@sylphx/contract 0.2.0

package/dist/endpoints/admin-services.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Admin Services endpoints — image-status drift surface (drift-watchdog).
+ *
+ * Mirrors `apps/api/src/server/platform/routes/admin/services.ts`.
+ *
+ * `GET /admin/services/image-status` is the read side of the third drift
+ * pillar (alongside `check-no-platform-yaml.ts` and the Kyverno
+ * `sylphx-platform-pod-hygiene` policy). The dogfood-smoke companion
+ * cronjob `infra/addons/dogfood-smoke/manifests/image-drift-cronjob.yaml`
+ * polls this every 10 minutes; rows where `inSync=false` past 30 minutes
+ * raise PagerDuty + Slack.
+ *
+ * Plane: `admin` (super-admin / scoped service-token only — scope
+ * `platform:services:read`).
+ */
+export declare const adminServicesEndpoints: {
+    readonly imageStatus: import("../endpoint.js").Endpoint<"GET", "/admin/services/image-status", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        services: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            name: typeof import("effect/Schema").String;
+            dbRef: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            k8sRef: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            driftMinutes: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+            inSync: typeof import("effect/Schema").Boolean;
+            dbUpdatedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        }>>;
+        checkedAt: typeof import("effect/Schema").String;
+    }>>;
+};
+//# sourceMappingURL=admin-services.d.ts.map

package/dist/endpoints/admin-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-services.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;CAkBzB,CAAA"}

package/dist/endpoints/admin-services.js

@@ -0,0 +1,35 @@
+/**
+ * Admin Services endpoints — image-status drift surface (drift-watchdog).
+ *
+ * Mirrors `apps/api/src/server/platform/routes/admin/services.ts`.
+ *
+ * `GET /admin/services/image-status` is the read side of the third drift
+ * pillar (alongside `check-no-platform-yaml.ts` and the Kyverno
+ * `sylphx-platform-pod-hygiene` policy). The dogfood-smoke companion
+ * cronjob `infra/addons/dogfood-smoke/manifests/image-drift-cronjob.yaml`
+ * polls this every 10 minutes; rows where `inSync=false` past 30 minutes
+ * raise PagerDuty + Slack.
+ *
+ * Plane: `admin` (super-admin / scoped service-token only — scope
+ * `platform:services:read`).
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { AdminServiceImageStatusResult } from '../schemas/admin-services.js';
+export const adminServicesEndpoints = {
+    imageStatus: defineEndpoint({
+        method: 'GET',
+        path: '/admin/services/image-status',
+        response: AdminServiceImageStatusResult,
+        plane: 'admin',
+        summary: 'Per-Platform-service image SSOT vs live K8s drift report',
+        description: 'Returns one row per Platform service (controller, api, runtime, ' +
+            'web, exec-server, storage-gateway, storage-worker) reporting both ' +
+            '`project_services.latest_image_ref` (DB SSOT) and the live ' +
+            '`Deployment.spec.template.spec.containers[0].image` (K8s). The ' +
+            'drift-watchdog cronjob polls this every 10 minutes; rows where ' +
+            '`inSync=false` past a 30-minute grace window page on-call. ' +
+            'Read-only: never mutates DB or K8s state. Requires service token ' +
+            'with scope `platform:services:read`.',
+        tags: ['admin-services'],
+    }),
+};

package/dist/endpoints/admin-tasks.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Admin Tasks endpoints — Console operator dashboard scheduled-job + DLQ ops.
+ * Mirrors `apps/api/src/server/platform/routes/admin/tasks.ts`.
+ *
+ * Production mount: `/admin/tasks/*`.
+ */
+export declare const adminTasksEndpoints: {
+    readonly listTasks: import("../endpoint.js").Endpoint<"GET", "/admin/tasks/projects/:projectId/tasks", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        page: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        status: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        type: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        search: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        tasks: import("effect/Schema").optional<import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").Literal<["one-time", "cron"]>;
+            status: import("effect/Schema").Literal<["pending", "queued", "running", "completed", "failed", "scheduled", "paused", "cancelled", "deleted"]>;
+            callbackUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            scheduledFor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            completedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            failedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            cronExpression: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            retries: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastError: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>>;
+        jobs: import("effect/Schema").optional<import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").Literal<["one-time", "cron"]>;
+            status: import("effect/Schema").Literal<["pending", "queued", "running", "completed", "failed", "scheduled", "paused", "cancelled", "deleted"]>;
+            callbackUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            scheduledFor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            completedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            failedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            cronExpression: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            retries: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastError: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>>;
+        pagination: import("effect/Schema").Struct<{
+            page: typeof import("effect/Schema").Number;
+            limit: typeof import("effect/Schema").Number;
+            total: typeof import("effect/Schema").Number;
+            totalPages: typeof import("effect/Schema").Number;
+        }>;
+    }>>;
+    readonly listJobsCursor: import("../endpoint.js").Endpoint<"GET", "/admin/tasks/projects/:projectId/jobs/cursor", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        cursor: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        sortBy: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        sortOrder: import("effect/Schema").optional<import("effect/Schema").Literal<["asc", "desc"]>>;
+        status: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        type: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        search: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        items: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").Literal<["one-time", "cron"]>;
+            status: import("effect/Schema").Literal<["pending", "queued", "running", "completed", "failed", "scheduled", "paused", "cancelled", "deleted"]>;
+            callbackUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            scheduledFor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            completedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            failedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            cronExpression: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            retries: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastError: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>;
+        nextCursor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        hasMore: typeof import("effect/Schema").Boolean;
+        total: typeof import("effect/Schema").Number;
+    }>>;
+    readonly cancelJob: import("../endpoint.js").Endpoint<"POST", "/admin/tasks/projects/:projectId/jobs/:jobId/cancel", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+        jobId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        task: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").Literal<["one-time", "cron"]>;
+            status: import("effect/Schema").Literal<["pending", "queued", "running", "completed", "failed", "scheduled", "paused", "cancelled", "deleted"]>;
+            callbackUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            scheduledFor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            completedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            failedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            cronExpression: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            retries: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastError: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>;
+        job: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            name: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            type: import("effect/Schema").Literal<["one-time", "cron"]>;
+            status: import("effect/Schema").Literal<["pending", "queued", "running", "completed", "failed", "scheduled", "paused", "cancelled", "deleted"]>;
+            callbackUrl: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            scheduledFor: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            completedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            failedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            cronExpression: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            retries: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastError: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>;
+    }>>;
+    readonly listDLQEntries: import("../endpoint.js").Endpoint<"GET", "/admin/tasks/projects/:projectId/dlq", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        page: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        status: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        search: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        entries: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            workflowName: typeof import("effect/Schema").String;
+            error: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            payload: import("effect/Schema").NullOr<typeof import("effect/Schema").Unknown>;
+            status: import("effect/Schema").Literal<["pending", "retrying", "resolved", "failed"]>;
+            retryCount: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastRetryAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            resolvedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>>;
+        pagination: import("effect/Schema").Struct<{
+            page: typeof import("effect/Schema").Number;
+            limit: typeof import("effect/Schema").Number;
+            total: typeof import("effect/Schema").Number;
+            totalPages: typeof import("effect/Schema").Number;
+        }>;
+    }>>;
+    readonly retryDLQEntry: import("../endpoint.js").Endpoint<"POST", "/admin/tasks/projects/:projectId/dlq/:entryId/retry", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+        entryId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        entry: import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            workflowName: typeof import("effect/Schema").String;
+            error: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            payload: import("effect/Schema").NullOr<typeof import("effect/Schema").Unknown>;
+            status: import("effect/Schema").Literal<["pending", "retrying", "resolved", "failed"]>;
+            retryCount: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastRetryAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            resolvedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>;
+    }>>;
+    readonly resolveDLQEntry: import("../endpoint.js").Endpoint<"POST", "/admin/tasks/projects/:projectId/dlq/:entryId/resolve", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+        entryId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        entry: import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            workflowName: typeof import("effect/Schema").String;
+            error: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            payload: import("effect/Schema").NullOr<typeof import("effect/Schema").Unknown>;
+            status: import("effect/Schema").Literal<["pending", "retrying", "resolved", "failed"]>;
+            retryCount: typeof import("effect/Schema").Number;
+            maxRetries: typeof import("effect/Schema").Number;
+            lastRetryAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            resolvedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            createdAt: typeof import("effect/Schema").String;
+        }>;
+    }>>;
+};
+//# sourceMappingURL=admin-tasks.d.ts.map

package/dist/endpoints/admin-tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tasks.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-tasks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DtB,CAAA"}

package/dist/endpoints/admin-tasks.js

@@ -0,0 +1,67 @@
+/**
+ * Admin Tasks endpoints — Console operator dashboard scheduled-job + DLQ ops.
+ * Mirrors `apps/api/src/server/platform/routes/admin/tasks.ts`.
+ *
+ * Production mount: `/admin/tasks/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { AdminCancelTaskResult, AdminDLQEntryParams, AdminListDLQEntriesQuery, AdminListDLQEntriesResult, AdminListTasksCursorQuery, AdminListTasksCursorResult, AdminListTasksQuery, AdminListTasksResult, AdminResolveDLQEntryResult, AdminRetryDLQEntryResult, AdminTasksJobParams, AdminTasksProjectParams, } from '../schemas/admin-tasks.js';
+export const adminTasksEndpoints = {
+    listTasks: defineEndpoint({
+        method: 'GET',
+        path: '/admin/tasks/projects/:projectId/tasks',
+        params: AdminTasksProjectParams,
+        query: AdminListTasksQuery,
+        response: AdminListTasksResult,
+        plane: 'admin',
+        summary: 'List scheduled jobs with offset pagination',
+        tags: ['admin-tasks'],
+    }),
+    listJobsCursor: defineEndpoint({
+        method: 'GET',
+        path: '/admin/tasks/projects/:projectId/jobs/cursor',
+        params: AdminTasksProjectParams,
+        query: AdminListTasksCursorQuery,
+        response: AdminListTasksCursorResult,
+        plane: 'admin',
+        summary: 'List scheduled jobs with cursor pagination',
+        tags: ['admin-tasks'],
+    }),
+    cancelJob: defineEndpoint({
+        method: 'POST',
+        path: '/admin/tasks/projects/:projectId/jobs/:jobId/cancel',
+        params: AdminTasksJobParams,
+        response: AdminCancelTaskResult,
+        plane: 'admin',
+        summary: 'Cancel a pending or scheduled job',
+        tags: ['admin-tasks'],
+    }),
+    listDLQEntries: defineEndpoint({
+        method: 'GET',
+        path: '/admin/tasks/projects/:projectId/dlq',
+        params: AdminTasksProjectParams,
+        query: AdminListDLQEntriesQuery,
+        response: AdminListDLQEntriesResult,
+        plane: 'admin',
+        summary: 'List dead letter queue entries',
+        tags: ['admin-tasks'],
+    }),
+    retryDLQEntry: defineEndpoint({
+        method: 'POST',
+        path: '/admin/tasks/projects/:projectId/dlq/:entryId/retry',
+        params: AdminDLQEntryParams,
+        response: AdminRetryDLQEntryResult,
+        plane: 'admin',
+        summary: 'Re-queue a failed job from the DLQ',
+        tags: ['admin-tasks'],
+    }),
+    resolveDLQEntry: defineEndpoint({
+        method: 'POST',
+        path: '/admin/tasks/projects/:projectId/dlq/:entryId/resolve',
+        params: AdminDLQEntryParams,
+        response: AdminResolveDLQEntryResult,
+        plane: 'admin',
+        summary: 'Discard a DLQ entry (mark resolved)',
+        tags: ['admin-tasks'],
+    }),
+};

package/dist/endpoints/admin-tenants.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Admin Tenants endpoints — headless org+project provisioning.
+ *
+ * Mirrors `apps/api/src/server/platform/routes/admin/tenants.ts`. This is
+ * the ADR-089 Phase 7.5 replacement for the deleted `POST /admin/bootstrap`
+ * surface: same semantics, scoped service-token auth
+ * (`platform:tenants:provision`) instead of the retired
+ * `SYLPHX_BOOTSTRAP_KEY` shared secret.
+ *
+ * Production mount: `/admin/tenants/*`.
+ */
+export declare const adminTenantsEndpoints: {
+    readonly create: import("../endpoint.js").Endpoint<"POST", "/admin/tenants/", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        orgName: import("effect/Schema").filter<import("effect/Schema").filter<typeof import("effect/Schema").String>>;
+        orgSlug: import("effect/Schema").filter<import("effect/Schema").filter<import("effect/Schema").filter<typeof import("effect/Schema").String>>>;
+        projectName: import("effect/Schema").filter<import("effect/Schema").filter<typeof import("effect/Schema").String>>;
+        projectSlug: import("effect/Schema").filter<import("effect/Schema").filter<import("effect/Schema").filter<typeof import("effect/Schema").String>>>;
+        ownerEmail: import("effect/Schema").filter<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Struct<{
+        orgId: typeof import("effect/Schema").String;
+        projectId: typeof import("effect/Schema").String;
+        secretKey: typeof import("effect/Schema").String;
+        publishableKey: typeof import("effect/Schema").String;
+    }>>;
+};
+//# sourceMappingURL=admin-tenants.d.ts.map

package/dist/endpoints/admin-tenants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tenants.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-tenants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;CAiBxB,CAAA"}

package/dist/endpoints/admin-tenants.js

@@ -0,0 +1,30 @@
+/**
+ * Admin Tenants endpoints — headless org+project provisioning.
+ *
+ * Mirrors `apps/api/src/server/platform/routes/admin/tenants.ts`. This is
+ * the ADR-089 Phase 7.5 replacement for the deleted `POST /admin/bootstrap`
+ * surface: same semantics, scoped service-token auth
+ * (`platform:tenants:provision`) instead of the retired
+ * `SYLPHX_BOOTSTRAP_KEY` shared secret.
+ *
+ * Production mount: `/admin/tenants/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { AdminCreateTenantInput, AdminCreateTenantResult } from '../schemas/admin-tenants.js';
+export const adminTenantsEndpoints = {
+    create: defineEndpoint({
+        method: 'POST',
+        path: '/admin/tenants/',
+        body: AdminCreateTenantInput,
+        response: AdminCreateTenantResult,
+        plane: 'admin',
+        summary: 'Headlessly provision a new organization + initial project',
+        description: 'Creates an organization, a billing account, the owner membership, ' +
+            'the initial project, and dev + production environments in a single ' +
+            'transaction. Returns the raw secret + publishable keys for the ' +
+            'production environment; they are shown once and then only stored ' +
+            'as SHA-256 hashes. Requires a service token (svc_*) with the ' +
+            '`platform:tenants:provision` scope.',
+        tags: ['admin-tenants'],
+    }),
+};

package/dist/endpoints/admin-traces.d.ts

@@ -0,0 +1,124 @@
+/**
+ * Admin Traces endpoints — Console operator dashboard request-tracing reports.
+ * Mirrors `apps/api/src/server/platform/routes/admin/traces.ts`.
+ *
+ * Production mount: `/admin/traces/*`.
+ */
+export declare const adminTracesEndpoints: {
+    readonly stats: import("../endpoint.js").Endpoint<"GET", "/admin/traces/projects/:projectId/stats", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        startDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        endDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        totalRequests: typeof import("effect/Schema").Number;
+        errorCount: typeof import("effect/Schema").Number;
+        errorRate: typeof import("effect/Schema").Number;
+        avgDurationMs: typeof import("effect/Schema").Number;
+        p50Ms: typeof import("effect/Schema").Number;
+        p95Ms: typeof import("effect/Schema").Number;
+        p99Ms: typeof import("effect/Schema").Number;
+        requestsPerMinute: typeof import("effect/Schema").Number;
+        status2xx: typeof import("effect/Schema").Number;
+        status3xx: typeof import("effect/Schema").Number;
+        status4xx: typeof import("effect/Schema").Number;
+        status5xx: typeof import("effect/Schema").Number;
+        period: import("effect/Schema").Struct<{
+            start: typeof import("effect/Schema").String;
+            end: typeof import("effect/Schema").String;
+        }>;
+    }>>;
+    readonly list: import("../endpoint.js").Endpoint<"GET", "/admin/traces/projects/:projectId/traces", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        statusFilter: import("effect/Schema").optional<import("effect/Schema").Literal<["all", "2xx", "3xx", "4xx", "5xx", "error"]>>;
+        methods: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        pathPattern: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        minDurationMs: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        maxDurationMs: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        userId: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        startDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        endDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        offset: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        traces: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            traceId: typeof import("effect/Schema").String;
+            method: import("effect/Schema").Literal<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+            path: typeof import("effect/Schema").String;
+            statusCode: typeof import("effect/Schema").Number;
+            durationMs: typeof import("effect/Schema").Number;
+            userId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            startedAt: typeof import("effect/Schema").String;
+            endedAt: typeof import("effect/Schema").String;
+            hasError: typeof import("effect/Schema").Boolean;
+        }>>;
+        total: typeof import("effect/Schema").Number;
+        hasMore: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly get: import("../endpoint.js").Endpoint<"GET", "/admin/traces/projects/:projectId/traces/:traceId", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+        traceId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        trace: import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            traceId: typeof import("effect/Schema").String;
+            projectId: typeof import("effect/Schema").String;
+            method: import("effect/Schema").Literal<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+            path: typeof import("effect/Schema").String;
+            statusCode: typeof import("effect/Schema").Number;
+            durationMs: typeof import("effect/Schema").Number;
+            userId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            metadata: import("effect/Schema").NullOr<import("effect/Schema").Record$<typeof import("effect/Schema").String, typeof import("effect/Schema").Unknown>>;
+            startedAt: typeof import("effect/Schema").String;
+            endedAt: typeof import("effect/Schema").String;
+            createdAt: typeof import("effect/Schema").String;
+        }>;
+        spans: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            spanId: typeof import("effect/Schema").String;
+            parentSpanId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            name: typeof import("effect/Schema").String;
+            service: typeof import("effect/Schema").String;
+            durationMs: typeof import("effect/Schema").Number;
+            status: import("effect/Schema").Literal<["ok", "error", "unset"]>;
+            attributes: import("effect/Schema").NullOr<import("effect/Schema").Record$<typeof import("effect/Schema").String, typeof import("effect/Schema").Unknown>>;
+            startedAt: typeof import("effect/Schema").String;
+            endedAt: typeof import("effect/Schema").String;
+            depth: typeof import("effect/Schema").Number;
+        }>>;
+        serviceBreakdown: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            service: typeof import("effect/Schema").String;
+            totalDurationMs: typeof import("effect/Schema").Number;
+            spanCount: typeof import("effect/Schema").Number;
+        }>>;
+    }>>;
+    readonly slowEndpoints: import("../endpoint.js").Endpoint<"GET", "/admin/traces/projects/:projectId/slow-endpoints", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        startDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        endDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Array$<import("effect/Schema").Struct<{
+        path: typeof import("effect/Schema").String;
+        method: import("effect/Schema").Literal<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+        avgDurationMs: typeof import("effect/Schema").Number;
+        p95Ms: typeof import("effect/Schema").Number;
+        requestCount: typeof import("effect/Schema").Number;
+    }>>>;
+    readonly errorEndpoints: import("../endpoint.js").Endpoint<"GET", "/admin/traces/projects/:projectId/error-endpoints", import("effect/Schema").Struct<{
+        projectId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        startDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        endDate: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        limit: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Array$<import("effect/Schema").Struct<{
+        path: typeof import("effect/Schema").String;
+        method: import("effect/Schema").Literal<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>;
+        errorCount: typeof import("effect/Schema").Number;
+        errorRate: typeof import("effect/Schema").Number;
+        requestCount: typeof import("effect/Schema").Number;
+    }>>>;
+};
+//# sourceMappingURL=admin-traces.d.ts.map

package/dist/endpoints/admin-traces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-traces.d.ts","sourceRoot":"","sources":["../../src/endpoints/admin-traces.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDvB,CAAA"}

package/dist/endpoints/admin-traces.js

@@ -0,0 +1,59 @@
+/**
+ * Admin Traces endpoints — Console operator dashboard request-tracing reports.
+ * Mirrors `apps/api/src/server/platform/routes/admin/traces.ts`.
+ *
+ * Production mount: `/admin/traces/*`.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { AdminErrorEndpointsResult, AdminGetEndpointsQuery, AdminGetTraceResult, AdminGetTraceStatsQuery, AdminListTracesQuery, AdminListTracesResult, AdminSlowEndpointsResult, AdminTraceStatsResult, AdminTracesProjectParams, AdminTracesTraceParams, } from '../schemas/admin-traces.js';
+export const adminTracesEndpoints = {
+    stats: defineEndpoint({
+        method: 'GET',
+        path: '/admin/traces/projects/:projectId/stats',
+        params: AdminTracesProjectParams,
+        query: AdminGetTraceStatsQuery,
+        response: AdminTraceStatsResult,
+        plane: 'admin',
+        summary: 'Trace statistics with latency percentiles + status breakdown',
+        tags: ['admin-traces'],
+    }),
+    list: defineEndpoint({
+        method: 'GET',
+        path: '/admin/traces/projects/:projectId/traces',
+        params: AdminTracesProjectParams,
+        query: AdminListTracesQuery,
+        response: AdminListTracesResult,
+        plane: 'admin',
+        summary: 'List traces with filtering and pagination',
+        tags: ['admin-traces'],
+    }),
+    get: defineEndpoint({
+        method: 'GET',
+        path: '/admin/traces/projects/:projectId/traces/:traceId',
+        params: AdminTracesTraceParams,
+        response: AdminGetTraceResult,
+        plane: 'admin',
+        summary: 'Get a trace with full span waterfall and service breakdown',
+        tags: ['admin-traces'],
+    }),
+    slowEndpoints: defineEndpoint({
+        method: 'GET',
+        path: '/admin/traces/projects/:projectId/slow-endpoints',
+        params: AdminTracesProjectParams,
+        query: AdminGetEndpointsQuery,
+        response: AdminSlowEndpointsResult,
+        plane: 'admin',
+        summary: 'Ranked list of slowest endpoints',
+        tags: ['admin-traces'],
+    }),
+    errorEndpoints: defineEndpoint({
+        method: 'GET',
+        path: '/admin/traces/projects/:projectId/error-endpoints',
+        params: AdminTracesProjectParams,
+        query: AdminGetEndpointsQuery,
+        response: AdminErrorEndpointsResult,
+        plane: 'admin',
+        summary: 'Ranked list of most error-prone endpoints',
+        tags: ['admin-traces'],
+    }),
+};