@noodleseed/one 0.48.0 → 0.49.0

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-preflight.js

@@ -0,0 +1,193 @@
+import { isBillingCommercialFreeV1Entitlements, parseBillingCommercialUsageEntitlements, } from './commercial-entitlements.js';
+import { BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION, buildBillingEnforcementActivationPreview, normalizeActivationServiceUrl, } from './enforcement-activation.js';
+import { billingContentChecksum } from './model.js';
+import { requireActivationState, stateRowToStatus, validateAdmissionContractVersion, validateReleaseSha, } from './postgres-enforcement-activation-support.js';
+import { readEnforcementCohortStatusTx } from './postgres-enforcement-profile.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+export function createPostgresBillingEnforcementActivationPreflight(options) {
+    const resolved = resolveOptions(options);
+    return async ({ client, approval, checkedAt }) => {
+        const transactionTime = await readBillingMeterTransactionTime(client);
+        if (transactionTime !== checkedAt) {
+            throw new Error('billing enforcement preflight must use the activation transaction clock');
+        }
+        const signals = await readPostgresBillingEnforcementActivationSignalsTx(client, checkedAt, resolved);
+        return buildBillingEnforcementActivationPreview({ approval, checkedAt, signals });
+    };
+}
+export async function readPostgresBillingEnforcementActivationSignalsTx(client, checkedAt, options) {
+    const resolved = resolveOptions(options);
+    const cohort = await readEnforcementCohortStatusTx(client);
+    const activation = stateRowToStatus(await requireActivationState(client, false));
+    const epochResult = await client.query(`
+    SELECT id, purpose, state, release_sha, admission_contract_version
+    FROM billing_meter_epochs
+    WHERE state IN ('prepared', 'active')
+    ORDER BY state, purpose, id
+  `);
+    const capacity = await readCapacitySignals(client);
+    const readiness = resolved.meterReadiness === undefined
+        ? undefined
+        : await resolved.meterReadiness.readMeterReadinessTx(client, checkedAt);
+    const prepared = epochResult.rows.filter((row) => row.state === 'prepared');
+    const active = epochResult.rows.filter((row) => row.state === 'active');
+    const validationEpoch = prepared.length === 1 && prepared[0]?.purpose === 'validation' ? prepared[0] : undefined;
+    return {
+        cohortState: cohort.state,
+        cohortSealId: cohort.sealId,
+        billingAttributionComplete: cohort.billingAttributionComplete,
+        unprofiledAccountCount: cohort.unprofiledAccountCount,
+        activationState: activation.state,
+        activationGeneration: activation.generation,
+        activeEpochId: active[0]?.id ?? activation.activeEpochId,
+        preparedValidationEpochId: validationEpoch?.id ?? null,
+        preparedValidationEpochReleaseSha: validationEpoch?.release_sha ?? null,
+        preparedValidationEpochAdmissionContractVersion: validationEpoch?.admission_contract_version ?? null,
+        currentServiceOrigin: resolved.serviceOrigin,
+        currentServiceReleaseSha: resolved.currentReleaseSha,
+        supportedAdmissionContractVersion: resolved.supportedAdmissionContractVersion,
+        technicalReadiness: readiness?.technicalReadiness ?? 'unavailable',
+        invalidEnforcedEntitlementAccountCount: capacity.invalidEnforcedEntitlementAccountCount,
+        nonFreeEnforcedAccountCount: capacity.nonFreeEnforcedAccountCount,
+        enforcedOverCapacityAccountCount: capacity.enforcedOverCapacityAccountCount,
+        legacyInternalExemptOverCapacityAccountCount: capacity.legacyInternalExemptOverCapacityAccountCount,
+    };
+}
+async function readCapacitySignals(client) {
+    const { rows } = await client.query(`
+    SELECT account.id AS account_id, account.state AS account_state,
+           profile.mode, profile.source AS profile_source,
+           profile.cohort_seal_id AS profile_cohort_seal_id,
+           profile.effective_from AS profile_effective_from,
+           seal.id AS cohort_seal_id, seal.sealed_at AS cohort_sealed_at,
+           snapshot.id AS snapshot_id, snapshot.version AS snapshot_version,
+           snapshot.plan_version_id AS snapshot_plan_version_id,
+           snapshot.verification_status AS snapshot_verification_status,
+           snapshot.effective_from AS snapshot_effective_from,
+           snapshot.monthly_usage_anchor AS snapshot_monthly_usage_anchor,
+           snapshot.entitlements,
+           snapshot.content_checksum AS snapshot_content_checksum,
+           (
+             SELECT count(DISTINCT (deployment.org_slug, deployment.app_slug))::text
+             FROM org_billing_links AS link
+             JOIN orgs AS org ON org.slug = link.org_slug AND org.slug <> 'local'
+             JOIN deploy_records AS deployment
+               ON deployment.org_slug = org.slug
+              AND deployment.active
+              AND deployment.archived_at IS NULL
+             WHERE link.billing_account_id = account.id AND link.active
+           ) AS production_apps
+    FROM billing_accounts AS account
+    JOIN billing_account_active_enforcement_profiles AS active_profile
+      ON active_profile.billing_account_id = account.id
+    JOIN billing_account_enforcement_profiles AS profile
+      ON profile.billing_account_id = active_profile.billing_account_id
+     AND profile.version = active_profile.profile_version
+    JOIN billing_enforcement_cohort_seals AS seal ON seal.singleton = true
+    LEFT JOIN billing_account_active_snapshots AS active_snapshot
+      ON active_snapshot.billing_account_id = account.id
+    LEFT JOIN billing_entitlement_snapshots AS snapshot
+      ON snapshot.billing_account_id = active_snapshot.billing_account_id
+     AND snapshot.id = active_snapshot.snapshot_id
+    ORDER BY account.id
+  `);
+    let invalidEnforcedEntitlementAccountCount = 0;
+    let nonFreeEnforcedAccountCount = 0;
+    let enforcedOverCapacityAccountCount = 0;
+    let legacyInternalExemptOverCapacityAccountCount = 0;
+    for (const row of rows) {
+        const productionApps = parseCount(row.production_apps);
+        let limit;
+        try {
+            if (row.mode === 'enforced')
+                validateEnforcedSnapshot(row);
+            parseBillingCommercialUsageEntitlements(row.entitlements);
+            limit = productionAppLimit(row.entitlements);
+            if (row.mode === 'enforced' && !isBillingCommercialFreeV1Entitlements(row.entitlements)) {
+                nonFreeEnforcedAccountCount += 1;
+            }
+        }
+        catch {
+            if (row.mode === 'enforced')
+                invalidEnforcedEntitlementAccountCount += 1;
+            continue;
+        }
+        if (productionApps <= limit)
+            continue;
+        if (row.mode === 'enforced')
+            enforcedOverCapacityAccountCount += 1;
+        else if (row.mode === 'legacy_internal_exempt') {
+            legacyInternalExemptOverCapacityAccountCount += 1;
+        }
+    }
+    return {
+        invalidEnforcedEntitlementAccountCount,
+        nonFreeEnforcedAccountCount,
+        enforcedOverCapacityAccountCount,
+        legacyInternalExemptOverCapacityAccountCount,
+    };
+}
+function validateEnforcedSnapshot(row) {
+    const profileEffectiveFrom = persistedInstant(row.profile_effective_from);
+    const cohortSealedAt = persistedInstant(row.cohort_sealed_at);
+    if (row.account_state !== 'active' ||
+        row.profile_source !== 'post_seal_account' ||
+        row.profile_cohort_seal_id !== row.cohort_seal_id ||
+        profileEffectiveFrom < cohortSealedAt ||
+        row.snapshot_id === null ||
+        row.snapshot_version === null ||
+        !Number.isSafeInteger(row.snapshot_version) ||
+        row.snapshot_version < 1 ||
+        row.snapshot_plan_version_id === null ||
+        row.snapshot_verification_status !== 'verified' ||
+        row.snapshot_effective_from === null ||
+        row.snapshot_monthly_usage_anchor === null ||
+        row.snapshot_content_checksum === null) {
+        throw new Error('enforced billing snapshot is invalid');
+    }
+    const effectiveFrom = persistedInstant(row.snapshot_effective_from);
+    const monthlyUsageAnchor = persistedInstant(row.snapshot_monthly_usage_anchor);
+    const expectedChecksum = billingContentChecksum({
+        billingAccountId: row.account_id,
+        version: row.snapshot_version,
+        planVersionId: row.snapshot_plan_version_id,
+        effectiveFrom,
+        monthlyUsageAnchor,
+        entitlements: row.entitlements,
+    });
+    if (row.snapshot_content_checksum !== expectedChecksum) {
+        throw new Error('enforced billing snapshot checksum is invalid');
+    }
+}
+function productionAppLimit(entitlements) {
+    if (entitlements === null || typeof entitlements !== 'object' || Array.isArray(entitlements)) {
+        throw new Error('production app entitlement is invalid');
+    }
+    const value = entitlements['apps.production.max'];
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new Error('production app entitlement is invalid');
+    }
+    return value;
+}
+function parseCount(value) {
+    const parsed = Number(value);
+    if (!Number.isSafeInteger(parsed) || parsed < 0) {
+        throw new Error('production app footprint count is invalid');
+    }
+    return parsed;
+}
+function persistedInstant(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw new Error('billing preflight timestamp is invalid');
+    return date.toISOString();
+}
+function resolveOptions(options) {
+    return {
+        serviceOrigin: normalizeActivationServiceUrl(options.serviceOrigin),
+        currentReleaseSha: validateReleaseSha(options.currentReleaseSha),
+        supportedAdmissionContractVersion: validateAdmissionContractVersion(options.supportedAdmissionContractVersion ?? BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION),
+        ...(options.meterReadiness === undefined ? {} : { meterReadiness: options.meterReadiness }),
+    };
+}
+//# sourceMappingURL=postgres-enforcement-activation-preflight.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation-preflight.js","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qCAAqC,EACrC,uCAAuC,GACxC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,gDAAgD,EAGhD,wCAAwC,EACxC,6BAA6B,GAC9B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,gCAAgC,EAChC,kBAAkB,GACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AA8C5E,MAAM,UAAU,mDAAmD,CACjE,OAA6D;IAE7D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;QAC/C,MAAM,eAAe,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,iDAAiD,CACrE,MAAM,EACN,SAAS,EACT,QAAQ,CACT,CAAC;QACF,OAAO,wCAAwC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iDAAiD,CACrE,MAAkB,EAClB,SAAiB,EACjB,OAA6D;IAE7D,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAoB;;;;;GAKzD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,SAAS,GACb,QAAQ,CAAC,cAAc,KAAK,SAAS;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,QAAQ,CAAC,cAAc,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IACxE,MAAM,eAAe,GACnB,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3F,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,KAAK;QACzB,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,eAAe,EAAE,UAAU,CAAC,KAAK;QACjC,oBAAoB,EAAE,UAAU,CAAC,UAAU;QAC3C,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,UAAU,CAAC,aAAa;QACxD,yBAAyB,EAAE,eAAe,EAAE,EAAE,IAAI,IAAI;QACtD,iCAAiC,EAAE,eAAe,EAAE,WAAW,IAAI,IAAI;QACvE,+CAA+C,EAC7C,eAAe,EAAE,0BAA0B,IAAI,IAAI;QACrD,oBAAoB,EAAE,QAAQ,CAAC,aAAa;QAC5C,wBAAwB,EAAE,QAAQ,CAAC,iBAAiB;QACpD,iCAAiC,EAAE,QAAQ,CAAC,iCAAiC;QAC7E,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,IAAI,aAAa;QAClE,sCAAsC,EAAE,QAAQ,CAAC,sCAAsC;QACvF,2BAA2B,EAAE,QAAQ,CAAC,2BAA2B;QACjE,gCAAgC,EAAE,QAAQ,CAAC,gCAAgC;QAC3E,4CAA4C,EAC1C,QAAQ,CAAC,4CAA4C;KACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAkB;IAMnD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoChD,CAAC,CAAC;IACH,IAAI,sCAAsC,GAAG,CAAC,CAAC;IAC/C,IAAI,2BAA2B,GAAG,CAAC,CAAC;IACpC,IAAI,gCAAgC,GAAG,CAAC,CAAC;IACzC,IAAI,4CAA4C,GAAG,CAAC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;gBAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAC3D,uCAAuC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1D,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,qCAAqC,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxF,2BAA2B,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;gBAAE,sCAAsC,IAAI,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,cAAc,IAAI,KAAK;YAAE,SAAS;QACtC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,gCAAgC,IAAI,CAAC,CAAC;aAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC/C,4CAA4C,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO;QACL,sCAAsC;QACtC,2BAA2B;QAC3B,gCAAgC;QAChC,4CAA4C;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAgB;IAChD,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IACE,GAAG,CAAC,aAAa,KAAK,QAAQ;QAC9B,GAAG,CAAC,cAAc,KAAK,mBAAmB;QAC1C,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC,cAAc;QACjD,oBAAoB,GAAG,cAAc;QACrC,GAAG,CAAC,WAAW,KAAK,IAAI;QACxB,GAAG,CAAC,gBAAgB,KAAK,IAAI;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC3C,GAAG,CAAC,gBAAgB,GAAG,CAAC;QACxB,GAAG,CAAC,wBAAwB,KAAK,IAAI;QACrC,GAAG,CAAC,4BAA4B,KAAK,UAAU;QAC/C,GAAG,CAAC,uBAAuB,KAAK,IAAI;QACpC,GAAG,CAAC,6BAA6B,KAAK,IAAI;QAC1C,GAAG,CAAC,yBAAyB,KAAK,IAAI,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpE,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;QAC9C,gBAAgB,EAAE,GAAG,CAAC,UAAU;QAChC,OAAO,EAAE,GAAG,CAAC,gBAAgB;QAC7B,aAAa,EAAE,GAAG,CAAC,wBAAwB;QAC3C,aAAa;QACb,kBAAkB;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,yBAAyB,KAAK,gBAAgB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAqB;IAC/C,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAI,YAAwC,CAAC,qBAAqB,CAAC,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CACrB,OAA6D;IAE7D,OAAO;QACL,aAAa,EAAE,6BAA6B,CAAC,OAAO,CAAC,aAAa,CAAC;QACnE,iBAAiB,EAAE,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAChE,iCAAiC,EAAE,gCAAgC,CACjE,OAAO,CAAC,iCAAiC,IAAI,gDAAgD,CAC9F;QACD,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Durable admission switch and immutable operation evidence. Schema creation never activates billing. */
+export declare function ensureBillingEnforcementActivationSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-enforcement-activation-schema.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation-schema.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAE/B,0GAA0G;AAC1G,wBAAsB,wCAAwC,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAoHxF"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-schema.js

@@ -0,0 +1,119 @@
+/** Durable admission switch and immutable operation evidence. Schema creation never activates billing. */
+export async function ensureBillingEnforcementActivationSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_enforcement_activation_state (
+      singleton                       boolean PRIMARY KEY DEFAULT true CHECK (singleton),
+      schema_version                  integer NOT NULL CHECK (schema_version = 1),
+      state                           text NOT NULL
+        CHECK (state IN ('not_activated', 'active', 'rolled_back')),
+      generation                      integer NOT NULL CHECK (generation >= 0),
+      cohort_seal_id                  text NOT NULL
+        REFERENCES billing_enforcement_cohort_seals(id) ON DELETE RESTRICT,
+      active_epoch_id                 text REFERENCES billing_meter_epochs(id) ON DELETE RESTRICT,
+      last_epoch_id                   text REFERENCES billing_meter_epochs(id) ON DELETE RESTRICT,
+      activated_at                    timestamptz,
+      rolled_back_at                  timestamptz,
+      activation_service_release_sha  text
+        CHECK (
+          activation_service_release_sha IS NULL OR
+          activation_service_release_sha ~ '^[0-9a-f]{40}$'
+        ),
+      admission_contract_version      integer CHECK (admission_contract_version > 0),
+      approval_checksum               text
+        CHECK (approval_checksum IS NULL OR approval_checksum ~ '^[0-9a-f]{64}$'),
+      created_at                      timestamptz NOT NULL,
+      updated_at                      timestamptz NOT NULL CHECK (updated_at >= created_at),
+      CHECK (
+        (
+          state = 'not_activated' AND generation = 0 AND active_epoch_id IS NULL AND
+          last_epoch_id IS NULL AND activated_at IS NULL AND rolled_back_at IS NULL AND
+          activation_service_release_sha IS NULL AND admission_contract_version IS NULL AND
+          approval_checksum IS NULL
+        ) OR (
+          state = 'active' AND generation > 0 AND active_epoch_id IS NOT NULL AND
+          active_epoch_id = last_epoch_id AND activated_at IS NOT NULL AND rolled_back_at IS NULL AND
+          activation_service_release_sha IS NOT NULL AND admission_contract_version IS NOT NULL AND
+          approval_checksum IS NOT NULL
+        ) OR (
+          state = 'rolled_back' AND generation > 0 AND active_epoch_id IS NULL AND
+          last_epoch_id IS NOT NULL AND activated_at IS NOT NULL AND rolled_back_at IS NOT NULL AND
+          rolled_back_at >= activated_at AND activation_service_release_sha IS NOT NULL AND
+          admission_contract_version IS NOT NULL AND approval_checksum IS NOT NULL
+        )
+      )
+    )
+  `);
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS billing_enforcement_activation_operations (
+      operation_id                text PRIMARY KEY,
+      activation_state_singleton boolean NOT NULL DEFAULT true
+        REFERENCES billing_enforcement_activation_state(singleton) ON DELETE RESTRICT,
+      action                      text NOT NULL CHECK (action IN ('activate', 'rollback')),
+      idempotency_key_hash        text NOT NULL UNIQUE
+        CHECK (idempotency_key_hash ~ '^[0-9a-f]{64}$'),
+      request_fingerprint         text NOT NULL CHECK (request_fingerprint ~ '^[0-9a-f]{64}$'),
+      generation                  integer NOT NULL CHECK (generation > 0),
+      epoch_id                    text NOT NULL REFERENCES billing_meter_epochs(id) ON DELETE RESTRICT,
+      validation_epoch_id         text REFERENCES billing_meter_epochs(id) ON DELETE RESTRICT,
+      approval_checksum           text NOT NULL CHECK (approval_checksum ~ '^[0-9a-f]{64}$'),
+      preview_checksum            text CHECK (
+        preview_checksum IS NULL OR preview_checksum ~ '^[0-9a-f]{64}$'
+      ),
+      result                      jsonb NOT NULL,
+      actor_subject               text NOT NULL,
+      actor_email                 text NOT NULL,
+      service_origin              text NOT NULL,
+      reason                      text NOT NULL,
+      created_at                  timestamptz NOT NULL,
+      UNIQUE (action, epoch_id),
+      CHECK (
+        (action = 'activate' AND validation_epoch_id IS NOT NULL AND preview_checksum IS NOT NULL) OR
+        (action = 'rollback' AND validation_epoch_id IS NULL AND preview_checksum IS NULL)
+      )
+    )
+  `);
+    await pool.query(`
+    CREATE OR REPLACE FUNCTION initialize_billing_enforcement_activation_state()
+    RETURNS trigger LANGUAGE plpgsql AS $$
+    BEGIN
+      INSERT INTO billing_enforcement_activation_state
+        (singleton, schema_version, state, generation, cohort_seal_id, created_at, updated_at)
+      VALUES (true, 1, 'not_activated', 0, NEW.id, NEW.sealed_at, NEW.sealed_at)
+      ON CONFLICT (singleton) DO NOTHING;
+      RETURN NEW;
+    END
+    $$
+  `);
+    await pool.query(`
+    DO $billing_enforcement_activation_trigger$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_enforcement_cohort_initialize_activation_state'
+          AND tgrelid = 'billing_enforcement_cohort_seals'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        CREATE TRIGGER billing_enforcement_cohort_initialize_activation_state
+        AFTER INSERT ON billing_enforcement_cohort_seals
+        FOR EACH ROW EXECUTE FUNCTION initialize_billing_enforcement_activation_state();
+      END IF;
+    END
+    $billing_enforcement_activation_trigger$
+  `);
+    // Safe one-time upgrade for environments sealed before this schema existed. A history-bearing state can
+    // never be recreated because operation rows reference the singleton with DELETE RESTRICT.
+    await pool.query(`
+    INSERT INTO billing_enforcement_activation_state
+      (singleton, schema_version, state, generation, cohort_seal_id, created_at, updated_at)
+    SELECT true, 1, 'not_activated', 0, seal.id, seal.sealed_at, seal.sealed_at
+    FROM billing_enforcement_cohort_seals AS seal
+    WHERE seal.singleton = true
+      AND NOT EXISTS (SELECT 1 FROM billing_enforcement_activation_state)
+      AND NOT EXISTS (SELECT 1 FROM billing_enforcement_activation_operations)
+      AND NOT EXISTS (
+        SELECT 1 FROM billing_meter_epochs WHERE purpose = 'authoritative'
+      )
+    ON CONFLICT (singleton) DO NOTHING
+  `);
+}
+//# sourceMappingURL=postgres-enforcement-activation-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation-schema.ts"],"names":[],"mappings":"AAEA,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,IAAU;IACvE,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0ChB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;GAWhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;GAehB,CAAC,CAAC;IACH,wGAAwG;IACxG,0FAA0F;IAC1F,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;GAYhB,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-support.d.ts

@@ -0,0 +1,65 @@
+import type { PoolClient, QueryResultRow } from 'pg';
+import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
+import { type BillingEnforcementActivationApproval, type BillingEnforcementActivationMutationResult, type BillingEnforcementActivationStatus } from './enforcement-activation.js';
+export interface ActivationStateRow extends QueryResultRow {
+    readonly state: 'not_activated' | 'active' | 'rolled_back';
+    readonly generation: number;
+    readonly cohort_seal_id: string;
+    readonly active_epoch_id: string | null;
+    readonly last_epoch_id: string | null;
+    readonly activated_at: Date | string | null;
+    readonly rolled_back_at: Date | string | null;
+    readonly activation_service_release_sha: string | null;
+    readonly admission_contract_version: number | null;
+    readonly approval_checksum: string | null;
+}
+export interface EpochRow extends QueryResultRow {
+    readonly id: string;
+    readonly purpose: 'validation' | 'authoritative';
+    readonly state: 'prepared' | 'active' | 'retired';
+    readonly key_generation: string;
+    readonly release_sha: string;
+    readonly retry_identity_version: number;
+    readonly writer_contract_version: number;
+    readonly admission_contract_version: number;
+}
+export interface OperationRow extends QueryResultRow {
+    readonly action: 'activate' | 'rollback';
+    readonly request_fingerprint: string;
+    readonly result: unknown;
+}
+export declare function requireActivationState(client: PoolClient, forUpdate: boolean): Promise<ActivationStateRow>;
+export declare function stateRowToStatus(row: ActivationStateRow): BillingEnforcementActivationStatus;
+export declare function assertExpectedInactiveState(state: ActivationStateRow, approval: BillingEnforcementActivationApproval): void;
+export declare function requirePreparedValidationEpoch(client: PoolClient, epochId: string): Promise<EpochRow>;
+export declare function requireActiveAuthoritativeEpoch(client: PoolClient, epochId: string): Promise<EpochRow>;
+export declare function assertValidationEpochBindings(epoch: EpochRow, expected: {
+    readonly releaseSha: string;
+    readonly admissionContractVersion: number;
+}): void;
+export declare function assertActivationConfiguration(approval: BillingEnforcementActivationApproval, expected: {
+    readonly service: string;
+    readonly releaseSha: string;
+}): void;
+export declare function findOperation(client: PoolClient, idempotencyHash: string): Promise<OperationRow | undefined>;
+export declare function replayOperation(row: OperationRow, action: 'activate' | 'rollback', fingerprint: string): BillingEnforcementActivationMutationResult;
+export declare function insertOperation(client: PoolClient, input: {
+    readonly result: BillingEnforcementActivationMutationResult;
+    readonly idempotencyHash: string;
+    readonly fingerprint: string;
+    readonly actor: ControlPlaneIdentity;
+    readonly service: string;
+    readonly reason: string;
+    readonly validationEpochId: string | null;
+    readonly createdAt: string;
+    readonly operationId: string;
+}): Promise<void>;
+export declare function writeSuccessAudit(client: PoolClient, result: BillingEnforcementActivationMutationResult, actor: ControlPlaneIdentity): Promise<void>;
+export declare function normalizeActor(actor: ControlPlaneIdentity): ControlPlaneIdentity;
+export declare function hashIdempotencyKey(value: string): string;
+export declare function validateReleaseSha(value: string): string;
+export declare function validateAdmissionContractVersion(value: number): number;
+export declare function translateTransactionError(error: unknown): unknown;
+export declare function toIso(value: Date | string): string;
+export declare function rollbackQuietly(client: PoolClient): Promise<void>;
+//# sourceMappingURL=postgres-enforcement-activation-support.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation-support.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation-support.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAEL,KAAK,oCAAoC,EAEzC,KAAK,0CAA0C,EAE/C,KAAK,kCAAkC,EAGxC,MAAM,6BAA6B,CAAC;AAKrC,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,QAAQ,GAAG,aAAa,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,QAAS,SAAQ,cAAc;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,eAAe,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,kBAAkB,GAAG,kCAAkC,CAc5F;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,oCAAoC,GAC7C,IAAI,CAYN;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC,CAenB;AAED,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC,CAenB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE,GACnF,IAAI,CAUN;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,oCAAoC,EAC9C,QAAQ,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAClE,IAAI,CAUN;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,UAAU,EAClB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAOnC;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,UAAU,GAAG,UAAU,EAC/B,WAAW,EAAE,MAAM,GAClB,0CAA0C,CAS5C;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE;IACL,QAAQ,CAAC,MAAM,EAAE,0CAA0C,CAAC;IAC5D,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GACA,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,0CAA0C,EAClD,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAMhF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKtE;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAkBjE;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAIlD;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAMvE"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-support.js

@@ -0,0 +1,159 @@
+import { createHash } from 'node:crypto';
+import { insertAuditEvent } from '@noodle-borg/module-audit';
+import { BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION, BillingEnforcementActivationConflictError, BillingEnforcementActivationMutationResultSchema, BillingEnforcementActivationStatusSchema, billingEnforcementActivationSuccessAudit, } from './enforcement-activation.js';
+import { normalizeBillingEmail } from './model.js';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { validateScalarId } from './postgres-records.js';
+export async function requireActivationState(client, forUpdate) {
+    const { rows } = await client.query(`SELECT * FROM billing_enforcement_activation_state WHERE singleton = true${forUpdate ? ' FOR UPDATE' : ''}`);
+    const row = rows[0];
+    if (row === undefined) {
+        throw new BillingEnforcementActivationConflictError('activation_configuration_unavailable', 'sealed billing enforcement requires an explicit activation state');
+    }
+    return row;
+}
+export function stateRowToStatus(row) {
+    return BillingEnforcementActivationStatusSchema.parse({
+        schemaVersion: 1,
+        state: row.state,
+        generation: row.generation,
+        cohortSealId: validateScalarId('billing enforcement cohort seal id', row.cohort_seal_id),
+        activeEpochId: row.active_epoch_id,
+        lastEpochId: row.last_epoch_id,
+        activatedAt: row.activated_at === null ? null : toIso(row.activated_at),
+        rolledBackAt: row.rolled_back_at === null ? null : toIso(row.rolled_back_at),
+        activationServiceReleaseSha: row.activation_service_release_sha,
+        admissionContractVersion: row.admission_contract_version,
+        approvalChecksum: row.approval_checksum,
+    });
+}
+export function assertExpectedInactiveState(state, approval) {
+    if (state.state !== approval.expectedState ||
+        state.generation !== approval.expectedGeneration ||
+        state.cohort_seal_id !== approval.expectedCohortSealId ||
+        state.active_epoch_id !== null) {
+        throw new BillingEnforcementActivationConflictError('activation_state_conflict', 'billing enforcement activation state does not match the approved preview');
+    }
+}
+export async function requirePreparedValidationEpoch(client, epochId) {
+    const { rows } = await client.query(`SELECT id, purpose, state, key_generation, release_sha, retry_identity_version,
+            writer_contract_version, admission_contract_version
+     FROM billing_meter_epochs WHERE id = $1 FOR UPDATE`, [validateScalarId('billing meter validation epoch id', epochId)]);
+    const row = rows[0];
+    if (row === undefined || row.purpose !== 'validation' || row.state !== 'prepared') {
+        throw new BillingEnforcementActivationConflictError('activation_epoch_conflict', 'approved validation epoch is not prepared');
+    }
+    return row;
+}
+export async function requireActiveAuthoritativeEpoch(client, epochId) {
+    const { rows } = await client.query(`SELECT id, purpose, state, key_generation, release_sha, retry_identity_version,
+            writer_contract_version, admission_contract_version
+     FROM billing_meter_epochs WHERE id = $1 FOR UPDATE`, [validateScalarId('billing meter authoritative epoch id', epochId)]);
+    const row = rows[0];
+    if (row === undefined || row.purpose !== 'authoritative' || row.state !== 'active') {
+        throw new BillingEnforcementActivationConflictError('activation_epoch_conflict', 'billing enforcement rollback epoch is not active');
+    }
+    return row;
+}
+export function assertValidationEpochBindings(epoch, expected) {
+    if (epoch.release_sha !== expected.releaseSha ||
+        epoch.admission_contract_version !== expected.admissionContractVersion) {
+        throw new BillingEnforcementActivationConflictError('activation_epoch_conflict', 'prepared validation epoch is not compatible with authoritative admission');
+    }
+}
+export function assertActivationConfiguration(approval, expected) {
+    if (approval.service !== expected.service ||
+        approval.expectedServiceReleaseSha !== expected.releaseSha) {
+        throw new BillingEnforcementActivationConflictError('activation_configuration_unavailable', 'activation approval targets a different service or release');
+    }
+}
+export async function findOperation(client, idempotencyHash) {
+    const { rows } = await client.query(`SELECT action, request_fingerprint, result
+     FROM billing_enforcement_activation_operations WHERE idempotency_key_hash = $1`, [idempotencyHash]);
+    return rows[0];
+}
+export function replayOperation(row, action, fingerprint) {
+    if (row.action !== action || row.request_fingerprint !== fingerprint) {
+        throw new BillingEnforcementActivationConflictError('idempotency_key_conflict', 'idempotency key was already used by a different request or actor');
+    }
+    const result = BillingEnforcementActivationMutationResultSchema.parse(row.result);
+    return { ...result, replayed: true };
+}
+export async function insertOperation(client, input) {
+    await client.query(`INSERT INTO billing_enforcement_activation_operations
+       (operation_id, action, idempotency_key_hash, request_fingerprint, generation,
+        epoch_id, validation_epoch_id, approval_checksum, preview_checksum, result,
+        actor_subject, actor_email, service_origin, reason, created_at)
+     VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10::jsonb, $11, $12, $13, $14, $15)`, [
+        input.operationId,
+        input.result.action,
+        input.idempotencyHash,
+        input.fingerprint,
+        input.result.generation,
+        input.result.lastEpochId,
+        input.validationEpochId,
+        input.result.approvalChecksum,
+        input.result.previewChecksum,
+        JSON.stringify(input.result),
+        input.actor.subject,
+        input.actor.email,
+        input.service,
+        input.reason,
+        input.createdAt,
+    ]);
+}
+export async function writeSuccessAudit(client, result, actor) {
+    const replayedAt = await readBillingMeterTransactionTime(client);
+    await insertAuditEvent(client, billingEnforcementActivationSuccessAudit(result, actor), {
+        now: () => new Date(replayedAt),
+    });
+}
+export function normalizeActor(actor) {
+    return {
+        ...actor,
+        subject: validateScalarId('billing enforcement activation actor subject', actor.subject),
+        email: normalizeBillingEmail(actor.email),
+    };
+}
+export function hashIdempotencyKey(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+export function validateReleaseSha(value) {
+    if (!/^[0-9a-f]{40}$/.test(value)) {
+        throw new Error('billing enforcement activation requires a full lowercase release SHA');
+    }
+    return value;
+}
+export function validateAdmissionContractVersion(value) {
+    if (value !== BILLING_AUTHORITATIVE_ADMISSION_CONTRACT_VERSION || !Number.isSafeInteger(value)) {
+        throw new Error('billing enforcement admission contract version is unsupported');
+    }
+    return value;
+}
+export function translateTransactionError(error) {
+    const code = typeof error === 'object' && error !== null && 'code' in error
+        ? String(error.code)
+        : undefined;
+    if (code === '40001' || code === '40P01') {
+        return new BillingEnforcementActivationConflictError('serialization_conflict', 'billing enforcement activation state changed concurrently; retry the exact request');
+    }
+    if (code === '55P03') {
+        return new BillingEnforcementActivationConflictError('activation_lock_timeout', 'billing enforcement activation lock wait timed out; retry the exact request');
+    }
+    return error;
+}
+export function toIso(value) {
+    const date = value instanceof Date ? value : new Date(value);
+    if (!Number.isFinite(date.getTime()))
+        throw new Error('billing enforcement timestamp is invalid');
+    return date.toISOString();
+}
+export async function rollbackQuietly(client) {
+    try {
+        await client.query('ROLLBACK');
+    }
+    catch {
+        // Preserve the original transaction failure.
+    }
+}
+//# sourceMappingURL=postgres-enforcement-activation-support.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation-support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation-support.js","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation-support.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAG7D,OAAO,EACL,gDAAgD,EAEhD,yCAAyC,EAEzC,gDAAgD,EAEhD,wCAAwC,EACxC,wCAAwC,GACzC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAgCzD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAkB,EAClB,SAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC,4EACE,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAC9B,EAAE,CACH,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,yCAAyC,CACjD,sCAAsC,EACtC,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,OAAO,wCAAwC,CAAC,KAAK,CAAC;QACpD,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,YAAY,EAAE,gBAAgB,CAAC,oCAAoC,EAAE,GAAG,CAAC,cAAc,CAAC;QACxF,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,WAAW,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;QACvE,YAAY,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QAC5E,2BAA2B,EAAE,GAAG,CAAC,8BAA8B;QAC/D,wBAAwB,EAAE,GAAG,CAAC,0BAA0B;QACxD,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;KACxC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAyB,EACzB,QAA8C;IAE9C,IACE,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,aAAa;QACtC,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,kBAAkB;QAChD,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,oBAAoB;QACtD,KAAK,CAAC,eAAe,KAAK,IAAI,EAC9B,CAAC;QACD,MAAM,IAAI,yCAAyC,CACjD,2BAA2B,EAC3B,0EAA0E,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAkB,EAClB,OAAe;IAEf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;wDAEoD,EACpD,CAAC,gBAAgB,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC,CACjE,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,YAAY,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAClF,MAAM,IAAI,yCAAyC,CACjD,2BAA2B,EAC3B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAkB,EAClB,OAAe;IAEf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;wDAEoD,EACpD,CAAC,gBAAgB,CAAC,sCAAsC,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnF,MAAM,IAAI,yCAAyC,CACjD,2BAA2B,EAC3B,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAe,EACf,QAAoF;IAEpF,IACE,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;QACzC,KAAK,CAAC,0BAA0B,KAAK,QAAQ,CAAC,wBAAwB,EACtE,CAAC;QACD,MAAM,IAAI,yCAAyC,CACjD,2BAA2B,EAC3B,0EAA0E,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAA8C,EAC9C,QAAmE;IAEnE,IACE,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QACrC,QAAQ,CAAC,yBAAyB,KAAK,QAAQ,CAAC,UAAU,EAC1D,CAAC;QACD,MAAM,IAAI,yCAAyC,CACjD,sCAAsC,EACtC,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,eAAuB;IAEvB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;oFACgF,EAChF,CAAC,eAAe,CAAC,CAClB,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,GAAiB,EACjB,MAA+B,EAC/B,WAAmB;IAEnB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,mBAAmB,KAAK,WAAW,EAAE,CAAC;QACrE,MAAM,IAAI,yCAAyC,CACjD,0BAA0B,EAC1B,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gDAAgD,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClF,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAkB,EAClB,KAUC;IAED,MAAM,MAAM,CAAC,KAAK,CAChB;;;;sFAIkF,EAClF;QACE,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,MAAM,CAAC,MAAM;QACnB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,MAAM,CAAC,UAAU;QACvB,KAAK,CAAC,MAAM,CAAC,WAAW;QACxB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,MAAM,CAAC,gBAAgB;QAC7B,KAAK,CAAC,MAAM,CAAC,eAAe;QAC5B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,KAAK,CAAC,KAAK,CAAC,OAAO;QACnB,KAAK,CAAC,KAAK,CAAC,KAAK;QACjB,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,SAAS;KAChB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,MAAkD,EAClD,KAA2B;IAE3B,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,gBAAgB,CAAC,MAAM,EAAE,wCAAwC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QACtF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA2B;IACxD,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,gBAAgB,CAAC,8CAA8C,EAAE,KAAK,CAAC,OAAO,CAAC;QACxF,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAa;IAC5D,IAAI,KAAK,KAAK,gDAAgD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;QAC5D,CAAC,CAAC,MAAM,CAAE,KAAoC,CAAC,IAAI,CAAC;QACpD,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACzC,OAAO,IAAI,yCAAyC,CAClD,wBAAwB,EACxB,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,yCAAyC,CAClD,yBAAyB,EACzB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAoB;IACxC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation.d.ts

@@ -0,0 +1,31 @@
+import type { Pool } from 'pg';
+import type { ControlPlaneIdentity } from '../auth/deploy-gate.js';
+import { type BillingEnforcementActivateRequest, type BillingEnforcementActivationApproval, type BillingEnforcementActivationMutationResult, type BillingEnforcementActivationPreflight, type BillingEnforcementActivationPreview, type BillingEnforcementActivationStatus, type BillingEnforcementActivationStore, type BillingEnforcementRollbackRequest } from './enforcement-activation.js';
+export interface PostgresBillingEnforcementActivationStoreOptions {
+    readonly currentReleaseSha: string;
+    readonly admissionContractVersion?: number;
+    readonly preflight: BillingEnforcementActivationPreflight;
+    readonly lockTimeoutMs?: number;
+    readonly id?: () => string;
+}
+/** PostgreSQL-only protected lifecycle. The callback performs readiness checks on this store's transaction. */
+export declare class PostgresBillingEnforcementActivationStore implements BillingEnforcementActivationStore {
+    #private;
+    readonly successAuditMode: "transactional";
+    constructor(pool: Pool, options: PostgresBillingEnforcementActivationStoreOptions);
+    getActivationStatus(): Promise<BillingEnforcementActivationStatus>;
+    previewActivation(input: {
+        readonly approval: BillingEnforcementActivationApproval;
+    }): Promise<BillingEnforcementActivationPreview>;
+    activateEnforcement(input: {
+        readonly request: BillingEnforcementActivateRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingEnforcementActivationMutationResult>;
+    rollbackEnforcement(input: {
+        readonly request: BillingEnforcementRollbackRequest;
+        readonly actor: ControlPlaneIdentity;
+        readonly service: string;
+    }): Promise<BillingEnforcementActivationMutationResult>;
+}
+//# sourceMappingURL=postgres-enforcement-activation.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-enforcement-activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-enforcement-activation.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-enforcement-activation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAEL,KAAK,iCAAiC,EACtC,KAAK,oCAAoC,EAEzC,KAAK,0CAA0C,EAE/C,KAAK,qCAAqC,EAC1C,KAAK,mCAAmC,EAExC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EAOvC,MAAM,6BAA6B,CAAC;AA2BrC,MAAM,WAAW,gDAAgD;IAC/D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,qCAAqC,CAAC;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,+GAA+G;AAC/G,qBAAa,yCACX,YAAW,iCAAiC;;IAE5C,QAAQ,CAAC,gBAAgB,EAAG,eAAe,CAAU;gBAQzC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,gDAAgD;IAa3E,mBAAmB,IAAI,OAAO,CAAC,kCAAkC,CAAC;IAgBlE,iBAAiB,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;KACzD,GAAG,OAAO,CAAC,mCAAmC,CAAC;IAmBhD,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,0CAA0C,CAAC;IAOvD,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,0CAA0C,CAAC;CA4PxD"}