@reopt-ai/data-contract 0.6.1 → 0.6.3

package/dist/{chunk-LA5F5KR6.cjs → chunk-YCTGHWTP.cjs}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkFUGY5ANJcjs = require('./chunk-FUGY5ANJ.cjs');
+var _chunkXDH5QQYFcjs = require('./chunk-XDH5QQYF.cjs');
 
 
-var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
+var _chunkORNTN6AKcjs = require('./chunk-ORNTN6AK.cjs');
 
 // src/control.ts
 var _zod = require('zod');
@@ -56,7 +56,7 @@ var zCreateProjectInput = _zod.z.object({
   name: _zod.z.string().min(1).max(200),
   domain: _zod.z.string().max(253).optional(),
   /** Becomes the project's default for every query that omits one. */
-  timezone: _chunkFUGY5ANJcjs.zTimezone.optional(),
+  timezone: _chunkXDH5QQYFcjs.zTimezone.optional(),
   retentionDays: _zod.z.number().int().min(1).max(3650).optional()
 });
 var zProject = _zod.z.object({
@@ -112,7 +112,7 @@ var zDeleteProjectResponse = _zod.z.object({
   /** Idempotent, but it still says which of the two happened. */
   purge: _zod.z.enum(["queued", "already-absent"]),
   /** When the purge was marked. Absent for `already-absent`. */
-  purgingAt: _chunkYSAEOYPDcjs.zInstant.optional()
+  purgingAt: _chunkORNTN6AKcjs.zInstant.optional()
 });
 var EVENT_META_STATUSES = ["active", "deprecated", "archived", "internal"];
 var zEventMetaStatus = _zod.z.enum(EVENT_META_STATUSES);
@@ -132,7 +132,7 @@ var zEventMetaResponse = _zod.z.object({
   rollupProperties: _zod.z.array(_zod.z.string()),
   /** Fields this call actually changed; empty on a repeat. */
   changed: _zod.z.array(_zod.z.string()),
-  updatedAt: _chunkYSAEOYPDcjs.zInstant
+  updatedAt: _chunkORNTN6AKcjs.zInstant
 });
 var CONTROL_ERROR_CODES = [
   /** 401 — missing or invalid platform key / organization key. */
@@ -201,4 +201,4 @@ var CONTROL_API_PATHS = {
 
 
 exports.PLATFORM_KEY_HEADER = PLATFORM_KEY_HEADER; exports.ORG_KEY_HEADER = ORG_KEY_HEADER; exports.zExternalId = zExternalId; exports.zCreateOrganizationInput = zCreateOrganizationInput; exports.zOrganization = zOrganization; exports.zCreateOrganizationResponse = zCreateOrganizationResponse; exports.zRotateOrganizationKeyResponse = zRotateOrganizationKeyResponse; exports.zUpdateOrganizationQuotaInput = zUpdateOrganizationQuotaInput; exports.zUpdateOrganizationQuotaResponse = zUpdateOrganizationQuotaResponse; exports.zCreateProjectInput = zCreateProjectInput; exports.zProject = zProject; exports.zCreateProjectResponse = zCreateProjectResponse; exports.zRotateClientSecretResponse = zRotateClientSecretResponse; exports.zDeleteProjectInput = zDeleteProjectInput; exports.zDeleteProjectResponse = zDeleteProjectResponse; exports.EVENT_META_STATUSES = EVENT_META_STATUSES; exports.zEventMetaStatus = zEventMetaStatus; exports.zEventName = zEventName; exports.zUpsertEventMetaInput = zUpsertEventMetaInput; exports.zEventMetaResponse = zEventMetaResponse; exports.CONTROL_ERROR_CODES = CONTROL_ERROR_CODES; exports.zControlErrorCode = zControlErrorCode; exports.zControlError = zControlError; exports.CONTROL_API_PATHS = CONTROL_API_PATHS;
-//# sourceMappingURL=chunk-LA5F5KR6.cjs.map
+//# sourceMappingURL=chunk-YCTGHWTP.cjs.map

package/dist/{chunk-LA5F5KR6.cjs.map → chunk-YCTGHWTP.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-LA5F5KR6.cjs","../src/control.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACSA,0BAAkB;AAIX,IAAM,oBAAA,EAAsB,oBAAA;AAC5B,IAAM,eAAA,EAAiB,eAAA;AASvB,IAAM,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAI7C,IAAM,yBAAA,EAA2B,MAAA,CAAE,MAAA,CAAO;AAAA,EAC/C,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,IAAA,EAAM,MAAA,CACH,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,GAAG,CAAA,CACP,KAAA,CAAM,cAAA,EAAgB,4CAA4C,CAAA,CAClE,QAAA,CAAS,CAAA;AAAA,EACZ,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC3D,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS;AAC9D,CAAC,CAAA;AAGM,IAAM,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO;AAAA,EACpC,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACb,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,EAClC,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI;AACrC,CAAC,CAAA;AAEM,IAAM,4BAAA,EAA8B,MAAA,CAAE,MAAA,CAAO;AAAA;AAAA,EAElD,OAAA,EAAS,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACnB,YAAA,EAAc,aAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQd,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAC9B,CAAC,CAAA;AAGM,IAAM,+BAAA,EAAiC,MAAA,CAAE,MAAA,CAAO;AAAA,EACrD,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACzB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEpB,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO;AACnB,CAAC,CAAA;AAGM,IAAM,8BAAA,EAAgC,MAAA,CAC1C,MAAA,CAAO;AAAA,EACN,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC3D,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS;AAC9D,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,KAAA,EAAA,GAAU,KAAA,CAAM,kBAAA,IAAsB,KAAA,EAAA,GAAa,KAAA,CAAM,mBAAA,IAAuB,KAAA,CAAA,EAAW;AAAA,EAClG,OAAA,EAAS;AACX,CAAC,CAAA;AAGI,IAAM,iCAAA,EAAmC,MAAA,CAAE,MAAA,CAAO,EAAE,YAAA,EAAc,cAAc,CAAC,CAAA;AAKjF,IAAM,oBAAA,EAAsB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC1C,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA;AAAA,EAErC,QAAA,EAAU,2BAAA,CAAU,QAAA,CAAS,CAAA;AAAA,EAC7B,aAAA,EAAe,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA,CAAS;AAC5D,CAAC,CAAA;AAGM,IAAM,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO;AAAA,EAC/B,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACb,UAAA,EAAY,WAAA;AAAA,EACZ,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACzB,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEf,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACnB,aAAA,EAAe,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,QAAA,CAAS;AAC3C,CAAC,CAAA;AAEM,IAAM,uBAAA,EAAyB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC7C,OAAA,EAAS,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACnB,OAAA,EAAS,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMT,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO;AAAA,IAChB,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO;AAAA,MAChB,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,MAEb,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,MACnB,MAAA,EAAQ,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC;AAAA,IAC5B,CAAC,CAAA;AAAA,IACD,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO;AAAA,MACf,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,MAEb,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,MAClC,MAAA,EAAQ,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC;AAAA,IAC5B,CAAC;AAAA,EACH,CAAC;AACH,CAAC,CAAA;AAGM,IAAM,4BAAA,EAA8B,MAAA,CAAE,MAAA,CAAO;AAAA,EAClD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEnB,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO;AACzB,CAAC,CAAA;AAGM,IAAM,oBAAA,EAAsB,MAAA,CAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1C,KAAA,EAAO,MAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA;AAAA,EAErB,UAAA,EAAY;AACd,CAAC,CAAA;AAGM,IAAM,uBAAA,EAAyB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC7C,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEpB,KAAA,EAAO,MAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,gBAAgB,CAAC,CAAA;AAAA;AAAA,EAE1C,SAAA,EAAW,0BAAA,CAAS,QAAA,CAAS;AAC/B,CAAC,CAAA;AAaM,IAAM,oBAAA,EAAsB,CAAC,QAAA,EAAU,YAAA,EAAc,UAAA,EAAY,UAAU,CAAA;AAC3E,IAAM,iBAAA,EAAmB,MAAA,CAAE,IAAA,CAAK,mBAAmB,CAAA;AAGnD,IAAM,WAAA,EAAa,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAE5C,IAAM,sBAAA,EAAwB,MAAA,CAClC,MAAA,CAAO;AAAA,EACN,UAAA,EAAY,MAAA,CAAE,OAAA,CAAQ,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA;AAAA,EAEjC,MAAA,EAAQ,gBAAA,CAAiB,QAAA,CAAS,CAAA;AAAA;AAAA,EAElC,gBAAA,EAAkB,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,CAAS;AACzE,CAAC,CAAA,CACA,MAAA,CAAO,CAAA;AAGH,IAAM,mBAAA,EAAqB,MAAA,CAAE,MAAA,CAAO;AAAA,EACzC,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACpB,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,UAAA,EAAY,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACtB,MAAA,EAAQ,gBAAA;AAAA,EACR,gBAAA,EAAkB,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA;AAAA;AAAA,EAEpC,OAAA,EAAS,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA;AAAA,EAC3B,SAAA,EAAW;AACb,CAAC,CAAA;AAGM,IAAM,oBAAA,EAAsB;AAAA;AAAA,EAEjC,cAAA;AAAA;AAAA,EAEA,6BAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,WAAA;AAAA;AAAA,EAEA,mBAAA;AAAA;AAAA,EAEA,cAAA;AAAA;AAAA,EAEA;AACF,CAAA;AACO,IAAM,kBAAA,EAAoB,MAAA,CAAE,IAAA,CAAK,mBAAmB,CAAA;AAGpD,IAAM,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO;AAAA,EACpC,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,EACvB,IAAA,EAAM,iBAAA;AAAA,EACN,KAAA,EAAO,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EAChB,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC7B,MAAA,EAAQ,MAAA,CAAE,OAAA,CAAQ,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC7B,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AACjC,CAAC,CAAA;AAIM,IAAM,kBAAA,EAAoB;AAAA,EAC/B,aAAA,EAAe,uBAAA;AAAA,EACf,YAAA,EAAc,CAAC,EAAA,EAAA,GAAe,CAAA,sBAAA,EAAyB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACC,EAAA;AACpE,EAAA;AACyD,EAAA;AAE7C,EAAA;AAEA,EAAA;AACxB;AD9EwE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-LA5F5KR6.cjs","sourcesContent":[null,"/**\n * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the\n * provisioning contract.\n *\n * A project-scoped client credential cannot authenticate the creation of the\n * project it is scoped to, and an organization key cannot authenticate the\n * creation of its own organization. So provisioning runs on two credentials\n * above the client one: a platform key that creates organizations and writes\n * quotas, and an organization key that creates and deletes projects inside one\n * organization.\n *\n * Quota writes sit with the platform key on purpose. Organization keys are held\n * one-per-workspace by the caller and so have a wide exposure surface; a leaked\n * one that could raise its own limits would turn a credential leak into an\n * unbounded bill.\n */\nimport { z } from \"zod\";\nimport { zInstant } from \"./index.js\";\nimport { zTimezone } from \"./query.js\";\n\nexport const PLATFORM_KEY_HEADER = \"reopt-platform-key\";\nexport const ORG_KEY_HEADER = \"reopt-org-key\";\n\n/**\n * The caller's own id for the thing being provisioned.\n *\n * Preferred over an `Idempotency-Key` header because this domain has a real\n * natural key — the caller already has a stable id for the workspace or brand —\n * and a header would make the caller store a second one just to retry safely.\n */\nexport const zExternalId = z.string().min(1).max(191);\n\n// ─── Organizations ──────────────────────────────────────────────────────────\n\nexport const zCreateOrganizationInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  slug: z\n    .string()\n    .min(1)\n    .max(100)\n    .regex(/^[a-z0-9-]+$/, \"lowercase letters, digits and hyphens only\")\n    .optional(),\n  monthlyEventQuota: z.number().int().nonnegative().optional(),\n  monthlyCreditQuota: z.number().int().nonnegative().optional(),\n});\nexport type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;\n\nexport const zOrganization = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  name: z.string(),\n  slug: z.string(),\n  monthlyEventQuota: z.number().int(),\n  monthlyCreditQuota: z.number().int(),\n});\n\nexport const zCreateOrganizationResponse = z.object({\n  /** `false` when this externalId already had an organization. */\n  created: z.boolean(),\n  organization: zOrganization,\n  /**\n   * Plaintext, returned here and nowhere else.\n   *\n   * Absent when `created` is `false`: re-issuing on every retry would let a\n   * retry quietly multiply live credentials. A caller that lost the key rotates\n   * instead — see `POST /api/v1/organizations/{id}/keys`.\n   */\n  orgKey: z.string().optional(),\n});\nexport type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;\n\nexport const zRotateOrganizationKeyResponse = z.object({\n  organizationId: z.string(),\n  keyPrefix: z.string(),\n  /** Plaintext, returned once. Every previously issued key is revoked immediately. */\n  orgKey: z.string(),\n});\nexport type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;\n\nexport const zUpdateOrganizationQuotaInput = z\n  .object({\n    monthlyEventQuota: z.number().int().nonnegative().optional(),\n    monthlyCreditQuota: z.number().int().nonnegative().optional(),\n  })\n  .refine((value) => value.monthlyEventQuota !== undefined || value.monthlyCreditQuota !== undefined, {\n    message: \"at least one quota must be given\",\n  });\nexport type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;\n\nexport const zUpdateOrganizationQuotaResponse = z.object({ organization: zOrganization });\nexport type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;\n\n// ─── Projects ───────────────────────────────────────────────────────────────\n\nexport const zCreateProjectInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  domain: z.string().max(253).optional(),\n  /** Becomes the project's default for every query that omits one. */\n  timezone: zTimezone.optional(),\n  retentionDays: z.number().int().min(1).max(3650).optional(),\n});\nexport type CreateProjectInput = z.input<typeof zCreateProjectInput>;\n\nexport const zProject = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  organizationId: z.string(),\n  name: z.string(),\n  /** The applied value — `\"UTC\"` when none was given. */\n  timezone: z.string(),\n  retentionDays: z.number().int().nullable(),\n});\n\nexport const zCreateProjectResponse = z.object({\n  created: z.boolean(),\n  project: zProject,\n  /**\n   * Two credentials, not one. A key embedded in a browser bundle must not also\n   * be able to read the project's analytics, so the browser write key and the\n   * server secret are separate rows with different reach.\n   */\n  clients: z.object({\n    browser: z.object({\n      id: z.string(),\n      /** Public by design, and recoverable — it ships in page source anyway. */\n      writeKey: z.string(),\n      scopes: z.array(z.string()),\n    }),\n    server: z.object({\n      id: z.string(),\n      /** Plaintext, returned once. Absent when `created` is `false`. */\n      clientSecret: z.string().optional(),\n      scopes: z.array(z.string()),\n    }),\n  }),\n});\nexport type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;\n\nexport const zRotateClientSecretResponse = z.object({\n  projectId: z.string(),\n  clientId: z.string(),\n  /** Plaintext, returned once. The previous secret stops working immediately. */\n  clientSecret: z.string(),\n});\nexport type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;\n\nexport const zDeleteProjectInput = z.object({\n  /**\n   * A field in the body rather than `?purge=true`. This deletes the project's\n   * Postgres rows and every analytics row behind it, with no undo — and a query\n   * parameter is far too easy to fire from shell history or a mis-copied URL.\n   */\n  purge: z.literal(true),\n  /** Checked against the project on record; a mismatch is refused. */\n  externalId: zExternalId,\n});\nexport type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;\n\nexport const zDeleteProjectResponse = z.object({\n  projectId: z.string(),\n  /** Idempotent, but it still says which of the two happened. */\n  purge: z.enum([\"queued\", \"already-absent\"]),\n  /** When the purge was marked. Absent for `already-absent`. */\n  purgingAt: zInstant.optional(),\n});\nexport type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n// ─── Event metadata ─────────────────────────────────────────────────────────\n\n/**\n * `PUT /api/v1/projects/{projectId}/events/{name}` — catalogue settings for\n * one event name. Provisioning calls it to mark `form.submitted` a conversion\n * and an operational probe `internal`; the call is idempotent so a retried\n * provisioning run is harmless.\n */\nexport const EVENT_META_STATUSES = [\"active\", \"deprecated\", \"archived\", \"internal\"] as const;\nexport const zEventMetaStatus = z.enum(EVENT_META_STATUSES);\nexport type EventMetaStatus = z.infer<typeof zEventMetaStatus>;\n\nexport const zEventName = z.string().min(1).max(200);\n\nexport const zUpsertEventMetaInput = z\n  .object({\n    conversion: z.boolean().optional(),\n    /** `internal` events are left out of every metric unless a query opts in. */\n    status: zEventMetaStatus.optional(),\n    /** Property keys the hourly rollups break this event down by. */\n    rollupProperties: z.array(z.string().min(1).max(200)).max(20).optional(),\n  })\n  .strict();\nexport type UpsertEventMetaInput = z.infer<typeof zUpsertEventMetaInput>;\n\nexport const zEventMetaResponse = z.object({\n  projectId: z.string(),\n  name: z.string(),\n  conversion: z.boolean(),\n  status: zEventMetaStatus,\n  rollupProperties: z.array(z.string()),\n  /** Fields this call actually changed; empty on a repeat. */\n  changed: z.array(z.string()),\n  updatedAt: zInstant,\n});\nexport type EventMetaResponse = z.infer<typeof zEventMetaResponse>;\n\nexport const CONTROL_ERROR_CODES = [\n  /** 401 — missing or invalid platform key / organization key. */\n  \"unauthorized\",\n  /** 403 — the organization key belongs to a different organization. */\n  \"organization_scope_mismatch\",\n  /**\n   * 409 — this externalId exists with a materially different configuration.\n   * Only fields whose change alters results are compared (see the docs); a\n   * renamed brand is not a conflict.\n   */\n  \"external_id_conflict\",\n  /** 409 — the externalId in a delete body does not match the project's. */\n  \"project_external_id_mismatch\",\n  /** 404 — no such organization or project, on an endpoint that is not idempotent. */\n  \"not_found\",\n  /** 400 — input failed the schema. */\n  \"validation_failed\",\n  /** 429 — per-credential rate limit. */\n  \"rate_limited\",\n  /** 500 — unexpected server failure. */\n  \"internal_error\",\n] as const;\nexport const zControlErrorCode = z.enum(CONTROL_ERROR_CODES);\nexport type ControlErrorCode = z.infer<typeof zControlErrorCode>;\n\nexport const zControlError = z.object({\n  status: z.number().int(),\n  code: zControlErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type ControlError = z.infer<typeof zControlError>;\n\n/** Paths, so the client and the route handlers cannot drift apart. */\nexport const CONTROL_API_PATHS = {\n  organizations: \"/api/v1/organizations\",\n  organization: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}`,\n  organizationKeys: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}/keys`,\n  projects: \"/api/v1/projects\",\n  project: (id: string) => `/api/v1/projects/${encodeURIComponent(id)}`,\n  clientRotate: (projectId: string, clientId: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/clients/${encodeURIComponent(clientId)}/rotate`,\n  projectEvent: (projectId: string, name: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/events/${encodeURIComponent(name)}`,\n} as const;\n"]}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-YCTGHWTP.cjs","../src/control.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACSA,0BAAkB;AAIX,IAAM,oBAAA,EAAsB,oBAAA;AAC5B,IAAM,eAAA,EAAiB,eAAA;AASvB,IAAM,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAI7C,IAAM,yBAAA,EAA2B,MAAA,CAAE,MAAA,CAAO;AAAA,EAC/C,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,IAAA,EAAM,MAAA,CACH,MAAA,CAAO,CAAA,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,GAAG,CAAA,CACP,KAAA,CAAM,cAAA,EAAgB,4CAA4C,CAAA,CAClE,QAAA,CAAS,CAAA;AAAA,EACZ,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC3D,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS;AAC9D,CAAC,CAAA;AAGM,IAAM,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO;AAAA,EACpC,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACb,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,EAClC,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI;AACrC,CAAC,CAAA;AAEM,IAAM,4BAAA,EAA8B,MAAA,CAAE,MAAA,CAAO;AAAA;AAAA,EAElD,OAAA,EAAS,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACnB,YAAA,EAAc,aAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQd,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAC9B,CAAC,CAAA;AAGM,IAAM,+BAAA,EAAiC,MAAA,CAAE,MAAA,CAAO;AAAA,EACrD,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACzB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEpB,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO;AACnB,CAAC,CAAA;AAGM,IAAM,8BAAA,EAAgC,MAAA,CAC1C,MAAA,CAAO;AAAA,EACN,iBAAA,EAAmB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC3D,kBAAA,EAAoB,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA,CAAE,QAAA,CAAS;AAC9D,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,KAAA,EAAA,GAAU,KAAA,CAAM,kBAAA,IAAsB,KAAA,EAAA,GAAa,KAAA,CAAM,mBAAA,IAAuB,KAAA,CAAA,EAAW;AAAA,EAClG,OAAA,EAAS;AACX,CAAC,CAAA;AAGI,IAAM,iCAAA,EAAmC,MAAA,CAAE,MAAA,CAAO,EAAE,YAAA,EAAc,cAAc,CAAC,CAAA;AAKjF,IAAM,oBAAA,EAAsB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC1C,UAAA,EAAY,WAAA;AAAA,EACZ,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA;AAAA,EAErC,QAAA,EAAU,2BAAA,CAAU,QAAA,CAAS,CAAA;AAAA,EAC7B,aAAA,EAAe,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA,CAAS;AAC5D,CAAC,CAAA;AAGM,IAAM,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO;AAAA,EAC/B,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACb,UAAA,EAAY,WAAA;AAAA,EACZ,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACzB,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEf,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACnB,aAAA,EAAe,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,QAAA,CAAS;AAC3C,CAAC,CAAA;AAEM,IAAM,uBAAA,EAAyB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC7C,OAAA,EAAS,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACnB,OAAA,EAAS,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMT,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO;AAAA,IAChB,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO;AAAA,MAChB,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,MAEb,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,MACnB,MAAA,EAAQ,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC;AAAA,IAC5B,CAAC,CAAA;AAAA,IACD,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO;AAAA,MACf,EAAA,EAAI,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,MAEb,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,MAClC,MAAA,EAAQ,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC;AAAA,IAC5B,CAAC;AAAA,EACH,CAAC;AACH,CAAC,CAAA;AAGM,IAAM,4BAAA,EAA8B,MAAA,CAAE,MAAA,CAAO;AAAA,EAClD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEnB,YAAA,EAAc,MAAA,CAAE,MAAA,CAAO;AACzB,CAAC,CAAA;AAGM,IAAM,oBAAA,EAAsB,MAAA,CAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1C,KAAA,EAAO,MAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA;AAAA,EAErB,UAAA,EAAY;AACd,CAAC,CAAA;AAGM,IAAM,uBAAA,EAAyB,MAAA,CAAE,MAAA,CAAO;AAAA,EAC7C,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA;AAAA,EAEpB,KAAA,EAAO,MAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,gBAAgB,CAAC,CAAA;AAAA;AAAA,EAE1C,SAAA,EAAW,0BAAA,CAAS,QAAA,CAAS;AAC/B,CAAC,CAAA;AAaM,IAAM,oBAAA,EAAsB,CAAC,QAAA,EAAU,YAAA,EAAc,UAAA,EAAY,UAAU,CAAA;AAC3E,IAAM,iBAAA,EAAmB,MAAA,CAAE,IAAA,CAAK,mBAAmB,CAAA;AAGnD,IAAM,WAAA,EAAa,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAE5C,IAAM,sBAAA,EAAwB,MAAA,CAClC,MAAA,CAAO;AAAA,EACN,UAAA,EAAY,MAAA,CAAE,OAAA,CAAQ,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA;AAAA,EAEjC,MAAA,EAAQ,gBAAA,CAAiB,QAAA,CAAS,CAAA;AAAA;AAAA,EAElC,gBAAA,EAAkB,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,CAAS;AACzE,CAAC,CAAA,CACA,MAAA,CAAO,CAAA;AAGH,IAAM,mBAAA,EAAqB,MAAA,CAAE,MAAA,CAAO;AAAA,EACzC,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACpB,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EACf,UAAA,EAAY,MAAA,CAAE,OAAA,CAAQ,CAAA;AAAA,EACtB,MAAA,EAAQ,gBAAA;AAAA,EACR,gBAAA,EAAkB,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA;AAAA;AAAA,EAEpC,OAAA,EAAS,MAAA,CAAE,KAAA,CAAM,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA;AAAA,EAC3B,SAAA,EAAW;AACb,CAAC,CAAA;AAGM,IAAM,oBAAA,EAAsB;AAAA;AAAA,EAEjC,cAAA;AAAA;AAAA,EAEA,6BAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,WAAA;AAAA;AAAA,EAEA,mBAAA;AAAA;AAAA,EAEA,cAAA;AAAA;AAAA,EAEA;AACF,CAAA;AACO,IAAM,kBAAA,EAAoB,MAAA,CAAE,IAAA,CAAK,mBAAmB,CAAA;AAGpD,IAAM,cAAA,EAAgB,MAAA,CAAE,MAAA,CAAO;AAAA,EACpC,MAAA,EAAQ,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,EACvB,IAAA,EAAM,iBAAA;AAAA,EACN,KAAA,EAAO,MAAA,CAAE,MAAA,CAAO,CAAA;AAAA,EAChB,OAAA,EAAS,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC7B,MAAA,EAAQ,MAAA,CAAE,OAAA,CAAQ,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EAC7B,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AACjC,CAAC,CAAA;AAIM,IAAM,kBAAA,EAAoB;AAAA,EAC/B,aAAA,EAAe,uBAAA;AAAA,EACf,YAAA,EAAc,CAAC,EAAA,EAAA,GAAe,CAAA,sBAAA,EAAyB,kBAAA,CAAmB,EAAE,CAAC,CAAA,CAAA;AACC,EAAA;AACpE,EAAA;AACyD,EAAA;AAE7C,EAAA;AAEA,EAAA;AACxB;AD9EwE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-YCTGHWTP.cjs","sourcesContent":[null,"/**\n * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the\n * provisioning contract.\n *\n * A project-scoped client credential cannot authenticate the creation of the\n * project it is scoped to, and an organization key cannot authenticate the\n * creation of its own organization. So provisioning runs on two credentials\n * above the client one: a platform key that creates organizations and writes\n * quotas, and an organization key that creates and deletes projects inside one\n * organization.\n *\n * Quota writes sit with the platform key on purpose. Organization keys are held\n * one-per-workspace by the caller and so have a wide exposure surface; a leaked\n * one that could raise its own limits would turn a credential leak into an\n * unbounded bill.\n */\nimport { z } from \"zod\";\nimport { zInstant } from \"./index.js\";\nimport { zTimezone } from \"./query.js\";\n\nexport const PLATFORM_KEY_HEADER = \"reopt-platform-key\";\nexport const ORG_KEY_HEADER = \"reopt-org-key\";\n\n/**\n * The caller's own id for the thing being provisioned.\n *\n * Preferred over an `Idempotency-Key` header because this domain has a real\n * natural key — the caller already has a stable id for the workspace or brand —\n * and a header would make the caller store a second one just to retry safely.\n */\nexport const zExternalId = z.string().min(1).max(191);\n\n// ─── Organizations ──────────────────────────────────────────────────────────\n\nexport const zCreateOrganizationInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  slug: z\n    .string()\n    .min(1)\n    .max(100)\n    .regex(/^[a-z0-9-]+$/, \"lowercase letters, digits and hyphens only\")\n    .optional(),\n  monthlyEventQuota: z.number().int().nonnegative().optional(),\n  monthlyCreditQuota: z.number().int().nonnegative().optional(),\n});\nexport type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;\n\nexport const zOrganization = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  name: z.string(),\n  slug: z.string(),\n  monthlyEventQuota: z.number().int(),\n  monthlyCreditQuota: z.number().int(),\n});\n\nexport const zCreateOrganizationResponse = z.object({\n  /** `false` when this externalId already had an organization. */\n  created: z.boolean(),\n  organization: zOrganization,\n  /**\n   * Plaintext, returned here and nowhere else.\n   *\n   * Absent when `created` is `false`: re-issuing on every retry would let a\n   * retry quietly multiply live credentials. A caller that lost the key rotates\n   * instead — see `POST /api/v1/organizations/{id}/keys`.\n   */\n  orgKey: z.string().optional(),\n});\nexport type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;\n\nexport const zRotateOrganizationKeyResponse = z.object({\n  organizationId: z.string(),\n  keyPrefix: z.string(),\n  /** Plaintext, returned once. Every previously issued key is revoked immediately. */\n  orgKey: z.string(),\n});\nexport type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;\n\nexport const zUpdateOrganizationQuotaInput = z\n  .object({\n    monthlyEventQuota: z.number().int().nonnegative().optional(),\n    monthlyCreditQuota: z.number().int().nonnegative().optional(),\n  })\n  .refine((value) => value.monthlyEventQuota !== undefined || value.monthlyCreditQuota !== undefined, {\n    message: \"at least one quota must be given\",\n  });\nexport type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;\n\nexport const zUpdateOrganizationQuotaResponse = z.object({ organization: zOrganization });\nexport type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;\n\n// ─── Projects ───────────────────────────────────────────────────────────────\n\nexport const zCreateProjectInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  domain: z.string().max(253).optional(),\n  /** Becomes the project's default for every query that omits one. */\n  timezone: zTimezone.optional(),\n  retentionDays: z.number().int().min(1).max(3650).optional(),\n});\nexport type CreateProjectInput = z.input<typeof zCreateProjectInput>;\n\nexport const zProject = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  organizationId: z.string(),\n  name: z.string(),\n  /** The applied value — `\"UTC\"` when none was given. */\n  timezone: z.string(),\n  retentionDays: z.number().int().nullable(),\n});\n\nexport const zCreateProjectResponse = z.object({\n  created: z.boolean(),\n  project: zProject,\n  /**\n   * Two credentials, not one. A key embedded in a browser bundle must not also\n   * be able to read the project's analytics, so the browser write key and the\n   * server secret are separate rows with different reach.\n   */\n  clients: z.object({\n    browser: z.object({\n      id: z.string(),\n      /** Public by design, and recoverable — it ships in page source anyway. */\n      writeKey: z.string(),\n      scopes: z.array(z.string()),\n    }),\n    server: z.object({\n      id: z.string(),\n      /** Plaintext, returned once. Absent when `created` is `false`. */\n      clientSecret: z.string().optional(),\n      scopes: z.array(z.string()),\n    }),\n  }),\n});\nexport type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;\n\nexport const zRotateClientSecretResponse = z.object({\n  projectId: z.string(),\n  clientId: z.string(),\n  /** Plaintext, returned once. The previous secret stops working immediately. */\n  clientSecret: z.string(),\n});\nexport type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;\n\nexport const zDeleteProjectInput = z.object({\n  /**\n   * A field in the body rather than `?purge=true`. This deletes the project's\n   * Postgres rows and every analytics row behind it, with no undo — and a query\n   * parameter is far too easy to fire from shell history or a mis-copied URL.\n   */\n  purge: z.literal(true),\n  /** Checked against the project on record; a mismatch is refused. */\n  externalId: zExternalId,\n});\nexport type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;\n\nexport const zDeleteProjectResponse = z.object({\n  projectId: z.string(),\n  /** Idempotent, but it still says which of the two happened. */\n  purge: z.enum([\"queued\", \"already-absent\"]),\n  /** When the purge was marked. Absent for `already-absent`. */\n  purgingAt: zInstant.optional(),\n});\nexport type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n// ─── Event metadata ─────────────────────────────────────────────────────────\n\n/**\n * `PUT /api/v1/projects/{projectId}/events/{name}` — catalogue settings for\n * one event name. Provisioning calls it to mark `form.submitted` a conversion\n * and an operational probe `internal`; the call is idempotent so a retried\n * provisioning run is harmless.\n */\nexport const EVENT_META_STATUSES = [\"active\", \"deprecated\", \"archived\", \"internal\"] as const;\nexport const zEventMetaStatus = z.enum(EVENT_META_STATUSES);\nexport type EventMetaStatus = z.infer<typeof zEventMetaStatus>;\n\nexport const zEventName = z.string().min(1).max(200);\n\nexport const zUpsertEventMetaInput = z\n  .object({\n    conversion: z.boolean().optional(),\n    /** `internal` events are left out of every metric unless a query opts in. */\n    status: zEventMetaStatus.optional(),\n    /** Property keys the hourly rollups break this event down by. */\n    rollupProperties: z.array(z.string().min(1).max(200)).max(20).optional(),\n  })\n  .strict();\nexport type UpsertEventMetaInput = z.infer<typeof zUpsertEventMetaInput>;\n\nexport const zEventMetaResponse = z.object({\n  projectId: z.string(),\n  name: z.string(),\n  conversion: z.boolean(),\n  status: zEventMetaStatus,\n  rollupProperties: z.array(z.string()),\n  /** Fields this call actually changed; empty on a repeat. */\n  changed: z.array(z.string()),\n  updatedAt: zInstant,\n});\nexport type EventMetaResponse = z.infer<typeof zEventMetaResponse>;\n\nexport const CONTROL_ERROR_CODES = [\n  /** 401 — missing or invalid platform key / organization key. */\n  \"unauthorized\",\n  /** 403 — the organization key belongs to a different organization. */\n  \"organization_scope_mismatch\",\n  /**\n   * 409 — this externalId exists with a materially different configuration.\n   * Only fields whose change alters results are compared (see the docs); a\n   * renamed brand is not a conflict.\n   */\n  \"external_id_conflict\",\n  /** 409 — the externalId in a delete body does not match the project's. */\n  \"project_external_id_mismatch\",\n  /** 404 — no such organization or project, on an endpoint that is not idempotent. */\n  \"not_found\",\n  /** 400 — input failed the schema. */\n  \"validation_failed\",\n  /** 429 — per-credential rate limit. */\n  \"rate_limited\",\n  /** 500 — unexpected server failure. */\n  \"internal_error\",\n] as const;\nexport const zControlErrorCode = z.enum(CONTROL_ERROR_CODES);\nexport type ControlErrorCode = z.infer<typeof zControlErrorCode>;\n\nexport const zControlError = z.object({\n  status: z.number().int(),\n  code: zControlErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type ControlError = z.infer<typeof zControlError>;\n\n/** Paths, so the client and the route handlers cannot drift apart. */\nexport const CONTROL_API_PATHS = {\n  organizations: \"/api/v1/organizations\",\n  organization: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}`,\n  organizationKeys: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}/keys`,\n  projects: \"/api/v1/projects\",\n  project: (id: string) => `/api/v1/projects/${encodeURIComponent(id)}`,\n  clientRotate: (projectId: string, clientId: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/clients/${encodeURIComponent(clientId)}/rotate`,\n  projectEvent: (projectId: string, name: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/events/${encodeURIComponent(name)}`,\n} as const;\n"]}

package/dist/{chunk-VGB2VJO4.cjs → chunk-ZI6A3WQP.cjs}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkPHPTCLRUcjs = require('./chunk-PHPTCLRU.cjs');
+var _chunkL3JPDRVGcjs = require('./chunk-L3JPDRVG.cjs');
 
 
 var _chunk3EEANNYNcjs = require('./chunk-3EEANNYN.cjs');
@@ -30,7 +30,7 @@ var zClientEventMetadata = {
    * header is authoritative and a body field would be trivially forged.
    * Same character set as every identity id.
    */
-  deviceId: _zod.z.string().regex(_chunkPHPTCLRUcjs.IDENTITY_ID_PATTERN, "expected an identity id").optional()
+  deviceId: _zod.z.string().regex(_chunkL3JPDRVGcjs.IDENTITY_ID_PATTERN, "expected an identity id").optional()
 };
 var zTrackPayload = _zod.z.object({
   name: _zod.z.string().min(1).max(200),
@@ -96,7 +96,7 @@ var ingestCounts = {
   rejected: _zod.z.array(zIngestRejection)
 };
 var zSessionCredential = _zod.z.object({
-  id: _zod.z.string().regex(_chunkPHPTCLRUcjs.IDENTITY_ID_PATTERN),
+  id: _zod.z.string().regex(_chunkL3JPDRVGcjs.IDENTITY_ID_PATTERN),
   token: _zod.z.string().regex(/^[A-Za-z0-9_-]{43}$/)
 });
 var zIngestOkResponse = _zod.z.object({
@@ -176,4 +176,4 @@ var zIngestError = _zod.z.object({
 
 
 exports.MAX_TRACK_PAYLOAD_BYTES = MAX_TRACK_PAYLOAD_BYTES; exports.zTrackPayload = zTrackPayload; exports.zIdentifyPayload = zIdentifyPayload; exports.zIncrementPayload = zIncrementPayload; exports.zDecrementPayload = zDecrementPayload; exports.zTrackHandlerPayload = zTrackHandlerPayload; exports.INGEST_MODES = INGEST_MODES; exports.zIngestMode = zIngestMode; exports.INGEST_REJECTION_REASONS = INGEST_REJECTION_REASONS; exports.zIngestRejectionReason = zIngestRejectionReason; exports.zIngestRejection = zIngestRejection; exports.zSessionCredential = zSessionCredential; exports.zIngestOkResponse = zIngestOkResponse; exports.zIngestAcceptedResponse = zIngestAcceptedResponse; exports.zIngestResponse = zIngestResponse; exports.reconcileIngestResponse = reconcileIngestResponse; exports.INGEST_ERROR_CODES = INGEST_ERROR_CODES; exports.zIngestErrorCode = zIngestErrorCode; exports.zIngestError = zIngestError;
-//# sourceMappingURL=chunk-VGB2VJO4.cjs.map
+//# sourceMappingURL=chunk-ZI6A3WQP.cjs.map

package/dist/{chunk-VGB2VJO4.cjs.map → chunk-ZI6A3WQP.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-VGB2VJO4.cjs","../src/ingest.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACIA,0BAAkB;AAgBX,IAAM,wBAAA,EAA0B,KAAA;AAEvC,IAAM,qBAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B,OAAA,EAAS,MAAA,CAAE,IAAA,CAAK,CAAA;AAAA;AAAA,EAEhB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxC,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,qCAAA,EAAqB,yBAAyB,CAAA,CAAE,QAAA,CAAS;AACtF,CAAA;AAEO,IAAM,cAAA,EAAgB,MAAA,CAC1B,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,UAAA,EAAY,MAAA,CAAE,MAAA,CAAO,MAAA,CAAE,MAAA,CAAO,CAAA,EAAG,MAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EACvD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,EAAA,CAAG,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA,CAAE,QAAA,CAAS;AACzD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,IAAA,EAAA,GAAS,CAAC,sCAAA,CAAqB,QAAA,CAAS,IAAA,CAAK,IAAa,CAAA,EAAG;AAAA,EACpE,OAAA,EAAS,CAAA,gDAAA,EAAmD,sCAAA,CAAqB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC9E,EAAA;AACd;AAEsC;AACY,EAAA;AACX,EAAA;AACD,EAAA;AACJ,EAAA;AACA,EAAA;AACoB,EAAA;AACxD;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEgE;AACuB,EAAA;AACM,EAAA;AACpB,EAAA;AACA,EAAA;AACzE;AAqB+C;AACF;AAUN;AAAA;AAEtC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACqE;AAG5B;AAAA;AAErB,EAAA;AAAA;AAEkB,EAAA;AAC5B,EAAA;AACqB,EAAA;AAC9B;AAGoB;AAAA;AAEoB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAME,EAAA;AAAA;AAEP,EAAA;AACpC;AAQ2C;AACD,EAAA;AACK,EAAA;AAC9C;AAIyC;AAClB,EAAA;AACF,EAAA;AACd,EAAA;AACH,EAAA;AACe,EAAA;AACmB,EAAA;AACtC;AAQ+C;AAClB,EAAA;AACR,EAAA;AACd,EAAA;AACH,EAAA;AAC8B,EAAA;AACY,EAAA;AACR,EAAA;AACtC;AAEiF;AAcY;AACd,EAAA;AAChF;AAQkC;AAAA;AAEhC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACyD;AAGpB;AACZ,EAAA;AACjB,EAAA;AACU,EAAA;AACa,EAAA;AAAA;AAEA,EAAA;AACE,EAAA;AAChC;ADlG6F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-VGB2VJO4.cjs","sourcesContent":[null,"/**\n * `POST /api/track` — the ingest contract.\n *\n * The request shape is shared by both credential modes. The *response* shape\n * is where server-ingest differs: it reports per-event rejections instead of\n * failing a whole batch, because a forwarder that stalls on one malformed row\n * stops forwarding forever.\n *\n * Absorbed from the former internal `@reopt/ingest-contract`; that package is\n * now a deprecated re-export of this module.\n */\nimport { z } from \"zod\";\nimport { IDENTITY_ID_PATTERN } from \"./identity.js\";\n\nexport {\n  AUTO_EVENT_NAMES,\n  AUTO_EVENT_PROPERTIES,\n  AUTO_EVENT_ROLLUP_KEYS,\n  RESERVED_EVENT_NAMES,\n  SCROLL_DEPTH_BUCKETS,\n  scrollDepthBucket,\n  type AutoEventName,\n  type ScrollDepthBucket,\n} from \"./events.js\";\nimport { RESERVED_EVENT_NAMES } from \"./events.js\";\n\n/** Hard cap enforced by the route before the body is even parsed. */\nexport const MAX_TRACK_PAYLOAD_BYTES = 512_000;\n\nconst zClientEventMetadata = {\n  /**\n   * Client-generated UUID. This is the project-scoped idempotency key stored as\n   * `RawEvent.clientEventId`; the server uses a separate globally unique raw\n   * event id internally. Re-sending the same eventId to the same project is\n   * always safe and always reported as a duplicate.\n   */\n  eventId: z.uuid(),\n  /** Event time, epoch milliseconds. */\n  timestamp: z.number().int().nonnegative(),\n  /**\n   * The browser device this event belongs to, for events a server records\n   * on a visitor's behalf (a form submission, an order). Lets one server\n   * batch carry events from many visitors — a forwarder cannot split its\n   * batches per device without breaking its failure model and its\n   * `accepted + duplicates + rejected === sent` invariant.\n   *\n   * Honoured in `server` mode only, where it takes precedence over the\n   * `reopt-device-id` request header. Ignored in `browser` mode: there the\n   * header is authoritative and a body field would be trivially forged.\n   * Same character set as every identity id.\n   */\n  deviceId: z.string().regex(IDENTITY_ID_PATTERN, \"expected an identity id\").optional(),\n};\n\nexport const zTrackPayload = z\n  .object({\n    name: z.string().min(1).max(200),\n    properties: z.record(z.string(), z.unknown()).optional(),\n    profileId: z.string().max(500).or(z.number()).optional(),\n  })\n  .refine((data) => !RESERVED_EVENT_NAMES.includes(data.name as never), {\n    message: `Event name cannot be one of the reserved names: ${RESERVED_EVENT_NAMES.join(\", \")}`,\n    path: [\"name\"],\n  });\n\nexport const zIdentifyPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  firstName: z.string().max(200).optional(),\n  lastName: z.string().max(200).optional(),\n  email: z.email().max(320).optional(),\n  avatar: z.url().max(2000).optional(),\n  properties: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const zIncrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zDecrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zTrackHandlerPayload = z.discriminatedUnion(\"type\", [\n  z.object({ type: z.literal(\"track\"), payload: zTrackPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"identify\"), payload: zIdentifyPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"increment\"), payload: zIncrementPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"decrement\"), payload: zDecrementPayload, ...zClientEventMetadata }),\n]);\n\nexport type ITrackPayload = z.infer<typeof zTrackPayload>;\nexport type IIdentifyPayload = z.infer<typeof zIdentifyPayload>;\nexport type IIncrementPayload = z.infer<typeof zIncrementPayload>;\nexport type IDecrementPayload = z.infer<typeof zDecrementPayload>;\nexport type ITrackHandlerPayload = z.infer<typeof zTrackHandlerPayload>;\n\n// ─── Ingest mode ────────────────────────────────────────────────────────────\n\n/**\n * Decided by the credential presented, never by a header the caller sets:\n * `reopt-write-key` alone → `browser`, `reopt-client-id` + `reopt-client-secret`\n * → `server`. A separate mode header could disagree with the credential; this\n * cannot.\n *\n * `browser` keeps the 5-second click dedup and device-scoped sessions.\n * `server` drops both and relies solely on `eventId` idempotency — a server\n * batch legitimately contains the same event name many times within one second,\n * and its \"device\" is a process, not a person.\n */\nexport const INGEST_MODES = [\"browser\", \"server\"] as const;\nexport const zIngestMode = z.enum(INGEST_MODES);\nexport type IngestMode = z.infer<typeof zIngestMode>;\n\n// ─── Response ───────────────────────────────────────────────────────────────\n\n/**\n * Why a single event in a batch was dropped. These are permanent: re-sending\n * the same row produces the same rejection, so a forwarder should count it as\n * skipped and advance its cursor rather than retry.\n */\nexport const INGEST_REJECTION_REASONS = [\n  /** Failed the zod schema (bad eventId, missing name, wrong types…). */\n  \"validation_failed\",\n  /** Used one of RESERVED_EVENT_NAMES. */\n  \"reserved_name\",\n  /** Another row earlier in the same batch already claimed this eventId. */\n  \"duplicate_in_batch\",\n] as const;\nexport const zIngestRejectionReason = z.enum(INGEST_REJECTION_REASONS);\nexport type IngestRejectionReason = z.infer<typeof zIngestRejectionReason>;\n\nexport const zIngestRejection = z.object({\n  /** May be absent or malformed on `validation_failed` — hence `string`, not `uuid`. */\n  eventId: z.string(),\n  /** Position in the submitted batch. The only reliable identifier when eventId itself is bad. */\n  index: z.number().int().nonnegative(),\n  reason: zIngestRejectionReason,\n  message: z.string().optional(),\n});\nexport type IngestRejection = z.infer<typeof zIngestRejection>;\n\nconst ingestCounts = {\n  /** Raw events newly persisted by this request. */\n  accepted: z.number().int().nonnegative(),\n  /**\n   * Events the server already had. In `server` mode this is exactly the\n   * eventId-idempotency count; in `browser` mode it also includes the\n   * 5-second click dedup.\n   */\n  duplicates: z.number().int().nonnegative(),\n  /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */\n  rejected: z.array(zIngestRejection),\n};\n\n/**\n * The session ingest filed this batch under, with the token that lets the\n * browser (or a server acting for it) join the same session later with\n * authority — see `signSessionToken` in `./identity`. Browser mode only;\n * absent when the batch carried no sessionable event.\n */\nexport const zSessionCredential = z.object({\n  id: z.string().regex(IDENTITY_ID_PATTERN),\n  token: z.string().regex(/^[A-Za-z0-9_-]{43}$/),\n});\nexport type SessionCredential = z.infer<typeof zSessionCredential>;\n\n/** 200 — accepted and handed to the materialize queue. */\nexport const zIngestOkResponse = z.object({\n  status: z.literal(\"ok\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  queued: z.boolean(),\n  session: zSessionCredential.optional(),\n});\n\n/**\n * 202 — raw events landed, but enqueueing the materialize task failed. No data\n * is lost: the `replay-unmaterialized` cron picks these up. A forwarder should\n * treat this as success and advance its cursor. Carries the same counts as 200\n * so the reconciliation below works here too.\n */\nexport const zIngestAcceptedResponse = z.object({\n  status: z.literal(\"accepted\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  backgroundQueued: z.literal(false),\n  replay: z.literal(\"unmaterialized-raw-events\"),\n  session: zSessionCredential.optional(),\n});\n\nexport const zIngestResponse = z.discriminatedUnion(\"status\", [zIngestOkResponse, zIngestAcceptedResponse]);\n\nexport type IngestOkResponse = z.infer<typeof zIngestOkResponse>;\nexport type IngestAcceptedResponse = z.infer<typeof zIngestAcceptedResponse>;\nexport type IngestResponse = z.infer<typeof zIngestResponse>;\n\n/**\n * The reconciliation a forwarder runs on every 2xx:\n *\n *     accepted + duplicates + rejected.length === events sent\n *\n * A mismatch means the server silently dropped something, which is exactly the\n * failure mode this contract exists to make impossible to miss.\n */\nexport function reconcileIngestResponse(response: IngestResponse, sentCount: number): boolean {\n  return response.accepted + response.duplicates + response.rejected.length === sentCount;\n}\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n/**\n * Stable machine-readable codes. Branch on these, never on `error`/`message`,\n * which are prose and may be reworded.\n */\nexport const INGEST_ERROR_CODES = [\n  /** 401 — unknown or mismatched credentials. Stop and alert; do not retry. */\n  \"unauthorized\",\n  /** 400 — body was not valid JSON. */\n  \"invalid_json\",\n  /** 400 — request exceeded MAX_TRACK_PAYLOAD_BYTES. Split the batch. */\n  \"payload_too_large\",\n  /** 400 — zero events submitted. */\n  \"empty_batch\",\n  /** 400 — batch contained a `type: \"alias\"` event, which is not supported. */\n  \"alias_unsupported\",\n  /** 400 — the project has no organization; it cannot be billed or quota-checked. */\n  \"project_without_organization\",\n  /** 400 — `browser` mode only: a row failed validation. `server` mode reports these in `rejected[]`. */\n  \"validation_failed\",\n  /** 429 — per-project request rate limit. `Retry-After` set. Pause this tick, keep the cursor. */\n  \"rate_limited\",\n  /** 429 — the organization's monthly event quota is exhausted. `Retry-After` set (capped at 1h). Alert: a human must raise the limit. */\n  \"quota_exceeded\",\n  /** 410 — the project is being deleted. Permanent; stop sending. */\n  \"project_purging\",\n  /** 500 — unexpected server failure. Back off and retry. */\n  \"internal_error\",\n] as const;\nexport const zIngestErrorCode = z.enum(INGEST_ERROR_CODES);\nexport type IngestErrorCode = z.infer<typeof zIngestErrorCode>;\n\nexport const zIngestError = z.object({\n  status: z.number().int(),\n  code: zIngestErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  /** zod issues, when `code === \"validation_failed\"`. */\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type IngestError = z.infer<typeof zIngestError>;\n"]}
+{"version":3,"sources":["/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-ZI6A3WQP.cjs","../src/ingest.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACIA,0BAAkB;AAgBX,IAAM,wBAAA,EAA0B,KAAA;AAEvC,IAAM,qBAAA,EAAuB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B,OAAA,EAAS,MAAA,CAAE,IAAA,CAAK,CAAA;AAAA;AAAA,EAEhB,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,WAAA,CAAY,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaxC,QAAA,EAAU,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,KAAA,CAAM,qCAAA,EAAqB,yBAAyB,CAAA,CAAE,QAAA,CAAS;AACtF,CAAA;AAEO,IAAM,cAAA,EAAgB,MAAA,CAC1B,MAAA,CAAO;AAAA,EACN,IAAA,EAAM,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA;AAAA,EAC/B,UAAA,EAAY,MAAA,CAAE,MAAA,CAAO,MAAA,CAAE,MAAA,CAAO,CAAA,EAAG,MAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,EACvD,SAAA,EAAW,MAAA,CAAE,MAAA,CAAO,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,EAAA,CAAG,MAAA,CAAE,MAAA,CAAO,CAAC,CAAA,CAAE,QAAA,CAAS;AACzD,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,IAAA,EAAA,GAAS,CAAC,sCAAA,CAAqB,QAAA,CAAS,IAAA,CAAK,IAAa,CAAA,EAAG;AAAA,EACpE,OAAA,EAAS,CAAA,gDAAA,EAAmD,sCAAA,CAAqB,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAC9E,EAAA;AACd;AAEsC;AACY,EAAA;AACX,EAAA;AACD,EAAA;AACJ,EAAA;AACA,EAAA;AACoB,EAAA;AACxD;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEyC;AACW,EAAA;AAChB,EAAA;AACG,EAAA;AACvC;AAEgE;AACuB,EAAA;AACM,EAAA;AACpB,EAAA;AACA,EAAA;AACzE;AAqB+C;AACF;AAUN;AAAA;AAEtC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACqE;AAG5B;AAAA;AAErB,EAAA;AAAA;AAEkB,EAAA;AAC5B,EAAA;AACqB,EAAA;AAC9B;AAGoB;AAAA;AAEoB,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAME,EAAA;AAAA;AAEP,EAAA;AACpC;AAQ2C;AACD,EAAA;AACK,EAAA;AAC9C;AAIyC;AAClB,EAAA;AACF,EAAA;AACd,EAAA;AACH,EAAA;AACe,EAAA;AACmB,EAAA;AACtC;AAQ+C;AAClB,EAAA;AACR,EAAA;AACd,EAAA;AACH,EAAA;AAC8B,EAAA;AACY,EAAA;AACR,EAAA;AACtC;AAEiF;AAcY;AACd,EAAA;AAChF;AAQkC;AAAA;AAEhC,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AAAA;AAEA,EAAA;AACF;AACyD;AAGpB;AACZ,EAAA;AACjB,EAAA;AACU,EAAA;AACa,EAAA;AAAA;AAEA,EAAA;AACE,EAAA;AAChC;ADlG6F;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/eric/reopt-ai/reopt-data/packages/data-contract/dist/chunk-ZI6A3WQP.cjs","sourcesContent":[null,"/**\n * `POST /api/track` — the ingest contract.\n *\n * The request shape is shared by both credential modes. The *response* shape\n * is where server-ingest differs: it reports per-event rejections instead of\n * failing a whole batch, because a forwarder that stalls on one malformed row\n * stops forwarding forever.\n *\n * Absorbed from the former internal `@reopt/ingest-contract`; that package is\n * now a deprecated re-export of this module.\n */\nimport { z } from \"zod\";\nimport { IDENTITY_ID_PATTERN } from \"./identity.js\";\n\nexport {\n  AUTO_EVENT_NAMES,\n  AUTO_EVENT_PROPERTIES,\n  AUTO_EVENT_ROLLUP_KEYS,\n  RESERVED_EVENT_NAMES,\n  SCROLL_DEPTH_BUCKETS,\n  scrollDepthBucket,\n  type AutoEventName,\n  type ScrollDepthBucket,\n} from \"./events.js\";\nimport { RESERVED_EVENT_NAMES } from \"./events.js\";\n\n/** Hard cap enforced by the route before the body is even parsed. */\nexport const MAX_TRACK_PAYLOAD_BYTES = 512_000;\n\nconst zClientEventMetadata = {\n  /**\n   * Client-generated UUID. This is the project-scoped idempotency key stored as\n   * `RawEvent.clientEventId`; the server uses a separate globally unique raw\n   * event id internally. Re-sending the same eventId to the same project is\n   * always safe and always reported as a duplicate.\n   */\n  eventId: z.uuid(),\n  /** Event time, epoch milliseconds. */\n  timestamp: z.number().int().nonnegative(),\n  /**\n   * The browser device this event belongs to, for events a server records\n   * on a visitor's behalf (a form submission, an order). Lets one server\n   * batch carry events from many visitors — a forwarder cannot split its\n   * batches per device without breaking its failure model and its\n   * `accepted + duplicates + rejected === sent` invariant.\n   *\n   * Honoured in `server` mode only, where it takes precedence over the\n   * `reopt-device-id` request header. Ignored in `browser` mode: there the\n   * header is authoritative and a body field would be trivially forged.\n   * Same character set as every identity id.\n   */\n  deviceId: z.string().regex(IDENTITY_ID_PATTERN, \"expected an identity id\").optional(),\n};\n\nexport const zTrackPayload = z\n  .object({\n    name: z.string().min(1).max(200),\n    properties: z.record(z.string(), z.unknown()).optional(),\n    profileId: z.string().max(500).or(z.number()).optional(),\n  })\n  .refine((data) => !RESERVED_EVENT_NAMES.includes(data.name as never), {\n    message: `Event name cannot be one of the reserved names: ${RESERVED_EVENT_NAMES.join(\", \")}`,\n    path: [\"name\"],\n  });\n\nexport const zIdentifyPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  firstName: z.string().max(200).optional(),\n  lastName: z.string().max(200).optional(),\n  email: z.email().max(320).optional(),\n  avatar: z.url().max(2000).optional(),\n  properties: z.record(z.string(), z.unknown()).optional(),\n});\n\nexport const zIncrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zDecrementPayload = z.object({\n  profileId: z.string().min(1).max(500).or(z.number()),\n  property: z.string().min(1).max(200),\n  value: z.number().positive().optional(),\n});\n\nexport const zTrackHandlerPayload = z.discriminatedUnion(\"type\", [\n  z.object({ type: z.literal(\"track\"), payload: zTrackPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"identify\"), payload: zIdentifyPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"increment\"), payload: zIncrementPayload, ...zClientEventMetadata }),\n  z.object({ type: z.literal(\"decrement\"), payload: zDecrementPayload, ...zClientEventMetadata }),\n]);\n\nexport type ITrackPayload = z.infer<typeof zTrackPayload>;\nexport type IIdentifyPayload = z.infer<typeof zIdentifyPayload>;\nexport type IIncrementPayload = z.infer<typeof zIncrementPayload>;\nexport type IDecrementPayload = z.infer<typeof zDecrementPayload>;\nexport type ITrackHandlerPayload = z.infer<typeof zTrackHandlerPayload>;\n\n// ─── Ingest mode ────────────────────────────────────────────────────────────\n\n/**\n * Decided by the credential presented, never by a header the caller sets:\n * `reopt-write-key` alone → `browser`, `reopt-client-id` + `reopt-client-secret`\n * → `server`. A separate mode header could disagree with the credential; this\n * cannot.\n *\n * `browser` keeps the 5-second click dedup and device-scoped sessions.\n * `server` drops both and relies solely on `eventId` idempotency — a server\n * batch legitimately contains the same event name many times within one second,\n * and its \"device\" is a process, not a person.\n */\nexport const INGEST_MODES = [\"browser\", \"server\"] as const;\nexport const zIngestMode = z.enum(INGEST_MODES);\nexport type IngestMode = z.infer<typeof zIngestMode>;\n\n// ─── Response ───────────────────────────────────────────────────────────────\n\n/**\n * Why a single event in a batch was dropped. These are permanent: re-sending\n * the same row produces the same rejection, so a forwarder should count it as\n * skipped and advance its cursor rather than retry.\n */\nexport const INGEST_REJECTION_REASONS = [\n  /** Failed the zod schema (bad eventId, missing name, wrong types…). */\n  \"validation_failed\",\n  /** Used one of RESERVED_EVENT_NAMES. */\n  \"reserved_name\",\n  /** Another row earlier in the same batch already claimed this eventId. */\n  \"duplicate_in_batch\",\n] as const;\nexport const zIngestRejectionReason = z.enum(INGEST_REJECTION_REASONS);\nexport type IngestRejectionReason = z.infer<typeof zIngestRejectionReason>;\n\nexport const zIngestRejection = z.object({\n  /** May be absent or malformed on `validation_failed` — hence `string`, not `uuid`. */\n  eventId: z.string(),\n  /** Position in the submitted batch. The only reliable identifier when eventId itself is bad. */\n  index: z.number().int().nonnegative(),\n  reason: zIngestRejectionReason,\n  message: z.string().optional(),\n});\nexport type IngestRejection = z.infer<typeof zIngestRejection>;\n\nconst ingestCounts = {\n  /** Raw events newly persisted by this request. */\n  accepted: z.number().int().nonnegative(),\n  /**\n   * Events the server already had. In `server` mode this is exactly the\n   * eventId-idempotency count; in `browser` mode it also includes the\n   * 5-second click dedup.\n   */\n  duplicates: z.number().int().nonnegative(),\n  /** Always `[]` in `browser` mode, where a bad row fails the whole batch. */\n  rejected: z.array(zIngestRejection),\n};\n\n/**\n * The session ingest filed this batch under, with the token that lets the\n * browser (or a server acting for it) join the same session later with\n * authority — see `signSessionToken` in `./identity`. Browser mode only;\n * absent when the batch carried no sessionable event.\n */\nexport const zSessionCredential = z.object({\n  id: z.string().regex(IDENTITY_ID_PATTERN),\n  token: z.string().regex(/^[A-Za-z0-9_-]{43}$/),\n});\nexport type SessionCredential = z.infer<typeof zSessionCredential>;\n\n/** 200 — accepted and handed to the materialize queue. */\nexport const zIngestOkResponse = z.object({\n  status: z.literal(\"ok\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  queued: z.boolean(),\n  session: zSessionCredential.optional(),\n});\n\n/**\n * 202 — raw events landed, but enqueueing the materialize task failed. No data\n * is lost: the `replay-unmaterialized` cron picks these up. A forwarder should\n * treat this as success and advance its cursor. Carries the same counts as 200\n * so the reconciliation below works here too.\n */\nexport const zIngestAcceptedResponse = z.object({\n  status: z.literal(\"accepted\"),\n  requestId: z.string(),\n  mode: zIngestMode,\n  ...ingestCounts,\n  backgroundQueued: z.literal(false),\n  replay: z.literal(\"unmaterialized-raw-events\"),\n  session: zSessionCredential.optional(),\n});\n\nexport const zIngestResponse = z.discriminatedUnion(\"status\", [zIngestOkResponse, zIngestAcceptedResponse]);\n\nexport type IngestOkResponse = z.infer<typeof zIngestOkResponse>;\nexport type IngestAcceptedResponse = z.infer<typeof zIngestAcceptedResponse>;\nexport type IngestResponse = z.infer<typeof zIngestResponse>;\n\n/**\n * The reconciliation a forwarder runs on every 2xx:\n *\n *     accepted + duplicates + rejected.length === events sent\n *\n * A mismatch means the server silently dropped something, which is exactly the\n * failure mode this contract exists to make impossible to miss.\n */\nexport function reconcileIngestResponse(response: IngestResponse, sentCount: number): boolean {\n  return response.accepted + response.duplicates + response.rejected.length === sentCount;\n}\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n/**\n * Stable machine-readable codes. Branch on these, never on `error`/`message`,\n * which are prose and may be reworded.\n */\nexport const INGEST_ERROR_CODES = [\n  /** 401 — unknown or mismatched credentials. Stop and alert; do not retry. */\n  \"unauthorized\",\n  /** 400 — body was not valid JSON. */\n  \"invalid_json\",\n  /** 400 — request exceeded MAX_TRACK_PAYLOAD_BYTES. Split the batch. */\n  \"payload_too_large\",\n  /** 400 — zero events submitted. */\n  \"empty_batch\",\n  /** 400 — batch contained a `type: \"alias\"` event, which is not supported. */\n  \"alias_unsupported\",\n  /** 400 — the project has no organization; it cannot be billed or quota-checked. */\n  \"project_without_organization\",\n  /** 400 — `browser` mode only: a row failed validation. `server` mode reports these in `rejected[]`. */\n  \"validation_failed\",\n  /** 429 — per-project request rate limit. `Retry-After` set. Pause this tick, keep the cursor. */\n  \"rate_limited\",\n  /** 429 — the organization's monthly event quota is exhausted. `Retry-After` set (capped at 1h). Alert: a human must raise the limit. */\n  \"quota_exceeded\",\n  /** 410 — the project is being deleted. Permanent; stop sending. */\n  \"project_purging\",\n  /** 500 — unexpected server failure. Back off and retry. */\n  \"internal_error\",\n] as const;\nexport const zIngestErrorCode = z.enum(INGEST_ERROR_CODES);\nexport type IngestErrorCode = z.infer<typeof zIngestErrorCode>;\n\nexport const zIngestError = z.object({\n  status: z.number().int(),\n  code: zIngestErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  /** zod issues, when `code === \"validation_failed\"`. */\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type IngestError = z.infer<typeof zIngestError>;\n"]}

package/dist/client.cjs

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkVGB2VJO4cjs = require('./chunk-VGB2VJO4.cjs');
+var _chunkZI6A3WQPcjs = require('./chunk-ZI6A3WQP.cjs');
 
 
 
@@ -12,7 +12,7 @@ var _chunkVGB2VJO4cjs = require('./chunk-VGB2VJO4.cjs');
 
 
 
-var _chunkLA5F5KR6cjs = require('./chunk-LA5F5KR6.cjs');
+var _chunkYCTGHWTPcjs = require('./chunk-YCTGHWTP.cjs');
 
 
 
@@ -20,18 +20,18 @@ var _chunkLA5F5KR6cjs = require('./chunk-LA5F5KR6.cjs');
 
 
 
-var _chunkFUGY5ANJcjs = require('./chunk-FUGY5ANJ.cjs');
+var _chunkXDH5QQYFcjs = require('./chunk-XDH5QQYF.cjs');
 
 
-var _chunkYSAEOYPDcjs = require('./chunk-YSAEOYPD.cjs');
-require('./chunk-PHPTCLRU.cjs');
+var _chunkORNTN6AKcjs = require('./chunk-ORNTN6AK.cjs');
+require('./chunk-L3JPDRVG.cjs');
 
 
 
 
 
 
-var _chunkJB4MJQX7cjs = require('./chunk-JB4MJQX7.cjs');
+var _chunkF2RNXJGOcjs = require('./chunk-F2RNXJGO.cjs');
 require('./chunk-3EEANNYN.cjs');
 
 // src/client.ts
@@ -80,7 +80,7 @@ function toApiError(status, rawBody, retryAfterMs, requestId) {
   try {
     parsed = JSON.parse(rawBody);
   } catch (e) {
-    return new (0, _chunkYSAEOYPDcjs.DataApiError)({
+    return new (0, _chunkORNTN6AKcjs.DataApiError)({
       message: `reopt-data responded ${status} with a non-JSON body`,
       status,
       code: status >= 500 ? "internal_error" : "unknown_error",
@@ -92,7 +92,7 @@ function toApiError(status, rawBody, retryAfterMs, requestId) {
   const body = _nullishCoalesce(parsed, () => ( {}));
   const code = typeof body.code === "string" ? body.code : status >= 500 ? "internal_error" : "unknown_error";
   const message = typeof body.message === "string" && body.message || typeof body.error === "string" && body.error || `reopt-data responded ${status}`;
-  return new (0, _chunkYSAEOYPDcjs.DataApiError)({
+  return new (0, _chunkORNTN6AKcjs.DataApiError)({
     message,
     status,
     code,
@@ -114,10 +114,10 @@ function createDataClient(options) {
     maxDelayMs: _nullishCoalesce(_optionalChain([options, 'access', _11 => _11.retry, 'optionalAccess', _12 => _12.maxDelayMs]), () => ( DEFAULTS.maxDelayMs)),
     respectRetryAfter: _nullishCoalesce(_optionalChain([options, 'access', _13 => _13.retry, 'optionalAccess', _14 => _14.respectRetryAfter]), () => ( true))
   };
-  const userAgent = options.userAgent ? `reopt-data-contract/${_chunkJB4MJQX7cjs.CONTRACT_VERSION} ${options.userAgent}` : `reopt-data-contract/${_chunkJB4MJQX7cjs.CONTRACT_VERSION}`;
+  const userAgent = options.userAgent ? `reopt-data-contract/${_chunkF2RNXJGOcjs.CONTRACT_VERSION} ${options.userAgent}` : `reopt-data-contract/${_chunkF2RNXJGOcjs.CONTRACT_VERSION}`;
   function requireClientCredentials() {
     if (!options.clientId || !options.clientSecret) {
-      throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
+      throw new (0, _chunkORNTN6AKcjs.DataApiError)({
         message: "createDataClient was given no client credentials \u2014 pass clientId and clientSecret to use the ingest or query planes",
         status: 0,
         code: "credentials_missing"
@@ -139,7 +139,7 @@ function createDataClient(options) {
         headers: {
           "content-type": "application/json",
           "user-agent": userAgent,
-          ...options.clientId && options.clientSecret ? { [_chunkJB4MJQX7cjs.CLIENT_ID_HEADER]: options.clientId, [_chunkJB4MJQX7cjs.CLIENT_SECRET_HEADER]: options.clientSecret } : {},
+          ...options.clientId && options.clientSecret ? { [_chunkF2RNXJGOcjs.CLIENT_ID_HEADER]: options.clientId, [_chunkF2RNXJGOcjs.CLIENT_SECRET_HEADER]: options.clientSecret } : {},
           ...extraHeaders
         },
         body: JSON.stringify(body),
@@ -158,7 +158,7 @@ function createDataClient(options) {
         response = await requestOnce(method, path, body, extraHeaders, signal);
       } catch (cause) {
         if (_optionalChain([signal, 'optionalAccess', _20 => _20.aborted])) throw cause;
-        lastError = new (0, _chunkYSAEOYPDcjs.DataApiError)({
+        lastError = new (0, _chunkORNTN6AKcjs.DataApiError)({
           message: cause instanceof Error ? cause.message : String(cause),
           status: 0,
           code: "network_error",
@@ -170,16 +170,16 @@ function createDataClient(options) {
         }
         throw lastError;
       }
-      const requestId = _nullishCoalesce(response.headers.get(_chunkJB4MJQX7cjs.REQUEST_ID_HEADER), () => ( void 0));
-      const serverContractVersion = response.headers.get(_chunkJB4MJQX7cjs.CONTRACT_VERSION_HEADER);
+      const requestId = _nullishCoalesce(response.headers.get(_chunkF2RNXJGOcjs.REQUEST_ID_HEADER), () => ( void 0));
+      const serverContractVersion = response.headers.get(_chunkF2RNXJGOcjs.CONTRACT_VERSION_HEADER);
       const rawBody = await response.text();
-      if (serverContractVersion !== _chunkJB4MJQX7cjs.CONTRACT_VERSION) {
-        throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
-          message: serverContractVersion ? `reopt-data contract ${serverContractVersion} does not match client contract ${_chunkJB4MJQX7cjs.CONTRACT_VERSION}` : "reopt-data response did not declare its contract version",
+      if (serverContractVersion !== _chunkF2RNXJGOcjs.CONTRACT_VERSION) {
+        throw new (0, _chunkORNTN6AKcjs.DataApiError)({
+          message: serverContractVersion ? `reopt-data contract ${serverContractVersion} does not match client contract ${_chunkF2RNXJGOcjs.CONTRACT_VERSION}` : "reopt-data response did not declare its contract version",
           status: response.status,
           code: "contract_mismatch",
           requestId,
-          details: { expected: _chunkJB4MJQX7cjs.CONTRACT_VERSION, received: serverContractVersion }
+          details: { expected: _chunkF2RNXJGOcjs.CONTRACT_VERSION, received: serverContractVersion }
         });
       }
       if (response.ok) {
@@ -187,7 +187,7 @@ function createDataClient(options) {
         try {
           json = JSON.parse(rawBody);
         } catch (cause) {
-          throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
+          throw new (0, _chunkORNTN6AKcjs.DataApiError)({
             message: "reopt-data returned a 2xx with an unparseable body",
             status: response.status,
             code: "contract_mismatch",
@@ -198,7 +198,7 @@ function createDataClient(options) {
         try {
           return parse(json);
         } catch (cause) {
-          throw new (0, _chunkYSAEOYPDcjs.DataApiError)({
+          throw new (0, _chunkORNTN6AKcjs.DataApiError)({
             message: "reopt-data returned a 2xx that does not match the contract",
             status: response.status,
             code: "contract_mismatch",
@@ -212,7 +212,7 @@ function createDataClient(options) {
       if (!lastError.retryable || attempt === retry.maxRetries) throw lastError;
       await sleep(_nullishCoalesce(retryAfterMs, () => ( backoffDelay(attempt, retry))), signal);
     }
-    throw _nullishCoalesce(lastError, () => ( new (0, _chunkYSAEOYPDcjs.DataApiError)({ message: "reopt-data request failed", status: 0, code: "network_error" })));
+    throw _nullishCoalesce(lastError, () => ( new (0, _chunkORNTN6AKcjs.DataApiError)({ message: "reopt-data request failed", status: 0, code: "network_error" })));
   }
   async function post(path, body, parse, signal) {
     requireClientCredentials();
@@ -221,37 +221,37 @@ function createDataClient(options) {
   return {
     ingest: {
       track(events, init) {
-        return post(TRACK_PATH, events, (value) => _chunkVGB2VJO4cjs.zIngestResponse.parse(value), _optionalChain([init, 'optionalAccess', _21 => _21.signal]));
+        return post(TRACK_PATH, events, (value) => _chunkZI6A3WQPcjs.zIngestResponse.parse(value), _optionalChain([init, 'optionalAccess', _21 => _21.signal]));
       }
     },
     query: {
       eventsTimeseries(input, init) {
         return post(
-          _chunkFUGY5ANJcjs.QUERY_API_PATHS.eventsTimeseries,
+          _chunkXDH5QQYFcjs.QUERY_API_PATHS.eventsTimeseries,
           input,
-          (value) => _chunkFUGY5ANJcjs.zEventsTimeseriesResponse.parse(value),
+          (value) => _chunkXDH5QQYFcjs.zEventsTimeseriesResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _22 => _22.signal])
         );
       },
       funnel(input, init) {
-        return post(_chunkFUGY5ANJcjs.QUERY_API_PATHS.funnel, input, (value) => _chunkFUGY5ANJcjs.zFunnelResponse.parse(value), _optionalChain([init, 'optionalAccess', _23 => _23.signal]));
+        return post(_chunkXDH5QQYFcjs.QUERY_API_PATHS.funnel, input, (value) => _chunkXDH5QQYFcjs.zFunnelResponse.parse(value), _optionalChain([init, 'optionalAccess', _23 => _23.signal]));
       },
       retention(input, init) {
-        return post(_chunkFUGY5ANJcjs.QUERY_API_PATHS.retention, input, (value) => _chunkFUGY5ANJcjs.zRetentionResponse.parse(value), _optionalChain([init, 'optionalAccess', _24 => _24.signal]));
+        return post(_chunkXDH5QQYFcjs.QUERY_API_PATHS.retention, input, (value) => _chunkXDH5QQYFcjs.zRetentionResponse.parse(value), _optionalChain([init, 'optionalAccess', _24 => _24.signal]));
       },
       trafficOverview(input, init) {
         return post(
-          _chunkFUGY5ANJcjs.QUERY_API_PATHS.trafficOverview,
+          _chunkXDH5QQYFcjs.QUERY_API_PATHS.trafficOverview,
           input,
-          (value) => _chunkFUGY5ANJcjs.zTrafficOverviewResponse.parse(value),
+          (value) => _chunkXDH5QQYFcjs.zTrafficOverviewResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _25 => _25.signal])
         );
       },
       trafficSources(input, init) {
         return post(
-          _chunkFUGY5ANJcjs.QUERY_API_PATHS.trafficSources,
+          _chunkXDH5QQYFcjs.QUERY_API_PATHS.trafficSources,
           input,
-          (value) => _chunkFUGY5ANJcjs.zTrafficSourcesResponse.parse(value),
+          (value) => _chunkXDH5QQYFcjs.zTrafficSourcesResponse.parse(value),
           _optionalChain([init, 'optionalAccess', _26 => _26.signal])
         );
       }
@@ -260,70 +260,70 @@ function createDataClient(options) {
       createOrganization(input, auth, init) {
         return send(
           "POST",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organizations,
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.organizations,
           input,
-          (value) => _chunkLA5F5KR6cjs.zCreateOrganizationResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkYCTGHWTPcjs.zCreateOrganizationResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _27 => _27.signal])
         );
       },
       rotateOrgKey(organizationId, auth, init) {
         return send(
           "POST",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organizationKeys(organizationId),
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.organizationKeys(organizationId),
           {},
-          (value) => _chunkLA5F5KR6cjs.zRotateOrganizationKeyResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkYCTGHWTPcjs.zRotateOrganizationKeyResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _28 => _28.signal])
         );
       },
       updateOrganizationQuota(organizationId, input, auth, init) {
         return send(
           "PATCH",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.organization(organizationId),
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.organization(organizationId),
           input,
-          (value) => _chunkLA5F5KR6cjs.zUpdateOrganizationQuotaResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.PLATFORM_KEY_HEADER]: auth.platformKey },
+          (value) => _chunkYCTGHWTPcjs.zUpdateOrganizationQuotaResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.PLATFORM_KEY_HEADER]: auth.platformKey },
           _optionalChain([init, 'optionalAccess', _29 => _29.signal])
         );
       },
       createProject(input, auth, init) {
         return send(
           "POST",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.projects,
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.projects,
           input,
-          (value) => _chunkLA5F5KR6cjs.zCreateProjectResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkYCTGHWTPcjs.zCreateProjectResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _30 => _30.signal])
         );
       },
       rotateServerClientSecret(projectId, clientId, auth, init) {
         return send(
           "POST",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.clientRotate(projectId, clientId),
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.clientRotate(projectId, clientId),
           {},
-          (value) => _chunkLA5F5KR6cjs.zRotateClientSecretResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkYCTGHWTPcjs.zRotateClientSecretResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _31 => _31.signal])
         );
       },
       deleteProject(projectId, input, auth, init) {
         return send(
           "DELETE",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.project(projectId),
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.project(projectId),
           input,
-          (value) => _chunkLA5F5KR6cjs.zDeleteProjectResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkYCTGHWTPcjs.zDeleteProjectResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _32 => _32.signal])
         );
       },
       upsertEventMeta(projectId, name, input, auth, init) {
         return send(
           "PUT",
-          _chunkLA5F5KR6cjs.CONTROL_API_PATHS.projectEvent(projectId, name),
+          _chunkYCTGHWTPcjs.CONTROL_API_PATHS.projectEvent(projectId, name),
           input,
-          (value) => _chunkLA5F5KR6cjs.zEventMetaResponse.parse(value),
-          { [_chunkLA5F5KR6cjs.ORG_KEY_HEADER]: auth.orgKey },
+          (value) => _chunkYCTGHWTPcjs.zEventMetaResponse.parse(value),
+          { [_chunkYCTGHWTPcjs.ORG_KEY_HEADER]: auth.orgKey },
           _optionalChain([init, 'optionalAccess', _33 => _33.signal])
         );
       }