@reopt-ai/data-contract 0.6.2 → 0.7.0

package/dist/control.d.ts

@@ -1,22 +1,5 @@
-import { z } from 'zod';
-
-/**
- * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the
- * provisioning contract.
- *
- * A project-scoped client credential cannot authenticate the creation of the
- * project it is scoped to, and an organization key cannot authenticate the
- * creation of its own organization. So provisioning runs on two credentials
- * above the client one: a platform key that creates organizations and writes
- * quotas, and an organization key that creates and deletes projects inside one
- * organization.
- *
- * Quota writes sit with the platform key on purpose. Organization keys are held
- * one-per-workspace by the caller and so have a wide exposure surface; a leaked
- * one that could raise its own limits would turn a credential leak into an
- * unbounded bill.
- */
-
+import { z } from "zod";
+//#region src/control.d.ts
 declare const PLATFORM_KEY_HEADER = "reopt-platform-key";
 declare const ORG_KEY_HEADER = "reopt-org-key";
 /**
@@ -28,114 +11,114 @@ declare const ORG_KEY_HEADER = "reopt-org-key";
  */
 declare const zExternalId: z.ZodString;
 declare const zCreateOrganizationInput: z.ZodObject<{
-    externalId: z.ZodString;
-    name: z.ZodString;
-    slug: z.ZodOptional<z.ZodString>;
-    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
-    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+  externalId: z.ZodString;
+  name: z.ZodString;
+  slug: z.ZodOptional<z.ZodString>;
+  monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+  monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;
 declare const zOrganization: z.ZodObject<{
+  id: z.ZodString;
+  externalId: z.ZodString;
+  name: z.ZodString;
+  slug: z.ZodString;
+  monthlyEventQuota: z.ZodNumber;
+  monthlyCreditQuota: z.ZodNumber;
+}, z.core.$strip>;
+declare const zCreateOrganizationResponse: z.ZodObject<{
+  created: z.ZodBoolean;
+  organization: z.ZodObject<{
     id: z.ZodString;
     externalId: z.ZodString;
     name: z.ZodString;
     slug: z.ZodString;
     monthlyEventQuota: z.ZodNumber;
     monthlyCreditQuota: z.ZodNumber;
-}, z.core.$strip>;
-declare const zCreateOrganizationResponse: z.ZodObject<{
-    created: z.ZodBoolean;
-    organization: z.ZodObject<{
-        id: z.ZodString;
-        externalId: z.ZodString;
-        name: z.ZodString;
-        slug: z.ZodString;
-        monthlyEventQuota: z.ZodNumber;
-        monthlyCreditQuota: z.ZodNumber;
-    }, z.core.$strip>;
-    orgKey: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>;
+  orgKey: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;
 declare const zRotateOrganizationKeyResponse: z.ZodObject<{
-    organizationId: z.ZodString;
-    keyPrefix: z.ZodString;
-    orgKey: z.ZodString;
+  organizationId: z.ZodString;
+  keyPrefix: z.ZodString;
+  orgKey: z.ZodString;
 }, z.core.$strip>;
 type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;
 declare const zUpdateOrganizationQuotaInput: z.ZodObject<{
-    monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
-    monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
+  monthlyEventQuota: z.ZodOptional<z.ZodNumber>;
+  monthlyCreditQuota: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;
 declare const zUpdateOrganizationQuotaResponse: z.ZodObject<{
-    organization: z.ZodObject<{
-        id: z.ZodString;
-        externalId: z.ZodString;
-        name: z.ZodString;
-        slug: z.ZodString;
-        monthlyEventQuota: z.ZodNumber;
-        monthlyCreditQuota: z.ZodNumber;
-    }, z.core.$strip>;
+  organization: z.ZodObject<{
+    id: z.ZodString;
+    externalId: z.ZodString;
+    name: z.ZodString;
+    slug: z.ZodString;
+    monthlyEventQuota: z.ZodNumber;
+    monthlyCreditQuota: z.ZodNumber;
+  }, z.core.$strip>;
 }, z.core.$strip>;
 type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;
 declare const zCreateProjectInput: z.ZodObject<{
-    externalId: z.ZodString;
-    name: z.ZodString;
-    domain: z.ZodOptional<z.ZodString>;
-    timezone: z.ZodOptional<z.ZodString>;
-    retentionDays: z.ZodOptional<z.ZodNumber>;
+  externalId: z.ZodString;
+  name: z.ZodString;
+  domain: z.ZodOptional<z.ZodString>;
+  timezone: z.ZodOptional<z.ZodString>;
+  retentionDays: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 type CreateProjectInput = z.input<typeof zCreateProjectInput>;
 declare const zProject: z.ZodObject<{
+  id: z.ZodString;
+  externalId: z.ZodString;
+  organizationId: z.ZodString;
+  name: z.ZodString;
+  timezone: z.ZodString;
+  retentionDays: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+declare const zCreateProjectResponse: z.ZodObject<{
+  created: z.ZodBoolean;
+  project: z.ZodObject<{
     id: z.ZodString;
     externalId: z.ZodString;
     organizationId: z.ZodString;
     name: z.ZodString;
     timezone: z.ZodString;
     retentionDays: z.ZodNullable<z.ZodNumber>;
-}, z.core.$strip>;
-declare const zCreateProjectResponse: z.ZodObject<{
-    created: z.ZodBoolean;
-    project: z.ZodObject<{
-        id: z.ZodString;
-        externalId: z.ZodString;
-        organizationId: z.ZodString;
-        name: z.ZodString;
-        timezone: z.ZodString;
-        retentionDays: z.ZodNullable<z.ZodNumber>;
+  }, z.core.$strip>;
+  clients: z.ZodObject<{
+    browser: z.ZodObject<{
+      id: z.ZodString;
+      writeKey: z.ZodString;
+      scopes: z.ZodArray<z.ZodString>;
     }, z.core.$strip>;
-    clients: z.ZodObject<{
-        browser: z.ZodObject<{
-            id: z.ZodString;
-            writeKey: z.ZodString;
-            scopes: z.ZodArray<z.ZodString>;
-        }, z.core.$strip>;
-        server: z.ZodObject<{
-            id: z.ZodString;
-            clientSecret: z.ZodOptional<z.ZodString>;
-            scopes: z.ZodArray<z.ZodString>;
-        }, z.core.$strip>;
+    server: z.ZodObject<{
+      id: z.ZodString;
+      clientSecret: z.ZodOptional<z.ZodString>;
+      scopes: z.ZodArray<z.ZodString>;
     }, z.core.$strip>;
+  }, z.core.$strip>;
 }, z.core.$strip>;
 type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;
 declare const zRotateClientSecretResponse: z.ZodObject<{
-    projectId: z.ZodString;
-    clientId: z.ZodString;
-    clientSecret: z.ZodString;
+  projectId: z.ZodString;
+  clientId: z.ZodString;
+  clientSecret: z.ZodString;
 }, z.core.$strip>;
 type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;
 declare const zDeleteProjectInput: z.ZodObject<{
-    purge: z.ZodLiteral<true>;
-    externalId: z.ZodString;
+  purge: z.ZodLiteral<true>;
+  externalId: z.ZodString;
 }, z.core.$strip>;
 type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;
 declare const zDeleteProjectResponse: z.ZodObject<{
-    projectId: z.ZodString;
-    purge: z.ZodEnum<{
-        queued: "queued";
-        "already-absent": "already-absent";
-    }>;
-    purgingAt: z.ZodOptional<z.ZodString>;
+  projectId: z.ZodString;
+  purge: z.ZodEnum<{
+    queued: "queued";
+    "already-absent": "already-absent";
+  }>;
+  purgingAt: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;
 /**
@@ -146,78 +129,79 @@ type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;
  */
 declare const EVENT_META_STATUSES: readonly ["active", "deprecated", "archived", "internal"];
 declare const zEventMetaStatus: z.ZodEnum<{
-    active: "active";
-    deprecated: "deprecated";
-    archived: "archived";
-    internal: "internal";
+  active: "active";
+  deprecated: "deprecated";
+  archived: "archived";
+  internal: "internal";
 }>;
 type EventMetaStatus = z.infer<typeof zEventMetaStatus>;
 declare const zEventName: z.ZodString;
 declare const zUpsertEventMetaInput: z.ZodObject<{
-    conversion: z.ZodOptional<z.ZodBoolean>;
-    status: z.ZodOptional<z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-        internal: "internal";
-    }>>;
-    rollupProperties: z.ZodOptional<z.ZodArray<z.ZodString>>;
+  conversion: z.ZodOptional<z.ZodBoolean>;
+  status: z.ZodOptional<z.ZodEnum<{
+    active: "active";
+    deprecated: "deprecated";
+    archived: "archived";
+    internal: "internal";
+  }>>;
+  rollupProperties: z.ZodOptional<z.ZodArray<z.ZodString>>;
 }, z.core.$strict>;
 type UpsertEventMetaInput = z.infer<typeof zUpsertEventMetaInput>;
 declare const zEventMetaResponse: z.ZodObject<{
-    projectId: z.ZodString;
-    name: z.ZodString;
-    conversion: z.ZodBoolean;
-    status: z.ZodEnum<{
-        active: "active";
-        deprecated: "deprecated";
-        archived: "archived";
-        internal: "internal";
-    }>;
-    rollupProperties: z.ZodArray<z.ZodString>;
-    changed: z.ZodArray<z.ZodString>;
-    updatedAt: z.ZodString;
+  projectId: z.ZodString;
+  name: z.ZodString;
+  conversion: z.ZodBoolean;
+  status: z.ZodEnum<{
+    active: "active";
+    deprecated: "deprecated";
+    archived: "archived";
+    internal: "internal";
+  }>;
+  rollupProperties: z.ZodArray<z.ZodString>;
+  changed: z.ZodArray<z.ZodString>;
+  updatedAt: z.ZodString;
 }, z.core.$strip>;
 type EventMetaResponse = z.infer<typeof zEventMetaResponse>;
 declare const CONTROL_ERROR_CODES: readonly ["unauthorized", "organization_scope_mismatch", "external_id_conflict", "project_external_id_mismatch", "not_found", "validation_failed", "rate_limited", "internal_error"];
 declare const zControlErrorCode: z.ZodEnum<{
+  validation_failed: "validation_failed";
+  unauthorized: "unauthorized";
+  rate_limited: "rate_limited";
+  internal_error: "internal_error";
+  organization_scope_mismatch: "organization_scope_mismatch";
+  external_id_conflict: "external_id_conflict";
+  project_external_id_mismatch: "project_external_id_mismatch";
+  not_found: "not_found";
+}>;
+type ControlErrorCode = z.infer<typeof zControlErrorCode>;
+declare const zControlError: z.ZodObject<{
+  status: z.ZodNumber;
+  code: z.ZodEnum<{
+    validation_failed: "validation_failed";
     unauthorized: "unauthorized";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
     organization_scope_mismatch: "organization_scope_mismatch";
     external_id_conflict: "external_id_conflict";
     project_external_id_mismatch: "project_external_id_mismatch";
     not_found: "not_found";
-    validation_failed: "validation_failed";
-    rate_limited: "rate_limited";
-    internal_error: "internal_error";
-}>;
-type ControlErrorCode = z.infer<typeof zControlErrorCode>;
-declare const zControlError: z.ZodObject<{
-    status: z.ZodNumber;
-    code: z.ZodEnum<{
-        unauthorized: "unauthorized";
-        organization_scope_mismatch: "organization_scope_mismatch";
-        external_id_conflict: "external_id_conflict";
-        project_external_id_mismatch: "project_external_id_mismatch";
-        not_found: "not_found";
-        validation_failed: "validation_failed";
-        rate_limited: "rate_limited";
-        internal_error: "internal_error";
-    }>;
-    error: z.ZodString;
-    message: z.ZodOptional<z.ZodString>;
-    errors: z.ZodOptional<z.ZodUnknown>;
-    requestId: z.ZodOptional<z.ZodString>;
+  }>;
+  error: z.ZodString;
+  message: z.ZodOptional<z.ZodString>;
+  errors: z.ZodOptional<z.ZodUnknown>;
+  requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type ControlError = z.infer<typeof zControlError>;
 /** Paths, so the client and the route handlers cannot drift apart. */
 declare const CONTROL_API_PATHS: {
-    readonly organizations: "/api/v1/organizations";
-    readonly organization: (id: string) => string;
-    readonly organizationKeys: (id: string) => string;
-    readonly projects: "/api/v1/projects";
-    readonly project: (id: string) => string;
-    readonly clientRotate: (projectId: string, clientId: string) => string;
-    readonly projectEvent: (projectId: string, name: string) => string;
+  readonly organizations: "/api/v1/organizations";
+  readonly organization: (id: string) => string;
+  readonly organizationKeys: (id: string) => string;
+  readonly projects: "/api/v1/projects";
+  readonly project: (id: string) => string;
+  readonly clientRotate: (projectId: string, clientId: string) => string;
+  readonly projectEvent: (projectId: string, name: string) => string;
 };
-
-export { CONTROL_API_PATHS, CONTROL_ERROR_CODES, type ControlError, type ControlErrorCode, type CreateOrganizationInput, type CreateOrganizationResponse, type CreateProjectInput, type CreateProjectResponse, type DeleteProjectInput, type DeleteProjectResponse, EVENT_META_STATUSES, type EventMetaResponse, type EventMetaStatus, ORG_KEY_HEADER, PLATFORM_KEY_HEADER, type RotateClientSecretResponse, type RotateOrganizationKeyResponse, type UpdateOrganizationQuotaInput, type UpdateOrganizationQuotaResponse, type UpsertEventMetaInput, zControlError, zControlErrorCode, zCreateOrganizationInput, zCreateOrganizationResponse, zCreateProjectInput, zCreateProjectResponse, zDeleteProjectInput, zDeleteProjectResponse, zEventMetaResponse, zEventMetaStatus, zEventName, zExternalId, zOrganization, zProject, zRotateClientSecretResponse, zRotateOrganizationKeyResponse, zUpdateOrganizationQuotaInput, zUpdateOrganizationQuotaResponse, zUpsertEventMetaInput };
+//#endregion
+export { CONTROL_API_PATHS, CONTROL_ERROR_CODES, ControlError, ControlErrorCode, CreateOrganizationInput, CreateOrganizationResponse, CreateProjectInput, CreateProjectResponse, DeleteProjectInput, DeleteProjectResponse, EVENT_META_STATUSES, EventMetaResponse, EventMetaStatus, ORG_KEY_HEADER, PLATFORM_KEY_HEADER, RotateClientSecretResponse, RotateOrganizationKeyResponse, UpdateOrganizationQuotaInput, UpdateOrganizationQuotaResponse, UpsertEventMetaInput, zControlError, zControlErrorCode, zCreateOrganizationInput, zCreateOrganizationResponse, zCreateProjectInput, zCreateProjectResponse, zDeleteProjectInput, zDeleteProjectResponse, zEventMetaResponse, zEventMetaStatus, zEventName, zExternalId, zOrganization, zProject, zRotateClientSecretResponse, zRotateOrganizationKeyResponse, zUpdateOrganizationQuotaInput, zUpdateOrganizationQuotaResponse, zUpsertEventMetaInput };
+//# sourceMappingURL=control.d.ts.map

package/dist/control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.d.ts","names":[],"sources":["../src/control.ts"],"mappings":";;cAoBa;cACA;;;;;;;;cASA,aAAW,EAAA;cAIX,0BAAwB,EAAA;;;;;;GAWnC,EAAA,KAAA;KACU,0BAA0B,EAAE,aAAa;cAExC,eAAa,EAAA;;;;;;;GAOxB,EAAA,KAAA;cAEW,6BAA2B,EAAA;;;;;;;;;;;GAYtC,EAAA,KAAA;KACU,6BAA6B,EAAE,aAAa;cAE3C,gCAA8B,EAAA;;;;GAKzC,EAAA,KAAA;KACU,gCAAgC,EAAE,aAAa;cAE9C,+BAA6B,EAAA;;;GAOtC,EAAA,KAAA;KACQ,+BAA+B,EAAE,aAAa;cAE7C,kCAAgC,EAAA;;;;;;;;;GAA4C,EAAA,KAAA;KAC7E,kCAAkC,EAAE,aAAa;cAIhD,qBAAmB,EAAA;;;;;;GAO9B,EAAA,KAAA;KACU,qBAAqB,EAAE,aAAa;cAEnC,UAAQ,EAAA;;;;;;;GAQnB,EAAA,KAAA;cAEW,wBAAsB,EAAA;;;;;;;;;;;;;;;;;;;;;;GAsBjC,EAAA,KAAA;KACU,wBAAwB,EAAE,aAAa;cAEtC,6BAA2B,EAAA;;;;GAKtC,EAAA,KAAA;KACU,6BAA6B,EAAE,aAAa;cAE3C,qBAAmB,EAAA;;;GAS9B,EAAA,KAAA;KACU,qBAAqB,EAAE,aAAa;cAEnC,wBAAsB,EAAA;;;;;;;GAMjC,EAAA,KAAA;KACU,wBAAwB,EAAE,aAAa;;;;;;;cAYtC;cACA,kBAAgB,EAAA;;;;;;KACjB,kBAAkB,EAAE,aAAa;cAEhC,YAAU,EAAA;cAEV,uBAAqB,EAAA;;;;;;;;;GAQvB,EAAA,KAAA;KACC,uBAAuB,EAAE,aAAa;cAErC,oBAAkB,EAAA;;;;;;;;;;;;;GAS7B,EAAA,KAAA;KACU,oBAAoB,EAAE,aAAa;cAElC;cAsBA,mBAAiB,EAAA;;;;;;;;;;KAClB,mBAAmB,EAAE,aAAa;cAEjC,eAAa,EAAA;;;;;;;;;;;;;;;;GAOxB,EAAA,KAAA;KACU,eAAe,EAAE,aAAa;;cAG7B;;WAEQ,eAAA;WACI,mBAAA;;WAET,UAAA;WACY,eAAA,mBAAM;WAEN,eAAA,mBAAM"}

package/dist/control.js

@@ -1,56 +1,136 @@
-import {
-  CONTROL_API_PATHS,
-  CONTROL_ERROR_CODES,
-  EVENT_META_STATUSES,
-  ORG_KEY_HEADER,
-  PLATFORM_KEY_HEADER,
-  zControlError,
-  zControlErrorCode,
-  zCreateOrganizationInput,
-  zCreateOrganizationResponse,
-  zCreateProjectInput,
-  zCreateProjectResponse,
-  zDeleteProjectInput,
-  zDeleteProjectResponse,
-  zEventMetaResponse,
-  zEventMetaStatus,
-  zEventName,
-  zExternalId,
-  zOrganization,
-  zProject,
-  zRotateClientSecretResponse,
-  zRotateOrganizationKeyResponse,
-  zUpdateOrganizationQuotaInput,
-  zUpdateOrganizationQuotaResponse,
-  zUpsertEventMetaInput
-} from "./chunk-IY4MXH35.js";
-import "./chunk-L3WJGIKD.js";
-import "./chunk-33BCA2LH.js";
-import "./chunk-ZCKVMUIQ.js";
-export {
-  CONTROL_API_PATHS,
-  CONTROL_ERROR_CODES,
-  EVENT_META_STATUSES,
-  ORG_KEY_HEADER,
-  PLATFORM_KEY_HEADER,
-  zControlError,
-  zControlErrorCode,
-  zCreateOrganizationInput,
-  zCreateOrganizationResponse,
-  zCreateProjectInput,
-  zCreateProjectResponse,
-  zDeleteProjectInput,
-  zDeleteProjectResponse,
-  zEventMetaResponse,
-  zEventMetaStatus,
-  zEventName,
-  zExternalId,
-  zOrganization,
-  zProject,
-  zRotateClientSecretResponse,
-  zRotateOrganizationKeyResponse,
-  zUpdateOrganizationQuotaInput,
-  zUpdateOrganizationQuotaResponse,
-  zUpsertEventMetaInput
+import { zInstant } from "./index.js";
+import { zTimezone } from "./query.js";
+import { z } from "zod";
+//#region src/control.ts
+const PLATFORM_KEY_HEADER = "reopt-platform-key";
+const ORG_KEY_HEADER = "reopt-org-key";
+const zExternalId = z.string().min(1).max(191);
+const zCreateOrganizationInput = z.object({
+	externalId: zExternalId,
+	name: z.string().min(1).max(200),
+	slug: z.string().min(1).max(100).regex(/^[a-z0-9-]+$/, "lowercase letters, digits and hyphens only").optional(),
+	monthlyEventQuota: z.number().int().nonnegative().optional(),
+	monthlyCreditQuota: z.number().int().nonnegative().optional()
+});
+const zOrganization = z.object({
+	id: z.string(),
+	externalId: zExternalId,
+	name: z.string(),
+	slug: z.string(),
+	monthlyEventQuota: z.number().int(),
+	monthlyCreditQuota: z.number().int()
+});
+const zCreateOrganizationResponse = z.object({
+	created: z.boolean(),
+	organization: zOrganization,
+	orgKey: z.string().optional()
+});
+const zRotateOrganizationKeyResponse = z.object({
+	organizationId: z.string(),
+	keyPrefix: z.string(),
+	orgKey: z.string()
+});
+const zUpdateOrganizationQuotaInput = z.object({
+	monthlyEventQuota: z.number().int().nonnegative().optional(),
+	monthlyCreditQuota: z.number().int().nonnegative().optional()
+}).refine((value) => value.monthlyEventQuota !== void 0 || value.monthlyCreditQuota !== void 0, { message: "at least one quota must be given" });
+const zUpdateOrganizationQuotaResponse = z.object({ organization: zOrganization });
+const zCreateProjectInput = z.object({
+	externalId: zExternalId,
+	name: z.string().min(1).max(200),
+	domain: z.string().max(253).optional(),
+	timezone: zTimezone.optional(),
+	retentionDays: z.number().int().min(1).max(3650).optional()
+});
+const zProject = z.object({
+	id: z.string(),
+	externalId: zExternalId,
+	organizationId: z.string(),
+	name: z.string(),
+	timezone: z.string(),
+	retentionDays: z.number().int().nullable()
+});
+const zCreateProjectResponse = z.object({
+	created: z.boolean(),
+	project: zProject,
+	clients: z.object({
+		browser: z.object({
+			id: z.string(),
+			writeKey: z.string(),
+			scopes: z.array(z.string())
+		}),
+		server: z.object({
+			id: z.string(),
+			clientSecret: z.string().optional(),
+			scopes: z.array(z.string())
+		})
+	})
+});
+const zRotateClientSecretResponse = z.object({
+	projectId: z.string(),
+	clientId: z.string(),
+	clientSecret: z.string()
+});
+const zDeleteProjectInput = z.object({
+	purge: z.literal(true),
+	externalId: zExternalId
+});
+const zDeleteProjectResponse = z.object({
+	projectId: z.string(),
+	purge: z.enum(["queued", "already-absent"]),
+	purgingAt: zInstant.optional()
+});
+const EVENT_META_STATUSES = [
+	"active",
+	"deprecated",
+	"archived",
+	"internal"
+];
+const zEventMetaStatus = z.enum(EVENT_META_STATUSES);
+const zEventName = z.string().min(1).max(200);
+const zUpsertEventMetaInput = z.object({
+	conversion: z.boolean().optional(),
+	status: zEventMetaStatus.optional(),
+	rollupProperties: z.array(z.string().min(1).max(200)).max(20).optional()
+}).strict();
+const zEventMetaResponse = z.object({
+	projectId: z.string(),
+	name: z.string(),
+	conversion: z.boolean(),
+	status: zEventMetaStatus,
+	rollupProperties: z.array(z.string()),
+	changed: z.array(z.string()),
+	updatedAt: zInstant
+});
+const CONTROL_ERROR_CODES = [
+	"unauthorized",
+	"organization_scope_mismatch",
+	"external_id_conflict",
+	"project_external_id_mismatch",
+	"not_found",
+	"validation_failed",
+	"rate_limited",
+	"internal_error"
+];
+const zControlErrorCode = z.enum(CONTROL_ERROR_CODES);
+const zControlError = z.object({
+	status: z.number().int(),
+	code: zControlErrorCode,
+	error: z.string(),
+	message: z.string().optional(),
+	errors: z.unknown().optional(),
+	requestId: z.string().optional()
+});
+const CONTROL_API_PATHS = {
+	organizations: "/api/v1/organizations",
+	organization: (id) => `/api/v1/organizations/${encodeURIComponent(id)}`,
+	organizationKeys: (id) => `/api/v1/organizations/${encodeURIComponent(id)}/keys`,
+	projects: "/api/v1/projects",
+	project: (id) => `/api/v1/projects/${encodeURIComponent(id)}`,
+	clientRotate: (projectId, clientId) => `/api/v1/projects/${encodeURIComponent(projectId)}/clients/${encodeURIComponent(clientId)}/rotate`,
+	projectEvent: (projectId, name) => `/api/v1/projects/${encodeURIComponent(projectId)}/events/${encodeURIComponent(name)}`
 };
+//#endregion
+export { CONTROL_API_PATHS, CONTROL_ERROR_CODES, EVENT_META_STATUSES, ORG_KEY_HEADER, PLATFORM_KEY_HEADER, zControlError, zControlErrorCode, zCreateOrganizationInput, zCreateOrganizationResponse, zCreateProjectInput, zCreateProjectResponse, zDeleteProjectInput, zDeleteProjectResponse, zEventMetaResponse, zEventMetaStatus, zEventName, zExternalId, zOrganization, zProject, zRotateClientSecretResponse, zRotateOrganizationKeyResponse, zUpdateOrganizationQuotaInput, zUpdateOrganizationQuotaResponse, zUpsertEventMetaInput };
+
 //# sourceMappingURL=control.js.map

package/dist/control.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"file":"control.js","names":[],"sources":["../src/control.ts"],"sourcesContent":["/**\n * `POST /api/v1/organizations` · `/api/v1/projects` and friends — the\n * provisioning contract.\n *\n * A project-scoped client credential cannot authenticate the creation of the\n * project it is scoped to, and an organization key cannot authenticate the\n * creation of its own organization. So provisioning runs on two credentials\n * above the client one: a platform key that creates organizations and writes\n * quotas, and an organization key that creates and deletes projects inside one\n * organization.\n *\n * Quota writes sit with the platform key on purpose. Organization keys are held\n * one-per-workspace by the caller and so have a wide exposure surface; a leaked\n * one that could raise its own limits would turn a credential leak into an\n * unbounded bill.\n */\nimport { z } from \"zod\";\nimport { zInstant } from \"./index.js\";\nimport { zTimezone } from \"./query.js\";\n\nexport const PLATFORM_KEY_HEADER = \"reopt-platform-key\";\nexport const ORG_KEY_HEADER = \"reopt-org-key\";\n\n/**\n * The caller's own id for the thing being provisioned.\n *\n * Preferred over an `Idempotency-Key` header because this domain has a real\n * natural key — the caller already has a stable id for the workspace or brand —\n * and a header would make the caller store a second one just to retry safely.\n */\nexport const zExternalId = z.string().min(1).max(191);\n\n// ─── Organizations ──────────────────────────────────────────────────────────\n\nexport const zCreateOrganizationInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  slug: z\n    .string()\n    .min(1)\n    .max(100)\n    .regex(/^[a-z0-9-]+$/, \"lowercase letters, digits and hyphens only\")\n    .optional(),\n  monthlyEventQuota: z.number().int().nonnegative().optional(),\n  monthlyCreditQuota: z.number().int().nonnegative().optional(),\n});\nexport type CreateOrganizationInput = z.input<typeof zCreateOrganizationInput>;\n\nexport const zOrganization = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  name: z.string(),\n  slug: z.string(),\n  monthlyEventQuota: z.number().int(),\n  monthlyCreditQuota: z.number().int(),\n});\n\nexport const zCreateOrganizationResponse = z.object({\n  /** `false` when this externalId already had an organization. */\n  created: z.boolean(),\n  organization: zOrganization,\n  /**\n   * Plaintext, returned here and nowhere else.\n   *\n   * Absent when `created` is `false`: re-issuing on every retry would let a\n   * retry quietly multiply live credentials. A caller that lost the key rotates\n   * instead — see `POST /api/v1/organizations/{id}/keys`.\n   */\n  orgKey: z.string().optional(),\n});\nexport type CreateOrganizationResponse = z.infer<typeof zCreateOrganizationResponse>;\n\nexport const zRotateOrganizationKeyResponse = z.object({\n  organizationId: z.string(),\n  keyPrefix: z.string(),\n  /** Plaintext, returned once. Every previously issued key is revoked immediately. */\n  orgKey: z.string(),\n});\nexport type RotateOrganizationKeyResponse = z.infer<typeof zRotateOrganizationKeyResponse>;\n\nexport const zUpdateOrganizationQuotaInput = z\n  .object({\n    monthlyEventQuota: z.number().int().nonnegative().optional(),\n    monthlyCreditQuota: z.number().int().nonnegative().optional(),\n  })\n  .refine((value) => value.monthlyEventQuota !== undefined || value.monthlyCreditQuota !== undefined, {\n    message: \"at least one quota must be given\",\n  });\nexport type UpdateOrganizationQuotaInput = z.input<typeof zUpdateOrganizationQuotaInput>;\n\nexport const zUpdateOrganizationQuotaResponse = z.object({ organization: zOrganization });\nexport type UpdateOrganizationQuotaResponse = z.infer<typeof zUpdateOrganizationQuotaResponse>;\n\n// ─── Projects ───────────────────────────────────────────────────────────────\n\nexport const zCreateProjectInput = z.object({\n  externalId: zExternalId,\n  name: z.string().min(1).max(200),\n  domain: z.string().max(253).optional(),\n  /** Becomes the project's default for every query that omits one. */\n  timezone: zTimezone.optional(),\n  retentionDays: z.number().int().min(1).max(3650).optional(),\n});\nexport type CreateProjectInput = z.input<typeof zCreateProjectInput>;\n\nexport const zProject = z.object({\n  id: z.string(),\n  externalId: zExternalId,\n  organizationId: z.string(),\n  name: z.string(),\n  /** The applied value — `\"UTC\"` when none was given. */\n  timezone: z.string(),\n  retentionDays: z.number().int().nullable(),\n});\n\nexport const zCreateProjectResponse = z.object({\n  created: z.boolean(),\n  project: zProject,\n  /**\n   * Two credentials, not one. A key embedded in a browser bundle must not also\n   * be able to read the project's analytics, so the browser write key and the\n   * server secret are separate rows with different reach.\n   */\n  clients: z.object({\n    browser: z.object({\n      id: z.string(),\n      /** Public by design, and recoverable — it ships in page source anyway. */\n      writeKey: z.string(),\n      scopes: z.array(z.string()),\n    }),\n    server: z.object({\n      id: z.string(),\n      /** Plaintext, returned once. Absent when `created` is `false`. */\n      clientSecret: z.string().optional(),\n      scopes: z.array(z.string()),\n    }),\n  }),\n});\nexport type CreateProjectResponse = z.infer<typeof zCreateProjectResponse>;\n\nexport const zRotateClientSecretResponse = z.object({\n  projectId: z.string(),\n  clientId: z.string(),\n  /** Plaintext, returned once. The previous secret stops working immediately. */\n  clientSecret: z.string(),\n});\nexport type RotateClientSecretResponse = z.infer<typeof zRotateClientSecretResponse>;\n\nexport const zDeleteProjectInput = z.object({\n  /**\n   * A field in the body rather than `?purge=true`. This deletes the project's\n   * Postgres rows and every analytics row behind it, with no undo — and a query\n   * parameter is far too easy to fire from shell history or a mis-copied URL.\n   */\n  purge: z.literal(true),\n  /** Checked against the project on record; a mismatch is refused. */\n  externalId: zExternalId,\n});\nexport type DeleteProjectInput = z.input<typeof zDeleteProjectInput>;\n\nexport const zDeleteProjectResponse = z.object({\n  projectId: z.string(),\n  /** Idempotent, but it still says which of the two happened. */\n  purge: z.enum([\"queued\", \"already-absent\"]),\n  /** When the purge was marked. Absent for `already-absent`. */\n  purgingAt: zInstant.optional(),\n});\nexport type DeleteProjectResponse = z.infer<typeof zDeleteProjectResponse>;\n\n// ─── Errors ─────────────────────────────────────────────────────────────────\n\n// ─── Event metadata ─────────────────────────────────────────────────────────\n\n/**\n * `PUT /api/v1/projects/{projectId}/events/{name}` — catalogue settings for\n * one event name. Provisioning calls it to mark `form.submitted` a conversion\n * and an operational probe `internal`; the call is idempotent so a retried\n * provisioning run is harmless.\n */\nexport const EVENT_META_STATUSES = [\"active\", \"deprecated\", \"archived\", \"internal\"] as const;\nexport const zEventMetaStatus = z.enum(EVENT_META_STATUSES);\nexport type EventMetaStatus = z.infer<typeof zEventMetaStatus>;\n\nexport const zEventName = z.string().min(1).max(200);\n\nexport const zUpsertEventMetaInput = z\n  .object({\n    conversion: z.boolean().optional(),\n    /** `internal` events are left out of every metric unless a query opts in. */\n    status: zEventMetaStatus.optional(),\n    /** Property keys the hourly rollups break this event down by. */\n    rollupProperties: z.array(z.string().min(1).max(200)).max(20).optional(),\n  })\n  .strict();\nexport type UpsertEventMetaInput = z.infer<typeof zUpsertEventMetaInput>;\n\nexport const zEventMetaResponse = z.object({\n  projectId: z.string(),\n  name: z.string(),\n  conversion: z.boolean(),\n  status: zEventMetaStatus,\n  rollupProperties: z.array(z.string()),\n  /** Fields this call actually changed; empty on a repeat. */\n  changed: z.array(z.string()),\n  updatedAt: zInstant,\n});\nexport type EventMetaResponse = z.infer<typeof zEventMetaResponse>;\n\nexport const CONTROL_ERROR_CODES = [\n  /** 401 — missing or invalid platform key / organization key. */\n  \"unauthorized\",\n  /** 403 — the organization key belongs to a different organization. */\n  \"organization_scope_mismatch\",\n  /**\n   * 409 — this externalId exists with a materially different configuration.\n   * Only fields whose change alters results are compared (see the docs); a\n   * renamed brand is not a conflict.\n   */\n  \"external_id_conflict\",\n  /** 409 — the externalId in a delete body does not match the project's. */\n  \"project_external_id_mismatch\",\n  /** 404 — no such organization or project, on an endpoint that is not idempotent. */\n  \"not_found\",\n  /** 400 — input failed the schema. */\n  \"validation_failed\",\n  /** 429 — per-credential rate limit. */\n  \"rate_limited\",\n  /** 500 — unexpected server failure. */\n  \"internal_error\",\n] as const;\nexport const zControlErrorCode = z.enum(CONTROL_ERROR_CODES);\nexport type ControlErrorCode = z.infer<typeof zControlErrorCode>;\n\nexport const zControlError = z.object({\n  status: z.number().int(),\n  code: zControlErrorCode,\n  error: z.string(),\n  message: z.string().optional(),\n  errors: z.unknown().optional(),\n  requestId: z.string().optional(),\n});\nexport type ControlError = z.infer<typeof zControlError>;\n\n/** Paths, so the client and the route handlers cannot drift apart. */\nexport const CONTROL_API_PATHS = {\n  organizations: \"/api/v1/organizations\",\n  organization: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}`,\n  organizationKeys: (id: string) => `/api/v1/organizations/${encodeURIComponent(id)}/keys`,\n  projects: \"/api/v1/projects\",\n  project: (id: string) => `/api/v1/projects/${encodeURIComponent(id)}`,\n  clientRotate: (projectId: string, clientId: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/clients/${encodeURIComponent(clientId)}/rotate`,\n  projectEvent: (projectId: string, name: string) =>\n    `/api/v1/projects/${encodeURIComponent(projectId)}/events/${encodeURIComponent(name)}`,\n} as const;\n"],"mappings":";;;;AAoBA,MAAa,sBAAsB;AACnC,MAAa,iBAAiB;AAS9B,MAAa,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AAIpD,MAAa,2BAA2B,EAAE,OAAO;CAC/C,YAAY;CACZ,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC/B,MAAM,EACH,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,IAAI,GAAG,CAAC,CACR,MAAM,gBAAgB,4CAA4C,CAAC,CACnE,SAAS;CACZ,mBAAmB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;CAC3D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;AAC9D,CAAC;AAGD,MAAa,gBAAgB,EAAE,OAAO;CACpC,IAAI,EAAE,OAAO;CACb,YAAY;CACZ,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO;CACf,mBAAmB,EAAE,OAAO,CAAC,CAAC,IAAI;CAClC,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI;AACrC,CAAC;AAED,MAAa,8BAA8B,EAAE,OAAO;CAElD,SAAS,EAAE,QAAQ;CACnB,cAAc;CAQd,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC;AAGD,MAAa,iCAAiC,EAAE,OAAO;CACrD,gBAAgB,EAAE,OAAO;CACzB,WAAW,EAAE,OAAO;CAEpB,QAAQ,EAAE,OAAO;AACnB,CAAC;AAGD,MAAa,gCAAgC,EAC1C,OAAO;CACN,mBAAmB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;CAC3D,oBAAoB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS;AAC9D,CAAC,CAAC,CACD,QAAQ,UAAU,MAAM,sBAAsB,KAAA,KAAa,MAAM,uBAAuB,KAAA,GAAW,EAClG,SAAS,mCACX,CAAC;AAGH,MAAa,mCAAmC,EAAE,OAAO,EAAE,cAAc,cAAc,CAAC;AAKxF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,YAAY;CACZ,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;CAC/B,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS;CAErC,UAAU,UAAU,SAAS;CAC7B,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS;AAC5D,CAAC;AAGD,MAAa,WAAW,EAAE,OAAO;CAC/B,IAAI,EAAE,OAAO;CACb,YAAY;CACZ,gBAAgB,EAAE,OAAO;CACzB,MAAM,EAAE,OAAO;CAEf,UAAU,EAAE,OAAO;CACnB,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;AAC3C,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO;CAC7C,SAAS,EAAE,QAAQ;CACnB,SAAS;CAMT,SAAS,EAAE,OAAO;EAChB,SAAS,EAAE,OAAO;GAChB,IAAI,EAAE,OAAO;GAEb,UAAU,EAAE,OAAO;GACnB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;EAC5B,CAAC;EACD,QAAQ,EAAE,OAAO;GACf,IAAI,EAAE,OAAO;GAEb,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;GAClC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;EAC5B,CAAC;CACH,CAAC;AACH,CAAC;AAGD,MAAa,8BAA8B,EAAE,OAAO;CAClD,WAAW,EAAE,OAAO;CACpB,UAAU,EAAE,OAAO;CAEnB,cAAc,EAAE,OAAO;AACzB,CAAC;AAGD,MAAa,sBAAsB,EAAE,OAAO;CAM1C,OAAO,EAAE,QAAQ,IAAI;CAErB,YAAY;AACd,CAAC;AAGD,MAAa,yBAAyB,EAAE,OAAO;CAC7C,WAAW,EAAE,OAAO;CAEpB,OAAO,EAAE,KAAK,CAAC,UAAU,gBAAgB,CAAC;CAE1C,WAAW,SAAS,SAAS;AAC/B,CAAC;AAaD,MAAa,sBAAsB;CAAC;CAAU;CAAc;CAAY;AAAU;AAClF,MAAa,mBAAmB,EAAE,KAAK,mBAAmB;AAG1D,MAAa,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG;AAEnD,MAAa,wBAAwB,EAClC,OAAO;CACN,YAAY,EAAE,QAAQ,CAAC,CAAC,SAAS;CAEjC,QAAQ,iBAAiB,SAAS;CAElC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS;AACzE,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,qBAAqB,EAAE,OAAO;CACzC,WAAW,EAAE,OAAO;CACpB,MAAM,EAAE,OAAO;CACf,YAAY,EAAE,QAAQ;CACtB,QAAQ;CACR,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC;CAEpC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;CAC3B,WAAW;AACb,CAAC;AAGD,MAAa,sBAAsB;CAEjC;CAEA;CAMA;CAEA;CAEA;CAEA;CAEA;CAEA;AACF;AACA,MAAa,oBAAoB,EAAE,KAAK,mBAAmB;AAG3D,MAAa,gBAAgB,EAAE,OAAO;CACpC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;CACvB,MAAM;CACN,OAAO,EAAE,OAAO;CAChB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC7B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;AAID,MAAa,oBAAoB;CAC/B,eAAe;CACf,eAAe,OAAe,yBAAyB,mBAAmB,EAAE;CAC5E,mBAAmB,OAAe,yBAAyB,mBAAmB,EAAE,EAAE;CAClF,UAAU;CACV,UAAU,OAAe,oBAAoB,mBAAmB,EAAE;CAClE,eAAe,WAAmB,aAChC,oBAAoB,mBAAmB,SAAS,EAAE,WAAW,mBAAmB,QAAQ,EAAE;CAC5F,eAAe,WAAmB,SAChC,oBAAoB,mBAAmB,SAAS,EAAE,UAAU,mBAAmB,IAAI;AACvF"}