@semilayer/core 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,1032 @@
+declare const FACET_NAMES: readonly ["search", "similar"];
+type FacetName = (typeof FACET_NAMES)[number];
+/** Facets planned for future releases. Config types exist but no runtime support yet. */
+declare const FUTURE_FACETS: readonly ["dedup", "classify"];
+declare const FIELD_TYPES: readonly ["text", "number", "boolean", "date", "json", "enum", "relation"];
+type FieldType = (typeof FIELD_TYPES)[number];
+declare const INGEST_JOB_TYPES: readonly ["full", "incremental", "delete", "records"];
+type IngestJobType = (typeof INGEST_JOB_TYPES)[number];
+declare const LENS_STATUSES: readonly ["paused", "indexing", "ready", "error"];
+type LensStatus = (typeof LENS_STATUSES)[number];
+declare const INGEST_STATUSES: readonly ["queued", "running", "completed", "failed"];
+type IngestStatus = (typeof INGEST_STATUSES)[number];
+declare const KEY_PREFIXES: {
+    readonly serviceKey: "sk_";
+    readonly publishableKey: "pk_";
+    readonly ingestKey: "ik_";
+};
+declare const DEPLOYMENT_MODES: readonly ["saas", "enterprise"];
+type DeploymentMode = (typeof DEPLOYMENT_MODES)[number];
+declare const SOURCE_FEATURES: readonly ["incremental", "change-tracking", "streaming"];
+type SourceFeature = (typeof SOURCE_FEATURES)[number];
+declare const TRANSFORM_TYPES: readonly ["toString", "toNumber", "toBoolean", "toDate", "round", "trim", "lowercase", "uppercase", "default", "split", "join", "truncate", "replace", "custom"];
+type TransformType = (typeof TRANSFORM_TYPES)[number];
+declare const MERGE_STRATEGIES: readonly ["concat", "coalesce"];
+type MergeStrategy = (typeof MERGE_STRATEGIES)[number];
+
+interface FieldConfig {
+    type: FieldType;
+    primaryKey?: boolean;
+    /**
+     * Opt-in for embedding. Only fields with searchable are included in the embedding text.
+     * - `true` — include once (weight 1)
+     * - `{ weight: N }` — repeat N times in embedding text for stronger relevance
+     * - `false` / omitted — not embedded
+     */
+    searchable?: boolean | {
+        weight?: number;
+    };
+    /** Source column name(s). Omit for identity (source col = output field name). */
+    from?: string | string[];
+    /** Merge strategy when from is string[]. Required for multi-source. */
+    merge?: MergeStrategy;
+    /** Separator for merge: 'concat'. Required when merge is 'concat'. */
+    separator?: string;
+    /** Transform chain applied to the resolved value. */
+    transform?: TransformSpec;
+    /** Replace null values with this. 'omit' removes the key, 'undefined' sets undefined. */
+    nullAs?: unknown;
+    /** Replace undefined/missing values with this. */
+    undefinedAs?: unknown;
+    values?: string[];
+    to?: string;
+}
+interface SearchFacetConfig {
+    fields: string[];
+    mode?: 'semantic' | 'keyword' | 'hybrid';
+    weights?: Record<string, number>;
+}
+interface SimilarFacetConfig {
+    fields: string[];
+    limit?: number;
+}
+/** Future: duplicate detection based on embedding similarity threshold */
+interface DedupFacetConfig {
+    fields: string[];
+    threshold?: number;
+}
+/** Future: zero-shot classification by embedding similarity to labels */
+interface ClassifyFacetConfig {
+    labels: string[];
+    field?: string;
+}
+type FacetConfig = SearchFacetConfig | SimilarFacetConfig | DedupFacetConfig | ClassifyFacetConfig;
+interface JwtClaims {
+    sub: string;
+    [key: string]: unknown;
+}
+interface AccessRuleResult {
+    filter?: Record<string, unknown>;
+}
+/** Serializable claim-based access rule (stored in DB jsonb) */
+interface ClaimCheck {
+    authenticated: true;
+    claims: Record<string, string | string[]>;
+}
+type AccessRule = 'public' | 'authenticated' | ClaimCheck | ((claims: JwtClaims) => AccessRuleResult | boolean);
+/** Per-environment auth provider config (JWKS) */
+interface EnvironmentAuthConfig {
+    jwksUrl: string;
+    issuer: string;
+    audience?: string;
+}
+interface JwtConfig {
+    jwksUrl?: string;
+    issuer?: string;
+    audience?: string;
+    claims?: Record<string, string>;
+}
+interface AuthConfig {
+    server?: {
+        key?: string;
+    };
+    client?: {
+        jwt?: JwtConfig;
+        publishableKey?: string;
+        rules?: LensRules;
+    };
+}
+type LensRuleKey = FacetName | 'query';
+type LensRules = Partial<Record<LensRuleKey, AccessRule>>;
+interface EmbeddingConfig {
+    provider: string;
+    model: string;
+    apiKey?: string;
+    baseUrl?: string;
+}
+interface SourceConfig {
+    bridge: string;
+    features?: SourceFeature[];
+    /** Max query timeout in ms. Default: 30000. On timeout: returns error (504). */
+    timeout?: number;
+    [key: string]: unknown;
+}
+interface ToStringTransform {
+    type: 'toString';
+}
+interface ToNumberTransform {
+    type: 'toNumber';
+}
+interface ToBooleanTransform {
+    type: 'toBoolean';
+}
+interface ToDateTransform {
+    type: 'toDate';
+    format?: string;
+}
+interface RoundTransform {
+    type: 'round';
+    decimals?: number;
+    mode?: 'round' | 'ceil' | 'floor';
+}
+interface TrimTransform {
+    type: 'trim';
+}
+interface LowercaseTransform {
+    type: 'lowercase';
+}
+interface UppercaseTransform {
+    type: 'uppercase';
+}
+interface DefaultTransform {
+    type: 'default';
+    value: unknown;
+}
+interface SplitTransform {
+    type: 'split';
+    separator: string;
+}
+interface JoinTransform {
+    type: 'join';
+    separator: string;
+}
+interface TruncateTransform {
+    type: 'truncate';
+    length: number;
+}
+interface ReplaceTransform {
+    type: 'replace';
+    pattern: string;
+    replacement: string;
+}
+interface CustomTransform {
+    type: 'custom';
+    body: string;
+}
+type BuiltinTransform = ToStringTransform | ToNumberTransform | ToBooleanTransform | ToDateTransform | RoundTransform | TrimTransform | LowercaseTransform | UppercaseTransform | DefaultTransform | SplitTransform | JoinTransform | TruncateTransform | ReplaceTransform | CustomTransform;
+type TransformSpec = BuiltinTransform | BuiltinTransform[];
+type SyncInterval = '1m' | '5m' | '15m' | '30m' | '1h' | '6h' | '24h';
+interface LensConfig {
+    source: string;
+    table: string;
+    primaryKey?: string;
+    fields: Record<string, FieldConfig>;
+    nullValues?: unknown[];
+    syncInterval?: SyncInterval;
+    changeTrackingColumn?: string;
+    facets: Record<string, FacetConfig>;
+    rules?: LensRules;
+}
+interface SemiLayerConfig {
+    stack: string;
+    sources: Record<string, SourceConfig>;
+    lenses: Record<string, LensConfig>;
+    auth?: AuthConfig;
+    embeddings?: EmbeddingConfig;
+}
+
+declare function validateConfig(config: SemiLayerConfig): void;
+
+/**
+ * Returns the list of source column names that the bridge needs to read.
+ * Derives from `from` properties on fields, falling back to the output field name.
+ */
+declare function resolveSourceColumns(fields: Record<string, FieldConfig>): string[];
+interface EmbeddingField {
+    field: string;
+    weight: number;
+}
+/**
+ * Returns the output field names that are marked for embedding,
+ * with their weights. Weight controls how many times a field's text
+ * is repeated in the embedding input (higher = more relevance).
+ */
+declare function resolveEmbeddingFields(fields: Record<string, FieldConfig>): EmbeddingField[];
+/**
+ * Convenience: returns just the field names (for APIs that only need names).
+ */
+declare function resolveEmbeddingFieldNames(fields: Record<string, FieldConfig>): string[];
+
+/**
+ * Creates a deterministic SHA-256 hash of any JSON-serializable value.
+ * Object keys are sorted recursively to ensure determinism regardless of insertion order.
+ */
+declare function canonicalHash(obj: unknown): string;
+
+/**
+ * Maps a raw database column type to a SemiLayer FieldType.
+ * Falls back to 'text' for unknown types.
+ */
+declare function mapDbTypeToFieldType(dbType: string): FieldType;
+
+type TransportMode = 'http' | 'ws' | 'stream';
+interface TransportOptions {
+    mode?: TransportMode;
+    timeout?: number;
+}
+
+type WhereClause = Record<string, unknown>;
+interface OrderByClause {
+    field: string;
+    dir?: 'asc' | 'desc';
+}
+interface QueryOptions {
+    where?: WhereClause;
+    orderBy?: OrderByClause | OrderByClause[];
+    limit?: number;
+    offset?: number;
+    cursor?: string;
+    select?: string[];
+    transport?: TransportMode;
+}
+interface QueryResult<T> {
+    rows: T[];
+    total?: number;
+    nextCursor?: string;
+}
+
+type BridgeRow = Record<string, unknown>;
+interface ReadOptions {
+    fields?: string[];
+    cursor?: string;
+    limit?: number;
+    changedSince?: Date;
+    changeTrackingColumn?: string;
+}
+interface ReadResult {
+    rows: BridgeRow[];
+    nextCursor?: string;
+    total?: number;
+}
+interface TargetColumnInfo {
+    name: string;
+    /** Raw database type (e.g., 'varchar', 'integer', 'jsonb') */
+    type: string;
+    nullable: boolean;
+    primaryKey: boolean;
+}
+interface TargetSchema {
+    name: string;
+    columns: TargetColumnInfo[];
+    rowCount?: number;
+}
+interface Bridge {
+    connect(): Promise<void>;
+    read(target: string, options?: ReadOptions): Promise<ReadResult>;
+    count(target: string): Promise<number>;
+    disconnect(): Promise<void>;
+    query?(target: string, options: QueryOptions): Promise<QueryResult<BridgeRow>>;
+    /** List available targets (tables, collections, etc.). Not all bridges support this. */
+    listTargets?(): Promise<string[]>;
+    /** Introspect a target's schema (columns, types, PKs). Not all bridges support this. */
+    introspectTarget?(target: string): Promise<TargetSchema>;
+}
+type BridgeConstructor = new (config: Record<string, unknown>) => Bridge;
+
+/** Thin envelope — what the service enqueues */
+interface IngestJobPayload {
+    environmentId: string;
+    lensName: string;
+    sourceName: string;
+    type: 'full' | 'incremental' | 'delete';
+    cursor?: string;
+    /** True when triggered by a platform admin (bypasses quotas) */
+    adminInvoked?: boolean;
+    /** OIDC sub of the user who triggered this job */
+    invokedBy?: string;
+}
+/**
+ * Full job data for v0.1 standalone/test mode.
+ * In production, the worker resolves configs from the platform DB
+ * using only the fields from IngestJobPayload.
+ */
+interface IngestJobData extends IngestJobPayload {
+    bridgeName: string;
+    sourceConfig: Record<string, unknown>;
+    lensConfig: {
+        table: string;
+        primaryKey: string;
+        fields: string[];
+        embeddingFields: string[];
+    };
+    embeddingConfig: {
+        provider: string;
+        model: string;
+        dimensions: number;
+        apiKey?: string;
+        baseUrl?: string;
+    };
+}
+/** State-based ingest control (stored in status table / platform DB) */
+interface IngestControl {
+    status: IngestStatus;
+    pausedAt?: Date;
+    lastFullIngestAt?: Date;
+    lastIncrementalAt?: Date;
+}
+/** Rate limit state — visible in status introspection */
+interface RateLimitState {
+    limited: boolean;
+    retryAfter?: Date;
+    provider: string;
+    reason?: string;
+    lastError?: string;
+}
+/** Individual error entry in the ring buffer */
+interface IngestErrorEntry {
+    timestamp: Date;
+    message: string;
+    type?: string;
+}
+/** Per-lens status — what `semilayer status` shows */
+interface LensStatusInfo {
+    name: string;
+    status: LensStatus;
+    paused: boolean;
+    vectorCount: number;
+    totalRows?: number;
+    lastIngestAt?: Date;
+    lastIngestType?: 'full' | 'incremental';
+    cursor?: string;
+    error?: string;
+    rateLimit?: RateLimitState;
+    errorCount: number;
+    lastErrors: IngestErrorEntry[];
+    circuitBreakerUntil?: Date;
+}
+/** Queue health — what `semilayer status` shows */
+interface QueueCounts {
+    active: number;
+    pending: number;
+    deferred: number;
+    failed: number;
+    completed24h: number;
+}
+/** Failed job info from dead letter queue */
+interface FailedJobInfo {
+    id: string;
+    queue: string;
+    data: Record<string, unknown>;
+    error: string;
+    failedAt: Date;
+    retryCount: number;
+}
+
+/** ISO 8601 date string (e.g. "2026-04-06T12:00:00.000Z"). Dates serialize to strings over the wire. */
+type ISODateString = string;
+interface Org {
+    id: string;
+    name: string;
+    slug: string;
+    tierId: string | null;
+    createdAt: ISODateString;
+}
+interface Project {
+    id: string;
+    name: string;
+    slug: string;
+    createdAt: ISODateString;
+}
+interface Environment {
+    id: string;
+    name: string;
+    slug: string;
+    authConfig?: EnvironmentAuthConfig | null;
+    createdAt: ISODateString;
+}
+interface Source {
+    id: string;
+    name: string;
+    bridge: string;
+    createdAt: ISODateString;
+}
+interface Lens {
+    id: string;
+    name: string;
+    status: LensStatus;
+    createdAt: ISODateString;
+    updatedAt: ISODateString;
+}
+interface ApiKeyInfo {
+    id: string;
+    type: string;
+    key: string;
+    label: string | null;
+    createdAt: ISODateString;
+}
+interface Member {
+    id: string;
+    userId: string;
+    email: string;
+    role: string;
+    invitedBy: string | null;
+    createdAt: ISODateString;
+}
+interface IngestRun {
+    id: string;
+    status: IngestStatus;
+    recordsProcessed: number;
+    recordsFailed: number;
+    startedAt: ISODateString | null;
+    completedAt: ISODateString | null;
+    error: string | null;
+    adminInvoked: boolean;
+    invokedBy: string | null;
+    createdAt: ISODateString;
+}
+interface Tier {
+    id: string;
+    name: string;
+    slug: string;
+    stripePriceMonthly: string | null;
+    stripePriceYearly: string | null;
+    priceCentsMonthly: number | null;
+    priceCentsYearly: number | null;
+    embeddingTokensPerMonth: number | null;
+    vectorsStored: number | null;
+    ingestJobsPerDay: number | null;
+    apiRequestsPerMonth: number | null;
+    /** Step 12 — per-minute burst protection. */
+    apiRequestsPerMinute: number | null;
+    environmentsPerProject: number | null;
+    projectsPerOrg: number | null;
+    membersPerOrg: number | null;
+    /** Step 12 — per-user org creation cap. */
+    orgsPerUser: number | null;
+    /** Step 12 — per-minute ingest webhook rate limit. */
+    ingestWebhooksPerMinute: number | null;
+    features: Record<string, unknown>;
+    displayOrder: number;
+    isDefault: boolean;
+    visible: boolean;
+    createdAt: ISODateString;
+    updatedAt: ISODateString;
+}
+interface TierOverride {
+    id: string;
+    orgId: string;
+    embeddingTokensPerMonth: number | null;
+    vectorsStored: number | null;
+    ingestJobsPerDay: number | null;
+    apiRequestsPerMonth: number | null;
+    apiRequestsPerMinute: number | null;
+    environmentsPerProject: number | null;
+    projectsPerOrg: number | null;
+    membersPerOrg: number | null;
+    orgsPerUser: number | null;
+    ingestWebhooksPerMinute: number | null;
+    features: Record<string, unknown> | null;
+    note: string | null;
+    createdAt: ISODateString;
+    updatedAt: ISODateString;
+}
+interface AuthUser {
+    sub: string;
+    email: string;
+    name?: string;
+}
+interface AuthOrg {
+    id: string;
+    slug: string;
+    role: string;
+}
+interface MeResponse {
+    user: AuthUser;
+    orgs: AuthOrg[];
+    platformAdmin?: boolean;
+    /** Step 12 — exposes deployment mode so the Console can hide billing UI in enterprise mode without flashing it on mount. */
+    deploymentMode?: 'saas' | 'enterprise';
+}
+interface PlatformAdmin {
+    id: string;
+    userId: string | null;
+    email: string;
+    grantedBy: string | null;
+    createdAt: ISODateString;
+}
+interface AuditLogEntry {
+    id: string;
+    adminUserId: string;
+    adminEmail: string;
+    action: string;
+    resourceType: string | null;
+    resourceId: string | null;
+    orgSlug: string | null;
+    details: Record<string, unknown> | null;
+    ipAddress: string;
+    createdAt: ISODateString;
+}
+interface PlatformStats {
+    orgCount: number;
+    userCount: number;
+    projectCount: number;
+    environmentCount: number;
+    lensCount: number;
+    vectorCount: number;
+    activeIngestJobs: number;
+}
+interface SystemHealth {
+    database: {
+        connected: boolean;
+        poolSize: number;
+        idleCount: number;
+        waitingCount: number;
+    };
+    queue: {
+        activeJobs: number;
+        pendingJobs: number;
+        failedJobs24h: number;
+    };
+    vectorStore: {
+        totalVectors: number;
+        partitionCount: number;
+    };
+}
+interface InAppNotification {
+    id: string;
+    orgId: string;
+    userId: string;
+    type: string;
+    title: string;
+    body: string;
+    data: Record<string, unknown>;
+    actionUrl: string | null;
+    readAt: ISODateString | null;
+    createdAt: ISODateString;
+}
+interface NotificationPreferenceSummary {
+    type: string;
+    email: boolean;
+    inApp: boolean;
+    mandatory: boolean;
+}
+interface NewKeyPair {
+    key: string;
+    type: string;
+}
+interface CreateProjectResponse {
+    project: Project;
+    environment: Environment;
+    keys: NewKeyPair[];
+}
+interface CreateEnvResponse {
+    environment: Environment;
+    keys: NewKeyPair[];
+}
+interface PushLensSummary {
+    created: string[];
+    updated: string[];
+    unchanged: string[];
+    deleted: string[];
+}
+interface PushIngestJob {
+    lensName: string;
+    type: string;
+    jobId: string | null;
+}
+interface PushResponse {
+    lenses: PushLensSummary;
+    ingestJobs: PushIngestJob[];
+}
+interface StatusEnvironment {
+    id: string;
+    slug: string;
+    project: string;
+    org: string;
+}
+interface StatusResponse {
+    environment: StatusEnvironment;
+    lenses: LensStatusInfo[];
+    queue: QueueCounts;
+}
+/** Slim tier shape used inside `OrgDetailResponse` and similar nested contexts. */
+interface TierSummary {
+    id: string;
+    name: string;
+    slug: string;
+}
+/** Row shape returned by `GET /admin/orgs` — enriched with tier name and counts. */
+interface OrgListItem {
+    id: string;
+    name: string;
+    slug: string;
+    tierId: string | null;
+    tierName: string | null;
+    memberCount: number;
+    projectCount: number;
+    createdAt: ISODateString;
+}
+/** Composite returned by `GET /admin/orgs/:orgSlug` */
+interface OrgDetailResponse {
+    org: Org;
+    tier: TierSummary | null;
+    override: TierOverride | null;
+    members: Member[];
+    projects: Project[];
+}
+/** Project enriched with its environments — used in admin project browser and similar UIs. */
+interface ProjectWithEnvs extends Project {
+    environments: Environment[];
+}
+/** Returned by `GET /v1/invites/:token` — used by the invite acceptance page. */
+interface InviteInfo {
+    orgName: string;
+    orgSlug: string;
+    role: string;
+    inviterEmail: string | null;
+    expired: boolean;
+}
+/** Per-lens drift summary — returned by `GET .../envs/:envSlug/drift`. */
+interface DriftLensInfo {
+    name: string;
+    configHash: string | null;
+    lastModifiedBy: string | null;
+    updatedAt: ISODateString;
+}
+/** Wraps the drift list returned by `GET .../envs/:envSlug/drift`. */
+interface DriftResponse {
+    lenses: DriftLensInfo[];
+}
+/** Wraps the env list returned by `GET /v1/orgs/:org/projects/:project/envs`. */
+interface EnvsResponse {
+    environments: Environment[];
+}
+/** Wraps the config payload returned by `GET .../envs/:envSlug/config/export`. */
+interface ConfigExportResponse {
+    config: SemiLayerConfig;
+}
+/** Per-lens diff entry built client-side from two env exports + drift summaries. */
+interface LensComparison {
+    name: string;
+    leftConfig: LensConfig | null;
+    rightConfig: LensConfig | null;
+    leftDrift: DriftLensInfo | null;
+    rightDrift: DriftLensInfo | null;
+    status: 'identical' | 'modified' | 'only-left' | 'only-right';
+}
+/** Returned by `POST .../envs/:envSlug/lenses` — slim summary of the created/updated lens. */
+interface LensCreateResponse {
+    id: string;
+    name: string;
+    status: string;
+    updated: boolean;
+}
+/** Today's live activity snapshot — `GET /admin/metrics/daily`. */
+interface DailyMetrics {
+    date: string;
+    logins: number;
+    keyCreations: number;
+    apiRequests: number;
+    ingestJobs: number;
+    feedbackCount: number;
+    vectorsTotal: number;
+}
+/** Single point in a metric time series — `GET /admin/metrics?from=...`. */
+interface MetricPoint {
+    date: string;
+    metric: string;
+    value: number;
+}
+/** Active platform-wide banner — controlled from the admin dashboard. */
+interface BannerData {
+    id: string;
+    message: string;
+    variant: string;
+    dismissible: boolean;
+}
+/** Feedback list row — `GET /admin/feedback`. */
+interface FeedbackItem {
+    id: string;
+    orgSlug: string;
+    email: string;
+    body: string;
+    hasScreenshot: boolean;
+    status: string;
+    adminNote: string | null;
+    readBy: string | null;
+    readAt: ISODateString | null;
+    createdAt: ISODateString;
+}
+/** Feedback detail view — `GET /admin/feedback/:id`. Includes screenshot data. */
+interface FeedbackDetail extends FeedbackItem {
+    screenshotData: string | null;
+    screenshotMime: string | null;
+    userId: string;
+}
+/** Banned IP address — `GET /admin/bans` (ip tab). */
+interface BannedIp {
+    id: string;
+    ipAddress: string;
+    reason: string | null;
+    bannedBy: string;
+    expiresAt: ISODateString | null;
+    active: boolean;
+    createdAt: ISODateString;
+}
+/** Banned user — `GET /admin/bans` (user tab). */
+interface BannedUser {
+    id: string;
+    userId: string;
+    email: string;
+    reason: string | null;
+    bannedBy: string;
+    expiresAt: ISODateString | null;
+    active: boolean;
+    createdAt: ISODateString;
+}
+interface SearchParams {
+    query: string;
+    limit?: number;
+    minScore?: number;
+    /** Override search mode. Defaults to lens facet config, then 'semantic'. */
+    mode?: 'semantic' | 'keyword' | 'hybrid';
+}
+interface SearchResult<M = Record<string, unknown>> {
+    id: string;
+    sourceRowId: string;
+    content: string | null;
+    metadata: M;
+    score: number;
+}
+interface SearchResponse<M = Record<string, unknown>> {
+    results: SearchResult<M>[];
+    meta: {
+        lens: string;
+        query: string;
+        count: number;
+        durationMs: number;
+    };
+}
+interface SimilarParams {
+    id: string;
+    limit?: number;
+    minScore?: number;
+}
+interface SimilarResponse<M = Record<string, unknown>> {
+    results: SearchResult<M>[];
+    meta: {
+        lens: string;
+        sourceId: string;
+        count: number;
+        durationMs: number;
+    };
+}
+interface QueryParams {
+    where?: Record<string, unknown>;
+    orderBy?: {
+        field: string;
+        dir?: 'asc' | 'desc';
+    } | Array<{
+        field: string;
+        dir?: 'asc' | 'desc';
+    }>;
+    limit?: number;
+    offset?: number;
+    cursor?: string;
+    select?: string[];
+}
+interface QueryResponse<M = Record<string, unknown>> {
+    rows: M[];
+    meta: {
+        lens: string;
+        total?: number;
+        nextCursor?: string;
+        count: number;
+        durationMs: number;
+    };
+}
+/** One row in the admin users list — derived by aggregating members + sessions + bans. */
+interface AdminUserListItem {
+    userId: string;
+    email: string;
+    orgCount: number;
+    banned: boolean;
+    banId: string | null;
+    lastSeenAt: ISODateString | null;
+    firstSeenAt: ISODateString;
+}
+/** Wraps the list returned by `GET /admin/users`. */
+interface AdminUserListResponse {
+    users: AdminUserListItem[];
+    total: number;
+}
+/** Org membership view inside `AdminUserDetail`. */
+interface AdminUserOrgMembership {
+    memberId: string;
+    orgId: string;
+    orgSlug: string;
+    orgName: string;
+    role: string;
+    joinedAt: ISODateString;
+}
+/** Detail view returned by `GET /admin/users/:userId`. */
+interface AdminUserDetail {
+    userId: string;
+    email: string;
+    banned: boolean;
+    banId: string | null;
+    banReason: string | null;
+    bannedAt: ISODateString | null;
+    lastSeenAt: ISODateString | null;
+    firstSeenAt: ISODateString;
+    memberships: AdminUserOrgMembership[];
+}
+/** Body for `POST /admin/users/:userId/orgs` — assign user to an org. */
+interface AdminAssignUserBody {
+    orgSlug: string;
+    role: string;
+}
+/** One pending invite row — derived from `members WHERE invite_token IS NOT NULL`. */
+interface PendingInvite {
+    memberId: string;
+    email: string;
+    role: string;
+    orgId: string;
+    orgSlug: string;
+    orgName: string;
+    invitedByEmail: string | null;
+    expiresAt: ISODateString | null;
+    expired: boolean;
+    createdAt: ISODateString;
+}
+/** Wraps the list returned by `GET /admin/invites`. */
+interface PendingInvitesResponse {
+    invites: PendingInvite[];
+    total: number;
+}
+/** Snapshot of an org's plan + usage + cycle. Returned by `GET /v1/orgs/:org/billing`. */
+interface BillingSnapshot {
+    plan: BillingPlan | null;
+    usage: Record<string, UsageMetricSnapshot>;
+    cycle: BillingCycleInfo;
+}
+/** Pricing + identity for the org's current plan. Null on enterprise mode. */
+interface BillingPlan {
+    tierId: string;
+    tierName: string;
+    tierSlug: string;
+    priceCents: number;
+    /** 'monthly' | 'yearly' — null when org has no Stripe subscription (Free tier). */
+    interval: 'monthly' | 'yearly' | null;
+    features: Record<string, unknown>;
+}
+/** Single usage dimension for the current cycle. Used by Console usage cards + sidebar indicator. */
+interface UsageMetricSnapshot {
+    /** Internal name: 'embedding_tokens' | 'vectors_stored' | 'api_requests' | 'ingest_jobs' | etc. */
+    metric: string;
+    current: number;
+    /** null = unlimited (Scale tier or enterprise). */
+    limit: number | null;
+    /** 0..100, or null when limit is null (unlimited). */
+    percentage: number | null;
+}
+/** Active billing cycle. Drives the "X days remaining" + reset date display. */
+interface BillingCycleInfo {
+    periodStart: ISODateString;
+    periodEnd: ISODateString;
+    status: 'active' | 'past_due' | 'canceled';
+    daysRemaining: number;
+}
+/** Stripe invoice projection — billing page invoices table + admin events. */
+interface Invoice {
+    id: string;
+    amountCents: number;
+    currency: string;
+    status: string;
+    created: ISODateString;
+    pdfUrl: string | null;
+    hostedUrl: string | null;
+}
+/** Detailed tier shape used by the upgrade picker + admin tier editor. Includes all limit fields. */
+interface TierFull {
+    id: string;
+    name: string;
+    slug: string;
+    stripePriceMonthly: string | null;
+    stripePriceYearly: string | null;
+    priceCentsMonthly: number | null;
+    priceCentsYearly: number | null;
+    embeddingTokensPerMonth: number | null;
+    vectorsStored: number | null;
+    ingestJobsPerDay: number | null;
+    apiRequestsPerMonth: number | null;
+    apiRequestsPerMinute: number | null;
+    environmentsPerProject: number | null;
+    projectsPerOrg: number | null;
+    membersPerOrg: number | null;
+    orgsPerUser: number | null;
+    ingestWebhooksPerMinute: number | null;
+    features: Record<string, unknown>;
+    displayOrder: number;
+    isDefault: boolean;
+    visible: boolean;
+    createdAt: ISODateString;
+    updatedAt: ISODateString;
+}
+/** Wraps `GET /v1/tiers` (public endpoint). */
+interface TiersResponse {
+    tiers: TierFull[];
+}
+/** Body for `POST /v1/orgs/:org/billing/checkout`. */
+interface CheckoutRequest {
+    tierSlug: string;
+    interval: 'monthly' | 'yearly';
+}
+/** Response from `POST .../billing/checkout` and `POST .../billing/portal` — Stripe-hosted URL. */
+interface BillingRedirectResponse {
+    url: string;
+}
+/** Body for `POST /v1/orgs/:org/billing/cancel`. */
+interface CancelSubscriptionRequest {
+    /** false = cancel at period end (default). true = cancel immediately. */
+    immediately?: boolean;
+}
+/** Admin: monthly recurring revenue snapshot. `GET /v1/admin/billing/mrr`. */
+interface AdminMrrSnapshot {
+    mrrCents: number;
+    arrCents: number;
+    activeSubscriptions: Record<string, number>;
+    churnThisMonth: number;
+    failedPayments: number;
+}
+/** Admin: cash collected this month — separate from MRR (literal Stripe invoice sum). `GET /v1/admin/billing/cash`. */
+interface AdminCashSnapshot {
+    totalCents: number;
+    currency: string;
+    invoiceCount: number;
+    /** ISO timestamp of when the snapshot was computed (for the 5min cache). */
+    computedAt: ISODateString;
+}
+/** Admin: one row from `processed_stripe_events` for the events table. */
+interface AdminStripeEventRow {
+    id: string;
+    stripeEventId: string;
+    eventType: string;
+    status: 'pending' | 'succeeded' | 'failed';
+    error: string | null;
+    processedAt: ISODateString;
+}
+/** Admin: org usage detail for `GET /v1/admin/orgs/:id/usage`. */
+interface AdminOrgUsage {
+    orgId: string;
+    cycle: BillingCycleInfo;
+    usage: Record<string, UsageMetricSnapshot>;
+    tierName: string | null;
+    hasOverride: boolean;
+}
+/** Admin: top consumers row for `GET /v1/admin/usage/top?metric=...`. */
+interface AdminTopConsumerRow {
+    orgId: string;
+    orgSlug: string;
+    orgName: string;
+    tierName: string | null;
+    metric: string;
+    current: number;
+    limit: number | null;
+    percentage: number | null;
+}
+/** Wraps `GET /v1/admin/usage/top`. */
+interface AdminTopConsumersResponse {
+    metric: string;
+    rows: AdminTopConsumerRow[];
+}
+/** Body for `PUT /v1/admin/orgs/:id/override`. All fields nullable — null = use tier value. */
+interface TierOverrideRequest {
+    embeddingTokensPerMonth?: number | null;
+    vectorsStored?: number | null;
+    ingestJobsPerDay?: number | null;
+    apiRequestsPerMonth?: number | null;
+    apiRequestsPerMinute?: number | null;
+    environmentsPerProject?: number | null;
+    projectsPerOrg?: number | null;
+    membersPerOrg?: number | null;
+    orgsPerUser?: number | null;
+    ingestWebhooksPerMinute?: number | null;
+    features?: Record<string, unknown> | null;
+    note?: string | null;
+}
+/** Response shape for structured 403 quota errors. Console renders these uniformly. */
+interface QuotaErrorResponse {
+    error: string;
+    message: string;
+    limit: number;
+    current: number;
+    upgradeUrl: string;
+}
+
+declare function getDeploymentMode(): DeploymentMode;
+declare function isSaasMode(): boolean;
+
+declare function defineConfig(config: SemiLayerConfig): SemiLayerConfig;
+
+export { type AccessRule, type AccessRuleResult, type AdminAssignUserBody, type AdminCashSnapshot, type AdminMrrSnapshot, type AdminOrgUsage, type AdminStripeEventRow, type AdminTopConsumerRow, type AdminTopConsumersResponse, type AdminUserDetail, type AdminUserListItem, type AdminUserListResponse, type AdminUserOrgMembership, type ApiKeyInfo, type AuditLogEntry, type AuthConfig, type AuthOrg, type AuthUser, type BannedIp, type BannedUser, type BannerData, type BillingCycleInfo, type BillingPlan, type BillingRedirectResponse, type BillingSnapshot, type Bridge, type BridgeConstructor, type BridgeRow, type BuiltinTransform, type CancelSubscriptionRequest, type CheckoutRequest, type ClaimCheck, type ClassifyFacetConfig, type ConfigExportResponse, type CreateEnvResponse, type CreateProjectResponse, DEPLOYMENT_MODES, type DailyMetrics, type DedupFacetConfig, type DeploymentMode, type DriftLensInfo, type DriftResponse, type EmbeddingConfig, type EmbeddingField, type Environment, type EnvironmentAuthConfig, type EnvsResponse, FACET_NAMES, FIELD_TYPES, FUTURE_FACETS, type FacetConfig, type FacetName, type FailedJobInfo, type FeedbackDetail, type FeedbackItem, type FieldConfig, type FieldType, INGEST_JOB_TYPES, INGEST_STATUSES, type ISODateString, type InAppNotification, type IngestControl, type IngestErrorEntry, type IngestJobData, type IngestJobPayload, type IngestJobType, type IngestRun, type IngestStatus, type InviteInfo, type Invoice, type JwtClaims, type JwtConfig, KEY_PREFIXES, LENS_STATUSES, type Lens, type LensComparison, type LensConfig, type LensCreateResponse, type LensRuleKey, type LensRules, type LensStatus, type LensStatusInfo, MERGE_STRATEGIES, type MeResponse, type Member, type MergeStrategy, type MetricPoint, type NewKeyPair, type NotificationPreferenceSummary, type OrderByClause, type Org, type OrgDetailResponse, type OrgListItem, type PendingInvite, type PendingInvitesResponse, type PlatformAdmin, type PlatformStats, type Project, type ProjectWithEnvs, type PushIngestJob, type PushLensSummary, type PushResponse, type QueryOptions, type QueryParams, type QueryResponse, type QueryResult, type QueueCounts, type QuotaErrorResponse, type RateLimitState, type ReadOptions, type ReadResult, SOURCE_FEATURES, type SearchFacetConfig, type SearchParams, type SearchResponse, type SearchResult, type SemiLayerConfig, type SimilarFacetConfig, type SimilarParams, type SimilarResponse, type Source, type SourceConfig, type SourceFeature, type StatusEnvironment, type StatusResponse, type SyncInterval, type SystemHealth, TRANSFORM_TYPES, type TargetColumnInfo, type TargetSchema, type Tier, type TierFull, type TierOverride, type TierOverrideRequest, type TierSummary, type TiersResponse, type TransformSpec, type TransformType, type TransportMode, type TransportOptions, type UsageMetricSnapshot, type WhereClause, canonicalHash, defineConfig, getDeploymentMode, isSaasMode, mapDbTypeToFieldType, resolveEmbeddingFieldNames, resolveEmbeddingFields, resolveSourceColumns, validateConfig };