@salsita-ai/contracts 0.0.0-stage → 0.49.0-develop.2a2e8d75e7

package/dist/clerk/clerk-backend-api-types.js

@@ -0,0 +1 @@
+var e,t,r,a;import{P as s,match as n}from"ts-pattern";import{z as o}from"zod";export var ClerkRole=((e={}).Admin="admin",e.SuperAdmin="superadmin",e.User="user",e);export var ClerkUserStatus=((t={}).Active="active",t.Banned="banned",t.Locked="locked",t);export var ClerkInvitationStatus=((r={}).Accepted="accepted",r.Pending="pending",r.Revoked="revoked",r.Expired="expired",r);export const UserTag=o.object({id:o.string(),label:o.string()});let i=o.enum(["admin","user","superadmin"]);export var ClerkErrorCode=((a={}).FormIdentifierExists="form_identifier_exists",a);export const ClerkErrorDescription=o.object({message:o.string(),long_message:o.string(),code:o.string()});export const ClerkErrorResponse=o.object({errors:o.array(ClerkErrorDescription)});export class ClerkError extends Error{clerkError;constructor(e){super(`${e.code}: ${e.message} - ${e.long_message}`),this.clerkError=e}}export const IdTokenData=o.object({exp:o.number(),iss:o.string()});export const RefreshTokenData=o.object({clerkRefreshToken:o.string()});export const OAuthRefreshTokenResult=o.object({access_token:o.string(),expires_in:o.number(),refresh_token:o.string(),scope:o.string(),token_type:o.string()});export const OAuthUserInfo=o.object({object:o.literal("oauth_user_info"),instance_id:o.string(),user_id:o.string(),email:o.string(),email_verified:o.boolean()});let d=o.object({role:i.optional(),tags:o.array(o.string()).optional()}),l=o.object({role:i.optional(),tags:o.array(o.string()).optional()});export const User=o.object({object:o.literal("user"),id:o.string(),primary_email_address_id:o.string(),email_addresses:o.array(o.object({id:o.string(),email_address:o.string()})),first_name:o.string().nullable(),last_name:o.string().nullable(),public_metadata:d,private_metadata:l,locked:o.boolean(),banned:o.boolean(),last_sign_in_at:o.number().nullable(),created_at:o.number()}).transform(e=>{let{created_at:t,email_addresses:r,id:a,last_sign_in_at:o,primary_email_address_id:i,public_metadata:d,private_metadata:l,locked:c,banned:p}=e,g=r.find(e=>e.id===i)?.email_address;if(!g)throw Error("Primary email address not found");let m=n([p,c]).with([!0,s.any],()=>"banned").with([!1,!0],()=>"locked").otherwise(()=>"active");return{id:a,emailAddress:g,fullName:e.first_name||e.last_name?[e.first_name??"",e.last_name??""].join(" "):null,role:l.role??d.role??"user",tags:l.tags??d.tags??[],status:m,createdAt:t,lastSignInAt:o}});export const UserResponse=o.array(User);export const UserUpdate=o.object({id:o.string(),tags:o.array(o.string()),role:i});export const UserDelete=o.object({deleted:o.boolean()});export const UserInvite=o.object({emailAddress:o.string(),role:i,tags:o.array(o.string())});export const InvitationPublicMetadata=o.object({role:i.optional(),tags:o.array(o.string()).optional()});export const Invitation=o.object({object:o.literal("invitation"),id:o.string(),email_address:o.string(),status:o.enum(["pending","accepted","revoked","expired"]),public_metadata:InvitationPublicMetadata,expires_at:o.number(),created_at:o.number(),updated_at:o.number()}).transform(e=>{let t=InvitationPublicMetadata.parse(e.public_metadata);return{id:e.id,emailAddress:e.email_address,status:e.status,role:t.role??"user",tags:t.tags??[],expiresAt:e.expires_at,createdAt:e.created_at,updatedAt:e.updated_at}});export const InvitationsResponse=o.array(Invitation);export const OranizationPrivateMetadata=o.object({userTags:o.array(UserTag).default([])});export const Organization=o.object({object:o.literal("organization"),id:o.string(),name:o.string(),private_metadata:OranizationPrivateMetadata}).transform(e=>{let{id:t,name:r,private_metadata:a}=e;return{id:t,name:r,userTags:a.userTags}});export const OrganizationsResponse=o.object({total_count:o.number(),data:o.array(Organization)});

package/dist/clerk/clerk-session-token.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+export declare const ClerkSessionTokenClaims: z.ZodObject<{
+    sub: z.ZodString;
+    sid: z.ZodString;
+} & {
+    azp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    sub: string;
+    sid: string;
+    azp: string;
+}, {
+    sub: string;
+    sid: string;
+    azp: string;
+}>;
+export type ClerkSessionTokenClaims = z.infer<typeof ClerkSessionTokenClaims>;
+/**
+ * Cheap, signature-less check whether a token looks like a Clerk session JWT issued by the
+ * given Clerk frontend API. Used for auth flow routing only — never as proof of identity, the
+ * routed handler must call {@link verifyClerkSessionToken} before trusting the token.
+ */
+export declare const isClerkSessionToken: (token: string, frontendApiBaseUrl: string) => boolean;
+/**
+ * Verifies a Clerk session JWT against the JWKS of the given Clerk frontend API (signature,
+ * expiration, issuer, and authorized party) and returns its claims. Throws when the token is not
+ * a valid, unexpired session token of that Clerk instance or was minted for another frontend.
+ */
+export declare const verifyClerkSessionToken: (token: string, frontendApiBaseUrl: string, authorizedParties: readonly string[]) => Promise<ClerkSessionTokenClaims>;

package/dist/clerk/clerk-session-token.js

@@ -0,0 +1 @@
+import{createRemoteJWKSet as e,decodeJwt as r,jwtVerify as s}from"jose";import{z as t}from"zod";let n=t.object({sub:t.string(),sid:t.string()});export const ClerkSessionTokenClaims=n.extend({azp:t.string().url()});let o=new Map;export const isClerkSessionToken=(e,s)=>{try{let t=r(e);if(!n.safeParse(t).success)return!1;return"string"==typeof t.iss&&t.iss.replace(/\/$/,"")===s.replace(/\/$/,"")}catch{return!1}};export const verifyClerkSessionToken=async(r,t,n)=>{let i=t.replace(/\/$/,""),{payload:a}=await s(r,(r=>{let s=o.get(r);if(s)return s;let t=e(new URL(`${r}/.well-known/jwks.json`));return o.set(r,t),t})(i),{issuer:i}),l=ClerkSessionTokenClaims.safeParse(a);if(!l.success)throw Error(`Clerk session token verification failed: the token signature is valid but required claims are missing (${l.error.message}). The token is probably not a Clerk session JWT — make sure the client sends the token obtained from Clerk's getToken().`);if(!n.map(e=>new URL(e).origin).includes(new URL(l.data.azp).origin))throw Error("Clerk session token verification failed: the token's authorized party is not allowed for this deployment.");return l.data};

package/dist/clerk/clerk-token-service.d.ts

@@ -0,0 +1,15 @@
+import { type ProduceJWT } from 'jose';
+type ExpirationTime = Parameters<ProduceJWT['setExpirationTime']>[0];
+export declare class ClerkTokenService {
+    private readonly _jwtSecret;
+    constructor(_jwtSecret: string);
+    readonly generateRefreshToken: (clerkRefreshToken: string, expirationTime?: ExpirationTime) => Promise<string>;
+    readonly parseIdToken: (idToken: string) => {
+        exp: number;
+        iss: string;
+    };
+    readonly parseRefreshToken: (refreshToken: string) => {
+        clerkRefreshToken: string;
+    };
+}
+export {};

package/dist/clerk/clerk-token-service.js

@@ -0,0 +1 @@
+import{SignJWT as e,decodeJwt as r}from"jose";import{IdTokenData as t,RefreshTokenData as s}from"./clerk-backend-api-types.js";export class ClerkTokenService{_jwtSecret;constructor(e){this._jwtSecret=e}generateRefreshToken=(r,t="1d")=>new e({clerkRefreshToken:r}).setProtectedHeader({alg:"HS256"}).setIssuedAt().setExpirationTime(t).sign(Buffer.from(this._jwtSecret,"base64"));parseIdToken=e=>{let s=r(e);return t.parse(s)};parseRefreshToken=e=>{let t=r(e);return s.parse(t)}}

package/dist/clerk/index.d.ts

@@ -0,0 +1,4 @@
+export { ClerkBackendApiClient } from './clerk-backend-api-client.js';
+export { ClerkError, ClerkInvitationStatus, ClerkRole, ClerkUserStatus, IdTokenData, Invitation, RefreshTokenData, User, UserDelete, UserInvite, UserTag, UserUpdate, } from './clerk-backend-api-types.js';
+export { ClerkSessionTokenClaims, isClerkSessionToken, verifyClerkSessionToken } from './clerk-session-token.js';
+export { ClerkTokenService } from './clerk-token-service.js';

package/dist/clerk/index.js

@@ -0,0 +1 @@
+export{ClerkBackendApiClient}from"./clerk-backend-api-client.js";export{ClerkError,ClerkInvitationStatus,ClerkRole,ClerkUserStatus,IdTokenData,Invitation,RefreshTokenData,User,UserDelete,UserInvite,UserTag,UserUpdate}from"./clerk-backend-api-types.js";export{ClerkSessionTokenClaims,isClerkSessionToken,verifyClerkSessionToken}from"./clerk-session-token.js";export{ClerkTokenService}from"./clerk-token-service.js";

package/dist/domain/deployments/ai-image-domain.d.ts

@@ -0,0 +1,10 @@
+import { Branded } from '@salsita-ai/common/utils';
+import { type CustomerId } from './customer-domain.js';
+import { type BucketTimestamp } from './session-domain.js';
+export type AiImageCount = Branded<'AiImageCount', number>;
+export declare const AiImageCount: (count: number) => AiImageCount;
+export interface NewAiImageBucket {
+    readonly customerId: CustomerId;
+    readonly bucketTimestamp: BucketTimestamp;
+    readonly imageCount: AiImageCount;
+}

package/dist/domain/deployments/ai-image-domain.js

@@ -0,0 +1 @@
+import{Branded as o}from"@salsita-ai/common/utils";export const AiImageCount=t=>{if(t<0)throw Error("AI image count cannot be negative");return o(t)};

package/dist/domain/deployments/api-token-domain.d.ts

@@ -0,0 +1,8 @@
+import { Branded } from '@salsita-ai/common/utils';
+/**
+ * Identifies one API token: a long-lived, revocable credential that authenticates calls to the Phoenix API on
+ * behalf of the user who approved it. The id names the token in revocation and in the request session; it is
+ * never the secret itself.
+ */
+export type ApiTokenId = Branded<'ApiTokenId', string>;
+export declare const ApiTokenId: (id: string) => ApiTokenId;

package/dist/domain/deployments/api-token-domain.js

@@ -0,0 +1 @@
+import{validate as o}from"uuid";import{Branded as i}from"@salsita-ai/common/utils";export const ApiTokenId=r=>{if(!o(r))throw Error(`Invalid API token id: ${r}. It must be a valid UUID.`);return i(r)};

package/dist/domain/deployments/configuration-schema-domain.d.ts

@@ -0,0 +1,22 @@
+import { Branded } from '@salsita-ai/common/utils';
+import { type ApplicationType } from './deployment-domain.js';
+import { type EnvironmentId } from './environment-domain.js';
+export type ConfigurationSchemaId = Branded<'ConfigurationSchemaId', string>;
+export declare const ConfigurationSchemaId: (id: string) => ConfigurationSchemaId;
+export type ConfigurationSchemaVersion = Branded<'ConfigurationSchemaVersion', number>;
+export declare const ConfigurationSchemaVersion: (version: number) => ConfigurationSchemaVersion;
+export type ConfigurationSchemaJsonSchema = Branded<'ConfigurationSchemaJsonSchema', Record<string, unknown>>;
+export declare const ConfigurationSchemaJsonSchema: (schema: unknown) => ConfigurationSchemaJsonSchema;
+export interface NewConfigurationSchema {
+    id: null;
+    environmentId: EnvironmentId;
+    schema: ConfigurationSchemaJsonSchema;
+    version: ConfigurationSchemaVersion;
+    applicationType: ApplicationType;
+}
+export interface ConfigurationSchema {
+    id: ConfigurationSchemaId;
+    environmentId: EnvironmentId;
+    schema: ConfigurationSchemaJsonSchema;
+    version: ConfigurationSchemaVersion;
+}

package/dist/domain/deployments/configuration-schema-domain.js

@@ -0,0 +1 @@
+import{validate as o}from"uuid";import{Branded as r}from"@salsita-ai/common/utils";export const ConfigurationSchemaId=i=>{if(!o(i))throw Error(`Invalid configuration schema id: ${i}. It must be a valid UUID.`);return r(i)};export const ConfigurationSchemaVersion=o=>{if(!(o>0&&Number.isSafeInteger(o)))throw Error(`Invalid configuration schema version: ${o}. It must be a positive integer.`);return r(o)};export const ConfigurationSchemaJsonSchema=o=>r(o);

package/dist/domain/deployments/customer-domain.d.ts

@@ -0,0 +1,69 @@
+import { z } from 'zod';
+import { Branded, type ValueOf } from '@salsita-ai/common/utils';
+export type CustomerId = Branded<'CustomerId', string>;
+export declare const CustomerId: (id: string) => CustomerId;
+export type CustomerName = Branded<'CustomerName', string>;
+export declare const CustomerName: (name: string) => CustomerName;
+export type CustomerSlug = Branded<'CustomerSlug', string>;
+export declare const CustomerSlug: (slug: string) => CustomerSlug;
+declare const customerTypes: {
+    readonly Standard: 'standard';
+    readonly SdkBuilder: 'sdk_builder';
+};
+/**
+ * Kind of a customer, fixed when the customer is created. Standard customers use Studio to manage projects,
+ * environments and deployments built from their own repositories. SDK builders build a single application-spec
+ * project with the SDK alone and deploy it with the `phoenix` CLI; the server bootstraps their project and
+ * `production` environment and gives them a separate Studio experience.
+ */
+export type CustomerType = ValueOf<typeof customerTypes>;
+export declare const CustomerTypeSchema: z.ZodNativeEnum<{
+    readonly Standard: 'standard';
+    readonly SdkBuilder: 'sdk_builder';
+}>;
+export declare const CustomerType: ((value: string) => CustomerType) & {
+    readonly Standard: 'standard';
+    readonly SdkBuilder: 'sdk_builder';
+};
+export type CustomerClerkSecretKey = Branded<'CustomerClerkSecretKey', string>;
+export declare const CustomerClerkSecretKey: (key: string) => CustomerClerkSecretKey;
+export type CustomerClerkPublishableKey = Branded<'CustomerClerkPublishableKey', string>;
+export declare const CustomerClerkPublishableKey: (key: string) => CustomerClerkPublishableKey;
+export type CustomerClerkOAuthClientId = Branded<'CustomerClerkOAuthClientId', string>;
+export declare const CustomerClerkOAuthClientId: (id: string) => CustomerClerkOAuthClientId;
+export type CustomerClerkOAuthClientSecret = Branded<'CustomerClerkOAuthClientSecret', string>;
+export declare const CustomerClerkOAuthClientSecret: (secret: string) => CustomerClerkOAuthClientSecret;
+export type CustomerClerkOAuthBaseUrl = Branded<'CustomerClerkOAuthBaseUrl', string>;
+export declare const CustomerClerkOAuthBaseUrl: (url: string) => CustomerClerkOAuthBaseUrl;
+export type CustomerClerkJwtSecret = Branded<'CustomerClerkJwtSecret', string>;
+export declare const CustomerClerkJwtSecret: (secret: string) => CustomerClerkJwtSecret;
+export interface CustomerClerkOAuthSettings {
+    readonly clientId: CustomerClerkOAuthClientId;
+    readonly clientSecret: CustomerClerkOAuthClientSecret;
+    readonly baseUrl: CustomerClerkOAuthBaseUrl;
+    readonly jwtSecretBase64: CustomerClerkJwtSecret;
+}
+export interface CustomerClerkSettings {
+    readonly clerkPublishableKey: CustomerClerkPublishableKey;
+    readonly clerkSecretKey: CustomerClerkSecretKey;
+    readonly oauthSettings: CustomerClerkOAuthSettings | null;
+}
+export interface Customer {
+    readonly id: CustomerId;
+    readonly name: CustomerName;
+    readonly slug: CustomerSlug | null;
+    readonly type: CustomerType;
+    readonly clerkSettings: CustomerClerkSettings | null;
+    readonly overviewEnabled: boolean;
+    readonly activityAnalyticsEnabled: boolean;
+    readonly configurationListEnabled: boolean;
+    readonly configurationPreviewEnabled: boolean;
+    readonly integratedAdminEnabled: boolean;
+    readonly releaseToProductionEnabled: boolean;
+    readonly connectedProvidersEnabled: boolean;
+    readonly aiPreviewEnabled: boolean;
+    readonly aiAssistantEnabled: boolean;
+    readonly aiImageLimit: number;
+    readonly imageRenderLimitEnabled: boolean;
+}
+export {};

package/dist/domain/deployments/customer-domain.js

@@ -0,0 +1 @@
+import{validate as t}from"uuid";import{z as e}from"zod";import{Branded as r}from"@salsita-ai/common/utils";export const CustomerId=e=>{if(!t(e))throw Error(`Invalid Customer id: ${e}. It must be a valid UUID.`);return r(e)};export const CustomerName=t=>{if(!t||0===t.trim().length)throw Error("Customer name is required and cannot be empty");return r(t.trim())};export const CustomerSlug=t=>r(t);let o={Standard:"standard",SdkBuilder:"sdk_builder"};export const CustomerTypeSchema=e.nativeEnum(o);export const CustomerType=Object.assign(t=>{let e=CustomerTypeSchema.safeParse(t);if(!e.success)throw Error(`Invalid customer type: ${t}. It must be one of ${Object.values(o).join(", ")}.`);return e.data},o);export const CustomerClerkSecretKey=t=>r(t);export const CustomerClerkPublishableKey=t=>r(t);export const CustomerClerkOAuthClientId=t=>r(t);export const CustomerClerkOAuthClientSecret=t=>r(t);export const CustomerClerkOAuthBaseUrl=t=>r(t);export const CustomerClerkJwtSecret=t=>r(t);

package/dist/domain/deployments/deployment-build-domain.d.ts

@@ -0,0 +1,78 @@
+import { Branded, type ValueOf } from '@salsita-ai/common/utils';
+import type { DeploymentId } from './deployment-domain.js';
+import type { EnvironmentId } from './environment-domain.js';
+export type DeploymentBuildId = Branded<'DeploymentBuildId', string>;
+export declare const DeploymentBuildId: (id: string) => DeploymentBuildId;
+/**
+ * Key of the source archive a builder uploaded for an upload build. The server resolves it to the stored object, so
+ * only a plain object key is accepted.
+ */
+export type DeploymentBuildSourceKey = Branded<'DeploymentBuildSourceKey', string>;
+export declare const DeploymentBuildSourceKey: (key: string) => DeploymentBuildSourceKey;
+declare const deploymentBuildModes: {
+    readonly Init: 'init';
+    readonly Upload: 'upload';
+};
+/**
+ * What a build deploys. An init build deploys the hello-world starter to a new SDK-builder environment and creates
+ * its infrastructure on the way; an upload build deploys the project sources the builder uploaded with the CLI.
+ */
+export type DeploymentBuildMode = ValueOf<typeof deploymentBuildModes>;
+export declare const DeploymentBuildMode: ((value: string) => DeploymentBuildMode) & {
+    readonly Init: 'init';
+    readonly Upload: 'upload';
+};
+declare const deploymentBuildStatuses: {
+    readonly Queued: 'queued';
+    readonly Preparing: 'preparing';
+    readonly Building: 'building';
+    readonly Deploying: 'deploying';
+    readonly Live: 'live';
+    readonly Failed: 'failed';
+    readonly Cancelled: 'cancelled';
+};
+/**
+ * Where a build is in its run. The server sets `queued`; the runner reports every later status in order while it
+ * prepares the deployment, builds the project in isolation and deploys it. `cancelled` means the run stopped before
+ * deploying, usually because a newer build of the same environment superseded it.
+ */
+export type DeploymentBuildStatus = ValueOf<typeof deploymentBuildStatuses>;
+export declare const DeploymentBuildStatus: ((value: string) => DeploymentBuildStatus) & {
+    readonly Queued: 'queued';
+    readonly Preparing: 'preparing';
+    readonly Building: 'building';
+    readonly Deploying: 'deploying';
+    readonly Live: 'live';
+    readonly Failed: 'failed';
+    readonly Cancelled: 'cancelled';
+};
+/**
+ * One build and deployment of an SDK-builder environment, from queueing to its final status. The build log is
+ * stored with the build but kept off this entity, because only the build detail view needs it.
+ */
+export interface DeploymentBuild {
+    readonly id: DeploymentBuildId;
+    readonly environmentId: EnvironmentId;
+    readonly mode: DeploymentBuildMode;
+    readonly status: DeploymentBuildStatus;
+    readonly sourceKey: DeploymentBuildSourceKey | null;
+    readonly sdkVersion: string | null;
+    readonly createdByUserId: string | null;
+    readonly deploymentId: DeploymentId | null;
+    readonly error: string | null;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+    readonly preparingAt: Date | null;
+    readonly buildingAt: Date | null;
+    readonly deployingAt: Date | null;
+    readonly finishedAt: Date | null;
+}
+declare const isFinished: (status: DeploymentBuildStatus) => boolean;
+/**
+ * The rule every client shares about a build: whether its status is final. The server adds the queueing and
+ * status-transition behaviour on its side.
+ */
+export declare const DeploymentBuild: {
+    isFinished: typeof isFinished;
+};
+export {};

package/dist/domain/deployments/deployment-build-domain.js

@@ -0,0 +1 @@
+import{validate as e}from"uuid";import{z as t}from"zod";import{Branded as i}from"@salsita-ai/common/utils";export const DeploymentBuildId=t=>{if(!e(t))throw Error(`Invalid deployment build id: ${t}. It must be a valid UUID.`);return i(t)};export const DeploymentBuildSourceKey=e=>{if(!(e.length>0&&!e.startsWith("/")&&!/\s/.test(e)&&!e.split("/").includes("..")))throw Error(`Invalid deployment build source key: "${e}". It must be a non-empty S3 object key without a leading slash, whitespace or ".." segments.`);return i(e)};let l={Init:"init",Upload:"upload"},o=t.nativeEnum(l);export const DeploymentBuildMode=Object.assign(e=>{let t=o.safeParse(e);if(!t.success)throw Error(`Invalid deployment build mode: ${e}. It must be one of ${Object.values(l).join(", ")}.`);return t.data},l);let n={Queued:"queued",Preparing:"preparing",Building:"building",Deploying:"deploying",Live:"live",Failed:"failed",Cancelled:"cancelled"},s=t.nativeEnum(n);export const DeploymentBuildStatus=Object.assign(e=>{let t=s.safeParse(e);if(!t.success)throw Error(`Invalid deployment build status: ${e}. It must be one of ${Object.values(n).join(", ")}.`);return t.data},n);export const DeploymentBuild={isFinished:e=>e===DeploymentBuildStatus.Live||e===DeploymentBuildStatus.Failed||e===DeploymentBuildStatus.Cancelled};

package/dist/domain/deployments/deployment-domain.d.ts

@@ -0,0 +1,126 @@
+import { z } from 'zod';
+import { Branded, type ValueOf } from '@salsita-ai/common/utils';
+import { type ConfigurationSchemaId } from './configuration-schema-domain.js';
+import { type EnvironmentId } from './environment-domain.js';
+import { type OAuthProviderId } from './oauth-provider-domain.js';
+export declare const ApplicationType: {
+    readonly Configurator: 'configurator';
+    readonly Admin: 'admin';
+};
+export type ApplicationType = ValueOf<typeof ApplicationType>;
+export type DeploymentId = Branded<'DeploymentId', string>;
+export declare const DeploymentId: (id: string) => DeploymentId;
+export type DeploymentApplicationId = Branded<'DeploymentApplicationId', string>;
+export declare const DeploymentApplicationId: (id: string) => DeploymentApplicationId;
+export type AllowedOrigin = Branded<'AllowedOrigin', string>;
+export declare const AllowedOrigin: (origin: string) => AllowedOrigin;
+export type ResourceUrl = Branded<'DeploymentResourceUrl', string>;
+export declare const ResourceUrl: (url: string) => ResourceUrl;
+export type PrivateS3Bucket = Branded<'PrivateS3Bucket', string>;
+export declare const PrivateS3Bucket: (bucket: string) => PrivateS3Bucket;
+export type PrivateDeploymentResourcesPath = Branded<'PrivateDeploymentResourcesPath', string>;
+export declare const PrivateDeploymentResourcesPath: (path: string) => PrivateDeploymentResourcesPath;
+export type PublicS3Bucket = Branded<'PublicS3Bucket', string>;
+export declare const PublicS3Bucket: (bucket: string) => PublicS3Bucket;
+export type PublicDeploymentResourcesPath = Branded<'PublicDeploymentResourcesPath', string>;
+export declare const PublicDeploymentResourcesPath: (path: string) => PublicDeploymentResourcesPath;
+export type LambdaWebhookUrl = Branded<'LambdaWebhookUrl', string>;
+export declare const LambdaWebhookUrl: (url: string) => LambdaWebhookUrl;
+export declare const OAuthProviderRegistration: z.ZodObject<{
+    name: z.ZodString;
+    clientId: z.ZodString;
+    clientSecret: z.ZodString;
+    baseUrl: z.ZodString;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    clientId: string;
+    clientSecret: string;
+    baseUrl: string;
+    scopes?: string[] | undefined;
+}, {
+    name: string;
+    clientId: string;
+    clientSecret: string;
+    baseUrl: string;
+    scopes?: string[] | undefined;
+}>;
+export type OAuthProviderRegistration = z.infer<typeof OAuthProviderRegistration>;
+interface ChatPromptDefinition {
+    name: string;
+    model: string;
+    prompt: string;
+}
+export interface ChatAugmentation extends ChatPromptDefinition {
+    parameters?: Record<string, unknown>;
+}
+export interface ChatAgent extends ChatPromptDefinition {
+    functions?: string[] | undefined;
+    augmentations?: string[] | undefined;
+}
+export interface ChatFunction {
+    name: string;
+    description: string;
+    parameters?: Record<string, unknown>;
+}
+export interface ChatEmbedding {
+    chunk: string;
+    embedding: number[];
+}
+export interface ChatConfigurationData {
+    functions?: ChatFunction[] | undefined;
+    augmentations?: ChatAugmentation[] | undefined;
+    agents: ChatAgent[];
+}
+export type ChatConfiguration = Branded<'ChatConfiguration', ChatConfigurationData>;
+export declare const ChatConfiguration: (configuration: ChatConfigurationData) => ChatConfiguration;
+export interface DeploymentApplication {
+    readonly id: DeploymentApplicationId;
+    readonly type: ApplicationType;
+    readonly configurationSchemaId: ConfigurationSchemaId;
+    readonly collectFinalizeData: boolean;
+    readonly chatConfiguration: ChatConfiguration | null;
+}
+export interface Deployment {
+    readonly new: false;
+    readonly id: DeploymentId;
+    readonly environmentId: EnvironmentId;
+    readonly isActive: boolean;
+    readonly resourcesUrl: ResourceUrl;
+    readonly useAuthHook: boolean;
+    readonly lambdaWebhookUrl: LambdaWebhookUrl | null;
+    readonly privateS3Bucket: PrivateS3Bucket;
+    readonly privateDeploymentResourcesPath: PrivateDeploymentResourcesPath;
+    readonly publicS3Bucket: PublicS3Bucket;
+    readonly publicDeploymentResourcesPath: PublicDeploymentResourcesPath;
+    readonly applications: readonly DeploymentApplication[];
+    readonly oauthProviderId: OAuthProviderId | null;
+    readonly aclCanCreate: readonly string[] | null;
+    readonly applicationVersion: string | null;
+    readonly projectRef: string | null;
+    readonly projectSha: string | null;
+    readonly sdkVersion: string | null;
+    readonly publishedDataHash: string | null;
+}
+export interface NewDeployment {
+    readonly new: true;
+    readonly id: DeploymentId;
+    readonly environmentId: EnvironmentId;
+    readonly isActive: boolean;
+    readonly resourcesUrl: ResourceUrl;
+    readonly useAuthHook: boolean;
+    readonly lambdaWebhookUrl: LambdaWebhookUrl | null;
+    readonly privateS3Bucket: PrivateS3Bucket;
+    readonly privateDeploymentResourcesPath: PrivateDeploymentResourcesPath;
+    readonly publicS3Bucket: PublicS3Bucket;
+    readonly publicDeploymentResourcesPath: PublicDeploymentResourcesPath;
+    readonly applications: readonly DeploymentApplication[];
+    readonly oauthProviderId: OAuthProviderId | null;
+    readonly aclCanCreate: readonly string[] | null;
+    readonly applicationVersion: string | null;
+    readonly projectRef: string | null;
+    readonly projectSha: string | null;
+    readonly sdkVersion: string | null;
+    readonly publishedDataHash: string | null;
+}
+export {};

package/dist/domain/deployments/deployment-domain.js

@@ -0,0 +1 @@
+import{validate as t}from"uuid";import{isUri as r}from"valid-url";import{z as o}from"zod";import{Branded as e}from"@salsita-ai/common/utils";export const ApplicationType={Configurator:"configurator",Admin:"admin"};export const DeploymentId=r=>{if(!t(r))throw Error(`Invalid deployment id: ${r}. It must be a valid UUID.`);return e(r)};export const DeploymentApplicationId=r=>{if(!t(r))throw Error(`Invalid DeploymentApplication id: ${r}. It must be a valid UUID.`);return e(r)};export const AllowedOrigin=t=>{if(!r(t))throw Error(`Invalid allowed origin: ${t}. It must be a valid URI.`);return e(t)};export const ResourceUrl=t=>{if(!r(t))throw Error(`Invalid resource url: ${t}. It must be a valid URI.`);return e(t)};export const PrivateS3Bucket=t=>e(t);export const PrivateDeploymentResourcesPath=t=>e(t);export const PublicS3Bucket=t=>e(t);export const PublicDeploymentResourcesPath=t=>e(t);export const LambdaWebhookUrl=t=>e(t);export const OAuthProviderRegistration=o.object({name:o.string(),clientId:o.string(),clientSecret:o.string(),baseUrl:o.string().url(),scopes:o.array(o.string()).optional()});export const ChatConfiguration=t=>{let r=t.functions??[],o=t.augmentations??[];if(!t.agents.every(t=>(t.functions??[]).every(t=>r.some(r=>r.name===t))&&(t.augmentations??[]).every(t=>o.some(r=>r.name===t))))throw Error("Invalid chat configuration.");return e(t)};

package/dist/domain/deployments/embedding-domain.d.ts

@@ -0,0 +1,9 @@
+import { type DeploymentApplicationId } from './deployment-domain.js';
+export interface ChatEmbedding {
+    chunk: string;
+    embedding: number[];
+}
+export interface Embeddings {
+    deployedApplicationId: DeploymentApplicationId;
+    embeddings: ChatEmbedding[] | null;
+}

package/dist/domain/deployments/embedding-domain.js

@@ -0,0 +1 @@
+export{};

package/dist/domain/deployments/environment-domain.d.ts

@@ -0,0 +1,107 @@
+import { Branded, type ValueOf } from '@salsita-ai/common/utils';
+import { type CustomerClerkSettings } from './customer-domain.js';
+import type { AllowedOrigin, DeploymentId, PrivateS3Bucket, PublicS3Bucket } from './deployment-domain.js';
+import type { ImageRenderLimit } from './image-render-domain.js';
+import type { ParamStorePath, ProjectCustomDomain, ProjectId, ProjectSlug } from './project-domain.js';
+export type SessionLimit = Branded<'SessionLimit', number>;
+export declare const SessionLimit: (limit: number) => SessionLimit;
+export type EnvironmentId = Branded<'EnvironmentId', string>;
+export declare const EnvironmentId: (id: string) => EnvironmentId;
+export type EnvironmentName = Branded<'EnvironmentName', string>;
+export declare const EnvironmentName: (name: string) => EnvironmentName;
+export type EnvironmentSlug = Branded<'EnvironmentSlug', string>;
+export declare const EnvironmentSlug: (slug: string) => EnvironmentSlug;
+export type FrontendUrl = Branded<'FrontendUrl', string>;
+export declare const FrontendUrl: (url: string) => FrontendUrl;
+export type ServerKey = Branded<'ServerKey', string>;
+export declare const ServerKey: (key: string) => ServerKey;
+export type BaseDomain = Branded<'BaseDomain', string>;
+export declare const BaseDomain: (domain: string) => BaseDomain;
+export type ServiceName = Branded<'ServiceName', string>;
+export declare const ServiceName: (name: string) => ServiceName;
+export type FrontendBucketName = Branded<'FrontendBucketName', string>;
+export declare const FrontendBucketName: (name: string) => FrontendBucketName;
+export declare const DEFAULT_SESSION_LIMIT: SessionLimit;
+export declare const PRODUCTION_ENVIRONMENT_SLUG: EnvironmentSlug;
+declare const environmentTypes: {
+    readonly Normal: 'normal';
+    readonly Transient: 'transient';
+    readonly Development: 'development';
+};
+/**
+ * Explicit kind of an environment. Normal environments are provisioned deployment targets, transient
+ * environments are short-lived CI targets that the cleanup endpoint may delete, and development environments
+ * are never provisioned: they run locally against a localhost frontend with a stored bucket pair.
+ */
+export type EnvironmentType = ValueOf<typeof environmentTypes>;
+export declare const EnvironmentType: ((value: string) => EnvironmentType) & {
+    readonly Normal: 'normal';
+    readonly Transient: 'transient';
+    readonly Development: 'development';
+};
+/**
+ * Plaintext secret that authenticates one development environment on the server. It is returned exactly
+ * once when the environment is created or the key is regenerated, only its hash is persisted, and every
+ * request carrying it also names the project and environment slugs so the key can be verified against the
+ * stored hash of that one environment.
+ */
+export type DevelopmentKey = Branded<'DevelopmentKey', string>;
+export declare const DevelopmentKey: (key: string) => DevelopmentKey;
+export interface Environment {
+    readonly id: EnvironmentId;
+    readonly name: EnvironmentName;
+    readonly slug: EnvironmentSlug;
+    readonly projectId: ProjectId;
+    readonly projectSlug: ProjectSlug;
+    readonly paramStorePath: ParamStorePath;
+    readonly projectCustomDomain: ProjectCustomDomain | null;
+    readonly customerClerkSettings: CustomerClerkSettings | null;
+    readonly activeDeployment: {
+        readonly id: DeploymentId;
+    } | null;
+    readonly type: EnvironmentType;
+    readonly transient: boolean;
+    readonly frontendUrl: FrontendUrl | null;
+    readonly allowedOrigins: readonly AllowedOrigin[];
+    readonly sessionLimit: SessionLimit;
+    readonly imageRenderLimit: ImageRenderLimit;
+    readonly publicS3Bucket: PublicS3Bucket;
+    readonly privateS3Bucket: PrivateS3Bucket;
+    readonly serviceName: ServiceName;
+    readonly frontendBucketName: FrontendBucketName;
+    readonly lambdaFunctionName: LambdaFunctionName;
+    readonly tfStateKeyPrefix: TfStateKeyPrefix;
+    readonly ddServiceName: DdServiceName;
+    readonly editorEnabled: boolean;
+    readonly overrideSchema: boolean;
+}
+export interface NewEnvironment {
+    readonly id: EnvironmentId;
+    readonly name: EnvironmentName;
+    readonly slug: EnvironmentSlug;
+    readonly projectId: ProjectId;
+    readonly activeDeployment: null;
+    readonly new: true;
+    readonly type: EnvironmentType;
+    readonly transient: boolean;
+    readonly frontendUrl: FrontendUrl | null;
+    readonly allowedOrigins: readonly AllowedOrigin[];
+    readonly sessionLimit: SessionLimit;
+    readonly imageRenderLimit: ImageRenderLimit;
+    readonly publicS3Bucket: PublicS3Bucket;
+    readonly privateS3Bucket: PrivateS3Bucket;
+    readonly serviceName: ServiceName;
+    readonly frontendBucketName: FrontendBucketName;
+    readonly lambdaFunctionName: LambdaFunctionName;
+    readonly tfStateKeyPrefix: TfStateKeyPrefix;
+    readonly ddServiceName: DdServiceName;
+    readonly editorEnabled: boolean;
+    readonly overrideSchema: boolean;
+}
+export type LambdaFunctionName = Branded<'LambdaFunctionName', string>;
+export declare const LambdaFunctionName: (name: string) => LambdaFunctionName;
+export type TfStateKeyPrefix = Branded<'TfStateKeyPrefix', string>;
+export declare const TfStateKeyPrefix: (prefix: string) => TfStateKeyPrefix;
+export type DdServiceName = Branded<'DdServiceName', string>;
+export declare const DdServiceName: (name: string) => DdServiceName;
+export {};

package/dist/domain/deployments/environment-domain.js

@@ -0,0 +1 @@
+import{validate as e}from"uuid";import{isUri as t}from"valid-url";import{z as r}from"zod";import{Branded as n}from"@salsita-ai/common/utils";export const SessionLimit=e=>{if(e<0)throw Error("Session limit cannot be negative");return n(e)};export const EnvironmentId=t=>{if(!e(t))throw Error(`Invalid environment id: ${t}. It must be a valid UUID.`);return n(t)};export const EnvironmentName=e=>n(e);export const EnvironmentSlug=e=>{let t=e.trim();if(0===t.length)throw Error("Environment slug cannot be empty, environment slug is required for repository and domain creation, please provide a valid slug.");if(t.length<3)throw Error("Environment slug is too short, environment slug must be at least 3 characters long, please provide a longer slug.");if(!/^[a-z0-9-]+$/.test(t))throw Error("Environment slug format is invalid, environment slug must contain only lowercase letters, numbers, and hyphens, please provide a valid slug.");return n(t)};export const FrontendUrl=e=>{if(!t(e))throw Error(`Invalid frontend url: ${e}. It must be a valid URI.`);return n(e)};export const ServerKey=e=>n(e);export const BaseDomain=e=>n(e);export const ServiceName=e=>n(e);export const FrontendBucketName=e=>n(e);export const DEFAULT_SESSION_LIMIT=SessionLimit(3e3);export const PRODUCTION_ENVIRONMENT_SLUG=EnvironmentSlug("production");let o={Normal:"normal",Transient:"transient",Development:"development"},i=r.nativeEnum(o);export const EnvironmentType=Object.assign(e=>{let t=i.safeParse(e);if(!t.success)throw Error(`Invalid environment type: ${e}. It must be one of ${Object.values(o).join(", ")}.`);return t.data},o);let s=/^dev_[a-z0-9-]+_[a-z0-9-]+_[A-Za-z0-9_-]+$/;export const DevelopmentKey=e=>{if(!s.test(e))throw Error("Development key format is invalid, a development key must look like dev_<project-slug>_<environment-slug>_<random>, use the key the server issued when the development environment was created or regenerated.");return n(e)};export const LambdaFunctionName=e=>n(e);export const TfStateKeyPrefix=e=>n(e);export const DdServiceName=e=>n(e);

package/dist/domain/deployments/image-render-domain.d.ts

@@ -0,0 +1,22 @@
+import { Branded } from '@salsita-ai/common/utils';
+import { type DeploymentId } from './deployment-domain.js';
+import { type EnvironmentId } from './environment-domain.js';
+import type { BucketTimestamp } from './session-domain.js';
+export type ImageRenderCount = Branded<'ImageRenderCount', number>;
+export declare const ImageRenderCount: (count: number) => ImageRenderCount;
+export type ImageRenderLimit = Branded<'ImageRenderLimit', number>;
+export declare const ImageRenderLimit: (limit: number) => ImageRenderLimit;
+export declare const DEFAULT_IMAGE_RENDER_LIMIT: ImageRenderLimit;
+export interface ImageRenderBucket {
+    readonly environmentId: EnvironmentId;
+    readonly deploymentId: DeploymentId;
+    readonly bucketTimestamp: BucketTimestamp;
+    readonly imageCount: ImageRenderCount;
+}
+export interface NewImageRenderBucket {
+    readonly environmentId: EnvironmentId;
+    readonly deploymentId: DeploymentId;
+    readonly bucketTimestamp: BucketTimestamp;
+    readonly imageCount: ImageRenderCount;
+    readonly new: true;
+}

package/dist/domain/deployments/image-render-domain.js

@@ -0,0 +1 @@
+import{Branded as e}from"@salsita-ai/common/utils";export const ImageRenderCount=r=>{if(r<0)throw Error("Image render count cannot be negative");return e(r)};export const ImageRenderLimit=r=>{if(r<0)throw Error("Image render limit cannot be negative");return e(r)};export const DEFAULT_IMAGE_RENDER_LIMIT=ImageRenderLimit(1e3);

package/dist/domain/deployments/index.d.ts

@@ -0,0 +1,14 @@
+export { type Environment, type NewEnvironment, EnvironmentId, EnvironmentName, EnvironmentSlug, EnvironmentType, FrontendUrl, DevelopmentKey, DEFAULT_SESSION_LIMIT, PRODUCTION_ENVIRONMENT_SLUG, SessionLimit, ServerKey, BaseDomain, ServiceName, FrontendBucketName, LambdaFunctionName, TfStateKeyPrefix, DdServiceName, } from './environment-domain.js';
+export { type ConfigurationSchema, type NewConfigurationSchema, ConfigurationSchemaId, ConfigurationSchemaJsonSchema, ConfigurationSchemaVersion, } from './configuration-schema-domain.js';
+export { ApplicationType, AllowedOrigin, ChatConfiguration, type Deployment, type NewDeployment, DeploymentId, ResourceUrl, LambdaWebhookUrl, PrivateS3Bucket, PrivateDeploymentResourcesPath, PublicS3Bucket, PublicDeploymentResourcesPath, DeploymentApplicationId, type DeploymentApplication, OAuthProviderRegistration, type ChatAgent, type ChatAugmentation, type ChatFunction, type ChatEmbedding, } from './deployment-domain.js';
+export { DEFAULT_PROJECT_ALIAS, ProjectId, ProjectName, ProjectSlug, ProjectCustomDomain, ParamStorePath, type Project, } from './project-domain.js';
+export { OAuthProviderId, OAuthClientId, OAuthClientSecret, OAuthBaseUrl, type OAuthProvider, OAuthProviderName, OAuthScopes, } from './oauth-provider-domain.js';
+export { DeploymentBuild, DeploymentBuildId, DeploymentBuildMode, DeploymentBuildSourceKey, DeploymentBuildStatus, } from './deployment-build-domain.js';
+export { SdkBuilderSetupState } from './sdk-builder-setup-domain.js';
+export { ApiTokenId } from './api-token-domain.js';
+export { CustomerId, CustomerName, type Customer, CustomerClerkPublishableKey, CustomerClerkSecretKey, CustomerClerkJwtSecret, CustomerClerkOAuthBaseUrl, CustomerClerkOAuthClientId, CustomerClerkOAuthClientSecret, type CustomerClerkSettings, CustomerSlug, CustomerType, CustomerTypeSchema, } from './customer-domain.js';
+export { OAuthConnectionId, type OAuthConnectionProvider, OAuthRefreshToken, OAuthGrantedScopes, SHAREPOINT_MISSING_TENANT_DOMAIN, SharePointTenantDomainInvalidError, SharePointTenantDomainSchema, type NewOAuthConnection, type OAuthConnection, type SharePointProjectSite, OAUTH_STALE_CONNECTION_CODE, parseRequiredSharePointTenantDomain, parseSharePointTenantDomain, } from './oauth-connection-domain.js';
+export { type Embeddings } from './embedding-domain.js';
+export { BucketTimestamp, SessionCount, type SessionBucket, type NewSessionBucket } from './session-domain.js';
+export { AiImageCount, type NewAiImageBucket } from './ai-image-domain.js';
+export { ImageRenderCount, ImageRenderLimit, DEFAULT_IMAGE_RENDER_LIMIT, type ImageRenderBucket, type NewImageRenderBucket, } from './image-render-domain.js';

package/dist/domain/deployments/index.js

@@ -0,0 +1 @@
+export{EnvironmentId,EnvironmentName,EnvironmentSlug,EnvironmentType,FrontendUrl,DevelopmentKey,DEFAULT_SESSION_LIMIT,PRODUCTION_ENVIRONMENT_SLUG,SessionLimit,ServerKey,BaseDomain,ServiceName,FrontendBucketName,LambdaFunctionName,TfStateKeyPrefix,DdServiceName}from"./environment-domain.js";export{ConfigurationSchemaId,ConfigurationSchemaJsonSchema,ConfigurationSchemaVersion}from"./configuration-schema-domain.js";export{ApplicationType,AllowedOrigin,ChatConfiguration,DeploymentId,ResourceUrl,LambdaWebhookUrl,PrivateS3Bucket,PrivateDeploymentResourcesPath,PublicS3Bucket,PublicDeploymentResourcesPath,DeploymentApplicationId,OAuthProviderRegistration}from"./deployment-domain.js";export{DEFAULT_PROJECT_ALIAS,ProjectId,ProjectName,ProjectSlug,ProjectCustomDomain,ParamStorePath}from"./project-domain.js";export{OAuthProviderId,OAuthClientId,OAuthClientSecret,OAuthBaseUrl,OAuthProviderName,OAuthScopes}from"./oauth-provider-domain.js";export{DeploymentBuild,DeploymentBuildId,DeploymentBuildMode,DeploymentBuildSourceKey,DeploymentBuildStatus}from"./deployment-build-domain.js";export{SdkBuilderSetupState}from"./sdk-builder-setup-domain.js";export{ApiTokenId}from"./api-token-domain.js";export{CustomerId,CustomerName,CustomerClerkPublishableKey,CustomerClerkSecretKey,CustomerClerkJwtSecret,CustomerClerkOAuthBaseUrl,CustomerClerkOAuthClientId,CustomerClerkOAuthClientSecret,CustomerSlug,CustomerType,CustomerTypeSchema}from"./customer-domain.js";export{OAuthConnectionId,OAuthRefreshToken,OAuthGrantedScopes,SHAREPOINT_MISSING_TENANT_DOMAIN,SharePointTenantDomainInvalidError,SharePointTenantDomainSchema,OAUTH_STALE_CONNECTION_CODE,parseRequiredSharePointTenantDomain,parseSharePointTenantDomain}from"./oauth-connection-domain.js";export{BucketTimestamp,SessionCount}from"./session-domain.js";export{AiImageCount}from"./ai-image-domain.js";export{ImageRenderCount,ImageRenderLimit,DEFAULT_IMAGE_RENDER_LIMIT}from"./image-render-domain.js";