@pipeline-builder/pipeline-core 3.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,32 @@
+# @pipeline-builder/pipeline-core
+
+📖 **[View documentation](https://mwashburn160.github.io/pipeline-builder/)**
+
+AWS CDK construct library for [Pipeline Builder](https://mwashburn160.github.io/pipeline-builder/): the `Builder` construct that assembles plugin specs into a CodePipeline stack, the `PluginLookup` custom resource that resolves plugins at deploy time, pipeline/plugin domain types, and shared application configuration. Also re-exports `pipeline-data` so consumers only depend on one package.
+
+## Key Exports
+
+### CDK Constructs
+- `Builder` — Composable CodePipeline builder construct
+- `PluginLookup` — Custom resource + Lambda that resolves plugin specs at deploy time
+
+### Pipeline Types
+- `Pipeline`, `Plugin`, `PipelineFilter`, `PluginFilter`
+- `AccessModifier`, `ComputeType`, `PluginType`, `MetaDataType`
+
+### Configuration
+- `Config` — Application config loader
+- `CoreConstants` — Shared timeouts, cache keys, compression thresholds
+- `getConnection`, `db`, `schema` — Re-exported from `pipeline-data`
+
+### Helpers
+- `replaceNonAlphanumeric`, `extractMetadataEnv` — String utilities
+- `buildPipelineConditions`, `buildPluginConditions`, `validatePipelineFilter` — Filter builders
+
+## License
+
+Apache-2.0. See [LICENSE](./LICENSE).
+
+---
+
+**Keywords:** aws, codepipeline, codebuild, cicd, ci-cd, devops, cdk, aws-cdk, cloudformation, pipeline, pipeline-as-code, containerized, docker, kubernetes, plugins, typescript, self-service, multi-tenant, compliance, automation, infrastructure-as-code, iac, cli

package/lib/config/app-config.d.ts

@@ -0,0 +1,81 @@
+import type { Algorithm } from 'jsonwebtoken';
+import type { AppConfig } from './config-types';
+/**
+ * Core constants — configurable via environment variables with sensible defaults.
+ */
+export declare class CoreConstants {
+    static readonly NAME_PATTERN: RegExp;
+    static readonly ALLOWED_JWT_ALGORITHMS: Algorithm[];
+    static readonly HANDLER_TIMEOUT_MS: number;
+    /** Default platform URL fallback when PLATFORM_BASE_URL is not set. */
+    static readonly DEFAULT_PLATFORM_URL = "https://localhost:8443";
+    static readonly HANDLER_DEFAULT_BASE_URL: string;
+    static readonly HANDLER_MAX_RETRIES: number;
+    static readonly HANDLER_RETRY_DELAY_MS: number;
+    static readonly PLUGIN_IMAGE_PREFIX: string;
+    static readonly PLUGIN_BUILD_QUEUE_NAME: string;
+    static readonly PLUGIN_BUILD_MAX_ATTEMPTS: number;
+    static readonly PLUGIN_BUILD_BACKOFF_DELAY_MS: number;
+    static readonly PLUGIN_BUILD_COMPLETED_RETENTION_SECS: number;
+    static readonly PLUGIN_BUILD_FAILED_RETENTION_SECS: number;
+    static readonly PLUGIN_BUILD_WORKER_TIMEOUT_MS: number;
+    static readonly MAX_PAGE_LIMIT: number;
+    static readonly DEFAULT_PAGE_LIMIT: number;
+    static readonly MAX_PROMPT_LENGTH: number;
+    static readonly PLUGIN_MAX_UPLOAD_MB: number;
+    static readonly PIPELINE_NAME_MAX_LENGTH: number;
+    static readonly DEFAULT_PLUGIN_VERSION: string;
+    static readonly SSE_STREAM_TIMEOUT_MS: number;
+    static readonly GITHUB_API_BASE_URL: string;
+    static readonly BITBUCKET_API_BASE_URL: string;
+    static readonly MAX_BULK_ITEMS: number;
+    static readonly MAX_EVENTS_PER_BATCH: number;
+    static readonly DEFAULT_REPORT_RANGE_DAYS: number;
+    static readonly SECRETS_PATH_PREFIX: string;
+    /** Build a Secrets Manager path: {prefix}/{orgId}/{name} */
+    static secretPath(orgId: string, name: string): string;
+    static readonly DB_MAX_RETRIES: number;
+    static readonly DB_RETRY_DELAY_MS: number;
+    static readonly DB_TRANSACTION_TIMEOUT_MS: number;
+    static readonly DB_CLOSE_TIMEOUT_MS: number;
+    static readonly COMPRESSION_THRESHOLD_BYTES: number;
+    static readonly IDEMPOTENCY_TTL_MS: number;
+    static readonly IDEMPOTENCY_MAX_STORE_SIZE: number;
+    static readonly IDEMPOTENCY_CLEANUP_INTERVAL_MS: number;
+    static readonly CACHE_CLEANUP_INTERVAL_MS: number;
+    static readonly CACHE_TTL_ENTITY: number;
+    static readonly CACHE_TTL_MESSAGE: number;
+    static readonly CACHE_TTL_REPORT_INVENTORY: number;
+    static readonly CACHE_TTL_REPORT_TIMESERIES: number;
+    static readonly CACHE_TTL_COMPLIANCE_RULES: number;
+    static readonly CACHE_TTL_BILLING_PLANS: number;
+    static readonly SSE_BACKPRESSURE_THRESHOLD: number;
+    static readonly CACHE_CONTROL_LIST: string;
+    static readonly CACHE_CONTROL_DETAIL: string;
+}
+/**
+ * Configuration facade with lazy per-section loading.
+ *
+ * Each section is loaded and validated independently on first access,
+ * so requesting `Config.get('aws')` does not trigger loading of
+ * server, auth, or billing config (and their env var requirements).
+ *
+ * Usage: `Config.get('server')`, `Config.get('auth')`, etc.
+ */
+export declare class Config {
+    private static cache;
+    /**
+     * Get a specific configuration section (loaded lazily on first access).
+     */
+    static get<K extends keyof AppConfig>(section: K): AppConfig[K];
+    /**
+     * Validate auth configuration (JWT secrets, algorithms, expiration).
+     * Call this at server startup, not during CDK synthesis.
+     */
+    static validateAuth(): void;
+    /**
+     * Untyped config access — use when the published package types don't include a new section yet.
+     * Avoids the `(Config as unknown as ...).get(...)` cast pattern in consumers.
+     */
+    static getAny(section: string): unknown;
+}

package/lib/config/app-config.js

@@ -0,0 +1,151 @@
+"use strict";
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Config = exports.CoreConstants = void 0;
+const billing_config_1 = require("./billing-config");
+const infrastructure_config_1 = require("./infrastructure-config");
+const server_config_1 = require("./server-config");
+/**
+ * Core constants — configurable via environment variables with sensible defaults.
+ */
+class CoreConstants {
+    static NAME_PATTERN = /^[a-z0-9-]+$/;
+    // Supported JWT algorithms
+    static ALLOWED_JWT_ALGORITHMS = ['HS256', 'RS256', 'ES256'];
+    // Custom Resource Handler configuration (must be less than Lambda timeout of 30s to allow response handling)
+    static HANDLER_TIMEOUT_MS = parseInt(process.env.HANDLER_TIMEOUT_MS || '25000', 10); // 25s
+    /** Default platform URL fallback when PLATFORM_BASE_URL is not set. */
+    static DEFAULT_PLATFORM_URL = 'https://localhost:8443';
+    static HANDLER_DEFAULT_BASE_URL = process.env.PLATFORM_BASE_URL || CoreConstants.DEFAULT_PLATFORM_URL;
+    static HANDLER_MAX_RETRIES = parseInt(process.env.HANDLER_MAX_RETRIES || '2', 10);
+    static HANDLER_RETRY_DELAY_MS = parseInt(process.env.HANDLER_RETRY_DELAY_MS || '1000', 10); // 1s
+    // Plugin image configuration
+    static PLUGIN_IMAGE_PREFIX = process.env.PLUGIN_IMAGE_PREFIX || 'p-';
+    // Plugin build queue configuration
+    static PLUGIN_BUILD_QUEUE_NAME = process.env.PLUGIN_BUILD_QUEUE_NAME || 'plugin-build';
+    static PLUGIN_BUILD_MAX_ATTEMPTS = parseInt(process.env.PLUGIN_BUILD_MAX_ATTEMPTS || '2', 10);
+    static PLUGIN_BUILD_BACKOFF_DELAY_MS = parseInt(process.env.PLUGIN_BUILD_BACKOFF_DELAY_MS || '5000', 10); // 5s
+    static PLUGIN_BUILD_COMPLETED_RETENTION_SECS = parseInt(process.env.PLUGIN_BUILD_COMPLETED_RETENTION_SECS || '3600', 10); // 1 hr
+    static PLUGIN_BUILD_FAILED_RETENTION_SECS = parseInt(process.env.PLUGIN_BUILD_FAILED_RETENTION_SECS || '86400', 10); // 24 hr
+    static PLUGIN_BUILD_WORKER_TIMEOUT_MS = parseInt(process.env.PLUGIN_BUILD_WORKER_TIMEOUT_MS || '10000', 10); // 10s
+    // Pagination and limits
+    static MAX_PAGE_LIMIT = parseInt(process.env.MAX_PAGE_LIMIT || '1000', 10);
+    static DEFAULT_PAGE_LIMIT = parseInt(process.env.DEFAULT_PAGE_LIMIT || '100', 10);
+    static MAX_PROMPT_LENGTH = parseInt(process.env.MAX_PROMPT_LENGTH || '5000', 10);
+    static PLUGIN_MAX_UPLOAD_MB = parseInt(process.env.PLUGIN_MAX_UPLOAD_MB || '4096', 10);
+    static PIPELINE_NAME_MAX_LENGTH = parseInt(process.env.PIPELINE_NAME_MAX_LENGTH || '100', 10);
+    static DEFAULT_PLUGIN_VERSION = process.env.DEFAULT_PLUGIN_VERSION || '1.0.0';
+    // SSE stream timeout for AI generation endpoints
+    static SSE_STREAM_TIMEOUT_MS = parseInt(process.env.SSE_STREAM_TIMEOUT_MS || '300000', 10); // 5 min
+    // Git provider API base URLs (configurable for enterprise instances)
+    static GITHUB_API_BASE_URL = process.env.GITHUB_API_BASE_URL || 'https://api.github.com';
+    static BITBUCKET_API_BASE_URL = process.env.BITBUCKET_API_BASE_URL || 'https://api.bitbucket.org/2.0';
+    // Bulk operations and event ingestion
+    static MAX_BULK_ITEMS = parseInt(process.env.MAX_BULK_ITEMS || '100', 10);
+    static MAX_EVENTS_PER_BATCH = parseInt(process.env.MAX_EVENTS_PER_BATCH || '100', 10);
+    static DEFAULT_REPORT_RANGE_DAYS = parseInt(process.env.DEFAULT_REPORT_RANGE_DAYS || '30', 10);
+    // Secrets Manager path prefix for org-scoped secrets
+    static SECRETS_PATH_PREFIX = process.env.SECRETS_PATH_PREFIX || 'pipeline-builder';
+    /** Build a Secrets Manager path: {prefix}/{orgId}/{name} */
+    static secretPath(orgId, name) {
+        return `${CoreConstants.SECRETS_PATH_PREFIX}/${orgId}/${name}`;
+    }
+    // Database connection
+    static DB_MAX_RETRIES = parseInt(process.env.DB_MAX_RETRIES || '3', 10);
+    static DB_RETRY_DELAY_MS = parseInt(process.env.DB_RETRY_DELAY_MS || '1000', 10); // 1s
+    static DB_TRANSACTION_TIMEOUT_MS = parseInt(process.env.DB_TRANSACTION_TIMEOUT_MS || '30000', 10); // 30s
+    static DB_CLOSE_TIMEOUT_MS = parseInt(process.env.DB_CLOSE_TIMEOUT_MS || '5000', 10); // 5s
+    // Response compression
+    static COMPRESSION_THRESHOLD_BYTES = parseInt(process.env.COMPRESSION_THRESHOLD_BYTES || '1024', 10);
+    // Idempotency
+    static IDEMPOTENCY_TTL_MS = parseInt(process.env.IDEMPOTENCY_TTL_MS || '300000', 10); // 5 min
+    static IDEMPOTENCY_MAX_STORE_SIZE = parseInt(process.env.IDEMPOTENCY_MAX_STORE_SIZE || '10000', 10);
+    static IDEMPOTENCY_CLEANUP_INTERVAL_MS = parseInt(process.env.IDEMPOTENCY_CLEANUP_INTERVAL_MS || '60000', 10); // 1 min
+    // Cache
+    static CACHE_CLEANUP_INTERVAL_MS = parseInt(process.env.CACHE_CLEANUP_INTERVAL_MS || '30000', 10); // 30s
+    // Server-side cache TTLs (seconds)
+    static CACHE_TTL_ENTITY = parseInt(process.env.CACHE_TTL_ENTITY || '60', 10); // plugin/pipeline findById
+    static CACHE_TTL_MESSAGE = parseInt(process.env.CACHE_TTL_MESSAGE || '300', 10); // announcements/conversations (5 min)
+    static CACHE_TTL_REPORT_INVENTORY = parseInt(process.env.CACHE_TTL_REPORT_INVENTORY || '300', 10); // plugin summary/distribution (5 min)
+    static CACHE_TTL_REPORT_TIMESERIES = parseInt(process.env.CACHE_TTL_REPORT_TIMESERIES || '120', 10); // execution/build metrics (2 min)
+    static CACHE_TTL_COMPLIANCE_RULES = parseInt(process.env.CACHE_TTL_COMPLIANCE_RULES || '60', 10); // active compliance rules
+    static CACHE_TTL_BILLING_PLANS = parseInt(process.env.CACHE_TTL_BILLING_PLANS || '14400', 10); // billing plans (4 hours)
+    // SSE backpressure
+    static SSE_BACKPRESSURE_THRESHOLD = parseInt(process.env.SSE_BACKPRESSURE_THRESHOLD || '10', 10);
+    // HTTP Cache-Control headers
+    static CACHE_CONTROL_LIST = process.env.CACHE_CONTROL_LIST || 'private, max-age=30, stale-while-revalidate=60';
+    static CACHE_CONTROL_DETAIL = process.env.CACHE_CONTROL_DETAIL || 'private, max-age=60, stale-while-revalidate=120';
+}
+exports.CoreConstants = CoreConstants;
+/**
+ * Per-section loader map — each section is loaded lazily on first access.
+ * This avoids loading all config sections (and their required env vars)
+ * when only one section is needed (e.g. CDK synthesis only needs 'aws').
+ */
+const sectionLoaders = {
+    server: server_config_1.loadServerConfig,
+    auth: server_config_1.loadAuthConfig,
+    database: infrastructure_config_1.loadDatabaseConfig,
+    registry: infrastructure_config_1.loadRegistryConfig,
+    redis: infrastructure_config_1.loadRedisConfig,
+    pluginBuild: infrastructure_config_1.loadPluginBuildConfig,
+    dockerConfig: infrastructure_config_1.loadDockerConfig,
+    observability: infrastructure_config_1.loadObservabilityConfig,
+    compliance: infrastructure_config_1.loadComplianceConfig,
+    aws: infrastructure_config_1.loadAWSConfig,
+    rateLimit: server_config_1.loadRateLimitConfig,
+    billing: billing_config_1.loadBillingConfig,
+};
+/** Per-section validators — only run for sections that have validation logic. */
+const sectionValidators = {
+    server: server_config_1.validateServerConfig,
+};
+/**
+ * Configuration facade with lazy per-section loading.
+ *
+ * Each section is loaded and validated independently on first access,
+ * so requesting `Config.get('aws')` does not trigger loading of
+ * server, auth, or billing config (and their env var requirements).
+ *
+ * Usage: `Config.get('server')`, `Config.get('auth')`, etc.
+ */
+class Config {
+    static cache = new Map();
+    /**
+     * Get a specific configuration section (loaded lazily on first access).
+     */
+    static get(section) {
+        if (!this.cache.has(section)) {
+            const loader = sectionLoaders[section];
+            const value = loader();
+            const validator = sectionValidators[section];
+            if (validator)
+                validator(value);
+            this.cache.set(section, value);
+        }
+        return this.cache.get(section);
+    }
+    /**
+     * @internal Reset configuration (for testing only)
+     */
+    static _resetForTesting() {
+        this.cache.clear();
+    }
+    /**
+     * Validate auth configuration (JWT secrets, algorithms, expiration).
+     * Call this at server startup, not during CDK synthesis.
+     */
+    static validateAuth() {
+        (0, server_config_1.validateAuthConfig)(this.get('auth'));
+    }
+    /**
+     * Untyped config access — use when the published package types don't include a new section yet.
+     * Avoids the `(Config as unknown as ...).get(...)` cast pattern in consumers.
+     */
+    static getAny(section) {
+        return this.get(section);
+    }
+}
+exports.Config = Config;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXBwLWNvbmZpZy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9jb25maWcvYXBwLWNvbmZpZy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiO0FBQUEsK0NBQStDO0FBQy9DLHNDQUFzQzs7O0FBR3RDLHFEQUFxRDtBQUVyRCxtRUFTaUM7QUFDakMsbURBTXlCO0FBRXpCOztHQUVHO0FBQ0gsTUFBYSxhQUFhO0lBQ3hCLE1BQU0sQ0FBVSxZQUFZLEdBQUcsY0FBYyxDQUFDO0lBRTlDLDJCQUEyQjtJQUMzQixNQUFNLENBQVUsc0JBQXNCLEdBQWdCLENBQUMsT0FBTyxFQUFFLE9BQU8sRUFBRSxPQUFPLENBQUMsQ0FBQztJQUVsRiw2R0FBNkc7SUFDN0csTUFBTSxDQUFVLGtCQUFrQixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGtCQUFrQixJQUFJLE9BQU8sRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLE1BQU07SUFDcEcsdUVBQXVFO0lBQ3ZFLE1BQU0sQ0FBVSxvQkFBb0IsR0FBRyx3QkFBd0IsQ0FBQztJQUVoRSxNQUFNLENBQVUsd0JBQXdCLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyxpQkFBaUIsSUFBSSxhQUFhLENBQUMsb0JBQW9CLENBQUM7SUFDL0csTUFBTSxDQUFVLG1CQUFtQixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLG1CQUFtQixJQUFJLEdBQUcsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUMzRixNQUFNLENBQVUsc0JBQXNCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsc0JBQXNCLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsS0FBSztJQUUxRyw2QkFBNkI7SUFDN0IsTUFBTSxDQUFVLG1CQUFtQixHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsbUJBQW1CLElBQUksSUFBSSxDQUFDO0lBRTlFLG1DQUFtQztJQUNuQyxNQUFNLENBQVUsdUJBQXVCLEdBQUcsT0FBTyxDQUFDLEdBQUcsQ0FBQyx1QkFBdUIsSUFBSSxjQUFjLENBQUM7SUFDaEcsTUFBTSxDQUFVLHlCQUF5QixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLHlCQUF5QixJQUFJLEdBQUcsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUN2RyxNQUFNLENBQVUsNkJBQTZCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsNkJBQTZCLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsS0FBSztJQUN4SCxNQUFNLENBQVUscUNBQXFDLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMscUNBQXFDLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsT0FBTztJQUMxSSxNQUFNLENBQVUsa0NBQWtDLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsa0NBQWtDLElBQUksT0FBTyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsUUFBUTtJQUN0SSxNQUFNLENBQVUsOEJBQThCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsOEJBQThCLElBQUksT0FBTyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsTUFBTTtJQUU1SCx3QkFBd0I7SUFDeEIsTUFBTSxDQUFVLGNBQWMsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxjQUFjLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQ3BGLE1BQU0sQ0FBVSxrQkFBa0IsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxrQkFBa0IsSUFBSSxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDM0YsTUFBTSxDQUFVLGlCQUFpQixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGlCQUFpQixJQUFJLE1BQU0sRUFBRSxFQUFFLENBQUMsQ0FBQztJQUMxRixNQUFNLENBQVUsb0JBQW9CLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsb0JBQW9CLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQ2hHLE1BQU0sQ0FBVSx3QkFBd0IsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyx3QkFBd0IsSUFBSSxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFDdkcsTUFBTSxDQUFVLHNCQUFzQixHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsc0JBQXNCLElBQUksT0FBTyxDQUFDO0lBRXZGLGlEQUFpRDtJQUNqRCxNQUFNLENBQVUscUJBQXFCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMscUJBQXFCLElBQUksUUFBUSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsUUFBUTtJQUU3RyxxRUFBcUU7SUFDckUsTUFBTSxDQUFVLG1CQUFtQixHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsbUJBQW1CLElBQUksd0JBQXdCLENBQUM7SUFDbEcsTUFBTSxDQUFVLHNCQUFzQixHQUFHLE9BQU8sQ0FBQyxHQUFHLENBQUMsc0JBQXNCLElBQUksK0JBQStCLENBQUM7SUFFL0csc0NBQXNDO0lBQ3RDLE1BQU0sQ0FBVSxjQUFjLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsY0FBYyxJQUFJLEtBQUssRUFBRSxFQUFFLENBQUMsQ0FBQztJQUNuRixNQUFNLENBQVUsb0JBQW9CLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsb0JBQW9CLElBQUksS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQy9GLE1BQU0sQ0FBVSx5QkFBeUIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyx5QkFBeUIsSUFBSSxJQUFJLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFFeEcscURBQXFEO0lBQ3JELE1BQU0sQ0FBVSxtQkFBbUIsR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLG1CQUFtQixJQUFJLGtCQUFrQixDQUFDO0lBRTVGLDREQUE0RDtJQUM1RCxNQUFNLENBQUMsVUFBVSxDQUFDLEtBQWEsRUFBRSxJQUFZO1FBQzNDLE9BQU8sR0FBRyxhQUFhLENBQUMsbUJBQW1CLElBQUksS0FBSyxJQUFJLElBQUksRUFBRSxDQUFDO0lBQ2pFLENBQUM7SUFFRCxzQkFBc0I7SUFDdEIsTUFBTSxDQUFVLGNBQWMsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxjQUFjLElBQUksR0FBRyxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQ2pGLE1BQU0sQ0FBVSxpQkFBaUIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxpQkFBaUIsSUFBSSxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxLQUFLO0lBQ2hHLE1BQU0sQ0FBVSx5QkFBeUIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyx5QkFBeUIsSUFBSSxPQUFPLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxNQUFNO0lBQ2xILE1BQU0sQ0FBVSxtQkFBbUIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxtQkFBbUIsSUFBSSxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxLQUFLO0lBRXBHLHVCQUF1QjtJQUN2QixNQUFNLENBQVUsMkJBQTJCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsMkJBQTJCLElBQUksTUFBTSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBRTlHLGNBQWM7SUFDZCxNQUFNLENBQVUsa0JBQWtCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsa0JBQWtCLElBQUksUUFBUSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsUUFBUTtJQUN2RyxNQUFNLENBQVUsMEJBQTBCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsMEJBQTBCLElBQUksT0FBTyxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQzdHLE1BQU0sQ0FBVSwrQkFBK0IsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQywrQkFBK0IsSUFBSSxPQUFPLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxRQUFRO0lBRWhJLFFBQVE7SUFDUixNQUFNLENBQVUseUJBQXlCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMseUJBQXlCLElBQUksT0FBTyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsTUFBTTtJQUVsSCxtQ0FBbUM7SUFDbkMsTUFBTSxDQUFVLGdCQUFnQixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLGdCQUFnQixJQUFJLElBQUksRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLDJCQUEyQjtJQUNsSCxNQUFNLENBQVUsaUJBQWlCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsaUJBQWlCLElBQUksS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsc0NBQXNDO0lBQ2hJLE1BQU0sQ0FBVSwwQkFBMEIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQywwQkFBMEIsSUFBSSxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxzQ0FBc0M7SUFDbEosTUFBTSxDQUFVLDJCQUEyQixHQUFHLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLDJCQUEyQixJQUFJLEtBQUssRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLGtDQUFrQztJQUNoSixNQUFNLENBQVUsMEJBQTBCLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsMEJBQTBCLElBQUksSUFBSSxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsMEJBQTBCO0lBQ3JJLE1BQU0sQ0FBVSx1QkFBdUIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyx1QkFBdUIsSUFBSSxPQUFPLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQywwQkFBMEI7SUFFbEksbUJBQW1CO0lBQ25CLE1BQU0sQ0FBVSwwQkFBMEIsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQywwQkFBMEIsSUFBSSxJQUFJLEVBQUUsRUFBRSxDQUFDLENBQUM7SUFFMUcsNkJBQTZCO0lBQzdCLE1BQU0sQ0FBVSxrQkFBa0IsR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLGtCQUFrQixJQUFJLGdEQUFnRCxDQUFDO0lBQ3hILE1BQU0sQ0FBVSxvQkFBb0IsR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLG9CQUFvQixJQUFJLGlEQUFpRCxDQUFDOztBQXBGL0gsc0NBcUZDO0FBRUQ7Ozs7R0FJRztBQUNILE1BQU0sY0FBYyxHQUFtRDtJQUNyRSxNQUFNLEVBQUUsZ0NBQWdCO0lBQ3hCLElBQUksRUFBRSw4QkFBYztJQUNwQixRQUFRLEVBQUUsMENBQWtCO0lBQzVCLFFBQVEsRUFBRSwwQ0FBa0I7SUFDNUIsS0FBSyxFQUFFLHVDQUFlO0lBQ3RCLFdBQVcsRUFBRSw2Q0FBcUI7SUFDbEMsWUFBWSxFQUFFLHdDQUFnQjtJQUM5QixhQUFhLEVBQUUsK0NBQXVCO0lBQ3RDLFVBQVUsRUFBRSw0Q0FBb0I7SUFDaEMsR0FBRyxFQUFFLHFDQUFhO0lBQ2xCLFNBQVMsRUFBRSxtQ0FBbUI7SUFDOUIsT0FBTyxFQUFFLGtDQUFpQjtDQUMzQixDQUFDO0FBRUYsaUZBQWlGO0FBQ2pGLE1BQU0saUJBQWlCLEdBQXdFO0lBQzdGLE1BQU0sRUFBRSxvQ0FBb0I7Q0FDN0IsQ0FBQztBQUVGOzs7Ozs7OztHQVFHO0FBQ0gsTUFBYSxNQUFNO0lBQ1QsTUFBTSxDQUFDLEtBQUssR0FBRyxJQUFJLEdBQUcsRUFBNEIsQ0FBQztJQUUzRDs7T0FFRztJQUNILE1BQU0sQ0FBQyxHQUFHLENBQTRCLE9BQVU7UUFDOUMsSUFBSSxDQUFDLElBQUksQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7WUFDN0IsTUFBTSxNQUFNLEdBQUcsY0FBYyxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQ3ZDLE1BQU0sS0FBSyxHQUFHLE1BQU0sRUFBRSxDQUFDO1lBQ3ZCLE1BQU0sU0FBUyxHQUFHLGlCQUFpQixDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQzdDLElBQUksU0FBUztnQkFBRyxTQUF1QyxDQUFDLEtBQUssQ0FBQyxDQUFDO1lBQy9ELElBQUksQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLE9BQU8sRUFBRSxLQUFLLENBQUMsQ0FBQztRQUNqQyxDQUFDO1FBQ0QsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxPQUFPLENBQWlCLENBQUM7SUFDakQsQ0FBQztJQUVEOztPQUVHO0lBQ0gsTUFBTSxDQUFDLGdCQUFnQjtRQUNyQixJQUFJLENBQUMsS0FBSyxDQUFDLEtBQUssRUFBRSxDQUFDO0lBQ3JCLENBQUM7SUFFRDs7O09BR0c7SUFDSCxNQUFNLENBQUMsWUFBWTtRQUNqQixJQUFBLGtDQUFrQixFQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQztJQUN2QyxDQUFDO0lBRUQ7OztPQUdHO0lBQ0gsTUFBTSxDQUFDLE1BQU0sQ0FBQyxPQUFlO1FBQzNCLE9BQU8sSUFBSSxDQUFDLEdBQUcsQ0FBQyxPQUEwQixDQUFDLENBQUM7SUFDOUMsQ0FBQzs7QUF0Q0gsd0JBdUNDIiwic291cmNlc0NvbnRlbnQiOlsiLy8gQ29weXJpZ2h0IDIwMjYgUGlwZWxpbmUgQnVpbGRlciBDb250cmlidXRvcnNcbi8vIFNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBBcGFjaGUtMi4wXG5cbmltcG9ydCB0eXBlIHsgQWxnb3JpdGhtIH0gZnJvbSAnanNvbndlYnRva2VuJztcbmltcG9ydCB7IGxvYWRCaWxsaW5nQ29uZmlnIH0gZnJvbSAnLi9iaWxsaW5nLWNvbmZpZyc7XG5pbXBvcnQgdHlwZSB7IEFwcENvbmZpZyB9IGZyb20gJy4vY29uZmlnLXR5cGVzJztcbmltcG9ydCB7XG4gIGxvYWRSZWdpc3RyeUNvbmZpZyxcbiAgbG9hZFJlZGlzQ29uZmlnLFxuICBsb2FkUGx1Z2luQnVpbGRDb25maWcsXG4gIGxvYWREb2NrZXJDb25maWcsXG4gIGxvYWREYXRhYmFzZUNvbmZpZyxcbiAgbG9hZE9ic2VydmFiaWxpdHlDb25maWcsXG4gIGxvYWRDb21wbGlhbmNlQ29uZmlnLFxuICBsb2FkQVdTQ29uZmlnLFxufSBmcm9tICcuL2luZnJhc3RydWN0dXJlLWNvbmZpZyc7XG5pbXBvcnQge1xuICBsb2FkU2VydmVyQ29uZmlnLFxuICBsb2FkQXV0aENvbmZpZyxcbiAgbG9hZFJhdGVMaW1pdENvbmZpZyxcbiAgdmFsaWRhdGVTZXJ2ZXJDb25maWcsXG4gIHZhbGlkYXRlQXV0aENvbmZpZyxcbn0gZnJvbSAnLi9zZXJ2ZXItY29uZmlnJztcblxuLyoqXG4gKiBDb3JlIGNvbnN0YW50cyDigJQgY29uZmlndXJhYmxlIHZpYSBlbnZpcm9ubWVudCB2YXJpYWJsZXMgd2l0aCBzZW5zaWJsZSBkZWZhdWx0cy5cbiAqL1xuZXhwb3J0IGNsYXNzIENvcmVDb25zdGFudHMge1xuICBzdGF0aWMgcmVhZG9ubHkgTkFNRV9QQVRURVJOID0gL15bYS16MC05LV0rJC87XG5cbiAgLy8gU3VwcG9ydGVkIEpXVCBhbGdvcml0aG1zXG4gIHN0YXRpYyByZWFkb25seSBBTExPV0VEX0pXVF9BTEdPUklUSE1TOiBBbGdvcml0aG1bXSA9IFsnSFMyNTYnLCAnUlMyNTYnLCAnRVMyNTYnXTtcblxuICAvLyBDdXN0b20gUmVzb3VyY2UgSGFuZGxlciBjb25maWd1cmF0aW9uIChtdXN0IGJlIGxlc3MgdGhhbiBMYW1iZGEgdGltZW91dCBvZiAzMHMgdG8gYWxsb3cgcmVzcG9uc2UgaGFuZGxpbmcpXG4gIHN0YXRpYyByZWFkb25seSBIQU5ETEVSX1RJTUVPVVRfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5IQU5ETEVSX1RJTUVPVVRfTVMgfHwgJzI1MDAwJywgMTApOyAvLyAyNXNcbiAgLyoqIERlZmF1bHQgcGxhdGZvcm0gVVJMIGZhbGxiYWNrIHdoZW4gUExBVEZPUk1fQkFTRV9VUkwgaXMgbm90IHNldC4gKi9cbiAgc3RhdGljIHJlYWRvbmx5IERFRkFVTFRfUExBVEZPUk1fVVJMID0gJ2h0dHBzOi8vbG9jYWxob3N0Ojg0NDMnO1xuXG4gIHN0YXRpYyByZWFkb25seSBIQU5ETEVSX0RFRkFVTFRfQkFTRV9VUkwgPSBwcm9jZXNzLmVudi5QTEFURk9STV9CQVNFX1VSTCB8fCBDb3JlQ29uc3RhbnRzLkRFRkFVTFRfUExBVEZPUk1fVVJMO1xuICBzdGF0aWMgcmVhZG9ubHkgSEFORExFUl9NQVhfUkVUUklFUyA9IHBhcnNlSW50KHByb2Nlc3MuZW52LkhBTkRMRVJfTUFYX1JFVFJJRVMgfHwgJzInLCAxMCk7XG4gIHN0YXRpYyByZWFkb25seSBIQU5ETEVSX1JFVFJZX0RFTEFZX01TID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuSEFORExFUl9SRVRSWV9ERUxBWV9NUyB8fCAnMTAwMCcsIDEwKTsgLy8gMXNcblxuICAvLyBQbHVnaW4gaW1hZ2UgY29uZmlndXJhdGlvblxuICBzdGF0aWMgcmVhZG9ubHkgUExVR0lOX0lNQUdFX1BSRUZJWCA9IHByb2Nlc3MuZW52LlBMVUdJTl9JTUFHRV9QUkVGSVggfHwgJ3AtJztcblxuICAvLyBQbHVnaW4gYnVpbGQgcXVldWUgY29uZmlndXJhdGlvblxuICBzdGF0aWMgcmVhZG9ubHkgUExVR0lOX0JVSUxEX1FVRVVFX05BTUUgPSBwcm9jZXNzLmVudi5QTFVHSU5fQlVJTERfUVVFVUVfTkFNRSB8fCAncGx1Z2luLWJ1aWxkJztcbiAgc3RhdGljIHJlYWRvbmx5IFBMVUdJTl9CVUlMRF9NQVhfQVRURU1QVFMgPSBwYXJzZUludChwcm9jZXNzLmVudi5QTFVHSU5fQlVJTERfTUFYX0FUVEVNUFRTIHx8ICcyJywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgUExVR0lOX0JVSUxEX0JBQ0tPRkZfREVMQVlfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5QTFVHSU5fQlVJTERfQkFDS09GRl9ERUxBWV9NUyB8fCAnNTAwMCcsIDEwKTsgLy8gNXNcbiAgc3RhdGljIHJlYWRvbmx5IFBMVUdJTl9CVUlMRF9DT01QTEVURURfUkVURU5USU9OX1NFQ1MgPSBwYXJzZUludChwcm9jZXNzLmVudi5QTFVHSU5fQlVJTERfQ09NUExFVEVEX1JFVEVOVElPTl9TRUNTIHx8ICczNjAwJywgMTApOyAvLyAxIGhyXG4gIHN0YXRpYyByZWFkb25seSBQTFVHSU5fQlVJTERfRkFJTEVEX1JFVEVOVElPTl9TRUNTID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuUExVR0lOX0JVSUxEX0ZBSUxFRF9SRVRFTlRJT05fU0VDUyB8fCAnODY0MDAnLCAxMCk7IC8vIDI0IGhyXG4gIHN0YXRpYyByZWFkb25seSBQTFVHSU5fQlVJTERfV09SS0VSX1RJTUVPVVRfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5QTFVHSU5fQlVJTERfV09SS0VSX1RJTUVPVVRfTVMgfHwgJzEwMDAwJywgMTApOyAvLyAxMHNcblxuICAvLyBQYWdpbmF0aW9uIGFuZCBsaW1pdHNcbiAgc3RhdGljIHJlYWRvbmx5IE1BWF9QQUdFX0xJTUlUID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuTUFYX1BBR0VfTElNSVQgfHwgJzEwMDAnLCAxMCk7XG4gIHN0YXRpYyByZWFkb25seSBERUZBVUxUX1BBR0VfTElNSVQgPSBwYXJzZUludChwcm9jZXNzLmVudi5ERUZBVUxUX1BBR0VfTElNSVQgfHwgJzEwMCcsIDEwKTtcbiAgc3RhdGljIHJlYWRvbmx5IE1BWF9QUk9NUFRfTEVOR1RIID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuTUFYX1BST01QVF9MRU5HVEggfHwgJzUwMDAnLCAxMCk7XG4gIHN0YXRpYyByZWFkb25seSBQTFVHSU5fTUFYX1VQTE9BRF9NQiA9IHBhcnNlSW50KHByb2Nlc3MuZW52LlBMVUdJTl9NQVhfVVBMT0FEX01CIHx8ICc0MDk2JywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgUElQRUxJTkVfTkFNRV9NQVhfTEVOR1RIID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuUElQRUxJTkVfTkFNRV9NQVhfTEVOR1RIIHx8ICcxMDAnLCAxMCk7XG4gIHN0YXRpYyByZWFkb25seSBERUZBVUxUX1BMVUdJTl9WRVJTSU9OID0gcHJvY2Vzcy5lbnYuREVGQVVMVF9QTFVHSU5fVkVSU0lPTiB8fCAnMS4wLjAnO1xuXG4gIC8vIFNTRSBzdHJlYW0gdGltZW91dCBmb3IgQUkgZ2VuZXJhdGlvbiBlbmRwb2ludHNcbiAgc3RhdGljIHJlYWRvbmx5IFNTRV9TVFJFQU1fVElNRU9VVF9NUyA9IHBhcnNlSW50KHByb2Nlc3MuZW52LlNTRV9TVFJFQU1fVElNRU9VVF9NUyB8fCAnMzAwMDAwJywgMTApOyAvLyA1IG1pblxuXG4gIC8vIEdpdCBwcm92aWRlciBBUEkgYmFzZSBVUkxzIChjb25maWd1cmFibGUgZm9yIGVudGVycHJpc2UgaW5zdGFuY2VzKVxuICBzdGF0aWMgcmVhZG9ubHkgR0lUSFVCX0FQSV9CQVNFX1VSTCA9IHByb2Nlc3MuZW52LkdJVEhVQl9BUElfQkFTRV9VUkwgfHwgJ2h0dHBzOi8vYXBpLmdpdGh1Yi5jb20nO1xuICBzdGF0aWMgcmVhZG9ubHkgQklUQlVDS0VUX0FQSV9CQVNFX1VSTCA9IHByb2Nlc3MuZW52LkJJVEJVQ0tFVF9BUElfQkFTRV9VUkwgfHwgJ2h0dHBzOi8vYXBpLmJpdGJ1Y2tldC5vcmcvMi4wJztcblxuICAvLyBCdWxrIG9wZXJhdGlvbnMgYW5kIGV2ZW50IGluZ2VzdGlvblxuICBzdGF0aWMgcmVhZG9ubHkgTUFYX0JVTEtfSVRFTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5NQVhfQlVMS19JVEVNUyB8fCAnMTAwJywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgTUFYX0VWRU5UU19QRVJfQkFUQ0ggPSBwYXJzZUludChwcm9jZXNzLmVudi5NQVhfRVZFTlRTX1BFUl9CQVRDSCB8fCAnMTAwJywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgREVGQVVMVF9SRVBPUlRfUkFOR0VfREFZUyA9IHBhcnNlSW50KHByb2Nlc3MuZW52LkRFRkFVTFRfUkVQT1JUX1JBTkdFX0RBWVMgfHwgJzMwJywgMTApO1xuXG4gIC8vIFNlY3JldHMgTWFuYWdlciBwYXRoIHByZWZpeCBmb3Igb3JnLXNjb3BlZCBzZWNyZXRzXG4gIHN0YXRpYyByZWFkb25seSBTRUNSRVRTX1BBVEhfUFJFRklYID0gcHJvY2Vzcy5lbnYuU0VDUkVUU19QQVRIX1BSRUZJWCB8fCAncGlwZWxpbmUtYnVpbGRlcic7XG5cbiAgLyoqIEJ1aWxkIGEgU2VjcmV0cyBNYW5hZ2VyIHBhdGg6IHtwcmVmaXh9L3tvcmdJZH0ve25hbWV9ICovXG4gIHN0YXRpYyBzZWNyZXRQYXRoKG9yZ0lkOiBzdHJpbmcsIG5hbWU6IHN0cmluZyk6IHN0cmluZyB7XG4gICAgcmV0dXJuIGAke0NvcmVDb25zdGFudHMuU0VDUkVUU19QQVRIX1BSRUZJWH0vJHtvcmdJZH0vJHtuYW1lfWA7XG4gIH1cblxuICAvLyBEYXRhYmFzZSBjb25uZWN0aW9uXG4gIHN0YXRpYyByZWFkb25seSBEQl9NQVhfUkVUUklFUyA9IHBhcnNlSW50KHByb2Nlc3MuZW52LkRCX01BWF9SRVRSSUVTIHx8ICczJywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgREJfUkVUUllfREVMQVlfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5EQl9SRVRSWV9ERUxBWV9NUyB8fCAnMTAwMCcsIDEwKTsgLy8gMXNcbiAgc3RhdGljIHJlYWRvbmx5IERCX1RSQU5TQUNUSU9OX1RJTUVPVVRfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5EQl9UUkFOU0FDVElPTl9USU1FT1VUX01TIHx8ICczMDAwMCcsIDEwKTsgLy8gMzBzXG4gIHN0YXRpYyByZWFkb25seSBEQl9DTE9TRV9USU1FT1VUX01TID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuREJfQ0xPU0VfVElNRU9VVF9NUyB8fCAnNTAwMCcsIDEwKTsgLy8gNXNcblxuICAvLyBSZXNwb25zZSBjb21wcmVzc2lvblxuICBzdGF0aWMgcmVhZG9ubHkgQ09NUFJFU1NJT05fVEhSRVNIT0xEX0JZVEVTID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuQ09NUFJFU1NJT05fVEhSRVNIT0xEX0JZVEVTIHx8ICcxMDI0JywgMTApO1xuXG4gIC8vIElkZW1wb3RlbmN5XG4gIHN0YXRpYyByZWFkb25seSBJREVNUE9URU5DWV9UVExfTVMgPSBwYXJzZUludChwcm9jZXNzLmVudi5JREVNUE9URU5DWV9UVExfTVMgfHwgJzMwMDAwMCcsIDEwKTsgLy8gNSBtaW5cbiAgc3RhdGljIHJlYWRvbmx5IElERU1QT1RFTkNZX01BWF9TVE9SRV9TSVpFID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuSURFTVBPVEVOQ1lfTUFYX1NUT1JFX1NJWkUgfHwgJzEwMDAwJywgMTApO1xuICBzdGF0aWMgcmVhZG9ubHkgSURFTVBPVEVOQ1lfQ0xFQU5VUF9JTlRFUlZBTF9NUyA9IHBhcnNlSW50KHByb2Nlc3MuZW52LklERU1QT1RFTkNZX0NMRUFOVVBfSU5URVJWQUxfTVMgfHwgJzYwMDAwJywgMTApOyAvLyAxIG1pblxuXG4gIC8vIENhY2hlXG4gIHN0YXRpYyByZWFkb25seSBDQUNIRV9DTEVBTlVQX0lOVEVSVkFMX01TID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuQ0FDSEVfQ0xFQU5VUF9JTlRFUlZBTF9NUyB8fCAnMzAwMDAnLCAxMCk7IC8vIDMwc1xuXG4gIC8vIFNlcnZlci1zaWRlIGNhY2hlIFRUTHMgKHNlY29uZHMpXG4gIHN0YXRpYyByZWFkb25seSBDQUNIRV9UVExfRU5USVRZID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuQ0FDSEVfVFRMX0VOVElUWSB8fCAnNjAnLCAxMCk7IC8vIHBsdWdpbi9waXBlbGluZSBmaW5kQnlJZFxuICBzdGF0aWMgcmVhZG9ubHkgQ0FDSEVfVFRMX01FU1NBR0UgPSBwYXJzZUludChwcm9jZXNzLmVudi5DQUNIRV9UVExfTUVTU0FHRSB8fCAnMzAwJywgMTApOyAvLyBhbm5vdW5jZW1lbnRzL2NvbnZlcnNhdGlvbnMgKDUgbWluKVxuICBzdGF0aWMgcmVhZG9ubHkgQ0FDSEVfVFRMX1JFUE9SVF9JTlZFTlRPUlkgPSBwYXJzZUludChwcm9jZXNzLmVudi5DQUNIRV9UVExfUkVQT1JUX0lOVkVOVE9SWSB8fCAnMzAwJywgMTApOyAvLyBwbHVnaW4gc3VtbWFyeS9kaXN0cmlidXRpb24gKDUgbWluKVxuICBzdGF0aWMgcmVhZG9ubHkgQ0FDSEVfVFRMX1JFUE9SVF9USU1FU0VSSUVTID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuQ0FDSEVfVFRMX1JFUE9SVF9USU1FU0VSSUVTIHx8ICcxMjAnLCAxMCk7IC8vIGV4ZWN1dGlvbi9idWlsZCBtZXRyaWNzICgyIG1pbilcbiAgc3RhdGljIHJlYWRvbmx5IENBQ0hFX1RUTF9DT01QTElBTkNFX1JVTEVTID0gcGFyc2VJbnQocHJvY2Vzcy5lbnYuQ0FDSEVfVFRMX0NPTVBMSUFOQ0VfUlVMRVMgfHwgJzYwJywgMTApOyAvLyBhY3RpdmUgY29tcGxpYW5jZSBydWxlc1xuICBzdGF0aWMgcmVhZG9ubHkgQ0FDSEVfVFRMX0JJTExJTkdfUExBTlMgPSBwYXJzZUludChwcm9jZXNzLmVudi5DQUNIRV9UVExfQklMTElOR19QTEFOUyB8fCAnMTQ0MDAnLCAxMCk7IC8vIGJpbGxpbmcgcGxhbnMgKDQgaG91cnMpXG5cbiAgLy8gU1NFIGJhY2twcmVzc3VyZVxuICBzdGF0aWMgcmVhZG9ubHkgU1NFX0JBQ0tQUkVTU1VSRV9USFJFU0hPTEQgPSBwYXJzZUludChwcm9jZXNzLmVudi5TU0VfQkFDS1BSRVNTVVJFX1RIUkVTSE9MRCB8fCAnMTAnLCAxMCk7XG5cbiAgLy8gSFRUUCBDYWNoZS1Db250cm9sIGhlYWRlcnNcbiAgc3RhdGljIHJlYWRvbmx5IENBQ0hFX0NPTlRST0xfTElTVCA9IHByb2Nlc3MuZW52LkNBQ0hFX0NPTlRST0xfTElTVCB8fCAncHJpdmF0ZSwgbWF4LWFnZT0zMCwgc3RhbGUtd2hpbGUtcmV2YWxpZGF0ZT02MCc7XG4gIHN0YXRpYyByZWFkb25seSBDQUNIRV9DT05UUk9MX0RFVEFJTCA9IHByb2Nlc3MuZW52LkNBQ0hFX0NPTlRST0xfREVUQUlMIHx8ICdwcml2YXRlLCBtYXgtYWdlPTYwLCBzdGFsZS13aGlsZS1yZXZhbGlkYXRlPTEyMCc7XG59XG5cbi8qKlxuICogUGVyLXNlY3Rpb24gbG9hZGVyIG1hcCDigJQgZWFjaCBzZWN0aW9uIGlzIGxvYWRlZCBsYXppbHkgb24gZmlyc3QgYWNjZXNzLlxuICogVGhpcyBhdm9pZHMgbG9hZGluZyBhbGwgY29uZmlnIHNlY3Rpb25zIChhbmQgdGhlaXIgcmVxdWlyZWQgZW52IHZhcnMpXG4gKiB3aGVuIG9ubHkgb25lIHNlY3Rpb24gaXMgbmVlZGVkIChlLmcuIENESyBzeW50aGVzaXMgb25seSBuZWVkcyAnYXdzJykuXG4gKi9cbmNvbnN0IHNlY3Rpb25Mb2FkZXJzOiB7IFtLIGluIGtleW9mIEFwcENvbmZpZ106ICgpID0+IEFwcENvbmZpZ1tLXSB9ID0ge1xuICBzZXJ2ZXI6IGxvYWRTZXJ2ZXJDb25maWcsXG4gIGF1dGg6IGxvYWRBdXRoQ29uZmlnLFxuICBkYXRhYmFzZTogbG9hZERhdGFiYXNlQ29uZmlnLFxuICByZWdpc3RyeTogbG9hZFJlZ2lzdHJ5Q29uZmlnLFxuICByZWRpczogbG9hZFJlZGlzQ29uZmlnLFxuICBwbHVnaW5CdWlsZDogbG9hZFBsdWdpbkJ1aWxkQ29uZmlnLFxuICBkb2NrZXJDb25maWc6IGxvYWREb2NrZXJDb25maWcsXG4gIG9ic2VydmFiaWxpdHk6IGxvYWRPYnNlcnZhYmlsaXR5Q29uZmlnLFxuICBjb21wbGlhbmNlOiBsb2FkQ29tcGxpYW5jZUNvbmZpZyxcbiAgYXdzOiBsb2FkQVdTQ29uZmlnLFxuICByYXRlTGltaXQ6IGxvYWRSYXRlTGltaXRDb25maWcsXG4gIGJpbGxpbmc6IGxvYWRCaWxsaW5nQ29uZmlnLFxufTtcblxuLyoqIFBlci1zZWN0aW9uIHZhbGlkYXRvcnMg4oCUIG9ubHkgcnVuIGZvciBzZWN0aW9ucyB0aGF0IGhhdmUgdmFsaWRhdGlvbiBsb2dpYy4gKi9cbmNvbnN0IHNlY3Rpb25WYWxpZGF0b3JzOiBQYXJ0aWFsPHsgW0sgaW4ga2V5b2YgQXBwQ29uZmlnXTogKGNvbmZpZzogQXBwQ29uZmlnW0tdKSA9PiB2b2lkIH0+ID0ge1xuICBzZXJ2ZXI6IHZhbGlkYXRlU2VydmVyQ29uZmlnLFxufTtcblxuLyoqXG4gKiBDb25maWd1cmF0aW9uIGZhY2FkZSB3aXRoIGxhenkgcGVyLXNlY3Rpb24gbG9hZGluZy5cbiAqXG4gKiBFYWNoIHNlY3Rpb24gaXMgbG9hZGVkIGFuZCB2YWxpZGF0ZWQgaW5kZXBlbmRlbnRseSBvbiBmaXJzdCBhY2Nlc3MsXG4gKiBzbyByZXF1ZXN0aW5nIGBDb25maWcuZ2V0KCdhd3MnKWAgZG9lcyBub3QgdHJpZ2dlciBsb2FkaW5nIG9mXG4gKiBzZXJ2ZXIsIGF1dGgsIG9yIGJpbGxpbmcgY29uZmlnIChhbmQgdGhlaXIgZW52IHZhciByZXF1aXJlbWVudHMpLlxuICpcbiAqIFVzYWdlOiBgQ29uZmlnLmdldCgnc2VydmVyJylgLCBgQ29uZmlnLmdldCgnYXV0aCcpYCwgZXRjLlxuICovXG5leHBvcnQgY2xhc3MgQ29uZmlnIHtcbiAgcHJpdmF0ZSBzdGF0aWMgY2FjaGUgPSBuZXcgTWFwPGtleW9mIEFwcENvbmZpZywgdW5rbm93bj4oKTtcblxuICAvKipcbiAgICogR2V0IGEgc3BlY2lmaWMgY29uZmlndXJhdGlvbiBzZWN0aW9uIChsb2FkZWQgbGF6aWx5IG9uIGZpcnN0IGFjY2VzcykuXG4gICAqL1xuICBzdGF0aWMgZ2V0PEsgZXh0ZW5kcyBrZXlvZiBBcHBDb25maWc+KHNlY3Rpb246IEspOiBBcHBDb25maWdbS10ge1xuICAgIGlmICghdGhpcy5jYWNoZS5oYXMoc2VjdGlvbikpIHtcbiAgICAgIGNvbnN0IGxvYWRlciA9IHNlY3Rpb25Mb2FkZXJzW3NlY3Rpb25dO1xuICAgICAgY29uc3QgdmFsdWUgPSBsb2FkZXIoKTtcbiAgICAgIGNvbnN0IHZhbGlkYXRvciA9IHNlY3Rpb25WYWxpZGF0b3JzW3NlY3Rpb25dO1xuICAgICAgaWYgKHZhbGlkYXRvcikgKHZhbGlkYXRvciBhcyAodjogQXBwQ29uZmlnW0tdKSA9PiB2b2lkKSh2YWx1ZSk7XG4gICAgICB0aGlzLmNhY2hlLnNldChzZWN0aW9uLCB2YWx1ZSk7XG4gICAgfVxuICAgIHJldHVybiB0aGlzLmNhY2hlLmdldChzZWN0aW9uKSBhcyBBcHBDb25maWdbS107XG4gIH1cblxuICAvKipcbiAgICogQGludGVybmFsIFJlc2V0IGNvbmZpZ3VyYXRpb24gKGZvciB0ZXN0aW5nIG9ubHkpXG4gICAqL1xuICBzdGF0aWMgX3Jlc2V0Rm9yVGVzdGluZygpOiB2b2lkIHtcbiAgICB0aGlzLmNhY2hlLmNsZWFyKCk7XG4gIH1cblxuICAvKipcbiAgICogVmFsaWRhdGUgYXV0aCBjb25maWd1cmF0aW9uIChKV1Qgc2VjcmV0cywgYWxnb3JpdGhtcywgZXhwaXJhdGlvbikuXG4gICAqIENhbGwgdGhpcyBhdCBzZXJ2ZXIgc3RhcnR1cCwgbm90IGR1cmluZyBDREsgc3ludGhlc2lzLlxuICAgKi9cbiAgc3RhdGljIHZhbGlkYXRlQXV0aCgpOiB2b2lkIHtcbiAgICB2YWxpZGF0ZUF1dGhDb25maWcodGhpcy5nZXQoJ2F1dGgnKSk7XG4gIH1cblxuICAvKipcbiAgICogVW50eXBlZCBjb25maWcgYWNjZXNzIOKAlCB1c2Ugd2hlbiB0aGUgcHVibGlzaGVkIHBhY2thZ2UgdHlwZXMgZG9uJ3QgaW5jbHVkZSBhIG5ldyBzZWN0aW9uIHlldC5cbiAgICogQXZvaWRzIHRoZSBgKENvbmZpZyBhcyB1bmtub3duIGFzIC4uLikuZ2V0KC4uLilgIGNhc3QgcGF0dGVybiBpbiBjb25zdW1lcnMuXG4gICAqL1xuICBzdGF0aWMgZ2V0QW55KHNlY3Rpb246IHN0cmluZyk6IHVua25vd24ge1xuICAgIHJldHVybiB0aGlzLmdldChzZWN0aW9uIGFzIGtleW9mIEFwcENvbmZpZyk7XG4gIH1cbn1cbiJdfQ==

package/lib/config/billing-config.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Load billing plan configuration from environment variables.
+ *
+ * Per-plan prices are the most likely to vary between environments:
+ *   BILLING_PLAN_{TIER}_MONTHLY / BILLING_PLAN_{TIER}_ANNUAL  (in cents)
+ *
+ * Optional overrides for descriptions and features:
+ *   BILLING_PLAN_{TIER}_DESCRIPTION   (plain string)
+ *   BILLING_PLAN_{TIER}_FEATURES      (JSON string array)
+ *
+ * All defaults match the original hardcoded seed data for backward compatibility.
+ */
+import type { BillingConfig } from './config-types';
+/**
+ * Load billing plan configuration from environment variables.
+ */
+export declare function loadBillingConfig(): BillingConfig;

package/lib/config/billing-config.js

@@ -0,0 +1,95 @@
+"use strict";
+// Copyright 2026 Pipeline Builder Contributors
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadBillingConfig = loadBillingConfig;
+// -- Default features (match original seed-plans.ts) -------------------------
+const DEFAULT_DEVELOPER_FEATURES = [
+    'Up to 100 plugins',
+    'Up to 10 pipelines',
+    'Unlimited API calls',
+    'Community support',
+];
+const DEFAULT_PRO_FEATURES = [
+    'Up to 1,000 plugins',
+    'Up to 100 pipelines',
+    'Unlimited API calls',
+    'Community support',
+    'Reporting dashboard',
+];
+const DEFAULT_UNLIMITED_FEATURES = [
+    'Unlimited plugins',
+    'Unlimited pipelines',
+    'Unlimited API calls',
+    'Priority support',
+    'Reporting dashboard',
+    'Custom integrations',
+];
+/**
+ * Parse a JSON array from an env var, falling back to default.
+ */
+function parseFeatures(envVar, fallback) {
+    if (!envVar)
+        return fallback;
+    try {
+        const parsed = JSON.parse(envVar);
+        return Array.isArray(parsed) ? parsed : fallback;
+    }
+    catch {
+        return fallback;
+    }
+}
+/**
+ * Load billing plan configuration from environment variables.
+ */
+function loadBillingConfig() {
+    const plans = [
+        {
+            id: 'developer',
+            name: 'Developer',
+            description: process.env.BILLING_PLAN_DEVELOPER_DESCRIPTION
+                || 'Free starter tier for individual developers',
+            tier: 'developer',
+            prices: {
+                monthly: parseInt(process.env.BILLING_PLAN_DEVELOPER_MONTHLY || '0', 10),
+                annual: parseInt(process.env.BILLING_PLAN_DEVELOPER_ANNUAL || '0', 10),
+            },
+            features: parseFeatures(process.env.BILLING_PLAN_DEVELOPER_FEATURES, DEFAULT_DEVELOPER_FEATURES),
+            isActive: true,
+            isDefault: true,
+            sortOrder: 0,
+        },
+        {
+            id: 'pro',
+            name: 'Pro',
+            description: process.env.BILLING_PLAN_PRO_DESCRIPTION
+                || 'For teams and production workloads',
+            tier: 'pro',
+            prices: {
+                monthly: parseInt(process.env.BILLING_PLAN_PRO_MONTHLY || '799', 10),
+                annual: parseInt(process.env.BILLING_PLAN_PRO_ANNUAL || '7990', 10),
+            },
+            features: parseFeatures(process.env.BILLING_PLAN_PRO_FEATURES, DEFAULT_PRO_FEATURES),
+            isActive: true,
+            isDefault: false,
+            sortOrder: 1,
+        },
+        {
+            id: 'unlimited',
+            name: 'Unlimited',
+            description: process.env.BILLING_PLAN_UNLIMITED_DESCRIPTION
+                || 'No restrictions for enterprise teams',
+            tier: 'unlimited',
+            prices: {
+                monthly: parseInt(process.env.BILLING_PLAN_UNLIMITED_MONTHLY || '1199', 10),
+                annual: parseInt(process.env.BILLING_PLAN_UNLIMITED_ANNUAL || '11990', 10),
+            },
+            features: parseFeatures(process.env.BILLING_PLAN_UNLIMITED_FEATURES, DEFAULT_UNLIMITED_FEATURES),
+            isActive: true,
+            isDefault: false,
+            sortOrder: 2,
+        },
+    ];
+    return { plans };
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYmlsbGluZy1jb25maWcuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY29uZmlnL2JpbGxpbmctY29uZmlnLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQSwrQ0FBK0M7QUFDL0Msc0NBQXNDOztBQTBEdEMsOENBMkRDO0FBckdELCtFQUErRTtBQUUvRSxNQUFNLDBCQUEwQixHQUFHO0lBQ2pDLG1CQUFtQjtJQUNuQixvQkFBb0I7SUFDcEIscUJBQXFCO0lBQ3JCLG1CQUFtQjtDQUNwQixDQUFDO0FBRUYsTUFBTSxvQkFBb0IsR0FBRztJQUMzQixxQkFBcUI7SUFDckIscUJBQXFCO0lBQ3JCLHFCQUFxQjtJQUNyQixtQkFBbUI7SUFDbkIscUJBQXFCO0NBQ3RCLENBQUM7QUFFRixNQUFNLDBCQUEwQixHQUFHO0lBQ2pDLG1CQUFtQjtJQUNuQixxQkFBcUI7SUFDckIscUJBQXFCO0lBQ3JCLGtCQUFrQjtJQUNsQixxQkFBcUI7SUFDckIscUJBQXFCO0NBQ3RCLENBQUM7QUFFRjs7R0FFRztBQUNILFNBQVMsYUFBYSxDQUFDLE1BQTBCLEVBQUUsUUFBa0I7SUFDbkUsSUFBSSxDQUFDLE1BQU07UUFBRSxPQUFPLFFBQVEsQ0FBQztJQUM3QixJQUFJLENBQUM7UUFDSCxNQUFNLE1BQU0sR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQyxDQUFDO1FBQ2xDLE9BQU8sS0FBSyxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUM7SUFDbkQsQ0FBQztJQUFDLE1BQU0sQ0FBQztRQUNQLE9BQU8sUUFBUSxDQUFDO0lBQ2xCLENBQUM7QUFDSCxDQUFDO0FBRUQ7O0dBRUc7QUFDSCxTQUFnQixpQkFBaUI7SUFDL0IsTUFBTSxLQUFLLEdBQXdCO1FBQ2pDO1lBQ0UsRUFBRSxFQUFFLFdBQVc7WUFDZixJQUFJLEVBQUUsV0FBVztZQUNqQixXQUFXLEVBQUUsT0FBTyxDQUFDLEdBQUcsQ0FBQyxrQ0FBa0M7bUJBQ3RELDZDQUE2QztZQUNsRCxJQUFJLEVBQUUsV0FBVztZQUNqQixNQUFNLEVBQUU7Z0JBQ04sT0FBTyxFQUFFLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLDhCQUE4QixJQUFJLEdBQUcsRUFBRSxFQUFFLENBQUM7Z0JBQ3hFLE1BQU0sRUFBRSxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyw2QkFBNkIsSUFBSSxHQUFHLEVBQUUsRUFBRSxDQUFDO2FBQ3ZFO1lBQ0QsUUFBUSxFQUFFLGFBQWEsQ0FDckIsT0FBTyxDQUFDLEdBQUcsQ0FBQywrQkFBK0IsRUFDM0MsMEJBQTBCLENBQzNCO1lBQ0QsUUFBUSxFQUFFLElBQUk7WUFDZCxTQUFTLEVBQUUsSUFBSTtZQUNmLFNBQVMsRUFBRSxDQUFDO1NBQ2I7UUFDRDtZQUNFLEVBQUUsRUFBRSxLQUFLO1lBQ1QsSUFBSSxFQUFFLEtBQUs7WUFDWCxXQUFXLEVBQUUsT0FBTyxDQUFDLEdBQUcsQ0FBQyw0QkFBNEI7bUJBQ2hELG9DQUFvQztZQUN6QyxJQUFJLEVBQUUsS0FBSztZQUNYLE1BQU0sRUFBRTtnQkFDTixPQUFPLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsd0JBQXdCLElBQUksS0FBSyxFQUFFLEVBQUUsQ0FBQztnQkFDcEUsTUFBTSxFQUFFLFFBQVEsQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLHVCQUF1QixJQUFJLE1BQU0sRUFBRSxFQUFFLENBQUM7YUFDcEU7WUFDRCxRQUFRLEVBQUUsYUFBYSxDQUNyQixPQUFPLENBQUMsR0FBRyxDQUFDLHlCQUF5QixFQUNyQyxvQkFBb0IsQ0FDckI7WUFDRCxRQUFRLEVBQUUsSUFBSTtZQUNkLFNBQVMsRUFBRSxLQUFLO1lBQ2hCLFNBQVMsRUFBRSxDQUFDO1NBQ2I7UUFDRDtZQUNFLEVBQUUsRUFBRSxXQUFXO1lBQ2YsSUFBSSxFQUFFLFdBQVc7WUFDakIsV0FBVyxFQUFFLE9BQU8sQ0FBQyxHQUFHLENBQUMsa0NBQWtDO21CQUN0RCxzQ0FBc0M7WUFDM0MsSUFBSSxFQUFFLFdBQVc7WUFDakIsTUFBTSxFQUFFO2dCQUNOLE9BQU8sRUFBRSxRQUFRLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyw4QkFBOEIsSUFBSSxNQUFNLEVBQUUsRUFBRSxDQUFDO2dCQUMzRSxNQUFNLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsNkJBQTZCLElBQUksT0FBTyxFQUFFLEVBQUUsQ0FBQzthQUMzRTtZQUNELFFBQVEsRUFBRSxhQUFhLENBQ3JCLE9BQU8sQ0FBQyxHQUFHLENBQUMsK0JBQStCLEVBQzNDLDBCQUEwQixDQUMzQjtZQUNELFFBQVEsRUFBRSxJQUFJO1lBQ2QsU0FBUyxFQUFFLEtBQUs7WUFDaEIsU0FBUyxFQUFFLENBQUM7U0FDYjtLQUNGLENBQUM7SUFFRixPQUFPLEVBQUUsS0FBSyxFQUFFLENBQUM7QUFDbkIsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbIi8vIENvcHlyaWdodCAyMDI2IFBpcGVsaW5lIEJ1aWxkZXIgQ29udHJpYnV0b3JzXG4vLyBTUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuXG4vKipcbiAqIExvYWQgYmlsbGluZyBwbGFuIGNvbmZpZ3VyYXRpb24gZnJvbSBlbnZpcm9ubWVudCB2YXJpYWJsZXMuXG4gKlxuICogUGVyLXBsYW4gcHJpY2VzIGFyZSB0aGUgbW9zdCBsaWtlbHkgdG8gdmFyeSBiZXR3ZWVuIGVudmlyb25tZW50czpcbiAqICAgQklMTElOR19QTEFOX3tUSUVSfV9NT05USExZIC8gQklMTElOR19QTEFOX3tUSUVSfV9BTk5VQUwgIChpbiBjZW50cylcbiAqXG4gKiBPcHRpb25hbCBvdmVycmlkZXMgZm9yIGRlc2NyaXB0aW9ucyBhbmQgZmVhdHVyZXM6XG4gKiAgIEJJTExJTkdfUExBTl97VElFUn1fREVTQ1JJUFRJT04gICAocGxhaW4gc3RyaW5nKVxuICogICBCSUxMSU5HX1BMQU5fe1RJRVJ9X0ZFQVRVUkVTICAgICAgKEpTT04gc3RyaW5nIGFycmF5KVxuICpcbiAqIEFsbCBkZWZhdWx0cyBtYXRjaCB0aGUgb3JpZ2luYWwgaGFyZGNvZGVkIHNlZWQgZGF0YSBmb3IgYmFja3dhcmQgY29tcGF0aWJpbGl0eS5cbiAqL1xuaW1wb3J0IHR5cGUgeyBCaWxsaW5nQ29uZmlnLCBCaWxsaW5nUGxhbkNvbmZpZyB9IGZyb20gJy4vY29uZmlnLXR5cGVzJztcblxuLy8gLS0gRGVmYXVsdCBmZWF0dXJlcyAobWF0Y2ggb3JpZ2luYWwgc2VlZC1wbGFucy50cykgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVxuXG5jb25zdCBERUZBVUxUX0RFVkVMT1BFUl9GRUFUVVJFUyA9IFtcbiAgJ1VwIHRvIDEwMCBwbHVnaW5zJyxcbiAgJ1VwIHRvIDEwIHBpcGVsaW5lcycsXG4gICdVbmxpbWl0ZWQgQVBJIGNhbGxzJyxcbiAgJ0NvbW11bml0eSBzdXBwb3J0Jyxcbl07XG5cbmNvbnN0IERFRkFVTFRfUFJPX0ZFQVRVUkVTID0gW1xuICAnVXAgdG8gMSwwMDAgcGx1Z2lucycsXG4gICdVcCB0byAxMDAgcGlwZWxpbmVzJyxcbiAgJ1VubGltaXRlZCBBUEkgY2FsbHMnLFxuICAnQ29tbXVuaXR5IHN1cHBvcnQnLFxuICAnUmVwb3J0aW5nIGRhc2hib2FyZCcsXG5dO1xuXG5jb25zdCBERUZBVUxUX1VOTElNSVRFRF9GRUFUVVJFUyA9IFtcbiAgJ1VubGltaXRlZCBwbHVnaW5zJyxcbiAgJ1VubGltaXRlZCBwaXBlbGluZXMnLFxuICAnVW5saW1pdGVkIEFQSSBjYWxscycsXG4gICdQcmlvcml0eSBzdXBwb3J0JyxcbiAgJ1JlcG9ydGluZyBkYXNoYm9hcmQnLFxuICAnQ3VzdG9tIGludGVncmF0aW9ucycsXG5dO1xuXG4vKipcbiAqIFBhcnNlIGEgSlNPTiBhcnJheSBmcm9tIGFuIGVudiB2YXIsIGZhbGxpbmcgYmFjayB0byBkZWZhdWx0LlxuICovXG5mdW5jdGlvbiBwYXJzZUZlYXR1cmVzKGVudlZhcjogc3RyaW5nIHwgdW5kZWZpbmVkLCBmYWxsYmFjazogc3RyaW5nW10pOiBzdHJpbmdbXSB7XG4gIGlmICghZW52VmFyKSByZXR1cm4gZmFsbGJhY2s7XG4gIHRyeSB7XG4gICAgY29uc3QgcGFyc2VkID0gSlNPTi5wYXJzZShlbnZWYXIpO1xuICAgIHJldHVybiBBcnJheS5pc0FycmF5KHBhcnNlZCkgPyBwYXJzZWQgOiBmYWxsYmFjaztcbiAgfSBjYXRjaCB7XG4gICAgcmV0dXJuIGZhbGxiYWNrO1xuICB9XG59XG5cbi8qKlxuICogTG9hZCBiaWxsaW5nIHBsYW4gY29uZmlndXJhdGlvbiBmcm9tIGVudmlyb25tZW50IHZhcmlhYmxlcy5cbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGxvYWRCaWxsaW5nQ29uZmlnKCk6IEJpbGxpbmdDb25maWcge1xuICBjb25zdCBwbGFuczogQmlsbGluZ1BsYW5Db25maWdbXSA9IFtcbiAgICB7XG4gICAgICBpZDogJ2RldmVsb3BlcicsXG4gICAgICBuYW1lOiAnRGV2ZWxvcGVyJyxcbiAgICAgIGRlc2NyaXB0aW9uOiBwcm9jZXNzLmVudi5CSUxMSU5HX1BMQU5fREVWRUxPUEVSX0RFU0NSSVBUSU9OXG4gICAgICAgIHx8ICdGcmVlIHN0YXJ0ZXIgdGllciBmb3IgaW5kaXZpZHVhbCBkZXZlbG9wZXJzJyxcbiAgICAgIHRpZXI6ICdkZXZlbG9wZXInLFxuICAgICAgcHJpY2VzOiB7XG4gICAgICAgIG1vbnRobHk6IHBhcnNlSW50KHByb2Nlc3MuZW52LkJJTExJTkdfUExBTl9ERVZFTE9QRVJfTU9OVEhMWSB8fCAnMCcsIDEwKSxcbiAgICAgICAgYW5udWFsOiBwYXJzZUludChwcm9jZXNzLmVudi5CSUxMSU5HX1BMQU5fREVWRUxPUEVSX0FOTlVBTCB8fCAnMCcsIDEwKSxcbiAgICAgIH0sXG4gICAgICBmZWF0dXJlczogcGFyc2VGZWF0dXJlcyhcbiAgICAgICAgcHJvY2Vzcy5lbnYuQklMTElOR19QTEFOX0RFVkVMT1BFUl9GRUFUVVJFUyxcbiAgICAgICAgREVGQVVMVF9ERVZFTE9QRVJfRkVBVFVSRVMsXG4gICAgICApLFxuICAgICAgaXNBY3RpdmU6IHRydWUsXG4gICAgICBpc0RlZmF1bHQ6IHRydWUsXG4gICAgICBzb3J0T3JkZXI6IDAsXG4gICAgfSxcbiAgICB7XG4gICAgICBpZDogJ3BybycsXG4gICAgICBuYW1lOiAnUHJvJyxcbiAgICAgIGRlc2NyaXB0aW9uOiBwcm9jZXNzLmVudi5CSUxMSU5HX1BMQU5fUFJPX0RFU0NSSVBUSU9OXG4gICAgICAgIHx8ICdGb3IgdGVhbXMgYW5kIHByb2R1Y3Rpb24gd29ya2xvYWRzJyxcbiAgICAgIHRpZXI6ICdwcm8nLFxuICAgICAgcHJpY2VzOiB7XG4gICAgICAgIG1vbnRobHk6IHBhcnNlSW50KHByb2Nlc3MuZW52LkJJTExJTkdfUExBTl9QUk9fTU9OVEhMWSB8fCAnNzk5JywgMTApLFxuICAgICAgICBhbm51YWw6IHBhcnNlSW50KHByb2Nlc3MuZW52LkJJTExJTkdfUExBTl9QUk9fQU5OVUFMIHx8ICc3OTkwJywgMTApLFxuICAgICAgfSxcbiAgICAgIGZlYXR1cmVzOiBwYXJzZUZlYXR1cmVzKFxuICAgICAgICBwcm9jZXNzLmVudi5CSUxMSU5HX1BMQU5fUFJPX0ZFQVRVUkVTLFxuICAgICAgICBERUZBVUxUX1BST19GRUFUVVJFUyxcbiAgICAgICksXG4gICAgICBpc0FjdGl2ZTogdHJ1ZSxcbiAgICAgIGlzRGVmYXVsdDogZmFsc2UsXG4gICAgICBzb3J0T3JkZXI6IDEsXG4gICAgfSxcbiAgICB7XG4gICAgICBpZDogJ3VubGltaXRlZCcsXG4gICAgICBuYW1lOiAnVW5saW1pdGVkJyxcbiAgICAgIGRlc2NyaXB0aW9uOiBwcm9jZXNzLmVudi5CSUxMSU5HX1BMQU5fVU5MSU1JVEVEX0RFU0NSSVBUSU9OXG4gICAgICAgIHx8ICdObyByZXN0cmljdGlvbnMgZm9yIGVudGVycHJpc2UgdGVhbXMnLFxuICAgICAgdGllcjogJ3VubGltaXRlZCcsXG4gICAgICBwcmljZXM6IHtcbiAgICAgICAgbW9udGhseTogcGFyc2VJbnQocHJvY2Vzcy5lbnYuQklMTElOR19QTEFOX1VOTElNSVRFRF9NT05USExZIHx8ICcxMTk5JywgMTApLFxuICAgICAgICBhbm51YWw6IHBhcnNlSW50KHByb2Nlc3MuZW52LkJJTExJTkdfUExBTl9VTkxJTUlURURfQU5OVUFMIHx8ICcxMTk5MCcsIDEwKSxcbiAgICAgIH0sXG4gICAgICBmZWF0dXJlczogcGFyc2VGZWF0dXJlcyhcbiAgICAgICAgcHJvY2Vzcy5lbnYuQklMTElOR19QTEFOX1VOTElNSVRFRF9GRUFUVVJFUyxcbiAgICAgICAgREVGQVVMVF9VTkxJTUlURURfRkVBVFVSRVMsXG4gICAgICApLFxuICAgICAgaXNBY3RpdmU6IHRydWUsXG4gICAgICBpc0RlZmF1bHQ6IGZhbHNlLFxuICAgICAgc29ydE9yZGVyOiAyLFxuICAgIH0sXG4gIF07XG5cbiAgcmV0dXJuIHsgcGxhbnMgfTtcbn1cbiJdfQ==