@sylphx/contract 0.2.0

package/dist/endpoints/billing-console.js

@@ -0,0 +1,167 @@
+/**
+ * Billing Console endpoints — developer-facing subscription billing UI for
+ * end-user subscriptions, Stripe checkout/portal, credits, invoices, usage.
+ * Mirrors `apps/api/src/server/platform/routes/billing/*`.
+ *
+ * Production mount: `/billing/*`.
+ *
+ * Naming: `billingConsole` to distinguish from
+ *   • `organizationsEndpoints.billing` (org platform-plan + business settings)
+ *   • `adminBillingEndpoints` (super-admin cross-org operations)
+ *   • Future `billingAdmin` if any admin-only billing ops land here.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { BalanceResult, BillingConsoleCreditCheckoutInput, BillingConsolePlansResult, CancelSubscriptionInput, CancelSubscriptionResult, CheckoutResult, CreateCheckoutInput, CreatePortalInput, CreditPackagesResult, GetBalanceQuery, GetInvoiceDetailQuery, GetInvoicesQuery, GetMySubscriptionQuery, GetPlansQuery, GetSubscriptionQuery, GetSubscriptionResult, GetTransactionsQuery, GetUsageQuery, InvoiceDetailResult, InvoicesResult, PortalResult, ProrationPreviewInput, ProrationPreviewResult, TransactionsResult, UpdateSubscriptionInput, UpdateSubscriptionResult, UsageResult, UsageSummaryResult, } from '../schemas/billing-console.js';
+export const billingConsoleEndpoints = {
+    // ── Plans (catalog) ────────────────────────────────────────────────────
+    listPlans: defineEndpoint({
+        method: 'GET',
+        path: '/billing/plans',
+        query: GetPlansQuery,
+        response: BillingConsolePlansResult,
+        plane: 'management',
+        summary: 'List active subscription plans for a project',
+        tags: ['billing-console'],
+    }),
+    // ── Subscriptions ──────────────────────────────────────────────────────
+    getSubscription: defineEndpoint({
+        method: 'GET',
+        path: '/billing/subscription',
+        query: GetSubscriptionQuery,
+        response: GetSubscriptionResult,
+        plane: 'management',
+        summary: "Get a specific user's subscription on a project",
+        tags: ['billing-console'],
+    }),
+    getMySubscription: defineEndpoint({
+        method: 'GET',
+        path: '/billing/subscription/me',
+        query: GetMySubscriptionQuery,
+        response: GetSubscriptionResult,
+        plane: 'management',
+        summary: "Get the current user's subscription on a project",
+        tags: ['billing-console'],
+    }),
+    cancelSubscription: defineEndpoint({
+        method: 'POST',
+        path: '/billing/subscription/cancel',
+        body: CancelSubscriptionInput,
+        response: CancelSubscriptionResult,
+        plane: 'management',
+        summary: 'Cancel a subscription immediately or at period end',
+        tags: ['billing-console'],
+    }),
+    updateSubscription: defineEndpoint({
+        method: 'POST',
+        path: '/billing/subscription/update',
+        body: UpdateSubscriptionInput,
+        response: UpdateSubscriptionResult,
+        plane: 'management',
+        summary: 'Change subscription plan with configurable proration',
+        tags: ['billing-console'],
+    }),
+    getProrationPreview: defineEndpoint({
+        method: 'POST',
+        path: '/billing/subscription/proration-preview',
+        body: ProrationPreviewInput,
+        response: ProrationPreviewResult,
+        plane: 'management',
+        summary: 'Preview the cost/credit of changing subscription plans',
+        tags: ['billing-console'],
+    }),
+    // ── Checkout / Portal ──────────────────────────────────────────────────
+    createCheckout: defineEndpoint({
+        method: 'POST',
+        path: '/billing/checkout',
+        body: CreateCheckoutInput,
+        response: CheckoutResult,
+        plane: 'management',
+        summary: 'Create a Stripe checkout session for a subscription',
+        tags: ['billing-console'],
+    }),
+    createPortal: defineEndpoint({
+        method: 'POST',
+        path: '/billing/portal',
+        body: CreatePortalInput,
+        response: PortalResult,
+        plane: 'management',
+        summary: 'Create a Stripe billing portal session',
+        tags: ['billing-console'],
+    }),
+    // ── Balance ────────────────────────────────────────────────────────────
+    getBalance: defineEndpoint({
+        method: 'GET',
+        path: '/billing/balance',
+        query: GetBalanceQuery,
+        response: BalanceResult,
+        plane: 'management',
+        summary: 'Get the organization billing balance + status',
+        tags: ['billing-console'],
+    }),
+    // ── Usage ──────────────────────────────────────────────────────────────
+    getUsage: defineEndpoint({
+        method: 'GET',
+        path: '/billing/usage',
+        query: GetUsageQuery,
+        response: UsageResult,
+        plane: 'management',
+        summary: "Get a project's usage for the current or specified month",
+        tags: ['billing-console'],
+    }),
+    getUsageSummary: defineEndpoint({
+        method: 'GET',
+        path: '/billing/usage/summary',
+        query: GetUsageQuery,
+        response: UsageSummaryResult,
+        plane: 'management',
+        summary: 'Get a monthly usage summary with per-service costs',
+        tags: ['billing-console'],
+    }),
+    // ── Transactions ───────────────────────────────────────────────────────
+    getTransactions: defineEndpoint({
+        method: 'GET',
+        path: '/billing/transactions',
+        query: GetTransactionsQuery,
+        response: TransactionsResult,
+        plane: 'management',
+        summary: 'Get recent credit transactions for the organization',
+        tags: ['billing-console'],
+    }),
+    // ── Invoices ───────────────────────────────────────────────────────────
+    getInvoices: defineEndpoint({
+        method: 'GET',
+        path: '/billing/invoices',
+        query: GetInvoicesQuery,
+        response: InvoicesResult,
+        plane: 'management',
+        summary: 'List the most recent invoices for the organization',
+        tags: ['billing-console'],
+    }),
+    getInvoiceDetail: defineEndpoint({
+        method: 'GET',
+        path: '/billing/invoices/detail',
+        query: GetInvoiceDetailQuery,
+        response: InvoiceDetailResult,
+        plane: 'management',
+        summary: 'Get a detailed invoice breakdown by service',
+        tags: ['billing-console'],
+    }),
+    // ── Credits ────────────────────────────────────────────────────────────
+    createCreditCheckout: defineEndpoint({
+        method: 'POST',
+        path: '/billing/credits/checkout',
+        body: BillingConsoleCreditCheckoutInput,
+        response: CheckoutResult,
+        plane: 'management',
+        summary: 'Create a Stripe checkout session to purchase platform credits',
+        tags: ['billing-console'],
+    }),
+    getCreditPackages: defineEndpoint({
+        method: 'GET',
+        path: '/billing/credits/packages',
+        response: CreditPackagesResult,
+        plane: 'management',
+        summary: 'List available credit packages for one-off purchase',
+        tags: ['billing-console'],
+    }),
+};

package/dist/endpoints/billing-settings.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Billing Settings endpoints — organization billing configuration UI for
+ * business info, tax ID, payment methods, and spending cap.
+ * Mirrors `apps/api/src/server/platform/routes/billing-settings/*`.
+ *
+ * Production mount: `/billing-settings/*`. Contract paths are absolute
+ * (`/billing/settings`, `/billing/tax-id`, …) because the routes live at
+ * `/billing/*` relative to the mount point; the sub-app collapses them back
+ * via `relativePath(p, '/billing-settings')`.
+ *
+ * Actually the sub-routes use `/billing/*` relative paths internally. To keep
+ * the contract path identical to the published URL (mount `/billing-settings`
+ * + route `/billing/settings` == URL `/billing-settings/billing/settings`),
+ * we encode the on-the-wire URL here.
+ */
+export declare const billingSettingsEndpoints: {
+    readonly getSettings: import("../endpoint.js").Endpoint<"GET", "/billing-settings/billing/settings", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        orgId: typeof import("effect/Schema").String;
+        orgName: typeof import("effect/Schema").String;
+        billingType: import("effect/Schema").Literal<["prepaid", "postpaid"]>;
+        trustLevel: import("effect/Schema").Literal<["new", "verified", "enterprise"]>;
+        taxId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        taxIdType: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        taxIdVerified: typeof import("effect/Schema").Boolean;
+        businessName: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        billingCountry: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+        billingAddress: import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+            line1: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            line2: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            city: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            state: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            postalCode: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            country: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        }>>;
+        taxExempt: typeof import("effect/Schema").Boolean;
+        taxExemptReason: import("effect/Schema").optional<import("effect/Schema").NullOr<typeof import("effect/Schema").String>>;
+        spendingCapMicrodollars: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+        spendingCapAction: import("effect/Schema").Literal<["alert", "suspend_service", "hard_block"]>;
+        hasPaymentMethod: typeof import("effect/Schema").Boolean;
+        defaultPaymentMethodId: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+    }>>;
+    readonly updateBusinessInfo: import("../endpoint.js").Endpoint<"PATCH", "/billing-settings/billing/business-info", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        businessName: import("effect/Schema").optional<import("effect/Schema").NullOr<typeof import("effect/Schema").String>>;
+        billingCountry: import("effect/Schema").optional<import("effect/Schema").NullOr<typeof import("effect/Schema").String>>;
+        billingAddress: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+            line1: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            line2: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            city: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            state: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            postalCode: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+            country: import("effect/Schema").optional<typeof import("effect/Schema").String>;
+        }>>>;
+    }>, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly setTaxId: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/tax-id", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        taxId: typeof import("effect/Schema").String;
+        taxIdType: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+        verified: typeof import("effect/Schema").Boolean;
+        message: typeof import("effect/Schema").String;
+    }>>;
+    readonly removeTaxId: import("../endpoint.js").Endpoint<"DELETE", "/billing-settings/billing/tax-id", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly getPaymentMethods: import("../endpoint.js").Endpoint<"GET", "/billing-settings/billing/payment-methods", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        paymentMethods: import("effect/Schema").Array$<import("effect/Schema").Struct<{
+            id: typeof import("effect/Schema").String;
+            type: typeof import("effect/Schema").String;
+            brand: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            last4: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            expMonth: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+            expYear: import("effect/Schema").NullOr<typeof import("effect/Schema").Number>;
+            isDefault: typeof import("effect/Schema").Boolean;
+        }>>;
+    }>>;
+    readonly createSetupIntent: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/payment-methods/setup", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        successUrl: typeof import("effect/Schema").String;
+        cancelUrl: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        clientSecret: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+    }>>;
+    readonly setDefaultPaymentMethod: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/payment-methods/:paymentMethodId/default", import("effect/Schema").Struct<{
+        paymentMethodId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly removePaymentMethod: import("../endpoint.js").Endpoint<"DELETE", "/billing-settings/billing/payment-methods/:paymentMethodId", import("effect/Schema").Struct<{
+        paymentMethodId: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly setSpendingCap: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/spending-cap", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        spendingCapDollars: import("effect/Schema").optional<import("effect/Schema").NullOr<typeof import("effect/Schema").Number>>;
+        spendingCapAction: import("effect/Schema").optional<import("effect/Schema").Literal<["alert", "suspend_service", "hard_block"]>>;
+    }>, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly enablePostpaid: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/postpaid", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+    readonly enablePrepaid: import("../endpoint.js").Endpoint<"POST", "/billing-settings/billing/prepaid", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        success: typeof import("effect/Schema").Boolean;
+    }>>;
+};
+//# sourceMappingURL=billing-settings.d.ts.map

package/dist/endpoints/billing-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-settings.d.ts","sourceRoot":"","sources":["../../src/endpoints/billing-settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAgBH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsG3B,CAAA"}

package/dist/endpoints/billing-settings.js

@@ -0,0 +1,117 @@
+/**
+ * Billing Settings endpoints — organization billing configuration UI for
+ * business info, tax ID, payment methods, and spending cap.
+ * Mirrors `apps/api/src/server/platform/routes/billing-settings/*`.
+ *
+ * Production mount: `/billing-settings/*`. Contract paths are absolute
+ * (`/billing/settings`, `/billing/tax-id`, …) because the routes live at
+ * `/billing/*` relative to the mount point; the sub-app collapses them back
+ * via `relativePath(p, '/billing-settings')`.
+ *
+ * Actually the sub-routes use `/billing/*` relative paths internally. To keep
+ * the contract path identical to the published URL (mount `/billing-settings`
+ * + route `/billing/settings` == URL `/billing-settings/billing/settings`),
+ * we encode the on-the-wire URL here.
+ */
+import { defineEndpoint } from '../endpoint.js';
+import { BillingSettingsSetTaxIdInput, BillingSettingsSetTaxIdResult, BillingSettingsSuccessResult, BillingSettingsUpdateBusinessInfoInput, CreateSetupIntentInput, CreateSetupIntentResult, GetBillingSettingsResult, GetPaymentMethodsResult, PaymentMethodIdParams, SetSpendingCapInput, } from '../schemas/billing-settings.js';
+export const billingSettingsEndpoints = {
+    // ── Settings + business info ───────────────────────────────────────────
+    getSettings: defineEndpoint({
+        method: 'GET',
+        path: '/billing-settings/billing/settings',
+        response: GetBillingSettingsResult,
+        plane: 'management',
+        summary: 'Get billing settings (tax, spending cap, payment method flags)',
+        tags: ['billing-settings'],
+    }),
+    updateBusinessInfo: defineEndpoint({
+        method: 'PATCH',
+        path: '/billing-settings/billing/business-info',
+        body: BillingSettingsUpdateBusinessInfoInput,
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Update business name, billing country, and billing address',
+        tags: ['billing-settings'],
+    }),
+    // ── Tax ID ─────────────────────────────────────────────────────────────
+    setTaxId: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/tax-id',
+        body: BillingSettingsSetTaxIdInput,
+        response: BillingSettingsSetTaxIdResult,
+        plane: 'management',
+        summary: 'Set or update tax ID with Stripe verification',
+        tags: ['billing-settings'],
+    }),
+    removeTaxId: defineEndpoint({
+        method: 'DELETE',
+        path: '/billing-settings/billing/tax-id',
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Remove the configured tax ID',
+        tags: ['billing-settings'],
+    }),
+    // ── Payment methods ────────────────────────────────────────────────────
+    getPaymentMethods: defineEndpoint({
+        method: 'GET',
+        path: '/billing-settings/billing/payment-methods',
+        response: GetPaymentMethodsResult,
+        plane: 'management',
+        summary: 'List payment methods for the organization',
+        tags: ['billing-settings'],
+    }),
+    createSetupIntent: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/payment-methods/setup',
+        body: CreateSetupIntentInput,
+        response: CreateSetupIntentResult,
+        plane: 'management',
+        summary: 'Create a Stripe setup intent for adding a payment method',
+        tags: ['billing-settings'],
+    }),
+    setDefaultPaymentMethod: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/payment-methods/:paymentMethodId/default',
+        params: PaymentMethodIdParams,
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Set a payment method as the default for the organization',
+        tags: ['billing-settings'],
+    }),
+    removePaymentMethod: defineEndpoint({
+        method: 'DELETE',
+        path: '/billing-settings/billing/payment-methods/:paymentMethodId',
+        params: PaymentMethodIdParams,
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Remove a payment method from the organization',
+        tags: ['billing-settings'],
+    }),
+    // ── Billing mode (spending cap + mode switches) ────────────────────────
+    setSpendingCap: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/spending-cap',
+        body: SetSpendingCapInput,
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Set the monthly spending cap + cap-reached action',
+        tags: ['billing-settings'],
+    }),
+    enablePostpaid: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/postpaid',
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Enable postpaid billing (requires verified payment method)',
+        tags: ['billing-settings'],
+    }),
+    enablePrepaid: defineEndpoint({
+        method: 'POST',
+        path: '/billing-settings/billing/prepaid',
+        response: BillingSettingsSuccessResult,
+        plane: 'management',
+        summary: 'Switch to prepaid billing mode',
+        tags: ['billing-settings'],
+    }),
+};

package/dist/endpoints/branch-databases.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Branch Databases endpoints — per-preview-env Postgres branches (P0 Gap #2).
+ *
+ * Management-plane CRUD. BaaS runtime reads `DATABASE_URL` via env secrets
+ * like any other service — no runtime branch-DB surface here.
+ *
+ * Mount: `/projects/:id/preview-envs/:envId/branch-db` scoped to a preview
+ * environment. The `:id` params correspond to `projects.id` and
+ * `project_environments.id` (the preview env's environment row).
+ *
+ * See `docs/design/branch-db-per-preview.md` for the full design — this file
+ * is the scaffolded contract; actual CNPG provisioning lands in the
+ * controller (ops follow-up).
+ */
+import { Schema } from 'effect';
+export declare const branchDatabasesEndpoints: {
+    readonly list: import("../endpoint.js").Endpoint<"GET", "/projects/:id/preview-envs/branch-dbs", Schema.Struct<{
+        id: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        branches: Schema.Array$<Schema.Struct<{
+            id: typeof Schema.String;
+            projectId: typeof Schema.String;
+            envId: typeof Schema.String;
+            sourceDbId: typeof Schema.String;
+            cnpgClusterName: Schema.NullOr<typeof Schema.String>;
+            connectionString: Schema.NullOr<typeof Schema.String>;
+            dataMode: Schema.Literal<["none", "last-1d", "last-7d", "all"]>;
+            status: Schema.Literal<["provisioning", "ready", "destroyed", "degraded"]>;
+            createdAt: typeof Schema.String;
+            destroyedAt: Schema.NullOr<typeof Schema.String>;
+        }>>;
+    }>>;
+    readonly create: import("../endpoint.js").Endpoint<"POST", "/projects/:id/preview-envs/:envId/branch-db", Schema.Struct<{
+        id: typeof Schema.String;
+        envId: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        previewEnvId: typeof Schema.String;
+        withData: Schema.optional<Schema.Literal<["none", "last-1d", "last-7d", "all"]>>;
+    }>, Schema.Struct<{
+        id: typeof Schema.String;
+        projectId: typeof Schema.String;
+        envId: typeof Schema.String;
+        sourceDbId: typeof Schema.String;
+        cnpgClusterName: Schema.NullOr<typeof Schema.String>;
+        connectionString: Schema.NullOr<typeof Schema.String>;
+        dataMode: Schema.Literal<["none", "last-1d", "last-7d", "all"]>;
+        status: Schema.Literal<["provisioning", "ready", "destroyed", "degraded"]>;
+        createdAt: typeof Schema.String;
+        destroyedAt: Schema.NullOr<typeof Schema.String>;
+    }>>;
+    readonly get: import("../endpoint.js").Endpoint<"GET", "/projects/:id/preview-envs/:envId/branch-db", Schema.Struct<{
+        id: typeof Schema.String;
+        envId: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        id: typeof Schema.String;
+        projectId: typeof Schema.String;
+        envId: typeof Schema.String;
+        sourceDbId: typeof Schema.String;
+        cnpgClusterName: Schema.NullOr<typeof Schema.String>;
+        connectionString: Schema.NullOr<typeof Schema.String>;
+        dataMode: Schema.Literal<["none", "last-1d", "last-7d", "all"]>;
+        status: Schema.Literal<["provisioning", "ready", "destroyed", "degraded"]>;
+        createdAt: typeof Schema.String;
+        destroyedAt: Schema.NullOr<typeof Schema.String>;
+    }>>;
+    readonly destroy: import("../endpoint.js").Endpoint<"DELETE", "/projects/:id/preview-envs/:envId/branch-db", Schema.Struct<{
+        id: typeof Schema.String;
+        envId: typeof Schema.String;
+    }>, Schema.Schema.AnyNoContext | undefined, Schema.Schema.AnyNoContext | undefined, Schema.Struct<{
+        success: typeof Schema.Boolean;
+        branchId: typeof Schema.String;
+        status: Schema.Literal<["provisioning", "ready", "destroyed", "degraded"]>;
+    }>>;
+};
+//# sourceMappingURL=branch-databases.d.ts.map

package/dist/endpoints/branch-databases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-databases.d.ts","sourceRoot":"","sources":["../../src/endpoints/branch-databases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAiB/B,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuC3B,CAAA"}

package/dist/endpoints/branch-databases.js

@@ -0,0 +1,61 @@
+/**
+ * Branch Databases endpoints — per-preview-env Postgres branches (P0 Gap #2).
+ *
+ * Management-plane CRUD. BaaS runtime reads `DATABASE_URL` via env secrets
+ * like any other service — no runtime branch-DB surface here.
+ *
+ * Mount: `/projects/:id/preview-envs/:envId/branch-db` scoped to a preview
+ * environment. The `:id` params correspond to `projects.id` and
+ * `project_environments.id` (the preview env's environment row).
+ *
+ * See `docs/design/branch-db-per-preview.md` for the full design — this file
+ * is the scaffolded contract; actual CNPG provisioning lands in the
+ * controller (ops follow-up).
+ */
+import { Schema } from 'effect';
+import { defineEndpoint } from '../endpoint.js';
+import { BranchDatabase, CreateBranchDatabaseInput, DestroyBranchDatabaseResult, GetBranchDatabaseResult, ListBranchDatabasesResult, } from '../schemas/branch-database.js';
+const ProjectEnvPath = Schema.Struct({
+    id: Schema.String,
+    envId: Schema.String,
+});
+const ProjectIdPath = Schema.Struct({ id: Schema.String });
+export const branchDatabasesEndpoints = {
+    list: defineEndpoint({
+        method: 'GET',
+        path: '/projects/:id/preview-envs/branch-dbs',
+        params: ProjectIdPath,
+        response: ListBranchDatabasesResult,
+        plane: 'management',
+        summary: 'List branch databases across a project (admin view)',
+        tags: ['branch-databases'],
+    }),
+    create: defineEndpoint({
+        method: 'POST',
+        path: '/projects/:id/preview-envs/:envId/branch-db',
+        params: ProjectEnvPath,
+        body: CreateBranchDatabaseInput,
+        response: BranchDatabase,
+        plane: 'management',
+        summary: 'Create a branch database for a preview environment (async; poll GET for status=ready)',
+        tags: ['branch-databases'],
+    }),
+    get: defineEndpoint({
+        method: 'GET',
+        path: '/projects/:id/preview-envs/:envId/branch-db',
+        params: ProjectEnvPath,
+        response: GetBranchDatabaseResult,
+        plane: 'management',
+        summary: 'Get branch database status + connection string (when ready)',
+        tags: ['branch-databases'],
+    }),
+    destroy: defineEndpoint({
+        method: 'DELETE',
+        path: '/projects/:id/preview-envs/:envId/branch-db',
+        params: ProjectEnvPath,
+        response: DestroyBranchDatabaseResult,
+        plane: 'management',
+        summary: 'Destroy a branch database (tombstones the row; reclaims PVCs)',
+        tags: ['branch-databases'],
+    }),
+};

package/dist/endpoints/challenge.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Challenge endpoints — Console-plane step-up authentication. Production
+ * mounts at `/challenge/*` (see `apps/api/src/server/platform/app.ts`).
+ * Mirrors `apps/api/src/server/platform/routes/challenge.ts`.
+ */
+export declare const challengeEndpoints: {
+    readonly required: import("../endpoint.js").Endpoint<"GET", "/challenge/required", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        operation: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        required: typeof import("effect/Schema").Boolean;
+        level: import("effect/Schema").Literal<["strict_mfa", "strict", "moderate", "lax"]>;
+        identity: import("effect/Schema").Struct<{
+            verified: typeof import("effect/Schema").Boolean;
+            expiresAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            method: import("effect/Schema").NullOr<import("effect/Schema").Literal<["password", "email"]>>;
+        }>;
+        mfa: import("effect/Schema").Struct<{
+            verified: typeof import("effect/Schema").Boolean;
+            expiresAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            method: import("effect/Schema").NullOr<import("effect/Schema").Literal<["totp", "backup"]>>;
+        }>;
+        methods: import("effect/Schema").Struct<{
+            identity: import("effect/Schema").Array$<import("effect/Schema").Literal<["password", "email"]>>;
+            mfa: import("effect/Schema").Array$<import("effect/Schema").Literal<["totp", "backup"]>>;
+        }>;
+        user: import("effect/Schema").Struct<{
+            hasPassword: typeof import("effect/Schema").Boolean;
+            has2FA: typeof import("effect/Schema").Boolean;
+            maskedEmail: typeof import("effect/Schema").String;
+        }>;
+    }>>;
+    readonly sendCode: import("../endpoint.js").Endpoint<"POST", "/challenge/send-code", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        sent: typeof import("effect/Schema").Boolean;
+        expiresAt: typeof import("effect/Schema").String;
+        maskedEmail: typeof import("effect/Schema").String;
+    }>>;
+    readonly verifyIdentity: import("../endpoint.js").Endpoint<"POST", "/challenge/verify-identity", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        method: import("effect/Schema").Literal<["password", "email"]>;
+        value: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        verified: typeof import("effect/Schema").Boolean;
+        method: typeof import("effect/Schema").String;
+    }>>;
+    readonly verifyMfa: import("../endpoint.js").Endpoint<"POST", "/challenge/verify-mfa", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        method: import("effect/Schema").Literal<["totp", "backup"]>;
+        value: typeof import("effect/Schema").String;
+    }>, import("effect/Schema").Struct<{
+        verified: typeof import("effect/Schema").Boolean;
+        method: typeof import("effect/Schema").String;
+    }>>;
+    readonly status: import("../endpoint.js").Endpoint<"GET", "/challenge/status", import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Schema.AnyNoContext | undefined, import("effect/Schema").Struct<{
+        identity: import("effect/Schema").Struct<{
+            verifiedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            method: import("effect/Schema").NullOr<import("effect/Schema").Literal<["password", "email"]>>;
+        }>;
+        mfa: import("effect/Schema").Struct<{
+            verifiedAt: import("effect/Schema").NullOr<typeof import("effect/Schema").String>;
+            method: import("effect/Schema").NullOr<import("effect/Schema").Literal<["totp", "backup"]>>;
+        }>;
+    }>>;
+};
+//# sourceMappingURL=challenge.d.ts.map

package/dist/endpoints/challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../src/endpoints/challenge.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4CrB,CAAA"}