
+//# sourceMappingURL=enforcement-activation.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/enforcement-activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcement-activation.d.ts","sourceRoot":"","sources":["../../src/billing/enforcement-activation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAGL,kDAAkD,EAInD,MAAM,qCAAqC,CAAC;AAG7C,eAAO,MAAM,6CAA6C,EAAG,CAAU,CAAC;AACxE,eAAO,MAAM,gDAAgD,EAAG,CAAU,CAAC;AAC3E,eAAO,MAAM,oCAAoC,EAAG,SAAkB,CAAC;AACvE,eAAO,MAAM,8BAA8B,EAAG,KAAc,CAAC;AAC7D,OAAO,EAAE,kDAAkD,EAAE,CAAC;AAqC9D,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DnD,CAAC;AAEL,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;;;;kBAcb,CAAC;AAEzC,MAAM,MAAM,kCAAkC,GAAG,CAAC,CAAC,KAAK,CACtD,OAAO,wCAAwC,CAChD,CAAC;AAEF,eAAO,MAAM,4CAA4C,khBAkB/C,CAAC;AAMX,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBpD,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CACvD,OAAO,yCAAyC,CACjD,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,0BAA0B,EAAE,OAAO,CAAC;IAC7C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,QAAQ,GAAG,aAAa,CAAC;IACrE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,iCAAiC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1D,QAAQ,CAAC,+CAA+C,EAAE,MAAM,GAAG,IAAI,CAAC;IACxE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;IACnD,QAAQ,CAAC,kBAAkB,EAAE,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;IACjE,QAAQ,CAAC,sCAAsC,EAAE,MAAM,CAAC;IACxD,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC;IAClD,QAAQ,CAAC,4CAA4C,EAAE,MAAM,CAAC;CAC/D;AAED,wBAAgB,4CAA4C,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnF;AAED,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAC9D,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,mCAAmC,CAAC;CACvD,GAAG,mCAAmC,CA2DtC;AAED,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOzB,CAAC;AACH,QAAA,MAAM,qBAAqB;;;;;;;;kBAQzB,CAAC;AAEH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACtF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEtF,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,OAAO,GACb,iCAAiC,CAMnC;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,OAAO,GACb,iCAAiC,CAMnC;AAED,eAAO,MAAM,gDAAgD;;;;;;;;;;;;;;;;;;;;;;kBAkDzD,CAAC;AAEL,MAAM,MAAM,0CAA0C,GAAG,CAAC,CAAC,KAAK,CAC9D,OAAO,gDAAgD,CACxD,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,KAAK,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAEnD,MAAM,WAAW,iCAAiC;IAChD,qFAAqF;IACrF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAC5C,mBAAmB,IAAI,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACnE,iBAAiB,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;KACzD,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACjD,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACxD,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,0CAA0C,CAAC,CAAC;CACzD;AAED,MAAM,MAAM,wCAAwC,GAChD,0BAA0B,GAC1B,2BAA2B,GAC3B,2BAA2B,GAC3B,8BAA8B,GAC9B,4BAA4B,GAC5B,sCAAsC,GACtC,yBAAyB,GACzB,wBAAwB,CAAC;AAE7B,qBAAa,yCAA0C,SAAQ,KAAK;IAClE,QAAQ,CAAC,IAAI,EAAE,wCAAwC,CAAC;gBAE5C,IAAI,EAAE,wCAAwC,EAAE,OAAO,EAAE,MAAM;CAK5E;AAED,KAAK,gBAAgB,GACjB;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,wBAAgB,8CAA8C,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAQ9F;AAED,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,0CAA0C,EAClD,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,CAAC,GACrD,eAAe,CAwBjB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAanE"}