@sylphx/contract 0.2.0

package/dist/schemas/admin-audit.js

@@ -0,0 +1,508 @@
+/**
+ * Admin Audit — schemas for Console audit + per-service data + platform observability.
+ * Mirrors `/admin/audit/*`.
+ *
+ * Plane: `admin`.
+ *
+ * The audit subtree aggregates data from many per-project databases. Where a
+ * handler's shape is stable enough to lock down, we expose a typed
+ * `Schema.Struct(...)`. Where the payload is a pass-through from an evolving
+ * external surface (Loki / Tempo / Mimir / CNPG), we keep an envelope
+ * (`Schema.Struct({ available, ... })`) with the opaque tail as
+ * `Schema.Unknown` — giving consumers a guaranteed outer shape while letting
+ * the inner data evolve without contract bumps.
+ *
+ * Residual pure `Schema.Unknown` responses (ADR-084 final cleanup): only the
+ * per-project service audit endpoints that aggregate N disparate per-DB
+ * tables at once (the right fix is to split each into its own typed
+ * endpoint in a future wave).
+ */
+import { Schema } from 'effect';
+// ── Common envelopes (reused across all per-project endpoints) ────────────
+/**
+ * Every per-project audit endpoint returns the project it summarises. We
+ * hoist this into a shared schema so the envelope is typed even when the
+ * rest of the body has service-specific fields.
+ */
+export const AdminAuditAppRef = Schema.Struct({
+    id: Schema.String,
+    name: Schema.String,
+    slug: Schema.String,
+});
+/** Standard success envelope for audit mutations (pause/resume/fire/delete). */
+export const AdminAuditMutationSuccess = Schema.Struct({
+    success: Schema.Boolean,
+    message: Schema.optional(Schema.String),
+});
+// ── Audit logs (strict) ────────────────────────────────────────────────────
+export const AdminAuditLogAction = Schema.String;
+export const AdminAuditActor = Schema.Struct({
+    id: Schema.String,
+    name: Schema.NullOr(Schema.String),
+    email: Schema.NullOr(Schema.String),
+});
+export const AdminAuditLogEntry = Schema.Struct({
+    id: Schema.String,
+    action: AdminAuditLogAction,
+    resourceType: Schema.NullOr(Schema.String),
+    resourceId: Schema.NullOr(Schema.String),
+    metadata: Schema.NullOr(Schema.Unknown),
+    ipAddress: Schema.NullOr(Schema.String),
+    createdAt: Schema.String,
+    actor: Schema.NullOr(AdminAuditActor),
+    user: Schema.NullOr(AdminAuditActor),
+});
+export const AdminRecentActivityEntry = Schema.Struct({
+    id: Schema.String,
+    action: Schema.String,
+    resource: Schema.NullOr(Schema.String),
+    resourceId: Schema.NullOr(Schema.String),
+    details: Schema.NullOr(Schema.Unknown),
+    createdAt: Schema.String,
+    user: Schema.NullOr(Schema.Struct({
+        name: Schema.NullOr(Schema.String),
+        email: Schema.NullOr(Schema.String),
+    })),
+});
+// ── Params ─────────────────────────────────────────────────────────────────
+export const AdminAuditProjectParams = Schema.Struct({ id: Schema.String });
+export const AdminAuditTriggerParams = Schema.Struct({
+    id: Schema.String,
+    triggerId: Schema.String,
+});
+export const AdminAuditTraceParams = Schema.Struct({
+    id: Schema.String,
+    traceId: Schema.String,
+});
+// ── Query ──────────────────────────────────────────────────────────────────
+export const AdminGetAuditLogsQuery = Schema.Struct({
+    limit: Schema.optional(Schema.String),
+    offset: Schema.optional(Schema.String),
+    page: Schema.optional(Schema.String),
+    userId: Schema.optional(Schema.String),
+    actorId: Schema.optional(Schema.String),
+    action: Schema.optional(Schema.String),
+    resourceType: Schema.optional(Schema.String),
+    days: Schema.optional(Schema.String),
+    statsOnly: Schema.optional(Schema.String),
+    /**
+     * Round 3A G-4 — physical writer-plane filter.
+     *   `'api'`     → Platform-plane events (apps/api/* — Console, CLI, ops)
+     *   `'runtime'` → BaaS-plane events (apps/runtime/* — deployed apps)
+     * Mirrors Clerk's FAPI/BAPI segregation; lets auditors answer
+     * "any admin-plane mutation that affected this tenant?" without
+     * resorting to action-string heuristics.
+     */
+    source: Schema.optional(Schema.Literal('api', 'runtime')),
+});
+export const AdminGetRecentActivityQuery = Schema.Struct({
+    projectId: Schema.String,
+    limit: Schema.optional(Schema.String),
+});
+/** Reusable generic query for ranged stats inside audit endpoints. */
+export const AdminAuditDateRangeQuery = Schema.Struct({
+    startDate: Schema.optional(Schema.String),
+    endDate: Schema.optional(Schema.String),
+});
+/**
+ * Status + limit filter shared by `listRuns` + `listWorkerRuns` (scheduler
+ * + worker execution ledgers). Status is an open string on the wire — the
+ * handler performs the enum narrowing because the exact set of states
+ * varies by project runtime.
+ */
+export const AdminAuditRunFilterQuery = Schema.Struct({
+    status: Schema.optional(Schema.String),
+    limit: Schema.optional(Schema.String),
+});
+/**
+ * Shared pagination query for admin audit list endpoints that fan out N
+ * items per project (push subscribers, etc.).
+ */
+export const AdminAuditPaginationQuery = Schema.Struct({
+    limit: Schema.optional(Schema.String),
+    offset: Schema.optional(Schema.String),
+});
+// ── Responses: logs + activity (strict) ───────────────────────────────────
+export const AdminGetAuditLogsResult = Schema.Union(Schema.Struct({
+    logs: Schema.Array(AdminAuditLogEntry),
+    total: Schema.Number,
+    page: Schema.Number,
+    totalPages: Schema.Number,
+}), Schema.Struct({
+    totalActions: Schema.Number,
+    actionsByType: Schema.Record({ key: Schema.String, value: Schema.Number }),
+}));
+export const AdminGetRecentActivityResult = Schema.Struct({
+    logs: Schema.Array(AdminRecentActivityEntry),
+});
+// ── Responses: operator dashboard (strict) ────────────────────────────────
+const AdminAuditDashboardProjectSummary = Schema.Struct({
+    id: Schema.String,
+    name: Schema.String,
+    slug: Schema.String,
+    description: Schema.NullOr(Schema.String),
+    domains: Schema.Array(Schema.String),
+    isActive: Schema.Boolean,
+});
+const AdminAuditUsageTotals = Schema.Struct({
+    totalRequests: Schema.Number,
+    totalErrors: Schema.Number,
+    aiTokens: Schema.Number,
+    aiCost: Schema.Number,
+    storageOps: Schema.Number,
+    emailsSent: Schema.Number,
+    jobInvocations: Schema.Number,
+    notificationsSent: Schema.Number,
+    analyticsEvents: Schema.Number,
+    webhookDeliveries: Schema.Number,
+    errorEvents: Schema.Number,
+});
+const AdminAuditInvoiceSummary = Schema.Struct({
+    count: Schema.Number,
+    total: Schema.Number,
+});
+export const AdminAuditDashboardResult = Schema.Struct({
+    projects: Schema.Array(AdminAuditDashboardProjectSummary),
+    totalProjects: Schema.Number,
+    totalUsers: Schema.Number,
+    totalOrgs: Schema.Number,
+    mrr: Schema.Number,
+    arr: Schema.Number,
+    churnRate: Schema.Number,
+    ltv: Schema.Number,
+    activeSubscriptions: Schema.Number,
+    totalCreditBalance: Schema.Number,
+    monthlyRevenue: Schema.Number,
+    revenueGrowth: Schema.Number,
+    outstandingInvoices: AdminAuditInvoiceSummary,
+    paidInvoices: AdminAuditInvoiceSummary,
+    usage: AdminAuditUsageTotals,
+    newUsersThisMonth: Schema.Number,
+    newOrgsThisMonth: Schema.Number,
+    userGrowth: Schema.Number,
+});
+export const AdminAuditChartsResult = Schema.Struct({
+    revenueTrendData: Schema.Array(Schema.Struct({ date: Schema.String, revenue: Schema.Number })),
+    userGrowthData: Schema.Array(Schema.Struct({ date: Schema.String, users: Schema.Number, newUsers: Schema.Number })),
+    errorRateData: Schema.Array(Schema.Struct({
+        date: Schema.String,
+        requests: Schema.Number,
+        errors: Schema.Number,
+        errorRate: Schema.Number,
+    })),
+    serviceUsageData: Schema.Array(Schema.Struct({
+        service: Schema.String,
+        usage: Schema.Number,
+        cost: Schema.Number,
+    })),
+});
+const AdminAuditServiceStatus = Schema.Literal('healthy', 'degraded', 'down');
+export const AdminAuditHealthResult = Schema.Struct({
+    services: Schema.Array(Schema.Struct({
+        name: Schema.String,
+        status: AdminAuditServiceStatus,
+        latency: Schema.optional(Schema.Number),
+        lastCheck: Schema.String,
+        message: Schema.String,
+    })),
+    recentErrors: Schema.Array(Schema.Unknown),
+    uptime: Schema.Struct({
+        percentage: Schema.Number,
+    }),
+});
+export const AdminAuditAnalyticsResult = Schema.Struct({
+    totalUsers: Schema.Number,
+    newUsers30d: Schema.Number,
+    dau: Schema.Number,
+    mau: Schema.Number,
+    totalEvents: Schema.Number,
+    topEvents: Schema.Array(Schema.Struct({
+        eventName: Schema.NullOr(Schema.String),
+        count: Schema.Number,
+    })),
+    signupsByDay: Schema.Array(Schema.Struct({ date: Schema.String, count: Schema.Number })),
+    projectStats: Schema.Array(Schema.Struct({
+        projectId: Schema.String,
+        projectName: Schema.String,
+        userCount: Schema.Number,
+        eventCount: Schema.Number,
+    })),
+    activeSubscriptions: Schema.Number,
+    retention: Schema.Number,
+});
+// ── Responses: per-project overview (strict) ──────────────────────────────
+const AdminAuditDatabaseRef = Schema.NullOr(Schema.Struct({
+    status: Schema.String,
+    region: Schema.NullOr(Schema.String),
+}));
+export const AdminAuditProjectOverviewResult = Schema.Struct({
+    app: Schema.Struct({
+        id: Schema.String,
+        name: Schema.String,
+        slug: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        isActive: Schema.Boolean,
+        isHibernating: Schema.Boolean,
+    }),
+    stats: Schema.Struct({
+        usersCount: Schema.Number,
+        aiRequestsCount: Schema.Number,
+        storageCount: Schema.Number,
+        errorsCount: Schema.Number,
+        jobsCount: Schema.Number,
+        flagsCount: Schema.Number,
+    }),
+    database: AdminAuditDatabaseRef,
+});
+export const AdminAuditServicesOverviewResult = Schema.Struct({
+    app: Schema.Struct({
+        id: Schema.String,
+        name: Schema.String,
+        slug: Schema.String,
+        webhookUrl: Schema.NullOr(Schema.String),
+    }),
+    metrics: Schema.Struct({
+        totalUsers: Schema.Number,
+        eventsThisWeek: Schema.Number,
+        unresolvedErrors: Schema.Number,
+        errorsThisWeek: Schema.Number,
+        aiRequestsThisMonth: Schema.Number,
+        aiCostThisMonth: Schema.Number,
+        totalFiles: Schema.Number,
+        totalStorageBytes: Schema.Number,
+        totalFlags: Schema.Number,
+        activeFlags: Schema.Number,
+        jobsThisWeek: Schema.Number,
+        runningJobs: Schema.Number,
+        pushSubscribers: Schema.Number,
+        webhookDelivered: Schema.Number,
+        webhookFailed: Schema.Number,
+        consentRecords: Schema.Number,
+        totalReferrals: Schema.Number,
+        completedReferrals: Schema.Number,
+        totalSubscribers: Schema.Number,
+        verifiedSubscribers: Schema.Number,
+        totalPlans: Schema.Number,
+        activeSubscriptions: Schema.Number,
+    }),
+    database: AdminAuditDatabaseRef,
+});
+// ── Responses: AI audit (strict) ──────────────────────────────────────────
+export const AdminAuditAiResult = Schema.Struct({
+    app: AdminAuditAppRef,
+    statsThisMonth: Schema.Struct({
+        requests: Schema.Number,
+        inputTokens: Schema.Number,
+        outputTokens: Schema.Number,
+        costMicrodollars: Schema.Number,
+    }),
+    statsLastMonth: Schema.Struct({
+        requests: Schema.Number,
+        costMicrodollars: Schema.Number,
+    }),
+    usageByDay: Schema.Array(Schema.Struct({
+        date: Schema.String,
+        requests: Schema.Number,
+        cost: Schema.Number,
+    })),
+    usageByModel: Schema.Array(Schema.Struct({
+        model: Schema.NullOr(Schema.String),
+        requests: Schema.Number,
+        cost: Schema.Number,
+    })),
+    usageByProvider: Schema.Array(Schema.Struct({
+        provider: Schema.String,
+        requests: Schema.Number,
+        cost: Schema.Number,
+    })),
+});
+export const AdminAuditAiLogsResult = Schema.Struct({
+    logs: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        requestType: Schema.String,
+        provider: Schema.String,
+        model: Schema.NullOr(Schema.String),
+        inputTokens: Schema.Number,
+        outputTokens: Schema.Number,
+        totalTokens: Schema.Number,
+        providerCostMicrodollars: Schema.Number,
+        costMicrodollars: Schema.Number,
+        latencyMs: Schema.Number,
+        success: Schema.Boolean,
+        errorMessage: Schema.NullOr(Schema.String),
+        errorCode: Schema.NullOr(Schema.String),
+        metadata: Schema.NullOr(Schema.Unknown),
+        createdAt: Schema.String,
+    })),
+    pagination: Schema.Struct({
+        page: Schema.Number,
+        limit: Schema.Number,
+        total: Schema.Number,
+        totalPages: Schema.Number,
+    }),
+});
+export const AdminAuditAiRatesResult = Schema.Struct({
+    currentRPM: Schema.Number,
+    currentTPM: Schema.Number,
+    averageRPM: Schema.Number,
+    averageTPM: Schema.Number,
+    peakRPM: Schema.Number,
+    peakTPM: Schema.Number,
+    peakMinute: Schema.NullOr(Schema.String),
+    breakdown: Schema.Array(Schema.Struct({
+        minute: Schema.String,
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: Schema.Number,
+        avgLatency: Schema.Number,
+    })),
+});
+export const AdminAuditAiSummaryResult = Schema.Struct({
+    period: Schema.String,
+    totalRequests: Schema.Number,
+    totalInputTokens: Schema.Number,
+    totalOutputTokens: Schema.Number,
+    totalCost: Schema.Number,
+    avgLatency: Schema.Number,
+    p95Latency: Schema.Number,
+    successRate: Schema.Number,
+    failedRequests: Schema.Number,
+    topModels: Schema.Array(Schema.Struct({
+        model: Schema.NullOr(Schema.String),
+        requests: Schema.Number,
+        tokens: Schema.Number,
+        cost: Schema.Number,
+    })),
+});
+// ── Responses: observability (envelope-typed, opaque inner payloads) ──────
+/**
+ * Loki / Tempo / Mimir responses — the inner entries/series/spans are typed
+ * by the upstream store (and vary with Grafana versions). We lock the
+ * envelope and leave payloads opaque.
+ */
+export const AdminAuditObsLogsResult = Schema.Struct({
+    entries: Schema.Array(Schema.Unknown),
+    hasMore: Schema.Boolean,
+});
+export const AdminAuditObsMetricsResult = Schema.Struct({
+    requestRate: Schema.Array(Schema.Unknown),
+    errorRate: Schema.Array(Schema.Unknown),
+    latencyP95: Schema.Array(Schema.Unknown),
+    cpuUsage: Schema.Array(Schema.Unknown),
+    memoryUsage: Schema.Array(Schema.Unknown),
+    podCount: Schema.Array(Schema.Unknown),
+});
+export const AdminAuditObsMetricsRangeResult = Schema.Struct({
+    series: Schema.Array(Schema.Unknown),
+});
+export const AdminAuditObsTracesResult = Schema.Struct({
+    traces: Schema.Array(Schema.Unknown),
+});
+// ── Responses: billing audit (strict) ─────────────────────────────────────
+const AdminAuditBillingService = Schema.Struct({
+    service: Schema.String,
+    usage: Schema.Number,
+    previousUsage: Schema.Number,
+    costMicrodollars: Schema.Number,
+    previousCostMicrodollars: Schema.Number,
+    unit: Schema.String,
+});
+export const AdminAuditBillingUsageResult = Schema.Struct({
+    app: AdminAuditAppRef,
+    currentMonth: Schema.String,
+    services: Schema.Array(AdminAuditBillingService),
+    costByDay: Schema.Array(Schema.Struct({
+        date: Schema.String,
+        ai: Schema.Number,
+        storage: Schema.Number,
+        database: Schema.Number,
+        email: Schema.Number,
+        jobs: Schema.Number,
+    })),
+    totalCostThisMonth: Schema.Number,
+    totalCostLastMonth: Schema.Number,
+    monthlyBudget: Schema.Number,
+    alertThreshold: Schema.Number,
+    costAlerts: Schema.Array(Schema.Struct({
+        service: Schema.String,
+        severity: Schema.String,
+        message: Schema.String,
+    })),
+});
+export const AdminAuditBillingResult = Schema.Struct({
+    app: AdminAuditAppRef,
+    plans: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        slug: Schema.String,
+        name: Schema.String,
+        description: Schema.NullOr(Schema.String),
+        features: Schema.Array(Schema.Unknown),
+        priceMonthly: Schema.NullOr(Schema.Number),
+        priceAnnual: Schema.NullOr(Schema.Number),
+        priceLifetime: Schema.NullOr(Schema.Number),
+        isActive: Schema.Boolean,
+    })),
+    planCount: Schema.Number,
+    activePlanCount: Schema.Number,
+    subscriptionStats: Schema.Struct({
+        total: Schema.Number,
+        active: Schema.Number,
+        trialing: Schema.Number,
+        pastDue: Schema.Number,
+        cancelled: Schema.Number,
+    }),
+    revenueThisMonthCents: Schema.Number,
+    revenueLastMonthCents: Schema.Number,
+    revenueGrowthPercent: Schema.Number,
+    recentTransactions: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        amountCents: Schema.Number,
+        currency: Schema.String,
+        type: Schema.String,
+        status: Schema.String,
+        createdAt: Schema.String,
+    })),
+    hasStripeConnected: Schema.Boolean,
+});
+// ── Responses: runs/workers list (strict) ─────────────────────────────────
+export const AdminAuditRunsListResult = Schema.Struct({
+    runs: Schema.Array(Schema.Struct({
+        id: Schema.String,
+        status: Schema.String,
+        image: Schema.NullOr(Schema.String),
+        exitCode: Schema.NullOr(Schema.Number),
+        durationMs: Schema.NullOr(Schema.Number),
+        startedAt: Schema.NullOr(Schema.String),
+        completedAt: Schema.NullOr(Schema.String),
+        createdAt: Schema.String,
+        errorMessage: Schema.NullOr(Schema.String),
+    })),
+    total: Schema.Number,
+});
+/**
+ * Per-project "service audit" endpoints (auth, analytics, jobs, workers,
+ * push, email, consent, webhooks, referrals, newsletter, engagement, flags,
+ * monitoring, storage, functions, triggers) aggregate across multiple
+ * per-project DB tables and their inner shape evolves with the Console
+ * dashboard. We lock the outer envelope (`{ app: AdminAuditAppRef, ... }`)
+ * and keep a loose service-specific record — tightening each into a fully
+ * typed schema is tracked as follow-up work.
+ *
+ * Note: this is a Struct without `.schema`-level extras, so the runtime
+ * `app` envelope is enforced while additional service fields are permitted
+ * by Effect Schema's default "open record" semantics.
+ */
+export const AdminAuditServiceEnvelope = Schema.Struct({
+    app: AdminAuditAppRef,
+});
+// ── Remaining opaque passthrough (database metrics / queries / tables) ────
+/**
+ * `/obs/traces/:traceId` returns the raw Tempo payload; `/database/*` returns
+ * a CNPG real-time metrics passthrough. Both are owned by upstream stores
+ * with their own versioning contract — we expose as `Schema.Unknown` and
+ * accept that changes track the upstream.
+ */
+export const AdminAuditUnknownResult = Schema.Unknown;
+// NOTE: `AdminProjectRef` is exported from `./admin-project-users.ts` with a
+// richer shape (org + slug + name + ownerEmail) — consumers should import
+// from there. The audit envelope's project ref is `AdminAuditAppRef`.

package/dist/schemas/admin-billing.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Admin Billing — schemas for internal operator-console billing management.
+ * Mirrors `/admin/billing/*`.
+ *
+ * Plane: `admin`. Consolidates usage / invoices / balances / stats / pricing
+ * / overview / analysis into one namespace — the route handlers aggregate
+ * cross-org data in ways that evolve with the dashboard, so most responses
+ * are permissive (`Schema.Unknown`) and will be tightened in a follow-up wave.
+ */
+import { Schema } from 'effect';
+export declare const AdminBillingOrgParams: Schema.Struct<{
+    orgId: typeof Schema.String;
+}>;
+export type AdminBillingOrgParams = typeof AdminBillingOrgParams.Type;
+export declare const AdminBillingInvoiceParams: Schema.Struct<{
+    invoiceId: typeof Schema.String;
+}>;
+export type AdminBillingInvoiceParams = typeof AdminBillingInvoiceParams.Type;
+export declare const AdminBillingListQuery: Schema.Struct<{
+    limit: Schema.optional<typeof Schema.String>;
+    offset: Schema.optional<typeof Schema.String>;
+    status: Schema.optional<typeof Schema.String>;
+}>;
+export type AdminBillingListQuery = typeof AdminBillingListQuery.Type;
+export declare const AdminBillingUsageQuery: Schema.Struct<{
+    startDate: Schema.optional<typeof Schema.String>;
+    endDate: Schema.optional<typeof Schema.String>;
+    period: Schema.optional<typeof Schema.String>;
+}>;
+export type AdminBillingUsageQuery = typeof AdminBillingUsageQuery.Type;
+export declare const AdminBillingMonthlyQuery: Schema.Struct<{
+    month: Schema.optional<typeof Schema.String>;
+    year: Schema.optional<typeof Schema.String>;
+}>;
+export type AdminBillingMonthlyQuery = typeof AdminBillingMonthlyQuery.Type;
+export declare const AdminBillingTransactionsQuery: Schema.Struct<{
+    limit: Schema.optional<typeof Schema.String>;
+    offset: Schema.optional<typeof Schema.String>;
+}>;
+export type AdminBillingTransactionsQuery = typeof AdminBillingTransactionsQuery.Type;
+/**
+ * Inputs for credit + balance settings + pricing + invoice generate stay
+ * permissive (`Schema.Record`) — the route handler validates the shape; the
+ * contract mirrors the wire exactly without pre-locking every field.
+ */
+export declare const AdminBillingUnknownInput: Schema.Record$<typeof Schema.String, typeof Schema.Unknown>;
+export type AdminBillingUnknownInput = typeof AdminBillingUnknownInput.Type;
+export declare const AdminBillingAddCreditsInput: Schema.Struct<{
+    amountCents: typeof Schema.Number;
+    description: Schema.optional<typeof Schema.String>;
+}>;
+export type AdminBillingAddCreditsInput = typeof AdminBillingAddCreditsInput.Type;
+export declare const AdminBillingUpdateSettingsInput: Schema.Struct<{
+    lowBalanceThresholdCents: Schema.optional<typeof Schema.Number>;
+    autoTopupEnabled: Schema.optional<typeof Schema.Boolean>;
+    autoTopupAmountCents: Schema.optional<typeof Schema.Number>;
+    autoTopupThresholdCents: Schema.optional<typeof Schema.Number>;
+}>;
+export type AdminBillingUpdateSettingsInput = typeof AdminBillingUpdateSettingsInput.Type;
+/**
+ * Billing aggregates (overview, stats, analysis, pricing tables) are opaque
+ * from the contract's perspective — the Console dashboard is the SSOT of
+ * shape and it changes faster than the contract would. Keep `Schema.Unknown`
+ * here and tighten in a future wave.
+ */
+export declare const AdminBillingUnknownResult: typeof Schema.Unknown;
+export type AdminBillingUnknownResult = typeof AdminBillingUnknownResult.Type;
+/**
+ * `/admin/billing/overview` — operator-dashboard billing aggregate. Opaque
+ * passthrough; consumers narrow at the UI boundary.
+ */
+export type AdminGetBillingOverviewResult = typeof AdminBillingUnknownResult.Type;
+//# sourceMappingURL=admin-billing.d.ts.map

package/dist/schemas/admin-billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-billing.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-billing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAI/B,eAAO,MAAM,qBAAqB;;EAA0C,CAAA;AAC5E,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AACrE,eAAO,MAAM,yBAAyB;;EAA8C,CAAA;AACpF,MAAM,MAAM,yBAAyB,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAA;AAI7E,eAAO,MAAM,qBAAqB;;;;EAIhC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAA;AAErE,eAAO,MAAM,sBAAsB;;;;EAIjC,CAAA;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,eAAO,MAAM,wBAAwB;;;EAGnC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,6BAA6B;;;EAGxC,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,OAAO,6BAA6B,CAAC,IAAI,CAAA;AAIrF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,6DAGnC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,eAAO,MAAM,2BAA2B;;;EAGtC,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA;AAEjF,eAAO,MAAM,+BAA+B;;;;;EAK1C,CAAA;AACF,MAAM,MAAM,+BAA+B,GAAG,OAAO,+BAA+B,CAAC,IAAI,CAAA;AAIzF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,uBAAiB,CAAA;AACvD,MAAM,MAAM,yBAAyB,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAA;AAE7E;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,OAAO,yBAAyB,CAAC,IAAI,CAAA"}

package/dist/schemas/admin-billing.js

@@ -0,0 +1,60 @@
+/**
+ * Admin Billing — schemas for internal operator-console billing management.
+ * Mirrors `/admin/billing/*`.
+ *
+ * Plane: `admin`. Consolidates usage / invoices / balances / stats / pricing
+ * / overview / analysis into one namespace — the route handlers aggregate
+ * cross-org data in ways that evolve with the dashboard, so most responses
+ * are permissive (`Schema.Unknown`) and will be tightened in a follow-up wave.
+ */
+import { Schema } from 'effect';
+// ── Params ─────────────────────────────────────────────────────────────────
+export const AdminBillingOrgParams = Schema.Struct({ orgId: Schema.String });
+export const AdminBillingInvoiceParams = Schema.Struct({ invoiceId: Schema.String });
+// ── Query ──────────────────────────────────────────────────────────────────
+export const AdminBillingListQuery = Schema.Struct({
+    limit: Schema.optional(Schema.String),
+    offset: Schema.optional(Schema.String),
+    status: Schema.optional(Schema.String),
+});
+export const AdminBillingUsageQuery = Schema.Struct({
+    startDate: Schema.optional(Schema.String),
+    endDate: Schema.optional(Schema.String),
+    period: Schema.optional(Schema.String),
+});
+export const AdminBillingMonthlyQuery = Schema.Struct({
+    month: Schema.optional(Schema.String),
+    year: Schema.optional(Schema.String),
+});
+export const AdminBillingTransactionsQuery = Schema.Struct({
+    limit: Schema.optional(Schema.String),
+    offset: Schema.optional(Schema.String),
+});
+// ── Inputs ─────────────────────────────────────────────────────────────────
+/**
+ * Inputs for credit + balance settings + pricing + invoice generate stay
+ * permissive (`Schema.Record`) — the route handler validates the shape; the
+ * contract mirrors the wire exactly without pre-locking every field.
+ */
+export const AdminBillingUnknownInput = Schema.Record({
+    key: Schema.String,
+    value: Schema.Unknown,
+});
+export const AdminBillingAddCreditsInput = Schema.Struct({
+    amountCents: Schema.Number,
+    description: Schema.optional(Schema.String),
+});
+export const AdminBillingUpdateSettingsInput = Schema.Struct({
+    lowBalanceThresholdCents: Schema.optional(Schema.Number),
+    autoTopupEnabled: Schema.optional(Schema.Boolean),
+    autoTopupAmountCents: Schema.optional(Schema.Number),
+    autoTopupThresholdCents: Schema.optional(Schema.Number),
+});
+// ── Responses ──────────────────────────────────────────────────────────────
+/**
+ * Billing aggregates (overview, stats, analysis, pricing tables) are opaque
+ * from the contract's perspective — the Console dashboard is the SSOT of
+ * shape and it changes faster than the contract would. Keep `Schema.Unknown`
+ * here and tighten in a future wave.
+ */
+export const AdminBillingUnknownResult = Schema.Unknown;

package/dist/schemas/admin-bootstrap.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Admin Bootstrap — reset-bootstrap-window schema (ADR-089 §2.7 Phase 7 Commit B).
+ *
+ * Platform-plane endpoint that forcibly re-opens the Appwrite-pattern
+ * bootstrap window for an already-booted cluster. The window normally
+ * opens ONCE at first boot (SETNX with 10-min TTL) and closes itself on
+ * first successful super-admin signup. This reset path is the documented
+ * recovery for:
+ *
+ *   - Operator missed the window (10 minutes elapsed without signup).
+ *   - A second recovery super-admin needs to be created later (e.g. the
+ *     original admin's credentials are lost and there are no other
+ *     admins to promote via the admin-users surface).
+ *
+ * Auth: `superAdminAuth` (platform session cookie, super_admin role) —
+ * see `apps/api/src/server/platform/middleware/auth.ts:462`. Deliberately
+ * NOT service-token-scoped: this is a power operator action, not an
+ * automation hook; it SHOULD require a human-in-the-loop session.
+ */
+import { Schema } from 'effect';
+/** Input: no body. The POST verb + super-admin auth is the whole request. */
+export declare const ResetBootstrapWindowInput: Schema.Struct<{}>;
+/** Output: confirm window state + TTL so the caller knows when it expires. */
+export declare const ResetBootstrapWindowResult: Schema.Struct<{
+    /** Always `true` when the endpoint returns 200. */
+    opened: typeof Schema.Boolean;
+    /** Seconds until the window closes again. Mirrors `BOOTSTRAP_WINDOW_TTL_SECONDS`. */
+    ttlSeconds: typeof Schema.Number;
+    /** Human-readable instruction for the next step. */
+    message: typeof Schema.String;
+}>;
+//# sourceMappingURL=admin-bootstrap.d.ts.map

package/dist/schemas/admin-bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-bootstrap.d.ts","sourceRoot":"","sources":["../../src/schemas/admin-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,mBAGpC,CAAA;AAEF,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B;IACtC,mDAAmD;;IAEnD,qFAAqF;;IAErF,oDAAoD;;EAKnD,CAAA"}