@tangle-network/agent-app 0.45.53 → 0.45.55

package/dist/peer-floors/check.d.ts

@@ -1,182 +1,3 @@
-/**
- * Audit where a repository's dependencies COME FROM.
- *
- * `/peer-floors` already answers "is the installed version inside the declared
- * range". This answers the question underneath it — "is the installed package
- * the one the registry publishes at all" — because a version number is not an
- * identity. Two artifacts can carry `0.45.33` and ship different APIs, and every
- * gate that reads a version reads the same number for both.
- *
- * THE MEASURED DEFECT. insurance-agent's `pnpm-workspace.yaml` carried
- *
- *     overrides:
- *       '@tangle-network/agent-app': file:./vendor/agent-app/tangle-network-agent-app-0.45.33.tgz
- *
- * — a 2.6 MB `pnpm pack` of an UNMERGED pull request, committed into the
- * product repo (`insurance-agent` f7d0f51 removed it). It installed cleanly,
- * typechecked green and passed sign-off while the product ran code that existed
- * in no published release. Note where it was NOT: `package.json` still read
- * `"@tangle-network/agent-app": "^0.45.33"`, a perfectly ordinary registry
- * range. A check that reads only the root manifest's `dependencies` sees
- * nothing. The override lane is the one that shipped, so the override lane —
- * `pnpm-workspace.yaml`, `pnpm.overrides`, `resolutions` — is audited first.
- *
- * The second shape is worse because nothing declares it at all: a worktree was
- * found whose installed `agent-app@0.45.29` had `dist/spend/index.d.ts`
- * replaced with a newer version's content by hand. The manifest, the lockfile
- * and the version on disk all agreed; only the bytes disagreed, and the product
- * typechecked green against an API its declared dependency does not ship. See
- * `checkInstalledIntegrity` below for exactly how much of that class is
- * catchable cheaply and exactly how much is not.
- */
-/** How a specifier says a dependency should be obtained. */
-type DependencySourceProtocol = 
-/** Resolvable from the registry by anyone: `^1.2.3`, `1.2.3`, `npm:x@1`. */
-'registry'
-/** `workspace:` — another package in this same repo. Reviewable in one diff. */
- | 'workspace'
-/** `catalog:` — indirection into `pnpm-workspace.yaml`, which is itself audited. */
- | 'catalog'
-/** A local path. Whether it is legitimate depends on WHERE it points. */
- | 'file' | 'link' | 'portal'
-/** A path or URL ending in a packed tarball. Opaque bytes; never legitimate. */
- | 'tarball'
-/** A git ref or a remote URL that is not the registry. */
- | 'git' | 'remote';
-/**
- * Classify one dependency specifier by the SOURCE it names.
- *
- * Pure and exported so a consumer can reuse the vocabulary, and so the rule can
- * be tested without a filesystem. Nothing here decides legitimacy — `file:` on
- * a directory inside the repo is correct and `file:` on a tarball never is, and
- * that distinction needs the disk (`resolveLocalPathSource`).
- */
-declare function classifyDependencySpecifier(specifier: string): DependencySourceProtocol;
-/**
- * The legitimate-exception rule, stated once so it is not a path allowlist.
- *
- * agent-app's own `playground/package.json` declares
- * `"@tangle-network/agent-app": "file:.."` and that is CORRECT: the playground
- * depends on the package it lives inside. The property that makes it correct is
- * not its path — it is that the dependency is satisfied by SOURCE ALREADY IN
- * THIS REPOSITORY, under version control, changing only in a diff a reviewer
- * sees. So the rule is:
- *
- *   A `file:` / `link:` / `portal:` specifier is exempt when it resolves to a
- *   DIRECTORY inside this repository holding a `package.json` whose `name` is
- *   the dependency being declared.
- *
- * Every clause is load-bearing. A DIRECTORY, because a `.tgz` is opaque bytes
- * that no diff shows — a packed tarball is never exempt, wherever it sits.
- * INSIDE THIS REPOSITORY, because `file:../../agent-app` is a path on one
- * machine: it resolves for its author and for nobody else, and a sign-off gate
- * that installs into a clean export dies at install. NAME MATCHES, because a
- * path pointing at some other package's source is a mis-wire, not a
- * self-reference.
- */
-type LocalPathSource = 
-/** In-repo directory whose package.json names this dependency. Legitimate. */
-'in-repo-source'
-/** Points outside the repository — reproducible on one machine only. */
- | 'outside-repo'
-/** Nothing there, or not a directory (a packed tarball lands here too). */
- | 'not-a-directory'
-/** An in-repo directory, but it is a different package. */
- | 'name-mismatch';
-declare function resolveLocalPathSource(args: {
-    /** Directory of the manifest that made the declaration. */
-    fromDir: string;
-    /** Root of the repository the declaration must stay inside. */
-    repoDir: string;
-    /** The path part of the specifier, protocol already stripped. */
-    path: string;
-    /** The dependency name the path is claimed to satisfy. */
-    name: string;
-}): LocalPathSource;
-/** Which of the five scans produced a finding. Kept on the row because the fix
- *  differs: a declaration is edited, an installed tree is reinstalled. */
-type DependencySourceCheck = 
-/** A `dependencies`-family field in some `package.json`. */
-'declared'
-/** `pnpm.overrides` / `resolutions` / `pnpm-workspace.yaml` — the lane that shipped. */
- | 'override'
-/** `pnpm-lock.yaml` — what actually resolved, whatever the manifests now say. */
- | 'lockfile'
-/** A packed tarball sitting in the source tree. */
- | 'vendored-tarball'
-/** The installed tree on disk. */
- | 'installed';
-interface DependencySourceFinding {
-    readonly check: DependencySourceCheck;
-    /** Dependency name, or `null` for a stray tarball that names no dependency. */
-    readonly name: string | null;
-    readonly specifier: string | null;
-    readonly protocol: DependencySourceProtocol | null;
-    /** Repo-relative location, with the key or line that carries it. */
-    readonly where: string;
-    /** Why this is a finding, and what to do about it. */
-    readonly detail: string;
-}
-/**
- * What the on-disk integrity pass was able to examine — reported on EVERY run,
- * clean or not, because "checked nothing" and "checked everything and found
- * nothing" render identically otherwise. This module's own doctrine: an
- * unchecked contract is never a pass it did not earn.
- */
-interface InstalledIntegrityCoverage {
-    /** The only basis implemented. See `checkInstalledIntegrity`'s limits. */
-    readonly basis: 'store-cas';
-    /** False for npm, yarn, a pruned CI cache, or a store on another machine.
-     *  Nothing was verified, and the report says so rather than reading clean. */
-    readonly storeLocated: boolean;
-    readonly packagesExamined: number;
-    readonly filesExamined: number;
-    /** Files settled by reading their bytes rather than by a shared inode. */
-    readonly filesHashed: number;
-}
-interface DependencySourceReport {
-    readonly repoDir: string;
-    readonly manifestsScanned: number;
-    readonly lockfileScanned: boolean;
-    readonly integrity: InstalledIntegrityCoverage;
-    readonly findings: readonly DependencySourceFinding[];
-    readonly ok: boolean;
-}
-interface CheckDependencySourcesOptions {
-    /** Repository root to audit. */
-    repoDir: string;
-    /** Scope filter for the on-disk integrity pass. `''` examines every package. */
-    scope?: string;
-    /** Directory name holding the installed tree. Overridable so a committed
-     *  fixture can use `fixture_modules` — `node_modules` is gitignored
-     *  everywhere, and a calibration proof that is not committed stops running. */
-    modulesDir?: string;
-    /** Repo-relative path prefixes the source-tree walk skips. The escape hatch
-     *  for a repo that genuinely carries a tarball as test data — and for this
-     *  package's own calibration fixtures, whose purpose is to CONTAIN the
-     *  violation. */
-    exclude?: readonly string[];
-}
-/**
- * Check each installed package under `scope` against the content-addressed
- * store it was installed from. Returns coverage alongside findings, because a
- * pass that verified nothing must not render like a pass that verified
- * everything.
- */
-declare function checkInstalledIntegrity(args: {
-    repoDir: string;
-    modulesDir: string;
-    scope: string;
-}): {
-    coverage: InstalledIntegrityCoverage;
-    findings: DependencySourceFinding[];
-};
-/** Audit one repository for dependencies whose source is not the registry. */
-declare function checkDependencySources(options: CheckDependencySourcesOptions): DependencySourceReport;
-/** One finding rendered as the failure a reader has to act on. */
-declare function describeDependencySourceFinding(finding: DependencySourceFinding): string;
-declare function formatDependencySourceReport(report: DependencySourceReport): string;
-
 /**
  * The second half of this gate lives in `./dependency-source` and ships on the
  * SAME subpath and the SAME `agent-app-peer-check` bin, because it answers the
@@ -184,7 +5,7 @@ declare function formatDependencySourceReport(report: DependencySourceReport): s
  * version is not an identity — a vendored `pnpm pack` of an unmerged branch
  * carries the same `0.45.33` a real release does.
  */
-
+export * from './dependency-source';
 /**
  * Audit a consumer's installed tree against the peer floors this package
  * declares.
@@ -210,7 +31,7 @@ declare function formatDependencySourceReport(report: DependencySourceReport): s
  * and a suite only sees it as dozens of unrelated-looking import failures.
  */
 /** Installed, and inside the declared range. */
-type PeerFloorVerdict = 'satisfied'
+export type PeerFloorVerdict = 'satisfied'
 /** Installed and BELOW the floor — the silent case this module exists for. */
  | 'below-floor'
 /** Not installed and never asked for. A legitimate answer for an optional peer. */
@@ -218,19 +39,19 @@ type PeerFloorVerdict = 'satisfied'
 /** Declared by the app, yet no version could be read, so the floor went
  *  UNCHECKED. Reported as a failure rather than a pass this did not earn. */
  | 'absent-but-declared';
-interface PeerFloorRow {
+export interface PeerFloorRow {
     readonly name: string;
     readonly range: string;
     readonly installed: string | null;
     readonly verdict: PeerFloorVerdict;
 }
-interface PeerFloorReport {
+export interface PeerFloorReport {
     readonly shellVersion: string;
     readonly rows: readonly PeerFloorRow[];
     readonly violations: readonly PeerFloorRow[];
     readonly ok: boolean;
 }
-interface CheckPeerFloorsOptions {
+export interface CheckPeerFloorsOptions {
     /** Directory of the app under audit — the one whose `package.json` and
      *  installed tree are read. */
     appDir: string;
@@ -254,12 +75,10 @@ interface CheckPeerFloorsOptions {
      *  calibration proof that is not committed is a proof that stops running. */
     modulesDir?: string;
 }
-declare function satisfiesRange(version: string, range: string): boolean;
+export declare function satisfiesRange(version: string, range: string): boolean;
 /** Audit one app directory against the shell's declared peer floors. */
-declare function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport;
+export declare function checkPeerFloors(options: CheckPeerFloorsOptions): PeerFloorReport;
 /** The failure message for one violating row. Split out so a caller can raise
  *  it from a test and a CLI can print it identically. */
-declare function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell?: string): string;
-declare function formatPeerFloorReport(report: PeerFloorReport, shell?: string): string;
-
-export { type CheckDependencySourcesOptions, type CheckPeerFloorsOptions, type DependencySourceCheck, type DependencySourceFinding, type DependencySourceProtocol, type DependencySourceReport, type InstalledIntegrityCoverage, type LocalPathSource, type PeerFloorReport, type PeerFloorRow, type PeerFloorVerdict, checkDependencySources, checkInstalledIntegrity, checkPeerFloors, classifyDependencySpecifier, describeDependencySourceFinding, describePeerFloorViolation, formatDependencySourceReport, formatPeerFloorReport, resolveLocalPathSource, satisfiesRange };
+export declare function describePeerFloorViolation(row: PeerFloorRow, shellVersion: string, shell?: string): string;
+export declare function formatPeerFloorReport(report: PeerFloorReport, shell?: string): string;

package/dist/peer-floors/cli.d.ts

@@ -3,6 +3,5 @@ interface CliArgs {
     readonly appDir: string;
     readonly exclude: readonly string[];
 }
-declare function parsePeerCheckArgs(argv: readonly string[]): CliArgs;
-
-export { parsePeerCheckArgs };
+export declare function parsePeerCheckArgs(argv: readonly string[]): CliArgs;
+export {};

package/dist/peer-floors/dependency-source.d.ts

@@ -0,0 +1,178 @@
+/**
+ * Audit where a repository's dependencies COME FROM.
+ *
+ * `/peer-floors` already answers "is the installed version inside the declared
+ * range". This answers the question underneath it — "is the installed package
+ * the one the registry publishes at all" — because a version number is not an
+ * identity. Two artifacts can carry `0.45.33` and ship different APIs, and every
+ * gate that reads a version reads the same number for both.
+ *
+ * THE MEASURED DEFECT. insurance-agent's `pnpm-workspace.yaml` carried
+ *
+ *     overrides:
+ *       '@tangle-network/agent-app': file:./vendor/agent-app/tangle-network-agent-app-0.45.33.tgz
+ *
+ * — a 2.6 MB `pnpm pack` of an UNMERGED pull request, committed into the
+ * product repo (`insurance-agent` f7d0f51 removed it). It installed cleanly,
+ * typechecked green and passed sign-off while the product ran code that existed
+ * in no published release. Note where it was NOT: `package.json` still read
+ * `"@tangle-network/agent-app": "^0.45.33"`, a perfectly ordinary registry
+ * range. A check that reads only the root manifest's `dependencies` sees
+ * nothing. The override lane is the one that shipped, so the override lane —
+ * `pnpm-workspace.yaml`, `pnpm.overrides`, `resolutions` — is audited first.
+ *
+ * The second shape is worse because nothing declares it at all: a worktree was
+ * found whose installed `agent-app@0.45.29` had `dist/spend/index.d.ts`
+ * replaced with a newer version's content by hand. The manifest, the lockfile
+ * and the version on disk all agreed; only the bytes disagreed, and the product
+ * typechecked green against an API its declared dependency does not ship. See
+ * `checkInstalledIntegrity` below for exactly how much of that class is
+ * catchable cheaply and exactly how much is not.
+ */
+/** How a specifier says a dependency should be obtained. */
+export type DependencySourceProtocol = 
+/** Resolvable from the registry by anyone: `^1.2.3`, `1.2.3`, `npm:x@1`. */
+'registry'
+/** `workspace:` — another package in this same repo. Reviewable in one diff. */
+ | 'workspace'
+/** `catalog:` — indirection into `pnpm-workspace.yaml`, which is itself audited. */
+ | 'catalog'
+/** A local path. Whether it is legitimate depends on WHERE it points. */
+ | 'file' | 'link' | 'portal'
+/** A path or URL ending in a packed tarball. Opaque bytes; never legitimate. */
+ | 'tarball'
+/** A git ref or a remote URL that is not the registry. */
+ | 'git' | 'remote';
+/**
+ * Classify one dependency specifier by the SOURCE it names.
+ *
+ * Pure and exported so a consumer can reuse the vocabulary, and so the rule can
+ * be tested without a filesystem. Nothing here decides legitimacy — `file:` on
+ * a directory inside the repo is correct and `file:` on a tarball never is, and
+ * that distinction needs the disk (`resolveLocalPathSource`).
+ */
+export declare function classifyDependencySpecifier(specifier: string): DependencySourceProtocol;
+/**
+ * The legitimate-exception rule, stated once so it is not a path allowlist.
+ *
+ * agent-app's own `playground/package.json` declares
+ * `"@tangle-network/agent-app": "file:.."` and that is CORRECT: the playground
+ * depends on the package it lives inside. The property that makes it correct is
+ * not its path — it is that the dependency is satisfied by SOURCE ALREADY IN
+ * THIS REPOSITORY, under version control, changing only in a diff a reviewer
+ * sees. So the rule is:
+ *
+ *   A `file:` / `link:` / `portal:` specifier is exempt when it resolves to a
+ *   DIRECTORY inside this repository holding a `package.json` whose `name` is
+ *   the dependency being declared.
+ *
+ * Every clause is load-bearing. A DIRECTORY, because a `.tgz` is opaque bytes
+ * that no diff shows — a packed tarball is never exempt, wherever it sits.
+ * INSIDE THIS REPOSITORY, because `file:../../agent-app` is a path on one
+ * machine: it resolves for its author and for nobody else, and a sign-off gate
+ * that installs into a clean export dies at install. NAME MATCHES, because a
+ * path pointing at some other package's source is a mis-wire, not a
+ * self-reference.
+ */
+export type LocalPathSource = 
+/** In-repo directory whose package.json names this dependency. Legitimate. */
+'in-repo-source'
+/** Points outside the repository — reproducible on one machine only. */
+ | 'outside-repo'
+/** Nothing there, or not a directory (a packed tarball lands here too). */
+ | 'not-a-directory'
+/** An in-repo directory, but it is a different package. */
+ | 'name-mismatch';
+export declare function resolveLocalPathSource(args: {
+    /** Directory of the manifest that made the declaration. */
+    fromDir: string;
+    /** Root of the repository the declaration must stay inside. */
+    repoDir: string;
+    /** The path part of the specifier, protocol already stripped. */
+    path: string;
+    /** The dependency name the path is claimed to satisfy. */
+    name: string;
+}): LocalPathSource;
+/** Which of the five scans produced a finding. Kept on the row because the fix
+ *  differs: a declaration is edited, an installed tree is reinstalled. */
+export type DependencySourceCheck = 
+/** A `dependencies`-family field in some `package.json`. */
+'declared'
+/** `pnpm.overrides` / `resolutions` / `pnpm-workspace.yaml` — the lane that shipped. */
+ | 'override'
+/** `pnpm-lock.yaml` — what actually resolved, whatever the manifests now say. */
+ | 'lockfile'
+/** A packed tarball sitting in the source tree. */
+ | 'vendored-tarball'
+/** The installed tree on disk. */
+ | 'installed';
+export interface DependencySourceFinding {
+    readonly check: DependencySourceCheck;
+    /** Dependency name, or `null` for a stray tarball that names no dependency. */
+    readonly name: string | null;
+    readonly specifier: string | null;
+    readonly protocol: DependencySourceProtocol | null;
+    /** Repo-relative location, with the key or line that carries it. */
+    readonly where: string;
+    /** Why this is a finding, and what to do about it. */
+    readonly detail: string;
+}
+/**
+ * What the on-disk integrity pass was able to examine — reported on EVERY run,
+ * clean or not, because "checked nothing" and "checked everything and found
+ * nothing" render identically otherwise. This module's own doctrine: an
+ * unchecked contract is never a pass it did not earn.
+ */
+export interface InstalledIntegrityCoverage {
+    /** The only basis implemented. See `checkInstalledIntegrity`'s limits. */
+    readonly basis: 'store-cas';
+    /** False for npm, yarn, a pruned CI cache, or a store on another machine.
+     *  Nothing was verified, and the report says so rather than reading clean. */
+    readonly storeLocated: boolean;
+    readonly packagesExamined: number;
+    readonly filesExamined: number;
+    /** Files settled by reading their bytes rather than by a shared inode. */
+    readonly filesHashed: number;
+}
+export interface DependencySourceReport {
+    readonly repoDir: string;
+    readonly manifestsScanned: number;
+    readonly lockfileScanned: boolean;
+    readonly integrity: InstalledIntegrityCoverage;
+    readonly findings: readonly DependencySourceFinding[];
+    readonly ok: boolean;
+}
+export interface CheckDependencySourcesOptions {
+    /** Repository root to audit. */
+    repoDir: string;
+    /** Scope filter for the on-disk integrity pass. `''` examines every package. */
+    scope?: string;
+    /** Directory name holding the installed tree. Overridable so a committed
+     *  fixture can use `fixture_modules` — `node_modules` is gitignored
+     *  everywhere, and a calibration proof that is not committed stops running. */
+    modulesDir?: string;
+    /** Repo-relative path prefixes the source-tree walk skips. The escape hatch
+     *  for a repo that genuinely carries a tarball as test data — and for this
+     *  package's own calibration fixtures, whose purpose is to CONTAIN the
+     *  violation. */
+    exclude?: readonly string[];
+}
+/**
+ * Check each installed package under `scope` against the content-addressed
+ * store it was installed from. Returns coverage alongside findings, because a
+ * pass that verified nothing must not render like a pass that verified
+ * everything.
+ */
+export declare function checkInstalledIntegrity(args: {
+    repoDir: string;
+    modulesDir: string;
+    scope: string;
+}): {
+    coverage: InstalledIntegrityCoverage;
+    findings: DependencySourceFinding[];
+};
+/** Audit one repository for dependencies whose source is not the registry. */
+export declare function checkDependencySources(options: CheckDependencySourcesOptions): DependencySourceReport;
+/** One finding rendered as the failure a reader has to act on. */
+export declare function describeDependencySourceFinding(finding: DependencySourceFinding): string;
+export declare function formatDependencySourceReport(report: DependencySourceReport): string;

package/dist/plans/index.d.ts

@@ -5,11 +5,11 @@
  * This module only projects that substrate state into chat events and
  * persisted message parts that products can render and restore.
  */
-declare const PLAN_SUBMITTED_EVENT: "plan.submitted";
+export declare const PLAN_SUBMITTED_EVENT: "plan.submitted";
 /** Sandbox plan lifecycle. `preparing` is the transient submission state and
  * is retained in the projection even though the chat card normally starts at
  * `pending`. */
-type ChatPlanStatus = 'preparing' | 'pending' | 'approved' | 'rejected' | 'superseded' | 'withdrawn';
+export type ChatPlanStatus = 'preparing' | 'pending' | 'approved' | 'rejected' | 'superseded' | 'withdrawn';
 type ChatPlanBase = {
     /** The sandbox SDK calls this field `id`; the transcript projection names
      * it explicitly so it cannot collide with a message-part id. */
@@ -23,7 +23,7 @@ type ChatPlanBase = {
     decidedBy?: string;
 };
 /** Browser/persisted projection of the sandbox SDK's durable-plan union. */
-type ChatPlan = ChatPlanBase & ({
+export type ChatPlan = ChatPlanBase & ({
     status: 'preparing';
 } | {
     status: 'pending';
@@ -44,11 +44,11 @@ type ChatPlan = ChatPlanBase & ({
     withdrawnReason: string;
 });
 /** Canonical transcript part for one durable plan. */
-type ChatPlanPersistedPart = ChatPlan & {
+export type ChatPlanPersistedPart = ChatPlan & {
     type: 'plan';
 };
 /** Resolve the result of parsing a plan submission into success with value or failure with error */
-type ParsePlanSubmittedResult = {
+export type ParsePlanSubmittedResult = {
     succeeded: true;
     value: ChatPlan;
 } | {
@@ -56,20 +56,19 @@ type ParsePlanSubmittedResult = {
     error: string;
 };
 /** Generate a unique key string for a given plan identifier */
-declare function planPartKey(planId: string): string;
+export declare function planPartKey(planId: string): string;
 /** Generate a unique key string for a plan based on its ID and revision number */
-declare function planRevisionKey(planId: string, revision: number): string;
+export declare function planRevisionKey(planId: string, revision: number): string;
 /** Generate a unique follow-up turn ID based on the plan ID and its outcome */
-declare function planFollowUpTurnId(planId: string, outcome: 'approved' | 'rejected'): string;
+export declare function planFollowUpTurnId(planId: string, outcome: 'approved' | 'rejected'): string;
 /** Plan status is monotonic: only a pending plan can settle. */
-declare function canTransitionPlanStatus(from: ChatPlanStatus, to: ChatPlanStatus): boolean;
+export declare function canTransitionPlanStatus(from: ChatPlanStatus, to: ChatPlanStatus): boolean;
 /** Resolve a ChatPlan into its persisted part representation for storage or transmission */
-declare function planToPersistedPart(plan: ChatPlan): ChatPlanPersistedPart;
+export declare function planToPersistedPart(plan: ChatPlan): ChatPlanPersistedPart;
 /** Resolve a persisted part object into a ChatPlan or return null if the type is not 'plan */
-declare function persistedPartToPlan(part: Record<string, unknown>): ChatPlan | null;
+export declare function persistedPartToPlan(part: Record<string, unknown>): ChatPlan | null;
 /** Parses both direct sandbox events (`data.plan`) and session envelopes
  * (`properties.plan`). Session identity is carried by the surrounding stream
  * and is deliberately not required in the payload. */
-declare function parsePlanSubmittedEvent(event: unknown): ParsePlanSubmittedResult;
-
-export { type ChatPlan, type ChatPlanPersistedPart, type ChatPlanStatus, PLAN_SUBMITTED_EVENT, type ParsePlanSubmittedResult, canTransitionPlanStatus, parsePlanSubmittedEvent, persistedPartToPlan, planFollowUpTurnId, planPartKey, planRevisionKey, planToPersistedPart };
+export declare function parsePlanSubmittedEvent(event: unknown): ParsePlanSubmittedResult;
+export {};

package/dist/{billing-BuNlaKlE.d.ts → platform/billing.d.ts}

@@ -1,5 +1,3 @@
-import { PlatformIdentity, PlatformBillingClient } from './billing/index.js';
-
 /**
  * Platform billing HTTP transport + tier state for apps on the shared
  * Tangle balance model (id.tangle.tools). Reads authenticate as the user via
@@ -10,20 +8,20 @@ import { PlatformIdentity, PlatformBillingClient } from './billing/index.js';
  * fetch-backed implementation of the `/billing` module's
  * `PlatformBillingClient` seam (type-only import — no runtime coupling).
  */
-
+import type { PlatformBillingClient, PlatformIdentity } from '../billing/index';
 /** Define available subscription tiers for the TanglePlan service */
-type TanglePlanTier = 'free' | 'pro' | 'enterprise';
+export type TanglePlanTier = 'free' | 'pro' | 'enterprise';
 /** 'pro' | 'enterprise' pass through; anything else (null, unknown) → 'free'. */
-declare function normalizeTanglePlanTier(plan: string | null | undefined): TanglePlanTier;
+export declare function normalizeTanglePlanTier(plan: string | null | undefined): TanglePlanTier;
 /** Represent platform billing HTTP errors with status code and detailed message */
-declare class PlatformBillingHttpError extends Error {
+export declare class PlatformBillingHttpError extends Error {
     readonly status: number;
     constructor(status: number, detail: string);
 }
 /** Structural guard (name + numeric status) — robust across module instances. */
-declare function isPlatformBillingHttpError(error: unknown): error is PlatformBillingHttpError;
+export declare function isPlatformBillingHttpError(error: unknown): error is PlatformBillingHttpError;
 /** Define HTTP options for platform billing including base URL, service token, product slug, fetch implementation, and timeout */
-interface PlatformBillingHttpOptions {
+export interface PlatformBillingHttpOptions {
     /** Platform root, e.g. https://id.tangle.tools (trailing slashes stripped). */
     baseUrl: string;
     /** Used only by `deduct()`; resolved lazily so reads never require it.
@@ -36,33 +34,33 @@ interface PlatformBillingHttpOptions {
     timeoutMs?: number;
 }
 /** Describe subscription tier and status information for a platform user */
-interface PlatformSubscriptionInfo {
+export interface PlatformSubscriptionInfo {
     tier: TanglePlanTier;
     status: string | null;
 }
 /** Describe the platform balance and lifetime spending with an optional update timestamp */
-interface PlatformBalanceSnapshot {
+export interface PlatformBalanceSnapshot {
     balance: number;
     lifetimeSpent: number;
     updatedAt?: string;
 }
 /** Describe a product's usage and spending metrics on the platform */
-interface PlatformUsageProductRow {
+export interface PlatformUsageProductRow {
     product: string | null;
     totalSpent: number;
     count: number;
 }
 /** Lifecycle of a per-product seat subscription, mirroring the Stripe states
  *  the platform persists. 'none' = the user has never held this seat. */
-type SeatStatus = 'none' | 'active' | 'trialing' | 'past_due' | 'canceled';
+export type SeatStatus = 'none' | 'active' | 'trialing' | 'past_due' | 'canceled';
 /** Price and included shared-wallet credit for one seat billing period. */
-interface ProductSeatOfferPeriod {
+export interface ProductSeatOfferPeriod {
     priceCents: number;
     includedCreditsCents: number;
 }
 /** Commercial terms returned by the platform's product catalog. Products use
  * this exact object for display instead of duplicating prices in UI copy. */
-interface ProductSeatOffer {
+export interface ProductSeatOffer {
     currency: 'usd';
     interval: 'month';
     recurring: ProductSeatOfferPeriod;
@@ -78,7 +76,7 @@ interface ProductSeatOffer {
  * `onFreeTier` remains in the wire shape for compatibility, but this client
  * always returns false and never uses it for access.
  */
-interface ProductEntitlement {
+export interface ProductEntitlement {
     seatStatus: SeatStatus;
     /** ISO timestamp the active seat's paid period runs until; null when none. */
     currentPeriodEnd: string | null;
@@ -90,7 +88,7 @@ interface ProductEntitlement {
     offer?: ProductSeatOffer;
 }
 /** Define methods to interact with platform billing endpoints using user or service authentication */
-interface PlatformBillingHttp {
+export interface PlatformBillingHttp {
     /** GET /v1/plans/current (user bearer). */
     getSubscription(userApiKey: string): Promise<PlatformSubscriptionInfo>;
     /** GET /v1/billing/balance (user bearer). */
@@ -113,23 +111,23 @@ interface PlatformBillingHttp {
     seatCheckoutUrl(productId: string): string;
 }
 /** Create a PlatformBillingHttp instance configured with given options and default behaviors */
-declare function createPlatformBillingHttp(opts: PlatformBillingHttpOptions): PlatformBillingHttp;
+export declare function createPlatformBillingHttp(opts: PlatformBillingHttpOptions): PlatformBillingHttp;
 /**
  * Platform Stripe checkout URL for a product's catalog-backed seat. The
  * platform resolves the product-specific price and introductory offer from the
  * `product` query param. Mirrors the `billingUrl()` shape — a deterministic
  * platform-rooted URL with no client-side pricing decisions.
  */
-declare function seatCheckoutUrl(baseUrl: string, productId: string): string;
+export declare function seatCheckoutUrl(baseUrl: string, productId: string): string;
 /** Define policy settings for concurrency and overage allowance in a tangle tier */
-interface TangleTierPolicy {
+export interface TangleTierPolicy {
     concurrency: number;
     overageAllowed: boolean;
 }
 /** Define default concurrency and overage policies for each TanglePlanTier level */
-declare const DEFAULT_TANGLE_TIER_POLICY: Record<TanglePlanTier, TangleTierPolicy>;
+export declare const DEFAULT_TANGLE_TIER_POLICY: Record<TanglePlanTier, TangleTierPolicy>;
 /** Describe the state of a Tangle plan tier including subscription, balance, spending, and concurrency details */
-interface TangleTierState {
+export interface TangleTierState {
     tier: TanglePlanTier;
     subscriptionStatus: string | null;
     remainingBalanceUsd: number;
@@ -143,16 +141,16 @@ interface TangleTierState {
  * never started against an unknown balance. Platform errors throw; callers
  * on the billable path choose their posture explicitly.
  */
-declare function readTangleTierState(http: PlatformBillingHttp, userApiKey: string | null | undefined, policy?: Record<TanglePlanTier, TangleTierPolicy>): Promise<TangleTierState>;
+export declare function readTangleTierState(http: PlatformBillingHttp, userApiKey: string | null | undefined, policy?: Record<TanglePlanTier, TangleTierPolicy>): Promise<TangleTierState>;
 /** Product-funded free inference spend is disabled. */
-declare const FREE_TIER_SPEND_CAP_USD = 0;
+export declare const FREE_TIER_SPEND_CAP_USD = 0;
 /**
  * Default name of the per-app feature flag that controls seat billing.
  * Explicit values override the environment default.
  */
-declare const DEFAULT_SEAT_BILLING_ENABLED_ENV_VAR = "SEAT_BILLING_ENABLED";
+export declare const DEFAULT_SEAT_BILLING_ENABLED_ENV_VAR = "SEAT_BILLING_ENABLED";
 /** Define options to configure seat billing flag environment variables and override flag name */
-interface SeatBillingFlagOptions {
+export interface SeatBillingFlagOptions {
     env?: Record<string, string | undefined>;
     /** Override the flag name; default {@link DEFAULT_SEAT_BILLING_ENABLED_ENV_VAR}. */
     flagEnvVar?: string;
@@ -162,7 +160,7 @@ interface SeatBillingFlagOptions {
  * Without a flag, known development and test environments default to OFF.
  * Deployed and unknown environments default to ON.
  */
-declare function isSeatBillingEnabled(opts?: SeatBillingFlagOptions): boolean;
+export declare function isSeatBillingEnabled(opts?: SeatBillingFlagOptions): boolean;
 /**
  * Read a user's entitlement for one product.
  * An absent key or disabled flag returns no access.
@@ -171,15 +169,13 @@ declare function isSeatBillingEnabled(opts?: SeatBillingFlagOptions): boolean;
  * @param flag — pass {@link isSeatBillingEnabled} (or your own boolean) so the
  *   product owns when the gate engages. When false, no network call is made.
  */
-declare function getProductEntitlement(http: Pick<PlatformBillingHttp, 'getProductEntitlement'>, userApiKey: string | null | undefined, productId: string, flag?: boolean): Promise<ProductEntitlement>;
+export declare function getProductEntitlement(http: Pick<PlatformBillingHttp, 'getProductEntitlement'>, userApiKey: string | null | undefined, productId: string, flag?: boolean): Promise<ProductEntitlement>;
 /** Product access requires an active paid or trialing seat. */
-declare function isProductEntitled(ent: ProductEntitlement): boolean;
+export declare function isProductEntitled(ent: ProductEntitlement): boolean;
 /** Define a contract for resolving platform identities based on user identifiers */
-interface PlatformIdentityStore {
+export interface PlatformIdentityStore {
     resolveIdentity(userId: string): Promise<PlatformIdentity | null>;
 }
 /** Concrete fetch-backed `PlatformBillingClient<TanglePlanTier>` for
  *  `createPlatformBalanceManager` (from `/billing`). */
-declare function createTanglePlatformBillingClient(http: PlatformBillingHttp, identity: PlatformIdentityStore): PlatformBillingClient<TanglePlanTier>;
-
-export { DEFAULT_SEAT_BILLING_ENABLED_ENV_VAR as D, FREE_TIER_SPEND_CAP_USD as F, type PlatformBalanceSnapshot as P, type SeatBillingFlagOptions as S, type TanglePlanTier as T, DEFAULT_TANGLE_TIER_POLICY as a, type PlatformBillingHttp as b, PlatformBillingHttpError as c, type PlatformBillingHttpOptions as d, type PlatformIdentityStore as e, type PlatformSubscriptionInfo as f, type PlatformUsageProductRow as g, type ProductEntitlement as h, type ProductSeatOffer as i, type ProductSeatOfferPeriod as j, type SeatStatus as k, type TangleTierPolicy as l, type TangleTierState as m, createPlatformBillingHttp as n, createTanglePlatformBillingClient as o, getProductEntitlement as p, isPlatformBillingHttpError as q, isProductEntitled as r, isSeatBillingEnabled as s, normalizeTanglePlanTier as t, readTangleTierState as u, seatCheckoutUrl as v };
+export declare function createTanglePlatformBillingClient(http: PlatformBillingHttp, identity: PlatformIdentityStore): PlatformBillingClient<TanglePlanTier>;