@sudobility/shapeshyft_service 1.0.0

package/dist/routes/projects.js

@@ -0,0 +1,241 @@
+/**
+ * @fileoverview Project management routes
+ * @description CRUD operations for projects. Each project gets an auto-generated
+ * API key on creation. Includes API key retrieval and refresh endpoints.
+ */
+import { Hono } from "hono";
+import { zValidator } from "@hono/zod-validator";
+import { eq, and } from "drizzle-orm";
+import { projectCreateSchema, projectUpdateSchema, projectIdParamSchema, entitySlugParamSchema, } from "../schemas/index.js";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+import { publicProject } from "../lib/public-project.js";
+export function createProjectsRouter(ctx) {
+    const { db } = ctx;
+    const { projects } = ctx.tables;
+    const { generateProjectApiKey, encryptProjectApiKey, decryptProjectApiKey } = ctx.projectApiKeys;
+    const { getActor, getEntityWithPermission, getPermissionErrorStatus } = ctx.entityAccess;
+    const projectsRouter = new Hono();
+    // GET all projects for entity
+    projectsRouter.get("/", zValidator("param", entitySlugParamSchema), async (c) => {
+        try {
+            const { entitySlug } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c));
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .select()
+                .from(projects)
+                .where(eq(projects.entity_id, result.entity.id));
+            return c.json(successResponse(rows.map(publicProject)));
+        }
+        catch (error) {
+            console.error("Error getting projects:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // GET single project
+    projectsRouter.get("/:projectId", zValidator("param", projectIdParamSchema), async (c) => {
+        try {
+            const { entitySlug, projectId } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c));
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .select()
+                .from(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.uuid, projectId)));
+            if (rows.length === 0) {
+                return c.json(errorResponse("Project not found"), 404);
+            }
+            return c.json(successResponse(publicProject(rows[0])));
+        }
+        catch (error) {
+            console.error("Error getting project:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // POST create project
+    projectsRouter.post("/", zValidator("param", entitySlugParamSchema), zValidator("json", projectCreateSchema), async (c) => {
+        try {
+            const { entitySlug } = c.req.valid("param");
+            const body = c.req.valid("json");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), true);
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            // Check for duplicate project name
+            const existing = await db
+                .select()
+                .from(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.project_name, body.project_name)));
+            if (existing.length > 0) {
+                return c.json(errorResponse("Project name already exists"), 409);
+            }
+            // Generate API key for the project
+            const { key, prefix } = generateProjectApiKey();
+            const { encrypted, iv } = encryptProjectApiKey(key);
+            const rows = await db
+                .insert(projects)
+                .values({
+                entity_id: result.entity.id,
+                project_name: body.project_name,
+                display_name: body.display_name,
+                description: body.description ?? null,
+                encrypted_api_key: encrypted,
+                api_key_iv: iv,
+                api_key_prefix: prefix,
+                api_key_created_at: new Date(),
+            })
+                .returning();
+            return c.json(successResponse(rows[0]), 201);
+        }
+        catch (error) {
+            console.error("Error creating project:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // PUT update project
+    projectsRouter.put("/:projectId", zValidator("param", projectIdParamSchema), zValidator("json", projectUpdateSchema), async (c) => {
+        try {
+            const { entitySlug, projectId } = c.req.valid("param");
+            const body = c.req.valid("json");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), true);
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            // Check if project exists
+            const existing = await db
+                .select()
+                .from(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.uuid, projectId)));
+            if (existing.length === 0) {
+                return c.json(errorResponse("Project not found"), 404);
+            }
+            const current = existing[0];
+            // Check for duplicate project name if changing
+            if (body.project_name && body.project_name !== current.project_name) {
+                const duplicate = await db
+                    .select()
+                    .from(projects)
+                    .where(and(eq(projects.entity_id, result.entity.id), eq(projects.project_name, body.project_name)));
+                if (duplicate.length > 0) {
+                    return c.json(errorResponse("Project name already exists"), 409);
+                }
+            }
+            const rows = await db
+                .update(projects)
+                .set({
+                project_name: body.project_name ?? current.project_name,
+                display_name: body.display_name ?? current.display_name,
+                description: body.description ?? current.description,
+                is_active: body.is_active ?? current.is_active,
+                updated_at: new Date(),
+            })
+                .where(eq(projects.uuid, projectId))
+                .returning();
+            return c.json(successResponse(rows[0]));
+        }
+        catch (error) {
+            console.error("Error updating project:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // DELETE project
+    projectsRouter.delete("/:projectId", zValidator("param", projectIdParamSchema), async (c) => {
+        try {
+            const { entitySlug, projectId } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), true);
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .delete(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.uuid, projectId)))
+                .returning();
+            if (rows.length === 0) {
+                return c.json(errorResponse("Project not found"), 404);
+            }
+            return c.json(successResponse(rows[0]));
+        }
+        catch (error) {
+            console.error("Error deleting project:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // GET project API key (full key - authenticated)
+    projectsRouter.get("/:projectId/api-key", zValidator("param", projectIdParamSchema), async (c) => {
+        try {
+            const { entitySlug, projectId } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c));
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            const rows = await db
+                .select()
+                .from(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.uuid, projectId)));
+            if (rows.length === 0) {
+                return c.json(errorResponse("Project not found"), 404);
+            }
+            const project = rows[0];
+            if (!project.encrypted_api_key || !project.api_key_iv) {
+                return c.json(errorResponse("API key not found for this project"), 404);
+            }
+            const apiKey = decryptProjectApiKey(project.encrypted_api_key, project.api_key_iv);
+            const response = {
+                api_key: apiKey,
+            };
+            return c.json(successResponse(response));
+        }
+        catch (error) {
+            console.error("Error getting project API key:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    // POST refresh project API key
+    projectsRouter.post("/:projectId/api-key/refresh", zValidator("param", projectIdParamSchema), async (c) => {
+        try {
+            const { entitySlug, projectId } = c.req.valid("param");
+            const result = await getEntityWithPermission(entitySlug, getActor(c), true);
+            if (result.error !== undefined) {
+                return c.json(errorResponse(result.error), getPermissionErrorStatus(result.errorCode));
+            }
+            // Check if project exists
+            const existing = await db
+                .select()
+                .from(projects)
+                .where(and(eq(projects.entity_id, result.entity.id), eq(projects.uuid, projectId)));
+            if (existing.length === 0) {
+                return c.json(errorResponse("Project not found"), 404);
+            }
+            // Generate new API key
+            const { key, prefix } = generateProjectApiKey();
+            const { encrypted, iv } = encryptProjectApiKey(key);
+            const createdAt = new Date();
+            await db
+                .update(projects)
+                .set({
+                encrypted_api_key: encrypted,
+                api_key_iv: iv,
+                api_key_prefix: prefix,
+                api_key_created_at: createdAt,
+                updated_at: createdAt,
+            })
+                .where(eq(projects.uuid, projectId));
+            const response = {
+                api_key: key,
+                api_key_prefix: prefix,
+                api_key_created_at: createdAt.toISOString(),
+            };
+            return c.json(successResponse(response));
+        }
+        catch (error) {
+            console.error("Error refreshing project API key:", error);
+            return c.json(errorResponse(error.message || "Internal server error"), 500);
+        }
+    });
+    return projectsRouter;
+}
+//# sourceMappingURL=projects.js.map

package/dist/routes/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../src/routes/projects.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,aAAa,GAId,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,MAAM,UAAU,oBAAoB,CAAC,GAAmB;IACtD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,GACzE,GAAG,CAAC,cAAc,CAAC;IACrB,MAAM,EAAE,QAAQ,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,GACnE,GAAG,CAAC,YAAY,CAAC;IAEnB,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;IAElC,8BAA8B;IAC9B,cAAc,CAAC,GAAG,CAChB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAEnD,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAY,IAAI,CAAC,GAAG,CAAC,aAAa,CAAc,CAAC,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,qBAAqB;IACrB,cAAc,CAAC,GAAG,CAChB,aAAa,EACb,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACzC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7B,CACF,CAAC;YAEJ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAU,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAY,CAAC,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,sBAAsB;IACtB,cAAc,CAAC,IAAI,CACjB,GAAG,EACH,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAC1C,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACvC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,IAAI,CACL,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,mCAAmC;YACnC,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAC7C,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;YACnE,CAAC;YAED,mCAAmC;YACnC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;YAChD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAEpD,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,QAAQ,CAAC;iBAChB,MAAM,CAAC;gBACN,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;gBAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;gBACrC,iBAAiB,EAAE,SAAS;gBAC5B,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,IAAI,IAAI,EAAE;aAC/B,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAU,IAAI,CAAC,CAAC,CAAY,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,qBAAqB;IACrB,cAAc,CAAC,GAAG,CAChB,aAAa,EACb,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACzC,UAAU,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACvC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,IAAI,CACL,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7B,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;YAE7B,+CAA+C;YAC/C,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;gBACpE,MAAM,SAAS,GAAG,MAAM,EAAE;qBACvB,MAAM,EAAE;qBACR,IAAI,CAAC,QAAQ,CAAC;qBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAC7C,CACF,CAAC;gBAEJ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,QAAQ,CAAC;iBAChB,GAAG,CAAC;gBACH,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;gBACvD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY;gBACvD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;gBACpD,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;gBAC9C,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;iBACnC,SAAS,EAAE,CAAC;YAEf,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAU,IAAI,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,iBAAiB;IACjB,cAAc,CAAC,MAAM,CACnB,aAAa,EACb,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACzC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,IAAI,CACL,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,QAAQ,CAAC;iBAChB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7B,CACF;iBACA,SAAS,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAU,IAAI,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,iDAAiD;IACjD,cAAc,CAAC,GAAG,CAChB,qBAAqB,EACrB,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACzC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7B,CACF,CAAC;YAEJ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;YAEzB,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACtD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,oCAAoC,CAAC,EACnD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CACjC,OAAO,CAAC,iBAAiB,EACzB,OAAO,CAAC,UAAU,CACnB,CAAC;YAEF,MAAM,QAAQ,GAAsB;gBAClC,OAAO,EAAE,MAAM;aAChB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAoB,QAAQ,CAAC,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,+BAA+B;IAC/B,cAAc,CAAC,IAAI,CACjB,6BAA6B,EAC7B,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,EACzC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEvD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,UAAU,EACV,QAAQ,CAAC,CAAC,CAAC,EACX,IAAI,CACL,CAAC;YACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAC3B,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAC3C,CAAC;YACJ,CAAC;YAED,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,MAAM,EAAE;iBACtB,MAAM,EAAE;iBACR,IAAI,CAAC,QAAQ,CAAC;iBACd,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EACxC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAC7B,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YAED,uBAAuB;YACvB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;YAChD,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAE7B,MAAM,EAAE;iBACL,MAAM,CAAC,QAAQ,CAAC;iBAChB,GAAG,CAAC;gBACH,iBAAiB,EAAE,SAAS;gBAC5B,UAAU,EAAE,EAAE;gBACd,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,SAAS;gBAC7B,UAAU,EAAE,SAAS;aACtB,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAEvC,MAAM,QAAQ,GAA0B;gBACtC,OAAO,EAAE,GAAG;gBACZ,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,SAAS,CAAC,WAAW,EAAE;aAC5C,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAwB,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CAAC,KAAK,CAAC,OAAO,IAAI,uBAAuB,CAAC,EACvD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/routes/providers.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview Public provider catalog routes
+ * @description Serves the LLM provider and model catalog. These are public
+ * routes (no auth required) so the frontend can fetch provider/model info
+ * without requiring server-side package updates.
+ */
+import { Hono } from "hono";
+export declare function createProvidersRouter(): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=providers.d.ts.map

package/dist/routes/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/routes/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAmB5B,wBAAgB,qBAAqB,+EAmGpC"}

package/dist/routes/providers.js

@@ -0,0 +1,89 @@
+/**
+ * @fileoverview Public provider catalog routes
+ * @description Serves the LLM provider and model catalog. These are public
+ * routes (no auth required) so the frontend can fetch provider/model info
+ * without requiring server-side package updates.
+ */
+import { Hono } from "hono";
+import { zValidator } from "@hono/zod-validator";
+import { z } from "zod";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+import { PROVIDERS, PROVIDER_MODELS, MODEL_CAPABILITIES, MODEL_PRICING, DEFAULT_MODEL_PRICING, getProviderById, } from "@sudobility/shapeshyft_engine";
+export function createProvidersRouter() {
+    const providersRouter = new Hono();
+    // Schema for provider param validation
+    const providerParamSchema = z.object({
+        provider: z.string().min(1),
+    });
+    /**
+     * GET /providers
+     * Returns list of all available LLM providers with their configuration.
+     * Cached for 1 hour since provider data is static.
+     */
+    providersRouter.get("/", async (c) => {
+        try {
+            c.header("Cache-Control", "public, max-age=3600, s-maxage=3600");
+            return c.json(successResponse(PROVIDERS));
+        }
+        catch (error) {
+            console.error("Error getting providers:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    /**
+     * GET /providers/:provider
+     * Returns configuration for a specific provider.
+     * Cached for 1 hour since provider data is static.
+     */
+    providersRouter.get("/:provider", zValidator("param", providerParamSchema), async (c) => {
+        try {
+            const { provider } = c.req.valid("param");
+            const providerConfig = getProviderById(provider);
+            if (!providerConfig) {
+                return c.json(errorResponse("Provider not found"), 404);
+            }
+            c.header("Cache-Control", "public, max-age=3600, s-maxage=3600");
+            return c.json(successResponse(providerConfig));
+        }
+        catch (error) {
+            console.error("Error getting provider:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    /**
+     * GET /providers/:provider/models
+     * Returns list of models for a provider with their capabilities and pricing.
+     * Cached for 1 hour since model data is static.
+     */
+    providersRouter.get("/:provider/models", zValidator("param", providerParamSchema), async (c) => {
+        try {
+            const { provider } = c.req.valid("param");
+            const providerConfig = getProviderById(provider);
+            if (!providerConfig) {
+                return c.json(errorResponse("Provider not found"), 404);
+            }
+            const modelIds = PROVIDER_MODELS[provider] ?? [];
+            // Build response with model details
+            const models = modelIds.map(modelId => ({
+                id: modelId,
+                capabilities: MODEL_CAPABILITIES[modelId] ?? {},
+                pricing: MODEL_PRICING[modelId] ?? DEFAULT_MODEL_PRICING,
+            }));
+            c.header("Cache-Control", "public, max-age=3600, s-maxage=3600");
+            const response = {
+                provider: providerConfig,
+                models,
+            };
+            return c.json(successResponse(response));
+        }
+        catch (error) {
+            console.error("Error getting provider models:", error);
+            const message = error instanceof Error ? error.message : "Internal server error";
+            return c.json(errorResponse(message), 500);
+        }
+    });
+    return providersRouter;
+}
+//# sourceMappingURL=providers.js.map

package/dist/routes/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/routes/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,eAAe,EACf,aAAa,GAId,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,qBAAqB,EACrB,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,UAAU,qBAAqB;IACnC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;IAEnC,uCAAuC;IACvC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC5B,CAAC,CAAC;IAEH;;;;OAIG;IACH,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACjC,IAAI,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAmB,SAA6B,CAAC,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,eAAe,CAAC,GAAG,CACjB,YAAY,EACZ,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,eAAe,CAAC,QAAuB,CAAC,CAAC;YAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CACX,eAAe,CAAiB,cAAgC,CAAC,CAClE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF;;;;OAIG;IACH,eAAe,CAAC,GAAG,CACjB,mBAAmB,EACnB,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,EACxC,KAAK,EAAC,CAAC,EAAC,EAAE;QACR,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,eAAe,CAAC,QAAuB,CAAC,CAAC;YAEhE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAuB,CAAC,IAAI,EAAE,CAAC;YAEhE,oCAAoC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtC,EAAE,EAAE,OAAO;gBACX,YAAY,EAAE,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE;gBAC/C,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,qBAAqB;aACzD,CAAC,CAAC,CAAC;YAEJ,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC,CAAC;YACjE,MAAM,QAAQ,GAA2B;gBACvC,QAAQ,EAAE,cAAgC;gBAC1C,MAAM;aACP,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAyB,QAAQ,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/routes/ratelimits.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview Rate limit configuration and usage history routes
+ * @description Provides rate limit config (tiers, current usage) and
+ * usage history per entity. Rate limits are tied to RevenueCat subscriptions.
+ */
+import { Hono } from "hono";
+import type { ServiceContext } from "../context.js";
+export declare function createRatelimitsRouter(ctx: ServiceContext): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=ratelimits.d.ts.map

package/dist/routes/ratelimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimits.d.ts","sourceRoot":"","sources":["../../src/routes/ratelimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,8EAyNzD"}

package/dist/routes/ratelimits.js

@@ -0,0 +1,171 @@
+/**
+ * @fileoverview Rate limit configuration and usage history routes
+ * @description Provides rate limit config (tiers, current usage) and
+ * usage history per entity. Rate limits are tied to RevenueCat subscriptions.
+ */
+import { Hono } from "hono";
+import { eq } from "drizzle-orm";
+import { successResponse, errorResponse, } from "@sudobility/shapeshyft_engine/types";
+export function createRatelimitsRouter(ctx) {
+    const { db } = ctx;
+    const { entities, entityMembers } = ctx.tables;
+    const { getRateLimitRouteHandler, rateLimitsConfig, entitlementDisplayNames, } = ctx.rateLimiting;
+    const ratelimitsRouter = new Hono();
+    /**
+     * Extract testMode from URL query parameter
+     */
+    function getTestMode(c) {
+        const url = new URL(c.req.url);
+        const testMode = url.searchParams.get("testMode");
+        return testMode === "true";
+    }
+    /**
+     * Check if RevenueCat is configured
+     */
+    function isRevenueCatConfigured() {
+        const key = ctx.revenueCatApiKey;
+        return !!key && key.length > 0;
+    }
+    /**
+     * Verify user has access to entity and return its ID.
+     * rateLimitUserId is taken from path parameter (an entity slug).
+     */
+    async function getEntityIdForRateLimits(c, firebaseUid) {
+        // rateLimitUserId is the entity slug
+        const rateLimitUserId = c.req.param("rateLimitUserId");
+        if (!rateLimitUserId) {
+            return { entityId: null, error: "rateLimitUserId is required" };
+        }
+        // Look up entity by slug (rateLimitUserId is the entity slug)
+        const entityRows = await db
+            .select()
+            .from(entities)
+            .where(eq(entities.entity_slug, rateLimitUserId));
+        if (entityRows.length === 0) {
+            return { entityId: null, error: "Entity not found" };
+        }
+        const entity = entityRows[0];
+        // Verify user has access to this entity
+        const memberRows = await db
+            .select()
+            .from(entityMembers)
+            .where(eq(entityMembers.entity_id, entity.id));
+        const isMember = memberRows.some(m => m.user_id === firebaseUid && m.is_active);
+        if (!isMember) {
+            return { entityId: null, error: "Access denied to entity" };
+        }
+        return { entityId: entity.id, error: null };
+    }
+    /**
+     * GET /ratelimits/:rateLimitUserId
+     * Returns rate limit configurations for all entitlement tiers
+     * and the current entity's usage.
+     * rateLimitUserId is the entity slug.
+     * Query params:
+     *   - testMode: Optional, set to "true" for sandbox mode.
+     * Note: Firebase auth is applied at the admin routes level.
+     */
+    ratelimitsRouter.get("/", async (c) => {
+        try {
+            const testMode = getTestMode(c);
+            // If RevenueCat is not configured, return static config without usage data
+            if (!isRevenueCatConfigured()) {
+                const noneLimits = rateLimitsConfig.none;
+                // Convert flat config to tiers array format
+                const tiers = Object.entries(rateLimitsConfig).map(([entitlement, limits]) => ({
+                    entitlement,
+                    displayName: entitlementDisplayNames[entitlement] || entitlement,
+                    limits: {
+                        hourly: limits.hourly ?? null,
+                        daily: limits.daily ?? null,
+                        monthly: limits.monthly ?? null,
+                    },
+                }));
+                const fallback = {
+                    tiers,
+                    currentEntitlement: "none",
+                    currentLimits: {
+                        hourly: noneLimits.hourly ?? null,
+                        daily: noneLimits.daily ?? null,
+                        monthly: noneLimits.monthly ?? null,
+                    },
+                    currentUsage: {
+                        hourly: 0,
+                        daily: 0,
+                        monthly: 0,
+                    },
+                };
+                return c.json(successResponse(fallback));
+            }
+            const userId = c.get("userId");
+            // Get entity ID for rate limit lookup
+            const { entityId, error: entityError } = await getEntityIdForRateLimits(c, userId);
+            if (entityError || !entityId) {
+                const status = entityError === "rateLimitUserId is required"
+                    ? 400
+                    : entityError === "Access denied to entity"
+                        ? 403
+                        : 404;
+                return c.json(errorResponse(entityError || "Entity not found"), status);
+            }
+            // Use entity ID for rate limits (subscriptions are per-entity)
+            // testMode is passed to the method to filter sandbox purchases
+            const data = await getRateLimitRouteHandler().getRateLimitsConfigData(entityId, testMode);
+            return c.json(successResponse(data));
+        }
+        catch (error) {
+            console.error("Error fetching rate limits config:", error);
+            return c.json(errorResponse("Failed to fetch rate limits"), 500);
+        }
+    });
+    /**
+     * GET /ratelimits/:rateLimitUserId/history/:periodType
+     * Returns usage history for a specific period type.
+     * rateLimitUserId is the entity slug.
+     * periodType can be: hour, day, or month
+     * Query params:
+     *   - testMode: Optional, set to "true" for sandbox mode.
+     */
+    ratelimitsRouter.get("/history/:periodType", async (c) => {
+        try {
+            const testMode = getTestMode(c);
+            const periodTypeParam = c.req.param("periodType");
+            // Validate period type
+            if (!["hour", "day", "month"].includes(periodTypeParam)) {
+                return c.json(errorResponse("Invalid period type. Must be one of: hour, day, month"), 400);
+            }
+            // If RevenueCat is not configured, return empty history
+            if (!isRevenueCatConfigured()) {
+                const emptyHistory = {
+                    periodType: periodTypeParam,
+                    entries: [],
+                    totalEntries: 0,
+                };
+                return c.json(successResponse(emptyHistory));
+            }
+            const periodType = periodTypeParam;
+            const userId = c.get("userId");
+            // Get entity ID for rate limit lookup
+            const { entityId, error: entityError } = await getEntityIdForRateLimits(c, userId);
+            if (entityError || !entityId) {
+                const status = entityError === "rateLimitUserId is required"
+                    ? 400
+                    : entityError === "Access denied to entity"
+                        ? 403
+                        : 404;
+                return c.json(errorResponse(entityError || "Entity not found"), status);
+            }
+            // Use entity ID for rate limits (subscriptions are per-entity)
+            // testMode is passed to the method to filter sandbox purchases
+            const data = await getRateLimitRouteHandler().getRateLimitHistoryData(entityId, periodType, 100, // default limit
+            testMode);
+            return c.json(successResponse(data));
+        }
+        catch (error) {
+            console.error("Error fetching rate limit history:", error);
+            return c.json(errorResponse("Failed to fetch rate limit history"), 500);
+        }
+    });
+    return ratelimitsRouter;
+}
+//# sourceMappingURL=ratelimits.js.map

package/dist/routes/ratelimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimits.js","sourceRoot":"","sources":["../../src/routes/ratelimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,qCAAqC,CAAC;AAQ7C,MAAM,UAAU,sBAAsB,CAAC,GAAmB;IACxD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACnB,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC/C,MAAM,EACJ,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,GACxB,GAAG,GAAG,CAAC,YAAY,CAAC;IAErB,MAAM,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;IAEpC;;OAEG;IACH,SAAS,WAAW,CAAC,CAAM;QACzB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,OAAO,QAAQ,KAAK,MAAM,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,SAAS,sBAAsB;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACjC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,wBAAwB,CACrC,CAAM,EACN,WAAmB;QAEnB,qCAAqC;QACrC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAEvD,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAClE,CAAC;QAED,8DAA8D;QAC9D,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;QAEpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAE9B,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,CAC9C,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC9D,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAEhC,2EAA2E;YAC3E,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;gBAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC;gBACzC,4CAA4C;gBAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAChD,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1B,WAAW;oBACX,WAAW,EAAE,uBAAuB,CAAC,WAAW,CAAC,IAAI,WAAW;oBAChE,MAAM,EAAE;wBACN,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;wBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI;wBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;qBAChC;iBACF,CAAC,CACH,CAAC;gBACF,MAAM,QAAQ,GAAyB;oBACrC,KAAK;oBACL,kBAAkB,EAAE,MAAM;oBAC1B,aAAa,EAAE;wBACb,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,IAAI;wBACjC,KAAK,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI;wBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,IAAI;qBACpC;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE,CAAC;wBACT,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,CAAC;qBACX;iBACF,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAuB,QAAQ,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE/B,sCAAsC;YACtC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,CACrE,CAAC,EACD,MAAM,CACP,CAAC;YAEF,IAAI,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM,MAAM,GACV,WAAW,KAAK,6BAA6B;oBAC3C,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,WAAW,KAAK,yBAAyB;wBACzC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,GAAG,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1E,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAM,IAAI,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CACnE,QAAQ,EACR,QAAQ,CACT,CAAC;YAEF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAuB,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;;;OAOG;IACH,gBAAgB,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAC,CAAC,EAAC,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAElD,uBAAuB;YACvB,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,IAAI,CACX,aAAa,CACX,uDAAuD,CACxD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;gBAC9B,MAAM,YAAY,GAAyB;oBACzC,UAAU,EAAE,eAAsC;oBAClD,OAAO,EAAE,EAAE;oBACX,YAAY,EAAE,CAAC;iBAChB,CAAC;gBACF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAuB,YAAY,CAAC,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,UAAU,GAAG,eAAsC,CAAC;YAC1D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE/B,sCAAsC;YACtC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,wBAAwB,CACrE,CAAC,EACD,MAAM,CACP,CAAC;YAEF,IAAI,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM,MAAM,GACV,WAAW,KAAK,6BAA6B;oBAC3C,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,WAAW,KAAK,yBAAyB;wBACzC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,GAAG,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1E,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,MAAM,IAAI,GAAG,MAAM,wBAAwB,EAAE,CAAC,uBAAuB,CACnE,QAAQ,EACR,UAAU,EACV,GAAG,EAAE,gBAAgB;YACrB,QAAQ,CACT,CAAC;YAEF,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAuB,IAAI,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,oCAAoC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,gBAAgB,CAAC;AAC1B,CAAC"}

package/dist/routes/settings.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @fileoverview User settings routes
+ * @description Manages per-user settings including organization name and path.
+ * Uses upsert pattern -- settings are created on first PUT if they don't exist.
+ */
+import { Hono } from "hono";
+import type { ServiceContext } from "../context.js";
+export declare function createSettingsRouter(ctx: ServiceContext): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=settings.d.ts.map

package/dist/routes/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/routes/settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,cAAc,8EAsKvD"}