@sylphx/management 0.1.0 → 0.2.0

package/dist/authSettings.js

@@ -0,0 +1,39 @@
+/**
+ * Platform-admin auth settings — OAuth provider configuration, auth
+ * policy settings, auth stats. Distinct from `@sylphx/sdk.auth.*` (end-
+ * user credentials on the BaaS plane) and from session / password /
+ * device endpoints (which are Management but operator-self-service).
+ *
+ * Mirrors the `authAdminEndpoints` portion of
+ * `apps/api/src/server/platform/routes/auth.ts`.
+ */
+import { authAdminEndpoints } from '@sylphx/contract';
+import { request } from './http.js';
+export const getOAuthProviders = (client) => {
+    const { method, path } = authAdminEndpoints.getOAuthProviders;
+    return request(client, method, path);
+};
+export const updateOAuthProviders = (client, body) => {
+    const { method, path } = authAdminEndpoints.updateOAuthProviders;
+    return request(client, method, path, { body });
+};
+/**
+ * Rotate a single OAuth provider's client secret without touching the
+ * rest of the provider list. Convenience wrapper over
+ * `updateOAuthProviders` — Phase 4b SOTA addition (ADR-089 Matrix 2 gap).
+ */
+export const rotateOAuthSecret = (client, provider, newClientSecret) => updateOAuthProviders(client, {
+    providers: [{ provider, enabled: true, clientSecret: newClientSecret }],
+});
+export const getAuthSettings = (client) => {
+    const { method, path } = authAdminEndpoints.getAuthSettings;
+    return request(client, method, path);
+};
+export const updateAuthSettings = (client, body) => {
+    const { method, path } = authAdminEndpoints.updateAuthSettings;
+    return request(client, method, path, { body });
+};
+export const getAuthStats = (client) => {
+    const { method, path } = authAdminEndpoints.getAuthStats;
+    return request(client, method, path);
+};

package/dist/backups.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Database / storage backups — list / trigger / restore / delete.
+ *
+ *   GET    /backups?projectId=&envId=
+ *   POST   /backups/trigger           — schedule a fresh backup
+ *   POST   /backups/:id/restore       — restore into same or alternate DB
+ *   DELETE /backups/:id
+ *
+ * Routes live under the Platform API (`/api/v1/backups/*`). Previously
+ * accessed via `authedFetch` in the CLI; promoted to a first-class SDK
+ * module per ADR-077 trio-completeness.
+ */
+import type { Client } from './client.js';
+export type BackupStatus = 'completed' | 'in_progress' | 'failed';
+export interface Backup {
+    readonly id: string;
+    readonly projectId: string;
+    readonly envId: string;
+    readonly key: string;
+    readonly timestamp: string;
+    readonly sizeBytes: number;
+    readonly status: BackupStatus;
+}
+export interface ListResult {
+    readonly backups: readonly Backup[];
+    readonly total: number;
+}
+export declare const list: (client: Client, projectId: string, envId?: string) => Promise<ListResult>;
+export declare const trigger: (client: Client, projectId: string, envId: string) => Promise<{
+    backup: Backup;
+}>;
+export declare const restore: (client: Client, backupId: string, targetDatabaseUrl?: string) => Promise<{
+    success: boolean;
+    message: string;
+}>;
+/**
+ * Point-in-time recovery. Targets a specific timestamp between the most
+ * recent base backup and current time; the platform walks WAL to land
+ * exactly there. Phase 4b Matrix-2 gap closure.
+ */
+export declare const restorePointInTime: (client: Client, databaseId: string, body: {
+    /** RFC-3339 timestamp to restore to (must lie within WAL retention window). */
+    readonly pointInTime: string;
+    /** When true, restore into the same DB in place (destructive). Otherwise a new branch DB is created. */
+    readonly inPlace?: boolean;
+    /** Optional explicit target database URL for restore-to-external. */
+    readonly targetDatabaseUrl?: string;
+}) => Promise<{
+    success: boolean;
+    message: string;
+    restoredToTimestamp: string;
+}>;
+/**
+ * In-place restore from a known backup — overwrites the source DB
+ * without a new branch. Destructive; requires the caller to hold a
+ * maintenance window.
+ */
+export declare const restoreInPlace: (client: Client, backupId: string) => Promise<{
+    success: boolean;
+    message: string;
+}>;
+declare const _delete: (client: Client, backupId: string) => Promise<{
+    success: boolean;
+}>;
+export { _delete as delete };
+//# sourceMappingURL=backups.d.ts.map

package/dist/backups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backups.d.ts","sourceRoot":"","sources":["../src/backups.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAA;AAEjE,MAAM,WAAW,MAAM;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAC7B;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACtB;AAED,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,UAAU,CACvB,CAAA;AAEpE,eAAO,MAAM,OAAO,GACnB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAC+C,CAAA;AAE5E,eAAO,MAAM,OAAO,GACnB,QAAQ,MAAM,EACd,UAAU,MAAM,EAChB,oBAAoB,MAAM,KACxB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAG7C,CAAA;AAEH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAC9B,QAAQ,MAAM,EACd,YAAY,MAAM,EAClB,MAAM;IACL,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,wGAAwG;IACxG,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACnC,KACC,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,CACkB,CAAA;AAE/F;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,UAAU,MAAM,KACd,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CACqC,CAAA;AAErF,QAAA,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CACV,CAAA;AACtE,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA"}

package/dist/backups.js

@@ -0,0 +1,32 @@
+/**
+ * Database / storage backups — list / trigger / restore / delete.
+ *
+ *   GET    /backups?projectId=&envId=
+ *   POST   /backups/trigger           — schedule a fresh backup
+ *   POST   /backups/:id/restore       — restore into same or alternate DB
+ *   DELETE /backups/:id
+ *
+ * Routes live under the Platform API (`/api/v1/backups/*`). Previously
+ * accessed via `authedFetch` in the CLI; promoted to a first-class SDK
+ * module per ADR-077 trio-completeness.
+ */
+import { request } from './http.js';
+export const list = (client, projectId, envId) => request(client, 'GET', '/backups', { query: { projectId, envId } });
+export const trigger = (client, projectId, envId) => request(client, 'POST', '/backups/trigger', { body: { projectId, envId } });
+export const restore = (client, backupId, targetDatabaseUrl) => request(client, 'POST', `/backups/${encodeURIComponent(backupId)}/restore`, {
+    body: targetDatabaseUrl ? { targetDatabaseUrl } : {},
+});
+/**
+ * Point-in-time recovery. Targets a specific timestamp between the most
+ * recent base backup and current time; the platform walks WAL to land
+ * exactly there. Phase 4b Matrix-2 gap closure.
+ */
+export const restorePointInTime = (client, databaseId, body) => request(client, 'POST', `/backups/databases/${encodeURIComponent(databaseId)}/pitr`, { body });
+/**
+ * In-place restore from a known backup — overwrites the source DB
+ * without a new branch. Destructive; requires the caller to hold a
+ * maintenance window.
+ */
+export const restoreInPlace = (client, backupId) => request(client, 'POST', `/backups/${encodeURIComponent(backupId)}/restore-in-place`);
+const _delete = (client, backupId) => request(client, 'DELETE', `/backups/${encodeURIComponent(backupId)}`);
+export { _delete as delete };

package/dist/billing.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Billing — subscription + plan catalogue.
+ *
+ *   GET  /billing/subscription/me?projectId=      — caller's active plan (or null)
+ *   GET  /billing/plans?projectId=                — catalogue available to this project
+ *   POST /billing/subscription/update             — switch plan / interval
+ *
+ * Plan switches are synchronous on the Stripe side — the API returns once
+ * Stripe has accepted the update, so callers see the new tier immediately.
+ */
+import type { Client } from './client.js';
+export interface CurrentPlan {
+    readonly id: string;
+    readonly planSlug: string;
+    readonly status: string;
+    readonly interval: string | null;
+    readonly currentPeriodStart: string | null;
+    readonly currentPeriodEnd: string | null;
+    readonly cancelAtPeriodEnd?: boolean;
+}
+export declare const getCurrentPlan: (client: Client, projectId: string) => Promise<CurrentPlan | null>;
+export interface PlanListing {
+    readonly id: string;
+    readonly slug: string;
+    readonly name: string;
+    readonly description: string | null;
+    readonly features: unknown;
+    readonly priceMonthly: number | null;
+    readonly priceAnnual: number | null;
+    readonly priceLifetime: number | null;
+}
+export declare const listPlans: (client: Client, projectId: string) => Promise<{
+    plans: readonly PlanListing[];
+}>;
+export type PlanInterval = 'monthly' | 'annual' | 'lifetime';
+export interface UpgradeResult {
+    readonly success: boolean;
+    readonly subscription?: {
+        readonly id: string;
+        readonly planSlug: string;
+        readonly interval: string;
+        readonly currentPeriodEnd: string;
+    };
+}
+export declare const upgrade: (client: Client, projectId: string, userId: string, newPlanSlug: string, newInterval?: PlanInterval) => Promise<UpgradeResult>;
+export interface UsageMetric {
+    readonly used: number;
+    readonly unit: string;
+    readonly costFormatted?: string;
+}
+export interface UsageServiceCost {
+    readonly cost?: number;
+    readonly costFormatted?: string;
+}
+export interface UsageSummary {
+    readonly projectId: string;
+    readonly month: string;
+    readonly metrics?: Readonly<Record<string, UsageMetric>>;
+    readonly services?: Readonly<Record<string, UsageServiceCost>>;
+}
+export declare const usageSummary: (client: Client, projectId: string, options?: {
+    month?: string;
+}) => Promise<UsageSummary>;
+export interface Balance {
+    readonly balanceFormatted?: string;
+    readonly balanceMicrodollars?: number;
+    readonly status?: string;
+    readonly nextInvoiceAt?: string | null;
+    readonly nextInvoicePreview?: {
+        readonly totalFormatted?: string;
+    } | null;
+}
+export declare const balance: (client: Client, projectId: string) => Promise<Balance>;
+export interface CreditPackage {
+    readonly id: string;
+    readonly label: string;
+    readonly amountFormatted: string;
+    readonly bonusFormatted?: string;
+}
+export declare const creditPackages: (client: Client) => Promise<{
+    packages: readonly CreditPackage[];
+}>;
+export interface Invoice {
+    readonly id: string;
+    readonly invoiceNumber: string;
+    readonly billingMonth: string;
+    readonly status: string;
+    readonly totalFormatted: string;
+    readonly dueAt: string | null;
+    readonly paidAt: string | null;
+    readonly createdAt: string;
+}
+export declare const listInvoices: (client: Client, projectId: string, options?: {
+    limit?: number;
+}) => Promise<{
+    invoices: readonly Invoice[];
+}>;
+/**
+ * Fetch structured invoice detail. Returns the raw server document —
+ * today JSON, tomorrow potentially a PDF link field when the render
+ * pipeline lands. Callers that persist this to disk should remain
+ * type-agnostic (`unknown`) rather than latching onto the current shape.
+ */
+export declare const invoiceDetail: (client: Client, projectId: string, invoiceId: string) => Promise<unknown>;
+//# sourceMappingURL=billing.d.ts.map

package/dist/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../src/billing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CACpC;AAED,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAChB,CAAA;AAE7E,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED,eAAO,MAAM,SAAS,GACrB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,KAAK,EAAE,SAAS,WAAW,EAAE,CAAA;CAAE,CACuB,CAAA;AAEnE,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAE5D,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE;QACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;KACjC,CAAA;CACD;AAED,eAAO,MAAM,OAAO,GACnB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,QAAQ,MAAM,EACd,aAAa,MAAM,EACnB,cAAc,YAAY,KACxB,OAAO,CAAC,aAAa,CASrB,CAAA;AAIH,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAA;CAC9D;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,YAAY,CAGpB,CAAA;AAIH,MAAM,WAAW,OAAO;IACvB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CACzE;AAED,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,OAAO,CACN,CAAA;AAIrE,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAC1C,CAAA;AAIpD,MAAM,WAAW,OAAO;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,CAMxC,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,WAAW,MAAM,KACf,OAAO,CAAC,OAAO,CAGf,CAAA"}

package/dist/billing.js

@@ -0,0 +1,42 @@
+/**
+ * Billing — subscription + plan catalogue.
+ *
+ *   GET  /billing/subscription/me?projectId=      — caller's active plan (or null)
+ *   GET  /billing/plans?projectId=                — catalogue available to this project
+ *   POST /billing/subscription/update             — switch plan / interval
+ *
+ * Plan switches are synchronous on the Stripe side — the API returns once
+ * Stripe has accepted the update, so callers see the new tier immediately.
+ */
+import { request } from './http.js';
+export const getCurrentPlan = (client, projectId) => request(client, 'GET', '/billing/subscription/me', { query: { projectId } });
+export const listPlans = (client, projectId) => request(client, 'GET', '/billing/plans', { query: { projectId } });
+export const upgrade = (client, projectId, userId, newPlanSlug, newInterval) => request(client, 'POST', '/billing/subscription/update', {
+    body: {
+        projectId,
+        userId,
+        newPlanSlug,
+        ...(newInterval ? { newInterval } : {}),
+        prorationBehavior: 'create_prorations',
+    },
+});
+export const usageSummary = (client, projectId, options) => request(client, 'GET', '/billing/usage/summary', {
+    query: { projectId, month: options?.month },
+});
+export const balance = (client, projectId) => request(client, 'GET', '/billing/balance', { query: { projectId } });
+export const creditPackages = (client) => request(client, 'GET', '/billing/credits/packages');
+export const listInvoices = (client, projectId, options) => request(client, 'GET', '/billing/invoices', {
+    query: {
+        projectId,
+        limit: options?.limit !== undefined ? String(options.limit) : undefined,
+    },
+});
+/**
+ * Fetch structured invoice detail. Returns the raw server document —
+ * today JSON, tomorrow potentially a PDF link field when the render
+ * pipeline lands. Callers that persist this to disk should remain
+ * type-agnostic (`unknown`) rather than latching onto the current shape.
+ */
+export const invoiceDetail = (client, projectId, invoiceId) => request(client, 'GET', '/billing/invoices/detail', {
+    query: { projectId, invoiceId },
+});

package/dist/billingSettings.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Billing settings — business info, tax IDs, payment methods, spending
+ * caps, postpaid/prepaid enrolment. Sits alongside `billing` (usage /
+ * invoices / credits) to cover the settings surface.
+ *
+ * Mirrors `apps/api/src/server/platform/routes/billing-settings.ts` —
+ * paths sourced from `@sylphx/contract`.
+ */
+import type { Client } from './client.js';
+export interface BillingSettings {
+    readonly orgId: string;
+    readonly businessName: string | null;
+    readonly businessEmail: string | null;
+    readonly businessAddress: Record<string, string | null> | null;
+    readonly taxIds: readonly {
+        readonly type: string;
+        readonly value: string;
+    }[];
+    readonly spendingCap: number | null;
+    readonly plan: 'postpaid' | 'prepaid';
+    readonly currency: string;
+}
+export declare const getSettings: (client: Client) => Promise<{
+    settings: BillingSettings;
+}>;
+export interface BusinessInfoInput {
+    readonly businessName?: string;
+    readonly businessEmail?: string;
+    readonly businessAddress?: Record<string, string>;
+}
+export declare const updateBusinessInfo: (client: Client, body: BusinessInfoInput) => Promise<{
+    settings: BillingSettings;
+}>;
+export declare const setTaxId: (client: Client, body: {
+    readonly type: string;
+    readonly value: string;
+}) => Promise<{
+    settings: BillingSettings;
+}>;
+export declare const removeTaxId: (client: Client) => Promise<{
+    settings: BillingSettings;
+}>;
+export interface PaymentMethod {
+    readonly id: string;
+    readonly type: 'card' | 'bank';
+    readonly brand: string | null;
+    readonly last4: string | null;
+    readonly expMonth: number | null;
+    readonly expYear: number | null;
+    readonly isDefault: boolean;
+}
+export declare const getPaymentMethods: (client: Client) => Promise<{
+    paymentMethods: readonly PaymentMethod[];
+}>;
+export declare const createSetupIntent: (client: Client) => Promise<{
+    clientSecret: string;
+    setupIntentId: string;
+}>;
+export declare const setDefaultPaymentMethod: (client: Client, paymentMethodId: string) => Promise<{
+    success: boolean;
+}>;
+export declare const removePaymentMethod: (client: Client, paymentMethodId: string) => Promise<{
+    success: boolean;
+}>;
+export declare const setSpendingCap: (client: Client, body: {
+    readonly cap: number | null;
+}) => Promise<{
+    settings: BillingSettings;
+}>;
+export declare const enablePostpaid: (client: Client) => Promise<{
+    settings: BillingSettings;
+}>;
+export declare const enablePrepaid: (client: Client, body: {
+    readonly initialCreditUsdCents: number;
+}) => Promise<{
+    settings: BillingSettings;
+}>;
+//# sourceMappingURL=billingSettings.d.ts.map

package/dist/billingSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billingSettings.d.ts","sourceRoot":"","sources":["../src/billingSettings.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC9D,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7E,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CACzB;AAED,eAAO,MAAM,WAAW,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGjF,CAAA;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjD;AAED,eAAO,MAAM,kBAAkB,GAC9B,QAAQ,MAAM,EACd,MAAM,iBAAiB,KACrB,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGvC,CAAA;AAED,eAAO,MAAM,QAAQ,GACpB,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,KACrD,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGvC,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGjF,CAAA;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC3B;AAED,eAAO,MAAM,iBAAiB,GAC7B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,cAAc,EAAE,SAAS,aAAa,EAAE,CAAA;CAAE,CAGtD,CAAA;AAED,eAAO,MAAM,iBAAiB,GAC7B,QAAQ,MAAM,KACZ,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAGzD,CAAA;AAED,eAAO,MAAM,uBAAuB,GACnC,QAAQ,MAAM,EACd,iBAAiB,MAAM,KACrB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC/B,QAAQ,MAAM,EACd,iBAAiB,MAAM,KACrB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AAED,eAAO,MAAM,cAAc,GAC1B,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,KACnC,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGvC,CAAA;AAED,eAAO,MAAM,cAAc,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGpF,CAAA;AAED,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,MAAM;IAAE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,KAC9C,OAAO,CAAC;IAAE,QAAQ,EAAE,eAAe,CAAA;CAAE,CAGvC,CAAA"}

package/dist/billingSettings.js

@@ -0,0 +1,54 @@
+/**
+ * Billing settings — business info, tax IDs, payment methods, spending
+ * caps, postpaid/prepaid enrolment. Sits alongside `billing` (usage /
+ * invoices / credits) to cover the settings surface.
+ *
+ * Mirrors `apps/api/src/server/platform/routes/billing-settings.ts` —
+ * paths sourced from `@sylphx/contract`.
+ */
+import { billingSettingsEndpoints } from '@sylphx/contract';
+import { interpolatePath, request } from './http.js';
+export const getSettings = (client) => {
+    const { method, path } = billingSettingsEndpoints.getSettings;
+    return request(client, method, path);
+};
+export const updateBusinessInfo = (client, body) => {
+    const { method, path } = billingSettingsEndpoints.updateBusinessInfo;
+    return request(client, method, path, { body });
+};
+export const setTaxId = (client, body) => {
+    const { method, path } = billingSettingsEndpoints.setTaxId;
+    return request(client, method, path, { body });
+};
+export const removeTaxId = (client) => {
+    const { method, path } = billingSettingsEndpoints.removeTaxId;
+    return request(client, method, path);
+};
+export const getPaymentMethods = (client) => {
+    const { method, path } = billingSettingsEndpoints.getPaymentMethods;
+    return request(client, method, path);
+};
+export const createSetupIntent = (client) => {
+    const { method, path } = billingSettingsEndpoints.createSetupIntent;
+    return request(client, method, path);
+};
+export const setDefaultPaymentMethod = (client, paymentMethodId) => {
+    const { method, path } = billingSettingsEndpoints.setDefaultPaymentMethod;
+    return request(client, method, interpolatePath(path, { paymentMethodId }));
+};
+export const removePaymentMethod = (client, paymentMethodId) => {
+    const { method, path } = billingSettingsEndpoints.removePaymentMethod;
+    return request(client, method, interpolatePath(path, { paymentMethodId }));
+};
+export const setSpendingCap = (client, body) => {
+    const { method, path } = billingSettingsEndpoints.setSpendingCap;
+    return request(client, method, path, { body });
+};
+export const enablePostpaid = (client) => {
+    const { method, path } = billingSettingsEndpoints.enablePostpaid;
+    return request(client, method, path);
+};
+export const enablePrepaid = (client, body) => {
+    const { method, path } = billingSettingsEndpoints.enablePrepaid;
+    return request(client, method, path, { body });
+};

package/dist/branchDatabases.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Branch databases — per-preview-environment ephemeral database branches.
+ *
+ *   GET    /projects/:id/preview-envs/branch-dbs                     — list across envs
+ *   POST   /projects/:id/preview-envs/:envId/branch-db               — create branch DB
+ *   GET    /projects/:id/preview-envs/:envId/branch-db               — get branch DB
+ *   DELETE /projects/:id/preview-envs/:envId/branch-db               — drop branch DB
+ *
+ * Mirrors `apps/api/src/server/platform/routes/branch-databases.ts`.
+ * Route paths sourced from `@sylphx/contract` (ADR-084).
+ */
+import type { Client } from './client.js';
+export interface BranchDatabase {
+    readonly id: string;
+    readonly projectId: string;
+    readonly envId: string;
+    readonly parentDatabaseId: string;
+    readonly branchName: string;
+    readonly connectionUrl: string | null;
+    readonly createdAt: string;
+    readonly status: 'ready' | 'provisioning' | 'failed' | 'deleting';
+}
+export interface CreateBranchDatabaseInput {
+    readonly parentDatabaseId?: string;
+    readonly branchName?: string;
+}
+export declare const list: (client: Client, projectId: string) => Promise<{
+    branches: readonly BranchDatabase[];
+}>;
+export declare const create: (client: Client, projectId: string, envId: string, body?: CreateBranchDatabaseInput) => Promise<{
+    branch: BranchDatabase;
+}>;
+export declare const get: (client: Client, projectId: string, envId: string) => Promise<{
+    branch: BranchDatabase;
+}>;
+declare const _delete: (client: Client, projectId: string, envId: string) => Promise<{
+    success: boolean;
+}>;
+export { _delete as delete };
+/**
+ * Merge a branch database back into its parent. ADR-089 Phase 4b adds
+ * the Management SDK surface; the underlying platform endpoint is wired
+ * via the contract's `merge` key (Expand-and-contract safe: no-op if the
+ * server hasn't shipped the route yet — it returns 404 which ApiError
+ * propagates to the caller).
+ */
+export declare const merge: (client: Client, projectId: string, envId: string, body?: {
+    readonly strategy?: "fast-forward" | "squash" | "rebase";
+}) => Promise<{
+    success: boolean;
+    mergedAt: string;
+}>;
+//# sourceMappingURL=branchDatabases.d.ts.map

package/dist/branchDatabases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branchDatabases.d.ts","sourceRoot":"","sources":["../src/branchDatabases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,UAAU,CAAA;CACjE;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAA;CAAE,CAGjD,CAAA;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,OAAM,yBAA8B,KAClC,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAGpC,CAAA;AAED,eAAO,MAAM,GAAG,GACf,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE,CAGpC,CAAA;AAED,QAAA,MAAM,OAAO,GACZ,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG9B,CAAA;AACD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5B;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,GACjB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,EACb,OAAM;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAO,KACrE,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAM/C,CAAA"}

package/dist/branchDatabases.js

@@ -0,0 +1,38 @@
+/**
+ * Branch databases — per-preview-environment ephemeral database branches.
+ *
+ *   GET    /projects/:id/preview-envs/branch-dbs                     — list across envs
+ *   POST   /projects/:id/preview-envs/:envId/branch-db               — create branch DB
+ *   GET    /projects/:id/preview-envs/:envId/branch-db               — get branch DB
+ *   DELETE /projects/:id/preview-envs/:envId/branch-db               — drop branch DB
+ *
+ * Mirrors `apps/api/src/server/platform/routes/branch-databases.ts`.
+ * Route paths sourced from `@sylphx/contract` (ADR-084).
+ */
+import { branchDatabasesEndpoints } from '@sylphx/contract';
+import { interpolatePath, request } from './http.js';
+export const list = (client, projectId) => {
+    const { method, path } = branchDatabasesEndpoints.list;
+    return request(client, method, interpolatePath(path, { id: projectId }));
+};
+export const create = (client, projectId, envId, body = {}) => {
+    const { method, path } = branchDatabasesEndpoints.create;
+    return request(client, method, interpolatePath(path, { id: projectId, envId }), { body });
+};
+export const get = (client, projectId, envId) => {
+    const { method, path } = branchDatabasesEndpoints.get;
+    return request(client, method, interpolatePath(path, { id: projectId, envId }));
+};
+const _delete = (client, projectId, envId) => {
+    const { method, path } = branchDatabasesEndpoints.destroy;
+    return request(client, method, interpolatePath(path, { id: projectId, envId }));
+};
+export { _delete as delete };
+/**
+ * Merge a branch database back into its parent. ADR-089 Phase 4b adds
+ * the Management SDK surface; the underlying platform endpoint is wired
+ * via the contract's `merge` key (Expand-and-contract safe: no-op if the
+ * server hasn't shipped the route yet — it returns 404 which ApiError
+ * propagates to the caller).
+ */
+export const merge = (client, projectId, envId, body = {}) => request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/preview-envs/${encodeURIComponent(envId)}/branch-db/merge`, { body });

package/dist/certs.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Custom TLS certificates — bring-your-own cert for apex or wildcard
+ * hostnames. Private keys never leave the server after upload; `verify`
+ * performs offline chain / expiry validation against the stored cert.
+ *
+ *   GET    /projects/:id/certs
+ *   POST   /projects/:id/certs
+ *   DELETE /projects/:id/certs/:domain
+ *   POST   /projects/:id/certs/:domain/verify
+ */
+import type { Client } from './client.js';
+export interface CustomCert {
+    readonly id: string;
+    readonly domain: string;
+    readonly issuer: string | null;
+    readonly expiresAt: string | null;
+    readonly status: string;
+    readonly projectId: string | null;
+}
+export declare const list: (client: Client, projectId: string) => Promise<{
+    certs: readonly CustomCert[];
+}>;
+export interface AddInput {
+    readonly domain: string;
+    readonly certPem: string;
+    readonly keyPem: string;
+}
+export declare const add: (client: Client, projectId: string, input: AddInput) => Promise<{
+    id: string;
+}>;
+declare const _remove: (client: Client, projectId: string, domain: string) => Promise<void>;
+export { _remove as remove };
+export interface VerifyResult {
+    readonly domain: string;
+    readonly matches: boolean;
+    readonly chainValid: boolean;
+    readonly notExpired: boolean;
+    readonly notes: readonly string[];
+}
+export declare const verify: (client: Client, projectId: string, domain: string) => Promise<VerifyResult>;
+/**
+ * Auto-provision a cert for `domain` via ACME (Let's Encrypt).
+ * Platform performs HTTP-01 or DNS-01 challenge then installs the
+ * resulting cert. Phase 4b Matrix-2 gap closure.
+ */
+export declare const autoProvision: (client: Client, projectId: string, body: {
+    readonly domain: string;
+    readonly challenge?: "http-01" | "dns-01";
+}) => Promise<{
+    jobId: string;
+    domain: string;
+    status: "pending" | "issued" | "failed";
+}>;
+/**
+ * Query auto-provision job status.
+ */
+export declare const getAutoProvisionStatus: (client: Client, projectId: string, jobId: string) => Promise<{
+    jobId: string;
+    domain: string;
+    status: "pending" | "issued" | "failed";
+    error?: string;
+}>;
+//# sourceMappingURL=certs.d.ts.map

package/dist/certs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certs.d.ts","sourceRoot":"","sources":["../src/certs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACjC;AAED,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,KAAK,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,CACgC,CAAA;AAE3E,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,eAAO,MAAM,GAAG,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,OAAO,QAAQ,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CACF,CAAA;AAE7F,QAAA,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,IAAI,CAK/E,CAAA;AACF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5B,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CACjC;AAED,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,EAAE,QAAQ,MAAM,KAAG,OAAO,CAAC,YAAY,CAK7F,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE,KAC1E,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAE,CAGlF,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,sBAAsB,GAClC,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,OAAO,MAAM,KACX,OAAO,CAAC;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;CACd,CAKC,CAAA"}

package/dist/certs.js

@@ -0,0 +1,28 @@
+/**
+ * Custom TLS certificates — bring-your-own cert for apex or wildcard
+ * hostnames. Private keys never leave the server after upload; `verify`
+ * performs offline chain / expiry validation against the stored cert.
+ *
+ *   GET    /projects/:id/certs
+ *   POST   /projects/:id/certs
+ *   DELETE /projects/:id/certs/:domain
+ *   POST   /projects/:id/certs/:domain/verify
+ */
+import { request } from './http.js';
+export const list = (client, projectId) => request(client, 'GET', `/projects/${encodeURIComponent(projectId)}/certs`);
+export const add = (client, projectId, input) => request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/certs`, { body: input });
+const _remove = (client, projectId, domain) => request(client, 'DELETE', `/projects/${encodeURIComponent(projectId)}/certs/${encodeURIComponent(domain)}`);
+export { _remove as remove };
+export const verify = (client, projectId, domain) => request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/certs/${encodeURIComponent(domain)}/verify`);
+/**
+ * Auto-provision a cert for `domain` via ACME (Let's Encrypt).
+ * Platform performs HTTP-01 or DNS-01 challenge then installs the
+ * resulting cert. Phase 4b Matrix-2 gap closure.
+ */
+export const autoProvision = (client, projectId, body) => request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/certs/auto-provision`, {
+    body,
+});
+/**
+ * Query auto-provision job status.
+ */
+export const getAutoProvisionStatus = (client, projectId, jobId) => request(client, 'GET', `/projects/${encodeURIComponent(projectId)}/certs/auto-provision/${encodeURIComponent(jobId)}`);