@substrat-run/control-plane-client 0.1.0 → 0.1.1

package/README.md

@@ -1,7 +1,7 @@
 # @substrat-run/control-plane-client
 
 The typed HTTP client for the Substrat control-plane API — one transport for the CLI, the
-console and a vertical's connect seam: how a request is authenticated, how a refusal is
+console, the dashboard and a vertical's connect seam: how a request is authenticated, how a refusal is
 read (RFC 9457 problem documents), and what an empty answer is.
 
 ```sh

package/dist/builder-client.d.ts

@@ -0,0 +1,76 @@
+import type { Page } from '@substrat-run/contracts';
+import type { AdoptServingResult, AdoptVerticalResult, BindHostnameBody, BindScopeVersionBody, BoundScopeVersion, ChannelRow, ExportBreakAck, HostnameRow, ListingRecord, PromoteAcknowledge, PromoteResult, ProvisionScopeResult, PulledDump, RebindScopeBody, RebindVerticalResult, RestoreBody, ScopeHealthRecord, ScopeRecord, ScopeRow, VersionRow, Whoami } from './builder-types.js';
+import { ControlPlaneTransport } from './transport.js';
+/** One page of a list route: how many, and where after. */
+export interface PageRequest {
+    limit?: number;
+    cursor?: string | null;
+}
+/** The page size a walk to the END asks for — the routes' ceiling, to keep the walk short. */
+export declare const WALK_PAGE_LIMIT = 200;
+/**
+ * Walk a paged list to the end. Every GET list route answers `{ entries, nextCursor }`, and
+ * a builder tool's reads are complete-list semantics (the max semver, installs joined to
+ * hostnames), so it follows the cursor at the ceiling page size until it runs out.
+ */
+export declare function walkPages<T>(fetchPage: (page: {
+    limit: number;
+    cursor: string | null;
+}) => Promise<Page<T>>): Promise<T[]>;
+/**
+ * The control-plane routes a builder's tooling calls — the CLI's whole surface (#971): who
+ * am I, a vertical's versions and channels, promote, hostnames, and the scope tools.
+ *
+ * It extends the transport and adds nothing to how a request is made. A write names its
+ * `content-type` itself, so the same method sends the same request whether the client was
+ * built to send the JSON type on everything (as the hostname and preview commands always
+ * have) or on nothing (as a bare read always has). A refusal is a `ControlPlaneError`
+ * carrying the raw body, which is how a caller that renders its own messages — the CLI —
+ * keeps them; a 2xx that is not JSON is a `malformed` one.
+ *
+ * Responses are typed, not parsed (`builder-types.ts`).
+ */
+export declare class ControlPlaneBuilderClient extends ControlPlaneTransport {
+    private write;
+    whoami(): Promise<Whoami>;
+    /** The `substrat login` code→token exchange. Unauthenticated: the code is the credential. */
+    exchangeLoginCode(code: string, verifier: string): Promise<{
+        token?: string;
+    }>;
+    listVerticals(page?: PageRequest): Promise<Page<{
+        slug: string;
+    }>>;
+    listVersions(slug: string, page?: PageRequest): Promise<Page<VersionRow>>;
+    listChannels(slug: string, page?: PageRequest): Promise<Page<ChannelRow>>;
+    /** The permission registry a version carries (`null`: it kept none). */
+    getVersionRegistry<R>(slug: string, versionId: string): Promise<{
+        registry: R | null;
+    }>;
+    /** The migrations a version adds over `base`, as the control plane diffs them. */
+    getVersionMigrations<M>(slug: string, versionId: string, base: string): Promise<{
+        migrations: M | null;
+    }>;
+    promoteChannel(slug: string, channel: string, versionId: string, acknowledge?: PromoteAcknowledge): Promise<PromoteResult>;
+    setListing(slug: string, listed: boolean): Promise<ListingRecord>;
+    /** A builder asks for listing; a staff operator reviews it. */
+    requestPublish(slug: string): Promise<void>;
+    adoptVerticalServing(slug: string, body: ExportBreakAck): Promise<AdoptVerticalResult | null>;
+    listScopes(tenantId: string, page?: PageRequest): Promise<Page<ScopeRow>>;
+    listHostnames(tenantId: string, page?: PageRequest): Promise<Page<HostnameRow>>;
+    bindHostname(body: BindHostnameBody): Promise<HostnameRow>;
+    verifyHostname(hostname: string): Promise<HostnameRow>;
+    /** Unbind one hostname. Reads the answer like every other call here: an empty body is not JSON. */
+    unbindHostname(hostname: string): Promise<unknown>;
+    private scopePath;
+    getScope(tenantId: string, scopeId: string): Promise<ScopeRecord>;
+    /** Reaches into the vertical's own deployment, so it can fail while the record answers. */
+    getScopeHealth(tenantId: string, scopeId: string): Promise<ScopeHealthRecord>;
+    exportScope(tenantId: string, scopeId: string, full: boolean): Promise<PulledDump>;
+    /** The restore's answer carries nothing the caller reads — only that it landed. */
+    restoreScope(tenantId: string, scopeId: string, body: RestoreBody): Promise<void>;
+    adoptServing(tenantId: string, scopeId: string, body: ExportBreakAck): Promise<AdoptServingResult>;
+    provisionScope(tenantId: string, scopeId: string): Promise<ProvisionScopeResult>;
+    bindScopeVersion(tenantId: string, scopeId: string, body: BindScopeVersionBody): Promise<BoundScopeVersion>;
+    rebindScopeVertical(tenantId: string, scopeId: string, body: RebindScopeBody): Promise<RebindVerticalResult>;
+}
+//# sourceMappingURL=builder-client.d.ts.map

package/dist/builder-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-client.d.ts","sourceRoot":"","sources":["../src/builder-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,EACV,cAAc,EACd,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,UAAU,EACV,MAAM,EACP,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,8FAA8F;AAC9F,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,SAAS,EAAE,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAC9E,OAAO,CAAC,CAAC,EAAE,CAAC,CASd;AAcD;;;;;;;;;;;;GAYG;AACH,qBAAa,yBAA0B,SAAQ,qBAAqB;IAClE,OAAO,CAAC,KAAK;IAUb,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAExB;IAED,6FAA6F;IAC7F,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAE7E;IAID,aAAa,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAEjE;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAExE;IAED,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAExE;IAED,wEAAwE;IACxE,kBAAkB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC,CAEtF;IAED,kFAAkF;IAClF,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC,CAExG;IAED,cAAc,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,kBAAkB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAGxB;IAED,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,CAGhE;IAED,+DAA+D;IAC/D,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1C;IAED,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAK5F;IAID,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAExE;IAED,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAE9E;IAED,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAEzD;IAED,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAGrD;IAED,mGAAmG;IACnG,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEjD;IAID,OAAO,CAAC,SAAS;IAIjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAEhE;IAED,2FAA2F;IAC3F,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAE5E;IAED,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAEjF;IAED,mFAAmF;IACnF,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhF;IAED,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAGjG;IAED,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAG/E;IAED,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAG1G;IAED,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAG3G;CACF"}

package/dist/builder-client.js

@@ -0,0 +1,150 @@
+import { ControlPlaneTransport } from './transport.js';
+/** The page size a walk to the END asks for — the routes' ceiling, to keep the walk short. */
+export const WALK_PAGE_LIMIT = 200;
+/**
+ * Walk a paged list to the end. Every GET list route answers `{ entries, nextCursor }`, and
+ * a builder tool's reads are complete-list semantics (the max semver, installs joined to
+ * hostnames), so it follows the cursor at the ceiling page size until it runs out.
+ */
+export async function walkPages(fetchPage) {
+    const out = [];
+    let cursor = null;
+    do {
+        const page = await fetchPage({ limit: WALK_PAGE_LIMIT, cursor });
+        out.push(...page.entries);
+        cursor = page.nextCursor;
+    } while (cursor !== null);
+    return out;
+}
+const seg = encodeURIComponent;
+/** `?a=b&limit=…&cursor=…` — the leading params first, then the page, in the order the CLI always sent them. */
+function queryOf(lead, page) {
+    const parts = Object.entries(lead).map(([k, v]) => `${k}=${seg(v)}`);
+    if (page?.limit !== undefined)
+        parts.push(`limit=${page.limit}`);
+    if (page?.cursor)
+        parts.push(`cursor=${seg(page.cursor)}`);
+    return parts.length > 0 ? `?${parts.join('&')}` : '';
+}
+const JSON_TYPE = { 'content-type': 'application/json' };
+/**
+ * The control-plane routes a builder's tooling calls — the CLI's whole surface (#971): who
+ * am I, a vertical's versions and channels, promote, hostnames, and the scope tools.
+ *
+ * It extends the transport and adds nothing to how a request is made. A write names its
+ * `content-type` itself, so the same method sends the same request whether the client was
+ * built to send the JSON type on everything (as the hostname and preview commands always
+ * have) or on nothing (as a bare read always has). A refusal is a `ControlPlaneError`
+ * carrying the raw body, which is how a caller that renders its own messages — the CLI —
+ * keeps them; a 2xx that is not JSON is a `malformed` one.
+ *
+ * Responses are typed, not parsed (`builder-types.ts`).
+ */
+export class ControlPlaneBuilderClient extends ControlPlaneTransport {
+    write(method, body) {
+        return {
+            method,
+            headers: { ...JSON_TYPE },
+            ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+        };
+    }
+    // -- identity ---------------------------------------------------------------
+    whoami() {
+        return this.read('/auth/whoami');
+    }
+    /** The `substrat login` code→token exchange. Unauthenticated: the code is the credential. */
+    exchangeLoginCode(code, verifier) {
+        return this.read('/auth/cli/token', this.write('POST', { code, verifier }));
+    }
+    // -- the registry -----------------------------------------------------------
+    listVerticals(page) {
+        return this.read(`/verticals${queryOf({}, page)}`);
+    }
+    listVersions(slug, page) {
+        return this.read(`/verticals/${seg(slug)}/versions${queryOf({}, page)}`);
+    }
+    listChannels(slug, page) {
+        return this.read(`/verticals/${seg(slug)}/channels${queryOf({}, page)}`);
+    }
+    /** The permission registry a version carries (`null`: it kept none). */
+    getVersionRegistry(slug, versionId) {
+        return this.read(`/verticals/${seg(slug)}/versions/${seg(versionId)}/registry`);
+    }
+    /** The migrations a version adds over `base`, as the control plane diffs them. */
+    getVersionMigrations(slug, versionId, base) {
+        return this.read(`/verticals/${seg(slug)}/versions/${seg(versionId)}/migrations?base=${seg(base)}`);
+    }
+    promoteChannel(slug, channel, versionId, acknowledge) {
+        const path = `/verticals/${seg(slug)}/channels/${seg(channel)}/promote`;
+        return this.read(path, this.write('POST', { versionId, ...(acknowledge ? { acknowledge } : {}) }));
+    }
+    setListing(slug, listed) {
+        const path = `/verticals/${seg(slug)}/listing`;
+        return this.read(path, this.write('POST', { listed }));
+    }
+    /** A builder asks for listing; a staff operator reviews it. */
+    requestPublish(slug) {
+        const path = `/verticals/${seg(slug)}/publish-request`;
+        return this.send(path, { method: 'POST', headers: { ...JSON_TYPE }, body: '{}' }).then(() => undefined);
+    }
+    adoptVerticalServing(slug, body) {
+        const path = `/verticals/${seg(slug)}/adopt-serving`;
+        // Lenient on purpose: a 2xx whose body is not JSON reads as "nothing reported", which is
+        // what the command prints for it.
+        return this.send(path, this.write('POST', body)).then((res) => res.json().catch(() => null));
+    }
+    // -- the directory ----------------------------------------------------------
+    listScopes(tenantId, page) {
+        return this.read(`/scopes${queryOf({ tenantId }, page)}`);
+    }
+    listHostnames(tenantId, page) {
+        return this.read(`/hostnames${queryOf({ tenantId }, page)}`);
+    }
+    bindHostname(body) {
+        return this.read('/hostnames', this.write('POST', body));
+    }
+    verifyHostname(hostname) {
+        const path = `/hostnames/${seg(hostname)}/verify`;
+        return this.read(path, this.write('POST'));
+    }
+    /** Unbind one hostname. Reads the answer like every other call here: an empty body is not JSON. */
+    unbindHostname(hostname) {
+        return this.read(`/hostnames/${seg(hostname)}`, this.write('DELETE'));
+    }
+    // -- one scope --------------------------------------------------------------
+    scopePath(tenantId, scopeId) {
+        return `/tenants/${seg(tenantId)}/scopes/${seg(scopeId)}`;
+    }
+    getScope(tenantId, scopeId) {
+        return this.read(this.scopePath(tenantId, scopeId));
+    }
+    /** Reaches into the vertical's own deployment, so it can fail while the record answers. */
+    getScopeHealth(tenantId, scopeId) {
+        return this.read(`${this.scopePath(tenantId, scopeId)}/health`);
+    }
+    exportScope(tenantId, scopeId, full) {
+        return this.read(`${this.scopePath(tenantId, scopeId)}/export${full ? '?full=true' : ''}`);
+    }
+    /** The restore's answer carries nothing the caller reads — only that it landed. */
+    restoreScope(tenantId, scopeId, body) {
+        const path = `${this.scopePath(tenantId, scopeId)}/restore`;
+        return this.send(path, this.write('POST', body)).then(() => undefined);
+    }
+    adoptServing(tenantId, scopeId, body) {
+        const path = `${this.scopePath(tenantId, scopeId)}/adopt-serving`;
+        return this.read(path, this.write('POST', body));
+    }
+    provisionScope(tenantId, scopeId) {
+        const path = `${this.scopePath(tenantId, scopeId)}/provision`;
+        return this.read(path, this.write('POST'));
+    }
+    bindScopeVersion(tenantId, scopeId, body) {
+        const path = `${this.scopePath(tenantId, scopeId)}/version`;
+        return this.read(path, this.write('POST', body));
+    }
+    rebindScopeVertical(tenantId, scopeId, body) {
+        const path = `${this.scopePath(tenantId, scopeId)}/rebind-vertical`;
+        return this.read(path, this.write('POST', body));
+    }
+}
+//# sourceMappingURL=builder-client.js.map

package/dist/builder-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-client.js","sourceRoot":"","sources":["../src/builder-client.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAQvD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAA+E;IAE/E,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,GAAG,CAAC;QACF,MAAM,IAAI,GAAY,MAAM,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,KAAK,IAAI,EAAE;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,GAAG,GAAG,kBAAkB,CAAC;AAE/B,gHAAgH;AAChH,SAAS,OAAO,CAAC,IAA4B,EAAE,IAA6B;IAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI,EAAE,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,SAAS,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAW,CAAC;AAElE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,yBAA0B,SAAQ,qBAAqB;IAC1D,KAAK,CAAC,MAAc,EAAE,IAAc;QAC1C,OAAO;YACL,MAAM;YACN,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE;YACzB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,6FAA6F;IAC7F,iBAAiB,CAAC,IAAY,EAAE,QAAgB;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,8EAA8E;IAE9E,aAAa,CAAC,IAAkB;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,IAAkB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,IAAkB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,wEAAwE;IACxE,kBAAkB,CAAI,IAAY,EAAE,SAAiB;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAClF,CAAC;IAED,kFAAkF;IAClF,oBAAoB,CAAI,IAAY,EAAE,SAAiB,EAAE,IAAY;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,SAAS,CAAC,oBAAoB,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,cAAc,CACZ,IAAY,EACZ,OAAe,EACf,SAAiB,EACjB,WAAgC;QAEhC,MAAM,IAAI,GAAG,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;QACxE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,UAAU,CAAC,IAAY,EAAE,MAAe;QACtC,MAAM,IAAI,GAAG,cAAc,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,+DAA+D;IAC/D,cAAc,CAAC,IAAY;QACzB,MAAM,IAAI,GAAG,cAAc,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1G,CAAC;IAED,oBAAoB,CAAC,IAAY,EAAE,IAAoB;QACrD,MAAM,IAAI,GAAG,cAAc,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACrD,yFAAyF;QACzF,kCAAkC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,8EAA8E;IAE9E,UAAU,CAAC,QAAgB,EAAE,IAAkB;QAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,aAAa,CAAC,QAAgB,EAAE,IAAkB;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,YAAY,CAAC,IAAsB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,MAAM,IAAI,GAAG,cAAc,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,mGAAmG;IACnG,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,8EAA8E;IAEtE,SAAS,CAAC,QAAgB,EAAE,OAAe;QACjD,OAAO,YAAY,GAAG,CAAC,QAAQ,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,QAAQ,CAAC,QAAgB,EAAE,OAAe;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,2FAA2F;IAC3F,cAAc,CAAC,QAAgB,EAAE,OAAe;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAa;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,mFAAmF;IACnF,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAiB;QAC/D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzE,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAoB;QAClE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,cAAc,CAAC,QAAgB,EAAE,OAAe;QAC9C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,OAAe,EAAE,IAA0B;QAC5E,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,mBAAmB,CAAC,QAAgB,EAAE,OAAe,EAAE,IAAqB;QAC1E,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,kBAAkB,CAAC;QACpE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/builder-types.d.ts

@@ -0,0 +1,191 @@
+import type { ExportBreak } from '@substrat-run/contracts';
+/**
+ * The answers a builder's tooling reads off the control plane — the fields the CLI actually
+ * uses, typed and NOT parsed (#971): a field the deployed plane omits arrives as `undefined`
+ * rather than as a thrown error, which is the behaviour the CLI has always had. The server's
+ * own schemas live in `@substrat-run/contracts`; these are deliberately the narrower reading.
+ */
+/** `GET /auth/whoami` — the signed-in user and the tenants they can build for. */
+export interface Whoami {
+    user: {
+        id: string;
+        email?: string;
+    } | null;
+    tenants: {
+        id: string;
+        slug: string;
+        name: string;
+    }[];
+}
+export interface VersionRow {
+    id: string;
+    version: string;
+    admission: string;
+    deploymentRef?: string;
+}
+export interface ChannelRow {
+    channel: string;
+    versionId: string;
+    /**
+     * What prod's stable serving script actually runs (#286/#321). Differs from `versionId`
+     * when an in-place serve failed: the channel was promoted but the scopes run old code.
+     */
+    servingVersionId?: string | null;
+}
+/** One scope of a tenant as the directory lists it (`GET /scopes?tenantId=`). */
+export interface ScopeRow {
+    id: string;
+    slug: string;
+    name: string;
+    status: string;
+    vertical: string | null;
+    verticalVersionId: string | null;
+    forkedFrom: string | null;
+    servingRef?: string | null;
+    createdAt: string;
+}
+/** A DNS record the tenant must publish (contracts' dnsRecord). */
+export interface DnsRecordRow {
+    type: 'hostname' | 'txt';
+    name: string;
+    value: string;
+    status: string | null;
+}
+/** One hostname binding as the control plane returns it (contracts' HostnameBinding). */
+export interface HostnameRow {
+    hostname: string;
+    tenantId: string;
+    scopeId: string;
+    verticalSlug: string | null;
+    surface: string;
+    status: string;
+    statusNote: string | null;
+    canonical: boolean;
+    createdAt: string;
+    customHostnameId: string | null;
+    validationRecords: DnsRecordRow[];
+}
+export interface BindHostnameBody {
+    hostname: string;
+    tenantId: string;
+    scopeId: string;
+    surface: string;
+    canonical: boolean;
+}
+/** The installed apps a promote breaks (#1705 PR 3), as the control plane lists them to this caller. */
+export interface ExportBreaks {
+    affected: ExportBreak[];
+    otherTenants?: number;
+}
+/**
+ * One store the promote minted for an already-installed tenant (#825) — a store declared
+ * by THIS version that the tenant, having been created before the declaration existed,
+ * did not have.
+ */
+export interface MintedStore {
+    tenantId: string;
+    binding: string;
+    kind: 'relational' | 'blob';
+}
+export interface PromoteAcknowledge {
+    permissionChange?: boolean;
+    migrationChange?: boolean;
+    exportBreak?: boolean;
+}
+export interface PromoteResult {
+    channel: string;
+    versionId: string;
+    /** Present only when this promote minted stores, or tried and could not. `minted` names
+     *  only tenants the caller may see; `otherTenants` counts the rest of the fleet the sweep
+     *  also covered. */
+    storeBackfill?: {
+        minted: MintedStore[];
+        otherTenants?: number;
+        error?: string;
+    };
+    /** Present when an acknowledged export break reached installed apps (#1705 PR 3). */
+    exportBreaks?: ExportBreaks;
+}
+export interface DumpTable {
+    name: string;
+    ddl: string;
+    columns: string[];
+    rows: unknown[][];
+}
+/** `GET …/scopes/:id/export` — a scope's data as the control plane released it. */
+export interface PulledDump {
+    tenantId: string;
+    scopeId: string;
+    capturedAt: string;
+    masked: boolean;
+    tables: DumpTable[];
+}
+export interface RestoreBody {
+    tenantId: string;
+    scopeId: string;
+    capturedAt: string;
+    tables: DumpTable[];
+}
+export interface ScopeRecord {
+    slug: string;
+    name: string;
+    status: string;
+    vertical: string | null;
+    verticalVersionId: string | null;
+    servingRef?: string | null;
+    schemaVersion: string;
+    createdAt: string;
+}
+export interface ScopeHealthRecord {
+    roleCount: number | null;
+    roleProjectionEmpty: boolean;
+    missingStores?: {
+        binding: string;
+        kind: string;
+    }[];
+}
+/** What a move's refusal may ask the caller to acknowledge (#1756). */
+export interface ExportBreakAck {
+    acknowledge?: {
+        exportBreak: true;
+    };
+}
+export interface BindScopeVersionBody extends ExportBreakAck {
+    versionId: string;
+    snapshot?: true | undefined;
+}
+export interface RebindScopeBody extends ExportBreakAck {
+    vertical: string;
+    ackMigrations?: true | undefined;
+    abandonData?: true | undefined;
+}
+export interface AdoptServingResult {
+    servingRef?: string;
+    alreadyAdopted?: boolean;
+    tables?: number;
+}
+export interface AdoptVerticalResult {
+    adopted?: string[];
+    alreadyAdopted?: string[];
+}
+export interface RebindVerticalResult {
+    servingRef?: string;
+    versionId?: string;
+    alreadyBound?: boolean;
+    tables?: number;
+    dataAbandoned?: boolean;
+}
+export interface ProvisionScopeResult {
+    owner?: string;
+    storeError?: string;
+}
+export interface BoundScopeVersion {
+    verticalVersionId: string | null;
+    vertical: string | null;
+    servingRef?: string | null;
+}
+export interface ListingRecord {
+    slug: string;
+    listed: boolean;
+}
+//# sourceMappingURL=builder-types.d.ts.map

package/dist/builder-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-types.d.ts","sourceRoot":"","sources":["../src/builder-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;;;GAKG;AAEH,kFAAkF;AAClF,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,GAAG,KAAK,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iBAAiB,EAAE,YAAY,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wGAAwG;AACxG,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,YAAY,GAAG,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB;;wBAEoB;IACpB,aAAa,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjF,qFAAqF;IACrF,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;CACnB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrD;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB"}

package/dist/builder-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=builder-types.js.map

package/dist/builder-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder-types.js","sourceRoot":"","sources":["../src/builder-types.ts"],"names":[],"mappings":""}

package/dist/client.d.ts

@@ -0,0 +1,111 @@
+import type { EntitlementGrant, EntitlementGrantInput, QueryScopeInput, ReadScopeTableInput, Scope, ScopeId, ScopeQueryResult, DenialFilter, DenialSummary, PermissionDenial, ScopeTable, ScopeTablePage, Tenant, TenantId } from '@substrat-run/contracts';
+import { ControlPlaneError, ControlPlaneTransport } from './transport.js';
+import { type IdentityTenant } from './identity-tenants.js';
+/**
+ * A typed HTTP client for the control-plane API — the vertical side of the
+ * connect seam (first-flow.md slice 4).
+ *
+ * A vertical that runs against a *separately deployed* shared control plane uses
+ * this to (a) register its tenant, entitlements, and scope on boot, and (b) gate
+ * each request on the directory's authoritative lifecycle — `assertScopeActive`
+ * fails closed exactly as the kernel's own `getScope` does, so a suspend in the
+ * console bites the vertical's next operation even across process and deployment
+ * boundaries.
+ *
+ * What it deliberately does NOT do: write roles or grants. Those are not on the
+ * control-plane HTTP surface (api.ts §4.5 — permission writes are the human
+ * checkpoint, D-22/D-29), so a connected vertical keeps its permission model
+ * local and treats the shared plane as the authority for tenant/scope lifecycle
+ * and entitlements only.
+ *
+ * `fetch` is injectable: pass a Worker service-binding's fetch, or the router's
+ * own `app.fetch` for an in-process test, instead of the global.
+ */
+export interface ControlPlaneClientOptions {
+    /** Base URL of the control-plane API, e.g. `https://cp.example.com` or `http://127.0.0.1:8788`. */
+    baseUrl: string;
+    /**
+     * The platform actor id stamped as the audit subject on every write — sent as the
+     * dev-only `x-platform-actor` header, and ONLY when no `serviceToken` is set. With a
+     * token the control plane resolves the subject from the token (its fixed service
+     * actor), so the header is never consulted there and is not sent (#980).
+     */
+    actor: string;
+    /**
+     * A service credential (`x-service-token`) proving the caller is an authorized
+     * vertical, not just anyone with an actor id. Required when the control plane
+     * has real auth — the dev-actor header alone does not authenticate there. When
+     * set, it is the request's only credential: `actor` is not sent.
+     */
+    serviceToken?: string;
+    /** Defaults to the global `fetch`. */
+    fetch?: typeof globalThis.fetch;
+}
+export { ControlPlaneError };
+export interface ClientProvisionScopeInput {
+    tenantId: TenantId;
+    scopeId: ScopeId;
+    slug?: string;
+    kind?: string;
+    name?: string;
+    vertical?: string | null;
+    jurisdiction?: 'eu' | 'us' | 'global';
+}
+export declare class ControlPlaneClient extends ControlPlaneTransport {
+    constructor(options: ControlPlaneClientOptions);
+    createTenant(input: {
+        id: TenantId;
+        slug: string;
+        name: string;
+    }): Promise<Tenant>;
+    grantEntitlement(tenantId: TenantId, key: string, plan?: EntitlementGrantInput): Promise<EntitlementGrant[]>;
+    provisionScope(input: ClientProvisionScopeInput): Promise<Scope>;
+    /**
+     * Confirm the scope exists here, moving the directory row provisioning → active.
+     *
+     * In this (push) direction the vertical has already built the scope locally, so
+     * registering and confirming are the same moment — but they stay two calls so
+     * `provisionScope` means one thing everywhere, and so the directory is never the
+     * one deciding a scope is ready (K-31).
+     */
+    activateScope(tenantId: TenantId, scopeId: ScopeId): Promise<Scope>;
+    getTenant(tenantId: TenantId): Promise<Tenant | undefined>;
+    getScopeRecord(tenantId: TenantId, scopeId: ScopeId): Promise<Scope | undefined>;
+    listEntitlements(tenantId: TenantId): Promise<EntitlementGrant[]>;
+    /**
+     * The tenants a login builds for, each flagged with whether it holds the `builder`
+     * entitlement — the builder studio's membership read (builder-plane.md §4). `externalId`
+     * is the login's OIDC subject. Service-token gated: an unset token is refused by the
+     * plane, never bypassed.
+     *
+     * The answer is PARSED, not asserted: a plane that renamed `entitled`, or answered an
+     * `{ error }` body with a 200, would hand a cast `entitled: undefined` — falsy, so the
+     * studio would lock the tenant out with the ordinary "not enabled" page and nothing
+     * anywhere would say the directory had changed shape. A refused parse throws instead.
+     * The message names the shape that was wrong, never the body — the body is directory
+     * facts about a person's tenants.
+     */
+    identityTenants(externalId: string): Promise<IdentityTenant[]>;
+    /** Every table in the scope's own database, with row counts (Data view). */
+    listScopeTables(tenantId: TenantId, scopeId: ScopeId): Promise<ScopeTable[]>;
+    /** A bounded page of one table of the scope's database. */
+    readScopeTable(tenantId: TenantId, scopeId: ScopeId, input: ReadScopeTableInput): Promise<ScopeTablePage>;
+    /** One read-only SQL statement against the scope's database — the console (#219). */
+    queryScope(tenantId: TenantId, scopeId: ScopeId, input: QueryScopeInput): Promise<ScopeQueryResult>;
+    /**
+     * The scope's recorded permission refusals, bucketed per (actor, permission) with the
+     * window's own facts beside them — the view to open first, because the raw log's
+     * volume is attacker-influenceable and a prober can flood a newest-first page.
+     */
+    summarizeDenials(tenantId: TenantId, scopeId: ScopeId, filter?: DenialFilter): Promise<DenialSummary>;
+    /** The raw rows behind a bucket, newest first. */
+    listDenials(tenantId: TenantId, scopeId: ScopeId, filter?: DenialFilter): Promise<PermissionDenial[]>;
+    /**
+     * The gate. Throws unless the tenant is active AND the scope exists and is
+     * active — the same fail-closed logic the kernel's `validateScopeAccess`
+     * applies locally, so a tenant-level cascade suspend bites too, not just a
+     * per-scope one. Call it before handing a request to the local scope host.
+     */
+    assertScopeActive(tenantId: TenantId, scopeId: ScopeId): Promise<void>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,KAAK,EACL,OAAO,EACP,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,cAAc,EACd,MAAM,EACN,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAErF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,yBAAyB;IACxC,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC;AAID,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAE7B,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,YAAY,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,QAAQ,CAAC;CACvC;AAED,qBAAa,kBAAmB,SAAQ,qBAAqB;IAC3D,YAAY,OAAO,EAAE,yBAAyB,EAE7C;IAID,YAAY,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAEjF;IAED,gBAAgB,CACd,QAAQ,EAAE,QAAQ,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAK7B;IAED,cAAc,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,KAAK,CAAC,CAE/D;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAElE;IAID,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEzD;IAED,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,CAE/E;IAED,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAEhE;IAED;;;;;;;;;;;;OAYG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAanE;IAID,4EAA4E;IAC5E,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAE3E;IAED,2DAA2D;IAC3D,cAAc,CACZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,cAAc,CAAC,CAKzB;IAED,qFAAqF;IACrF,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,eAAe,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAK3B;IAID;;;;OAIG;IACH,gBAAgB,CACd,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,aAAa,CAAC,CAExB;IAED,kDAAkD;IAClD,WAAW,CACT,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAE7B;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAa3E;CACF"}