@noodleseed/one 0.48.0 → 0.49.1

package/node_modules/@noodle-borg/service/dist/routes/billing-enforcement-activation.js

@@ -0,0 +1,197 @@
+import { BillingEnforcementActivationApprovalSchema, BillingEnforcementActivationConflictError, BillingEnforcementActivationMutationResultSchema, BillingEnforcementActivationPreviewSchema, BillingEnforcementActivationStatusSchema, billingEnforcementActivationSuccessAudit, normalizeActivationServiceUrl, parseBillingEnforcementActivateRequest, parseBillingEnforcementRollbackRequest, } from '../billing/enforcement-activation.js';
+import { readJsonBody, sendForbidden, sendJson, sendUnauthorized } from '../http-util.js';
+import { emitAuditMirrors } from '../store/audit.js';
+export async function handleBillingEnforcementActivation(req, res, deps, action) {
+    const identity = await authorizeOperator(req, res, deps, action);
+    if (identity === undefined)
+        return;
+    const store = deps.store;
+    if (store === undefined) {
+        await emitDenial(deps.audit, 409, 'store_required', action, identity);
+        return sendJson(res, 409, {
+            ok: false,
+            code: 'billing_enforcement_activation_store_required',
+            error: 'billing enforcement activation requires the configured PostgreSQL lifecycle store',
+        });
+    }
+    if (action === 'status')
+        return handleStatus(res, { ...deps, store }, identity);
+    const serviceUrl = deps.serviceUrl;
+    if (serviceUrl === undefined) {
+        await emitDenial(deps.audit, 409, 'service_required', action, identity);
+        return sendJson(res, 409, {
+            ok: false,
+            code: 'billing_enforcement_activation_service_required',
+            error: 'billing enforcement activation requires the configured public service URL',
+        });
+    }
+    const body = await readJsonBody(req, deps.maxBody);
+    if (!body.ok) {
+        await emitDenial(deps.audit, body.status, 'invalid_request', action, identity);
+        return sendJson(res, body.status, { ok: false, error: body.error });
+    }
+    const configuredDeps = { ...deps, store, serviceUrl };
+    if (action === 'preview')
+        return handlePreview(res, configuredDeps, identity, body.value);
+    return handleMutation(res, configuredDeps, identity, action, body.value);
+}
+async function handleStatus(res, deps, identity) {
+    try {
+        const status = BillingEnforcementActivationStatusSchema.parse(await deps.store.getActivationStatus());
+        await deps.audit.emit(statusAudit(status, identity));
+        sendJson(res, 200, { ok: true, data: status });
+    }
+    catch (error) {
+        await handleStoreError(res, deps.audit, 'status', identity, error);
+    }
+}
+async function handlePreview(res, deps, identity, value) {
+    const approval = BillingEnforcementActivationApprovalSchema.safeParse(value);
+    if (!approval.success) {
+        await emitDenial(deps.audit, 400, 'invalid_request', 'preview', identity);
+        return sendJson(res, 400, {
+            ok: false,
+            error: `invalid billing enforcement activation approval: ${approval.error.message}`,
+        });
+    }
+    try {
+        if (approval.data.service !== normalizeActivationServiceUrl(deps.serviceUrl)) {
+            throw new BillingEnforcementActivationConflictError('activation_configuration_unavailable', 'activation approval targets a different service');
+        }
+        const preview = BillingEnforcementActivationPreviewSchema.parse(await deps.store.previewActivation({ approval: approval.data }));
+        await deps.audit.emit(previewAudit(preview, identity));
+        sendJson(res, 200, { ok: true, data: preview });
+    }
+    catch (error) {
+        await handleStoreError(res, deps.audit, 'preview', identity, error);
+    }
+}
+async function handleMutation(res, deps, identity, action, value) {
+    let request;
+    try {
+        request =
+            action === 'activate'
+                ? parseBillingEnforcementActivateRequest(value)
+                : parseBillingEnforcementRollbackRequest(value);
+    }
+    catch (error) {
+        await emitDenial(deps.audit, 400, 'invalid_request', action, identity);
+        return sendJson(res, 400, {
+            ok: false,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+    try {
+        const service = normalizeActivationServiceUrl(deps.serviceUrl);
+        const rawResult = action === 'activate'
+            ? await deps.store.activateEnforcement({
+                request: request,
+                actor: identity,
+                service,
+            })
+            : await deps.store.rollbackEnforcement({
+                request: request,
+                actor: identity,
+                service,
+            });
+        const result = BillingEnforcementActivationMutationResultSchema.parse(rawResult);
+        await emitSuccess(deps, result, identity);
+        sendJson(res, action === 'activate' && !result.replayed ? 201 : 200, {
+            ok: true,
+            data: result,
+        });
+    }
+    catch (error) {
+        await handleStoreError(res, deps.audit, action, identity, error);
+    }
+}
+async function authorizeOperator(req, res, deps, action) {
+    const auth = await deps.gate.authorize(req);
+    if (!auth.ok) {
+        await emitDenial(deps.audit, auth.status, 'authorization_failed', action);
+        if (auth.status === 401)
+            sendUnauthorized(res, auth.message);
+        else
+            sendForbidden(res, auth.message);
+        return undefined;
+    }
+    if (auth.identity === undefined) {
+        await emitDenial(deps.audit, 401, 'identity_required', action);
+        sendUnauthorized(res, 'identity required');
+        return undefined;
+    }
+    if (!auth.identity.superAdmin) {
+        await emitDenial(deps.audit, 403, 'super_admin_required', action, auth.identity);
+        sendForbidden(res, 'super-admin required');
+        return undefined;
+    }
+    return auth.identity;
+}
+async function handleStoreError(res, audit, action, identity, error) {
+    if (error instanceof BillingEnforcementActivationConflictError) {
+        await emitDenial(audit, 409, error.code, action, identity);
+        sendJson(res, 409, { ok: false, code: error.code, error: error.message });
+        return;
+    }
+    await emitDenial(audit, 500, 'internal_error', action, identity);
+    throw error;
+}
+function emitSuccess(deps, result, identity) {
+    const event = billingEnforcementActivationSuccessAudit(result, identity);
+    return deps.store.successAuditMode === 'transactional'
+        ? emitAuditMirrors(deps.audit, event)
+        : deps.audit.emit(event);
+}
+function statusAudit(status, identity) {
+    return {
+        eventType: eventType('status'),
+        org: 'platform',
+        actorSubject: identity.subject,
+        actorEmail: identity.email,
+        decision: 'allow',
+        status: 200,
+        details: {
+            state: status.state,
+            generation: status.generation,
+            activeEpochId: status.activeEpochId,
+        },
+    };
+}
+function previewAudit(preview, identity) {
+    return {
+        eventType: eventType('preview'),
+        org: 'platform',
+        actorSubject: identity.subject,
+        actorEmail: identity.email,
+        decision: 'allow',
+        status: 200,
+        details: {
+            ready: preview.ready,
+            blockerCount: preview.blockers.length,
+            approvalChecksum: preview.approvalChecksum,
+            previewChecksum: preview.previewChecksum,
+        },
+    };
+}
+function emitDenial(audit, status, reasonCode, action, identity) {
+    return audit.emit({
+        eventType: eventType(action),
+        org: 'platform',
+        decision: 'deny',
+        status,
+        reasonCode,
+        ...(identity === undefined
+            ? {}
+            : { actorSubject: identity.subject, actorEmail: identity.email }),
+    });
+}
+function eventType(action) {
+    if (action === 'status')
+        return 'billing.enforcement.activation.read';
+    if (action === 'preview')
+        return 'billing.enforcement.activation.previewed';
+    if (action === 'activate')
+        return 'billing.enforcement.activated';
+    return 'billing.enforcement.rolled_back';
+}
+//# sourceMappingURL=billing-enforcement-activation.js.map

package/node_modules/@noodle-borg/service/dist/routes/billing-enforcement-activation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-enforcement-activation.js","sourceRoot":"","sources":["../../src/routes/billing-enforcement-activation.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,0CAA0C,EAC1C,yCAAyC,EAEzC,gDAAgD,EAEhD,yCAAyC,EAEzC,wCAAwC,EAGxC,wCAAwC,EACxC,6BAA6B,EAC7B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAC1F,OAAO,EAAkB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAgBrE,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAoB,EACpB,GAAmB,EACnB,IAAyB,EACzB,MAA+C;IAE/C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,+CAA+C;YACrD,KAAK,EAAE,mFAAmF;SAC3F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iDAAiD;YACvD,KAAK,EAAE,2EAA2E;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/E,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAmB,EACnB,IAAiF,EACjF,QAA8B;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CACvC,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAmB,EACnB,IAGC,EACD,QAA8B,EAC9B,KAAc;IAEd,MAAM,QAAQ,GAAG,0CAA0C,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oDAAoD,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;SACpF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,yCAAyC,CACjD,sCAAsC,EACtC,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,yCAAyC,CAAC,KAAK,CAC7D,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,GAAmB,EACnB,IAGC,EACD,QAA8B,EAC9B,MAA+B,EAC/B,KAAc;IAEd,IAAI,OAA8E,CAAC;IACnF,IAAI,CAAC;QACH,OAAO;YACL,MAAM,KAAK,UAAU;gBACnB,CAAC,CAAC,sCAAsC,CAAC,KAAK,CAAC;gBAC/C,CAAC,CAAC,sCAAsC,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,SAAS,GACb,MAAM,KAAK,UAAU;YACnB,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBACnC,OAAO,EAAE,OAA4C;gBACrD,KAAK,EAAE,QAAQ;gBACf,OAAO;aACR,CAAC;YACJ,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBACnC,OAAO,EAAE,OAA4C;gBACrD,KAAK,EAAE,QAAQ;gBACf,OAAO;aACR,CAAC,CAAC;QACT,MAAM,MAAM,GAAG,gDAAgD,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjF,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;YACnE,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAoB,EACpB,GAAmB,EACnB,IAAyB,EACzB,MAA+C;IAE/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;;YACxD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAC/D,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,aAAa,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,GAAmB,EACnB,KAAgB,EAChB,MAA+C,EAC/C,QAA8B,EAC9B,KAAc;IAEd,IAAI,KAAK,YAAY,yCAAyC,EAAE,CAAC;QAC/D,MAAM,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IACD,MAAM,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,KAAK,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAClB,IAAiF,EACjF,MAAkD,EAClD,QAA8B;IAE9B,MAAM,KAAK,GAAG,wCAAwC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,eAAe;QACpD,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAClB,MAA0C,EAC1C,QAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC;QAC9B,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAA4C,EAC5C,QAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC;QAC/B,GAAG,EAAE,UAAU;QACf,YAAY,EAAE,QAAQ,CAAC,OAAO;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;YACrC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,KAAgB,EAChB,MAAc,EACd,UAAkB,EAClB,MAA+C,EAC/C,QAA+B;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC;QAChB,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC;QAC5B,GAAG,EAAE,UAAU;QACf,QAAQ,EAAE,MAAM;QAChB,MAAM;QACN,UAAU;QACV,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;KACpE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAA+C;IAChE,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,qCAAqC,CAAC;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,0CAA0C,CAAC;IAC5E,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,+BAA+B,CAAC;IAClE,OAAO,iCAAiC,CAAC;AAC3C,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/billing-production-app-response.d.ts

@@ -0,0 +1,15 @@
+import type { ServerResponse } from 'node:http';
+import type { AuditSink } from '../store/audit.js';
+interface ProductionAppAdmissionRejectionContext {
+    readonly audit: AuditSink;
+    readonly eventType: 'deploy.rejected' | 'rollback.rejected' | 'app.restore.rejected';
+    readonly org: string;
+    readonly app: string;
+    readonly env?: string;
+    readonly actorSubject?: string;
+    readonly actorEmail?: string;
+}
+/** Translate the two typed commercial admission failures without disclosing pooled-account details. */
+export declare function respondProductionAppAdmissionError(res: ServerResponse, error: unknown, context: ProductionAppAdmissionRejectionContext): Promise<boolean>;
+export {};
+//# sourceMappingURL=billing-production-app-response.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/billing-production-app-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-production-app-response.d.ts","sourceRoot":"","sources":["../../src/routes/billing-production-app-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,UAAU,sCAAsC;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,uGAAuG;AACvG,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,sCAAsC,GAC9C,OAAO,CAAC,OAAO,CAAC,CAgBlB"}

package/node_modules/@noodle-borg/service/dist/routes/billing-production-app-response.js

@@ -0,0 +1,33 @@
+import { BillingProductionAppAdmissionError } from '../billing/postgres-production-app-admission.js';
+import { sendJson } from '../http-util.js';
+/** Translate the two typed commercial admission failures without disclosing pooled-account details. */
+export async function respondProductionAppAdmissionError(res, error, context) {
+    if (!(error instanceof BillingProductionAppAdmissionError))
+        return false;
+    const response = productionAppAdmissionResponse(error.code);
+    await context.audit.emit({
+        eventType: context.eventType,
+        org: context.org,
+        app: context.app,
+        ...(context.env !== undefined ? { env: context.env } : {}),
+        decision: 'deny',
+        status: response.status,
+        reasonCode: error.code,
+        ...(context.actorSubject !== undefined ? { actorSubject: context.actorSubject } : {}),
+        ...(context.actorEmail !== undefined ? { actorEmail: context.actorEmail } : {}),
+    });
+    sendJson(res, response.status, { ok: false, code: error.code, error: response.message });
+    return true;
+}
+function productionAppAdmissionResponse(code) {
+    return code === 'production_app_limit_exceeded'
+        ? {
+            status: 409,
+            message: 'production app limit reached; archive an active app or contact support',
+        }
+        : {
+            status: 503,
+            message: 'billing enforcement is temporarily unavailable; retry later',
+        };
+}
+//# sourceMappingURL=billing-production-app-response.js.map

package/node_modules/@noodle-borg/service/dist/routes/billing-production-app-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-production-app-response.js","sourceRoot":"","sources":["../../src/routes/billing-production-app-response.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAa3C,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAmB,EACnB,KAAc,EACd,OAA+C;IAE/C,IAAI,CAAC,CAAC,KAAK,YAAY,kCAAkC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,8BAA8B,CAAC,IAAgD;IAItF,OAAO,IAAI,KAAK,+BAA+B;QAC7C,CAAC,CAAC;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,wEAAwE;SAClF;QACH,CAAC,CAAC;YACE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,6DAA6D;SACvE,CAAC;AACR,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/billing-read.d.ts

@@ -1,5 +1,6 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
 import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import type { BillingCommercialEnforcementProjectionStore } from '../billing/commercial-enforcement-projection.js';
 import type { ServerRegistry } from '../registry.js';
 import type { ControlPlaneStore } from '../store.js';
 interface BillingReadDeps {
@@ -8,6 +9,7 @@ interface BillingReadDeps {
     readonly registry: ServerRegistry;
     readonly billingUsageEnabled?: boolean;
     readonly clock?: () => Date;
+    readonly billingCommercialEnforcementProjectionStore?: BillingCommercialEnforcementProjectionStore;
 }
 export declare function handleBillingAccountList(req: IncomingMessage, res: ServerResponse, deps: BillingReadDeps): Promise<void>;
 export declare function handleBillingAccountInspect(req: IncomingMessage, res: ServerResponse, billingAccountId: string, deps: BillingReadDeps): Promise<void>;

package/node_modules/@noodle-borg/service/dist/routes/billing-read.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-read.d.ts","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAmB7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAYrD,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAgFf;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAgCf"}
+{"version":3,"file":"billing-read.d.ts","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAEV,2CAA2C,EAE5C,MAAM,iDAAiD,CAAC;AAmBzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAYrD,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,2CAA2C,CAAC,EAAE,2CAA2C,CAAC;CACpG;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CA2Cf;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAsFf;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAmCf"}