@vasperacapital/vaspera-shared 0.1.0

package/dist/index.mjs

@@ -0,0 +1,421 @@
+// src/types/index.ts
+var QUOTA_LIMITS = {
+  free: 5,
+  starter: 100,
+  pro: 500,
+  enterprise: 999999
+  // Effectively unlimited
+};
+var RATE_LIMITS = {
+  free: { perMinute: 10, perDay: 100 },
+  starter: { perMinute: 30, perDay: 1e3 },
+  pro: { perMinute: 60, perDay: 5e3 },
+  enterprise: { perMinute: 120, perDay: 999999 }
+};
+
+// src/errors/codes.ts
+var ErrorCodes = {
+  // Authentication Errors (VPM-AUTH-XXX)
+  AUTH: {
+    REQUIRED: {
+      code: "VPM-AUTH-001",
+      message: "Authentication required",
+      httpStatus: 401
+    },
+    INVALID_TOKEN: {
+      code: "VPM-AUTH-002",
+      message: "Invalid or expired authentication token",
+      httpStatus: 401
+    },
+    INSUFFICIENT_PERMISSIONS: {
+      code: "VPM-AUTH-003",
+      message: "Insufficient permissions for this action",
+      httpStatus: 403
+    },
+    SESSION_EXPIRED: {
+      code: "VPM-AUTH-004",
+      message: "Session has expired, please login again",
+      httpStatus: 401
+    },
+    MFA_REQUIRED: {
+      code: "VPM-AUTH-005",
+      message: "Multi-factor authentication required",
+      httpStatus: 403
+    }
+  },
+  // API Key Errors (VPM-API-KEY-XXX)
+  API_KEY: {
+    REQUIRED: {
+      code: "VPM-API-KEY-001",
+      message: "API key is required",
+      httpStatus: 401
+    },
+    INVALID: {
+      code: "VPM-API-KEY-002",
+      message: "Invalid API key",
+      httpStatus: 401
+    },
+    REVOKED: {
+      code: "VPM-API-KEY-003",
+      message: "API key has been revoked",
+      httpStatus: 401
+    },
+    EXPIRED: {
+      code: "VPM-API-KEY-004",
+      message: "API key has expired",
+      httpStatus: 401
+    },
+    RATE_LIMITED: {
+      code: "VPM-API-KEY-005",
+      message: "API key rate limit exceeded",
+      httpStatus: 429
+    },
+    QUOTA_EXCEEDED: {
+      code: "VPM-API-KEY-006",
+      message: "Monthly usage quota exceeded",
+      httpStatus: 429
+    }
+  },
+  // MCP Tool Errors (VPM-MCP-XXX)
+  MCP: {
+    TOOL_NOT_FOUND: {
+      code: "VPM-MCP-001",
+      message: "Requested tool not found",
+      httpStatus: 404
+    },
+    INVALID_ARGUMENTS: {
+      code: "VPM-MCP-002",
+      message: "Invalid tool arguments provided",
+      httpStatus: 400
+    },
+    EXECUTION_FAILED: {
+      code: "VPM-MCP-003",
+      message: "Tool execution failed",
+      httpStatus: 500
+    },
+    TIMEOUT: {
+      code: "VPM-MCP-004",
+      message: "Tool execution timed out",
+      httpStatus: 504
+    },
+    LLM_ERROR: {
+      code: "VPM-MCP-005",
+      message: "AI model returned an error",
+      httpStatus: 502
+    },
+    CONTEXT_TOO_LARGE: {
+      code: "VPM-MCP-006",
+      message: "Input context exceeds maximum size",
+      httpStatus: 413
+    }
+  },
+  // Billing Errors (VPM-BILLING-XXX)
+  BILLING: {
+    NO_SUBSCRIPTION: {
+      code: "VPM-BILLING-001",
+      message: "No active subscription found",
+      httpStatus: 402
+    },
+    SUBSCRIPTION_EXPIRED: {
+      code: "VPM-BILLING-002",
+      message: "Subscription has expired",
+      httpStatus: 402
+    },
+    PAYMENT_FAILED: {
+      code: "VPM-BILLING-003",
+      message: "Payment processing failed",
+      httpStatus: 402
+    },
+    FEATURE_NOT_INCLUDED: {
+      code: "VPM-BILLING-004",
+      message: "Feature not included in current plan",
+      httpStatus: 403
+    },
+    UPGRADE_REQUIRED: {
+      code: "VPM-BILLING-005",
+      message: "Plan upgrade required for this action",
+      httpStatus: 403
+    }
+  },
+  // Integration Errors (VPM-INT-XXX)
+  INTEGRATION: {
+    NOT_CONNECTED: {
+      code: "VPM-INT-001",
+      message: "Integration not connected",
+      httpStatus: 400
+    },
+    TOKEN_EXPIRED: {
+      code: "VPM-INT-002",
+      message: "Integration token expired, reconnection required",
+      httpStatus: 401
+    },
+    REFRESH_FAILED: {
+      code: "VPM-INT-003",
+      message: "Failed to refresh integration token",
+      httpStatus: 502
+    },
+    API_ERROR: {
+      code: "VPM-INT-004",
+      message: "External integration API error",
+      httpStatus: 502
+    },
+    RATE_LIMITED: {
+      code: "VPM-INT-005",
+      message: "Integration rate limit exceeded",
+      httpStatus: 429
+    }
+  },
+  // Validation Errors (VPM-VAL-XXX)
+  VALIDATION: {
+    REQUIRED_FIELD: {
+      code: "VPM-VAL-001",
+      message: "Required field missing",
+      httpStatus: 400
+    },
+    INVALID_FORMAT: {
+      code: "VPM-VAL-002",
+      message: "Invalid field format",
+      httpStatus: 400
+    },
+    OUT_OF_RANGE: {
+      code: "VPM-VAL-003",
+      message: "Value out of allowed range",
+      httpStatus: 400
+    },
+    INVALID_JSON: {
+      code: "VPM-VAL-004",
+      message: "Invalid JSON in request body",
+      httpStatus: 400
+    }
+  },
+  // System Errors (VPM-SYS-XXX)
+  SYSTEM: {
+    INTERNAL_ERROR: {
+      code: "VPM-SYS-001",
+      message: "Internal server error",
+      httpStatus: 500
+    },
+    DATABASE_ERROR: {
+      code: "VPM-SYS-002",
+      message: "Database operation failed",
+      httpStatus: 500
+    },
+    SERVICE_UNAVAILABLE: {
+      code: "VPM-SYS-003",
+      message: "Service temporarily unavailable",
+      httpStatus: 503
+    },
+    MAINTENANCE_MODE: {
+      code: "VPM-SYS-004",
+      message: "System is under maintenance",
+      httpStatus: 503
+    }
+  }
+};
+
+// src/errors/factory.ts
+function generateRequestId() {
+  return `req_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 9)}`;
+}
+function createError(errorDef, details, requestId) {
+  return {
+    code: errorDef.code,
+    message: errorDef.message,
+    details,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    requestId: requestId || generateRequestId(),
+    docUrl: `https://docs.vaspera.pm/errors/${errorDef.code}`
+  };
+}
+function createErrorResponse(errorDef, details, requestId) {
+  return {
+    response: {
+      success: false,
+      error: createError(errorDef, details, requestId)
+    },
+    status: errorDef.httpStatus
+  };
+}
+function getNextResetDate() {
+  const now = /* @__PURE__ */ new Date();
+  const nextMonth = new Date(now.getFullYear(), now.getMonth() + 1, 1);
+  return nextMonth.toISOString();
+}
+var Errors = {
+  authRequired: (requestId) => createErrorResponse(ErrorCodes.AUTH.REQUIRED, void 0, requestId),
+  invalidApiKey: (requestId) => createErrorResponse(ErrorCodes.API_KEY.INVALID, void 0, requestId),
+  apiKeyRevoked: (requestId) => createErrorResponse(ErrorCodes.API_KEY.REVOKED, void 0, requestId),
+  apiKeyExpired: (requestId) => createErrorResponse(ErrorCodes.API_KEY.EXPIRED, void 0, requestId),
+  rateLimited: (retryAfter, requestId) => createErrorResponse(
+    ErrorCodes.API_KEY.RATE_LIMITED,
+    { retryAfterSeconds: retryAfter },
+    requestId
+  ),
+  quotaExceeded: (currentUsage, limit, requestId) => createErrorResponse(
+    ErrorCodes.API_KEY.QUOTA_EXCEEDED,
+    { currentUsage, limit, resetDate: getNextResetDate() },
+    requestId
+  ),
+  toolNotFound: (toolName, requestId) => createErrorResponse(
+    ErrorCodes.MCP.TOOL_NOT_FOUND,
+    { tool: toolName },
+    requestId
+  ),
+  toolExecutionFailed: (toolName, reason, requestId) => createErrorResponse(
+    ErrorCodes.MCP.EXECUTION_FAILED,
+    { tool: toolName, reason },
+    requestId
+  ),
+  toolTimeout: (toolName, timeoutMs, requestId) => createErrorResponse(
+    ErrorCodes.MCP.TIMEOUT,
+    { tool: toolName, timeoutMs },
+    requestId
+  ),
+  validationFailed: (field, reason, requestId) => createErrorResponse(
+    ErrorCodes.VALIDATION.REQUIRED_FIELD,
+    { field, reason },
+    requestId
+  ),
+  invalidFormat: (field, expected, requestId) => createErrorResponse(
+    ErrorCodes.VALIDATION.INVALID_FORMAT,
+    { field, expected },
+    requestId
+  ),
+  internalError: (message, requestId) => createErrorResponse(
+    ErrorCodes.SYSTEM.INTERNAL_ERROR,
+    message ? { message } : void 0,
+    requestId
+  ),
+  databaseError: (operation, requestId) => createErrorResponse(
+    ErrorCodes.SYSTEM.DATABASE_ERROR,
+    { operation },
+    requestId
+  ),
+  integrationNotConnected: (provider, requestId) => createErrorResponse(
+    ErrorCodes.INTEGRATION.NOT_CONNECTED,
+    { provider },
+    requestId
+  ),
+  subscriptionRequired: (feature, requiredTier, requestId) => createErrorResponse(
+    ErrorCodes.BILLING.FEATURE_NOT_INCLUDED,
+    { feature, requiredTier },
+    requestId
+  )
+};
+var VasperaApiError = class extends Error {
+  errorDef;
+  details;
+  constructor(errorDef, details) {
+    super(errorDef.message);
+    this.name = "VasperaApiError";
+    this.errorDef = errorDef;
+    this.details = details;
+  }
+  toResponse(requestId) {
+    return createErrorResponse(this.errorDef, this.details, requestId);
+  }
+};
+
+// src/utils/api-key.ts
+import { randomBytes, createHash } from "crypto";
+var API_KEY_PREFIX_LIVE = "vpm_live_";
+var API_KEY_PREFIX_TEST = "vpm_test_";
+var API_KEY_RANDOM_BYTES = 24;
+function generateApiKey(environment = "live") {
+  const prefix = environment === "live" ? API_KEY_PREFIX_LIVE : API_KEY_PREFIX_TEST;
+  const randomPart = randomBytes(API_KEY_RANDOM_BYTES).toString("base64url").slice(0, 32);
+  const key = `${prefix}${randomPart}`;
+  const keyPrefix = key.slice(0, 16);
+  const keyHash = hashApiKey(key);
+  return {
+    key,
+    keyPrefix,
+    keyHash
+  };
+}
+function hashApiKey(key) {
+  return createHash("sha256").update(key).digest("hex");
+}
+function isValidApiKeyFormat(key) {
+  const livePattern = /^vpm_live_[a-zA-Z0-9_-]{32}$/;
+  const testPattern = /^vpm_test_[a-zA-Z0-9_-]{32}$/;
+  return livePattern.test(key) || testPattern.test(key);
+}
+function extractKeyPrefix(key) {
+  return key.slice(0, 16);
+}
+function isTestKey(key) {
+  return key.startsWith(API_KEY_PREFIX_TEST);
+}
+function maskApiKey(key) {
+  if (key.length < 24) return key;
+  return `${key.slice(0, 16)}...${key.slice(-4)}`;
+}
+
+// src/utils/encryption.ts
+import {
+  createCipheriv,
+  createDecipheriv,
+  randomBytes as randomBytes2,
+  scrypt
+} from "crypto";
+import { promisify } from "util";
+var scryptAsync = promisify(scrypt);
+var ALGORITHM = "aes-256-gcm";
+var IV_LENGTH = 16;
+var SALT_LENGTH = 32;
+var KEY_LENGTH = 32;
+async function encrypt(text, secret) {
+  const salt = randomBytes2(SALT_LENGTH);
+  const iv = randomBytes2(IV_LENGTH);
+  const key = await scryptAsync(secret, salt, KEY_LENGTH);
+  const cipher = createCipheriv(ALGORITHM, key, iv);
+  const encrypted = Buffer.concat([
+    cipher.update(text, "utf8"),
+    cipher.final()
+  ]);
+  const tag = cipher.getAuthTag();
+  return [
+    salt.toString("base64"),
+    iv.toString("base64"),
+    tag.toString("base64"),
+    encrypted.toString("base64")
+  ].join(":");
+}
+async function decrypt(encryptedText, secret) {
+  const parts = encryptedText.split(":");
+  if (parts.length !== 4) {
+    throw new Error("Invalid encrypted text format");
+  }
+  const [saltB64, ivB64, tagB64, encryptedB64] = parts;
+  const salt = Buffer.from(saltB64, "base64");
+  const iv = Buffer.from(ivB64, "base64");
+  const tag = Buffer.from(tagB64, "base64");
+  const encrypted = Buffer.from(encryptedB64, "base64");
+  const key = await scryptAsync(secret, salt, KEY_LENGTH);
+  const decipher = createDecipheriv(ALGORITHM, key, iv);
+  decipher.setAuthTag(tag);
+  return decipher.update(encrypted) + decipher.final("utf8");
+}
+function generateEncryptionSecret() {
+  return randomBytes2(32).toString("hex");
+}
+export {
+  ErrorCodes,
+  Errors,
+  QUOTA_LIMITS,
+  RATE_LIMITS,
+  VasperaApiError,
+  createError,
+  createErrorResponse,
+  decrypt,
+  encrypt,
+  extractKeyPrefix,
+  generateApiKey,
+  generateEncryptionSecret,
+  hashApiKey,
+  isTestKey,
+  isValidApiKeyFormat,
+  maskApiKey
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types/index.ts","../src/errors/codes.ts","../src/errors/factory.ts","../src/utils/api-key.ts","../src/utils/encryption.ts"],"sourcesContent":["// Subscription Types\nexport type SubscriptionTier = 'free' | 'starter' | 'pro' | 'enterprise';\nexport type SubscriptionStatus = 'active' | 'canceled' | 'past_due' | 'trialing' | 'incomplete';\n\n// User Profile\nexport interface UserProfile {\n  id: string;\n  email: string;\n  fullName: string | null;\n  avatarUrl: string | null;\n  subscriptionTier: SubscriptionTier;\n  subscriptionStatus: SubscriptionStatus;\n  stripeCustomerId: string | null;\n  stripeSubscriptionId: string | null;\n  createdAt: string;\n  updatedAt: string;\n}\n\n// API Key\nexport interface ApiKey {\n  id: string;\n  userId: string;\n  name: string;\n  keyPrefix: string;\n  lastUsedAt: string | null;\n  expiresAt: string | null;\n  revokedAt: string | null;\n  createdAt: string;\n}\n\nexport interface ApiKeyWithSecret extends Omit<ApiKey, 'revokedAt'> {\n  key: string; // Full key (only shown once)\n}\n\n// Usage\nexport interface UsageEvent {\n  id: string;\n  userId: string;\n  apiKeyId: string | null;\n  toolName: string;\n  tokensUsed: number;\n  latencyMs: number | null;\n  success: boolean;\n  errorCode: string | null;\n  requestId: string | null;\n  metadata: Record<string, unknown>;\n  createdAt: string;\n}\n\nexport interface UsageSummary {\n  period: {\n    start: string;\n    end: string;\n  };\n  summary: {\n    totalToolCalls: number;\n    totalTokensUsed: number;\n    quotaUsed: number;\n    quotaLimit: number;\n    quotaPercentage: number;\n  };\n  byTool: Array<{\n    tool: string;\n    calls: number;\n    tokensUsed: number;\n    avgLatencyMs: number;\n  }>;\n}\n\n// Quota Limits by Tier\nexport const QUOTA_LIMITS: Record<SubscriptionTier, number> = {\n  free: 5,\n  starter: 100,\n  pro: 500,\n  enterprise: 999999, // Effectively unlimited\n};\n\nexport const RATE_LIMITS: Record<SubscriptionTier, { perMinute: number; perDay: number }> = {\n  free: { perMinute: 10, perDay: 100 },\n  starter: { perMinute: 30, perDay: 1000 },\n  pro: { perMinute: 60, perDay: 5000 },\n  enterprise: { perMinute: 120, perDay: 999999 },\n};\n\n// Integration Types\nexport type IntegrationProvider = 'jira' | 'linear' | 'github' | 'gitlab' | 'asana';\n\nexport interface IntegrationToken {\n  id: string;\n  userId: string;\n  provider: IntegrationProvider;\n  tokenType: string;\n  expiresAt: string | null;\n  scopes: string[] | null;\n  providerUserId: string | null;\n  providerEmail: string | null;\n  metadata: Record<string, unknown>;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport interface IntegrationStatus {\n  provider: IntegrationProvider;\n  connected: boolean;\n  connectedAt?: string;\n  providerEmail?: string;\n  scopes?: string[];\n  metadata?: Record<string, unknown>;\n}\n\n// MCP Tool Types\nexport type McpToolName =\n  | 'synthesize_requirements'\n  | 'review_prd'\n  | 'explode_backlog'\n  | 'generate_architecture'\n  | 'sync_to_tracker'\n  | 'infer_prd_from_code'\n  | 'reverse_engineer_user_flows'\n  | 'generate_test_specs'\n  | 'explain_codebase'\n  | 'validate_implementation'\n  | 'suggest_refactors'\n  | 'generate_api_docs'\n  | 'dependency_audit'\n  | 'estimate_migration';\n\nexport interface McpToolResult<T = unknown> {\n  content: Array<{\n    type: 'text' | 'image' | 'resource';\n    text?: string;\n    data?: string;\n    mimeType?: string;\n  }>;\n  data?: T;\n  tokensUsed?: number;\n  isError?: boolean;\n}\n\n// API Response Types\nexport interface ApiSuccessResponse<T> {\n  success: true;\n  data: T;\n  meta?: {\n    requestId: string;\n    timestamp: string;\n  };\n}\n\nexport interface ApiErrorResponse {\n  success: false;\n  error: {\n    code: string;\n    message: string;\n    details?: Record<string, unknown>;\n    docUrl?: string;\n  };\n  meta?: {\n    requestId: string;\n    timestamp: string;\n  };\n}\n\nexport type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;\n","export interface ErrorDefinition {\n  code: string;\n  message: string;\n  httpStatus: number;\n}\n\nexport const ErrorCodes = {\n  // Authentication Errors (VPM-AUTH-XXX)\n  AUTH: {\n    REQUIRED: {\n      code: 'VPM-AUTH-001',\n      message: 'Authentication required',\n      httpStatus: 401,\n    },\n    INVALID_TOKEN: {\n      code: 'VPM-AUTH-002',\n      message: 'Invalid or expired authentication token',\n      httpStatus: 401,\n    },\n    INSUFFICIENT_PERMISSIONS: {\n      code: 'VPM-AUTH-003',\n      message: 'Insufficient permissions for this action',\n      httpStatus: 403,\n    },\n    SESSION_EXPIRED: {\n      code: 'VPM-AUTH-004',\n      message: 'Session has expired, please login again',\n      httpStatus: 401,\n    },\n    MFA_REQUIRED: {\n      code: 'VPM-AUTH-005',\n      message: 'Multi-factor authentication required',\n      httpStatus: 403,\n    },\n  },\n\n  // API Key Errors (VPM-API-KEY-XXX)\n  API_KEY: {\n    REQUIRED: {\n      code: 'VPM-API-KEY-001',\n      message: 'API key is required',\n      httpStatus: 401,\n    },\n    INVALID: {\n      code: 'VPM-API-KEY-002',\n      message: 'Invalid API key',\n      httpStatus: 401,\n    },\n    REVOKED: {\n      code: 'VPM-API-KEY-003',\n      message: 'API key has been revoked',\n      httpStatus: 401,\n    },\n    EXPIRED: {\n      code: 'VPM-API-KEY-004',\n      message: 'API key has expired',\n      httpStatus: 401,\n    },\n    RATE_LIMITED: {\n      code: 'VPM-API-KEY-005',\n      message: 'API key rate limit exceeded',\n      httpStatus: 429,\n    },\n    QUOTA_EXCEEDED: {\n      code: 'VPM-API-KEY-006',\n      message: 'Monthly usage quota exceeded',\n      httpStatus: 429,\n    },\n  },\n\n  // MCP Tool Errors (VPM-MCP-XXX)\n  MCP: {\n    TOOL_NOT_FOUND: {\n      code: 'VPM-MCP-001',\n      message: 'Requested tool not found',\n      httpStatus: 404,\n    },\n    INVALID_ARGUMENTS: {\n      code: 'VPM-MCP-002',\n      message: 'Invalid tool arguments provided',\n      httpStatus: 400,\n    },\n    EXECUTION_FAILED: {\n      code: 'VPM-MCP-003',\n      message: 'Tool execution failed',\n      httpStatus: 500,\n    },\n    TIMEOUT: {\n      code: 'VPM-MCP-004',\n      message: 'Tool execution timed out',\n      httpStatus: 504,\n    },\n    LLM_ERROR: {\n      code: 'VPM-MCP-005',\n      message: 'AI model returned an error',\n      httpStatus: 502,\n    },\n    CONTEXT_TOO_LARGE: {\n      code: 'VPM-MCP-006',\n      message: 'Input context exceeds maximum size',\n      httpStatus: 413,\n    },\n  },\n\n  // Billing Errors (VPM-BILLING-XXX)\n  BILLING: {\n    NO_SUBSCRIPTION: {\n      code: 'VPM-BILLING-001',\n      message: 'No active subscription found',\n      httpStatus: 402,\n    },\n    SUBSCRIPTION_EXPIRED: {\n      code: 'VPM-BILLING-002',\n      message: 'Subscription has expired',\n      httpStatus: 402,\n    },\n    PAYMENT_FAILED: {\n      code: 'VPM-BILLING-003',\n      message: 'Payment processing failed',\n      httpStatus: 402,\n    },\n    FEATURE_NOT_INCLUDED: {\n      code: 'VPM-BILLING-004',\n      message: 'Feature not included in current plan',\n      httpStatus: 403,\n    },\n    UPGRADE_REQUIRED: {\n      code: 'VPM-BILLING-005',\n      message: 'Plan upgrade required for this action',\n      httpStatus: 403,\n    },\n  },\n\n  // Integration Errors (VPM-INT-XXX)\n  INTEGRATION: {\n    NOT_CONNECTED: {\n      code: 'VPM-INT-001',\n      message: 'Integration not connected',\n      httpStatus: 400,\n    },\n    TOKEN_EXPIRED: {\n      code: 'VPM-INT-002',\n      message: 'Integration token expired, reconnection required',\n      httpStatus: 401,\n    },\n    REFRESH_FAILED: {\n      code: 'VPM-INT-003',\n      message: 'Failed to refresh integration token',\n      httpStatus: 502,\n    },\n    API_ERROR: {\n      code: 'VPM-INT-004',\n      message: 'External integration API error',\n      httpStatus: 502,\n    },\n    RATE_LIMITED: {\n      code: 'VPM-INT-005',\n      message: 'Integration rate limit exceeded',\n      httpStatus: 429,\n    },\n  },\n\n  // Validation Errors (VPM-VAL-XXX)\n  VALIDATION: {\n    REQUIRED_FIELD: {\n      code: 'VPM-VAL-001',\n      message: 'Required field missing',\n      httpStatus: 400,\n    },\n    INVALID_FORMAT: {\n      code: 'VPM-VAL-002',\n      message: 'Invalid field format',\n      httpStatus: 400,\n    },\n    OUT_OF_RANGE: {\n      code: 'VPM-VAL-003',\n      message: 'Value out of allowed range',\n      httpStatus: 400,\n    },\n    INVALID_JSON: {\n      code: 'VPM-VAL-004',\n      message: 'Invalid JSON in request body',\n      httpStatus: 400,\n    },\n  },\n\n  // System Errors (VPM-SYS-XXX)\n  SYSTEM: {\n    INTERNAL_ERROR: {\n      code: 'VPM-SYS-001',\n      message: 'Internal server error',\n      httpStatus: 500,\n    },\n    DATABASE_ERROR: {\n      code: 'VPM-SYS-002',\n      message: 'Database operation failed',\n      httpStatus: 500,\n    },\n    SERVICE_UNAVAILABLE: {\n      code: 'VPM-SYS-003',\n      message: 'Service temporarily unavailable',\n      httpStatus: 503,\n    },\n    MAINTENANCE_MODE: {\n      code: 'VPM-SYS-004',\n      message: 'System is under maintenance',\n      httpStatus: 503,\n    },\n  },\n} as const;\n\nexport type ErrorCodeType =\n  (typeof ErrorCodes)[keyof typeof ErrorCodes][keyof (typeof ErrorCodes)[keyof typeof ErrorCodes]];\n","import type { ErrorDefinition } from './codes.js';\nimport { ErrorCodes } from './codes.js';\n\nexport interface VasperaError {\n  code: string;\n  message: string;\n  details?: Record<string, unknown>;\n  timestamp: string;\n  requestId: string;\n  docUrl?: string;\n}\n\nexport interface ErrorResponse {\n  success: false;\n  error: VasperaError;\n}\n\nfunction generateRequestId(): string {\n  return `req_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 9)}`;\n}\n\nexport function createError(\n  errorDef: ErrorDefinition,\n  details?: Record<string, unknown>,\n  requestId?: string\n): VasperaError {\n  return {\n    code: errorDef.code,\n    message: errorDef.message,\n    details,\n    timestamp: new Date().toISOString(),\n    requestId: requestId || generateRequestId(),\n    docUrl: `https://docs.vaspera.pm/errors/${errorDef.code}`,\n  };\n}\n\nexport function createErrorResponse(\n  errorDef: ErrorDefinition,\n  details?: Record<string, unknown>,\n  requestId?: string\n): { response: ErrorResponse; status: number } {\n  return {\n    response: {\n      success: false,\n      error: createError(errorDef, details, requestId),\n    },\n    status: errorDef.httpStatus,\n  };\n}\n\nfunction getNextResetDate(): string {\n  const now = new Date();\n  const nextMonth = new Date(now.getFullYear(), now.getMonth() + 1, 1);\n  return nextMonth.toISOString();\n}\n\n// Pre-built error creators for common cases\nexport const Errors = {\n  authRequired: (requestId?: string) =>\n    createErrorResponse(ErrorCodes.AUTH.REQUIRED, undefined, requestId),\n\n  invalidApiKey: (requestId?: string) =>\n    createErrorResponse(ErrorCodes.API_KEY.INVALID, undefined, requestId),\n\n  apiKeyRevoked: (requestId?: string) =>\n    createErrorResponse(ErrorCodes.API_KEY.REVOKED, undefined, requestId),\n\n  apiKeyExpired: (requestId?: string) =>\n    createErrorResponse(ErrorCodes.API_KEY.EXPIRED, undefined, requestId),\n\n  rateLimited: (retryAfter: number, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.API_KEY.RATE_LIMITED,\n      { retryAfterSeconds: retryAfter },\n      requestId\n    ),\n\n  quotaExceeded: (currentUsage: number, limit: number, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.API_KEY.QUOTA_EXCEEDED,\n      { currentUsage, limit, resetDate: getNextResetDate() },\n      requestId\n    ),\n\n  toolNotFound: (toolName: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.MCP.TOOL_NOT_FOUND,\n      { tool: toolName },\n      requestId\n    ),\n\n  toolExecutionFailed: (toolName: string, reason: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.MCP.EXECUTION_FAILED,\n      { tool: toolName, reason },\n      requestId\n    ),\n\n  toolTimeout: (toolName: string, timeoutMs: number, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.MCP.TIMEOUT,\n      { tool: toolName, timeoutMs },\n      requestId\n    ),\n\n  validationFailed: (field: string, reason: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.VALIDATION.REQUIRED_FIELD,\n      { field, reason },\n      requestId\n    ),\n\n  invalidFormat: (field: string, expected: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.VALIDATION.INVALID_FORMAT,\n      { field, expected },\n      requestId\n    ),\n\n  internalError: (message?: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.SYSTEM.INTERNAL_ERROR,\n      message ? { message } : undefined,\n      requestId\n    ),\n\n  databaseError: (operation: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.SYSTEM.DATABASE_ERROR,\n      { operation },\n      requestId\n    ),\n\n  integrationNotConnected: (provider: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.INTEGRATION.NOT_CONNECTED,\n      { provider },\n      requestId\n    ),\n\n  subscriptionRequired: (feature: string, requiredTier: string, requestId?: string) =>\n    createErrorResponse(\n      ErrorCodes.BILLING.FEATURE_NOT_INCLUDED,\n      { feature, requiredTier },\n      requestId\n    ),\n};\n\n// Custom error class for throwing in API routes\nexport class VasperaApiError extends Error {\n  public readonly errorDef: ErrorDefinition;\n  public readonly details?: Record<string, unknown>;\n\n  constructor(errorDef: ErrorDefinition, details?: Record<string, unknown>) {\n    super(errorDef.message);\n    this.name = 'VasperaApiError';\n    this.errorDef = errorDef;\n    this.details = details;\n  }\n\n  toResponse(requestId?: string): { response: ErrorResponse; status: number } {\n    return createErrorResponse(this.errorDef, this.details, requestId);\n  }\n}\n","import { randomBytes, createHash } from 'crypto';\n\nconst API_KEY_PREFIX_LIVE = 'vpm_live_';\nconst API_KEY_PREFIX_TEST = 'vpm_test_';\nconst API_KEY_RANDOM_BYTES = 24; // 32 chars in base64url\n\nexport interface GeneratedApiKey {\n  key: string;        // Full key to show user once\n  keyPrefix: string;  // First 16 chars for identification\n  keyHash: string;    // Hash for storage and validation\n}\n\n/**\n * Generate a new API key\n * @param environment - 'live' or 'test'\n * @returns Generated key with prefix and hash\n */\nexport function generateApiKey(environment: 'live' | 'test' = 'live'): GeneratedApiKey {\n  const prefix = environment === 'live' ? API_KEY_PREFIX_LIVE : API_KEY_PREFIX_TEST;\n  const randomPart = randomBytes(API_KEY_RANDOM_BYTES)\n    .toString('base64url')\n    .slice(0, 32);\n\n  const key = `${prefix}${randomPart}`;\n  const keyPrefix = key.slice(0, 16);\n  const keyHash = hashApiKey(key);\n\n  return {\n    key,\n    keyPrefix,\n    keyHash,\n  };\n}\n\n/**\n * Hash an API key for storage\n * Using SHA-256 since we need to look up by hash\n */\nexport function hashApiKey(key: string): string {\n  return createHash('sha256').update(key).digest('hex');\n}\n\n/**\n * Validate API key format\n */\nexport function isValidApiKeyFormat(key: string): boolean {\n  const livePattern = /^vpm_live_[a-zA-Z0-9_-]{32}$/;\n  const testPattern = /^vpm_test_[a-zA-Z0-9_-]{32}$/;\n  return livePattern.test(key) || testPattern.test(key);\n}\n\n/**\n * Extract prefix from API key\n */\nexport function extractKeyPrefix(key: string): string {\n  return key.slice(0, 16);\n}\n\n/**\n * Check if key is a test key\n */\nexport function isTestKey(key: string): boolean {\n  return key.startsWith(API_KEY_PREFIX_TEST);\n}\n\n/**\n * Mask an API key for display (show first 16 and last 4 chars)\n */\nexport function maskApiKey(key: string): string {\n  if (key.length < 24) return key;\n  return `${key.slice(0, 16)}...${key.slice(-4)}`;\n}\n","import {\n  createCipheriv,\n  createDecipheriv,\n  randomBytes,\n  scrypt,\n} from 'crypto';\nimport { promisify } from 'util';\n\nconst scryptAsync = promisify(scrypt);\nconst ALGORITHM = 'aes-256-gcm';\nconst IV_LENGTH = 16;\nconst SALT_LENGTH = 32;\nconst TAG_LENGTH = 16;\nconst KEY_LENGTH = 32;\n\n/**\n * Encrypt text using AES-256-GCM\n * @param text - Plain text to encrypt\n * @param secret - Encryption secret\n * @returns Encrypted string in format: salt:iv:tag:ciphertext (all base64)\n */\nexport async function encrypt(text: string, secret: string): Promise<string> {\n  const salt = randomBytes(SALT_LENGTH);\n  const iv = randomBytes(IV_LENGTH);\n  const key = (await scryptAsync(secret, salt, KEY_LENGTH)) as Buffer;\n\n  const cipher = createCipheriv(ALGORITHM, key, iv);\n  const encrypted = Buffer.concat([\n    cipher.update(text, 'utf8'),\n    cipher.final(),\n  ]);\n  const tag = cipher.getAuthTag();\n\n  // Format: salt:iv:tag:encrypted (all base64)\n  return [\n    salt.toString('base64'),\n    iv.toString('base64'),\n    tag.toString('base64'),\n    encrypted.toString('base64'),\n  ].join(':');\n}\n\n/**\n * Decrypt text that was encrypted with encrypt()\n * @param encryptedText - Encrypted string in format: salt:iv:tag:ciphertext\n * @param secret - Encryption secret (must match encryption)\n * @returns Decrypted plain text\n */\nexport async function decrypt(\n  encryptedText: string,\n  secret: string\n): Promise<string> {\n  const parts = encryptedText.split(':');\n  if (parts.length !== 4) {\n    throw new Error('Invalid encrypted text format');\n  }\n\n  const [saltB64, ivB64, tagB64, encryptedB64] = parts;\n\n  const salt = Buffer.from(saltB64!, 'base64');\n  const iv = Buffer.from(ivB64!, 'base64');\n  const tag = Buffer.from(tagB64!, 'base64');\n  const encrypted = Buffer.from(encryptedB64!, 'base64');\n\n  const key = (await scryptAsync(secret, salt, KEY_LENGTH)) as Buffer;\n\n  const decipher = createDecipheriv(ALGORITHM, key, iv);\n  decipher.setAuthTag(tag);\n\n  return decipher.update(encrypted) + decipher.final('utf8');\n}\n\n/**\n * Generate a random encryption secret\n * @returns 32-byte hex string suitable for use as encryption secret\n */\nexport function generateEncryptionSecret(): string {\n  return randomBytes(32).toString('hex');\n}\n"],"mappings":";AAsEO,IAAM,eAAiD;AAAA,EAC5D,MAAM;AAAA,EACN,SAAS;AAAA,EACT,KAAK;AAAA,EACL,YAAY;AAAA;AACd;AAEO,IAAM,cAA+E;AAAA,EAC1F,MAAM,EAAE,WAAW,IAAI,QAAQ,IAAI;AAAA,EACnC,SAAS,EAAE,WAAW,IAAI,QAAQ,IAAK;AAAA,EACvC,KAAK,EAAE,WAAW,IAAI,QAAQ,IAAK;AAAA,EACnC,YAAY,EAAE,WAAW,KAAK,QAAQ,OAAO;AAC/C;;;AC5EO,IAAM,aAAa;AAAA;AAAA,EAExB,MAAM;AAAA,IACJ,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,0BAA0B;AAAA,MACxB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,iBAAiB;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,SAAS;AAAA,IACP,UAAU;AAAA,MACR,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,KAAK;AAAA,IACH,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,mBAAmB;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,kBAAkB;AAAA,MAChB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,SAAS;AAAA,MACP,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,mBAAmB;AAAA,MACjB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,SAAS;AAAA,IACP,iBAAiB;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,sBAAsB;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,sBAAsB;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,kBAAkB;AAAA,MAChB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,aAAa;AAAA,IACX,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,eAAe;AAAA,MACb,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,WAAW;AAAA,MACT,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,YAAY;AAAA,IACV,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAGA,QAAQ;AAAA,IACN,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,gBAAgB;AAAA,MACd,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,qBAAqB;AAAA,MACnB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,IACA,kBAAkB;AAAA,MAChB,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY;AAAA,IACd;AAAA,EACF;AACF;;;AChMA,SAAS,oBAA4B;AACnC,SAAO,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AACjF;AAEO,SAAS,YACd,UACA,SACA,WACc;AACd,SAAO;AAAA,IACL,MAAM,SAAS;AAAA,IACf,SAAS,SAAS;AAAA,IAClB;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,WAAW,aAAa,kBAAkB;AAAA,IAC1C,QAAQ,kCAAkC,SAAS,IAAI;AAAA,EACzD;AACF;AAEO,SAAS,oBACd,UACA,SACA,WAC6C;AAC7C,SAAO;AAAA,IACL,UAAU;AAAA,MACR,SAAS;AAAA,MACT,OAAO,YAAY,UAAU,SAAS,SAAS;AAAA,IACjD;AAAA,IACA,QAAQ,SAAS;AAAA,EACnB;AACF;AAEA,SAAS,mBAA2B;AAClC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,YAAY,IAAI,KAAK,IAAI,YAAY,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC;AACnE,SAAO,UAAU,YAAY;AAC/B;AAGO,IAAM,SAAS;AAAA,EACpB,cAAc,CAAC,cACb,oBAAoB,WAAW,KAAK,UAAU,QAAW,SAAS;AAAA,EAEpE,eAAe,CAAC,cACd,oBAAoB,WAAW,QAAQ,SAAS,QAAW,SAAS;AAAA,EAEtE,eAAe,CAAC,cACd,oBAAoB,WAAW,QAAQ,SAAS,QAAW,SAAS;AAAA,EAEtE,eAAe,CAAC,cACd,oBAAoB,WAAW,QAAQ,SAAS,QAAW,SAAS;AAAA,EAEtE,aAAa,CAAC,YAAoB,cAChC;AAAA,IACE,WAAW,QAAQ;AAAA,IACnB,EAAE,mBAAmB,WAAW;AAAA,IAChC;AAAA,EACF;AAAA,EAEF,eAAe,CAAC,cAAsB,OAAe,cACnD;AAAA,IACE,WAAW,QAAQ;AAAA,IACnB,EAAE,cAAc,OAAO,WAAW,iBAAiB,EAAE;AAAA,IACrD;AAAA,EACF;AAAA,EAEF,cAAc,CAAC,UAAkB,cAC/B;AAAA,IACE,WAAW,IAAI;AAAA,IACf,EAAE,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEF,qBAAqB,CAAC,UAAkB,QAAgB,cACtD;AAAA,IACE,WAAW,IAAI;AAAA,IACf,EAAE,MAAM,UAAU,OAAO;AAAA,IACzB;AAAA,EACF;AAAA,EAEF,aAAa,CAAC,UAAkB,WAAmB,cACjD;AAAA,IACE,WAAW,IAAI;AAAA,IACf,EAAE,MAAM,UAAU,UAAU;AAAA,IAC5B;AAAA,EACF;AAAA,EAEF,kBAAkB,CAAC,OAAe,QAAgB,cAChD;AAAA,IACE,WAAW,WAAW;AAAA,IACtB,EAAE,OAAO,OAAO;AAAA,IAChB;AAAA,EACF;AAAA,EAEF,eAAe,CAAC,OAAe,UAAkB,cAC/C;AAAA,IACE,WAAW,WAAW;AAAA,IACtB,EAAE,OAAO,SAAS;AAAA,IAClB;AAAA,EACF;AAAA,EAEF,eAAe,CAAC,SAAkB,cAChC;AAAA,IACE,WAAW,OAAO;AAAA,IAClB,UAAU,EAAE,QAAQ,IAAI;AAAA,IACxB;AAAA,EACF;AAAA,EAEF,eAAe,CAAC,WAAmB,cACjC;AAAA,IACE,WAAW,OAAO;AAAA,IAClB,EAAE,UAAU;AAAA,IACZ;AAAA,EACF;AAAA,EAEF,yBAAyB,CAAC,UAAkB,cAC1C;AAAA,IACE,WAAW,YAAY;AAAA,IACvB,EAAE,SAAS;AAAA,IACX;AAAA,EACF;AAAA,EAEF,sBAAsB,CAAC,SAAiB,cAAsB,cAC5D;AAAA,IACE,WAAW,QAAQ;AAAA,IACnB,EAAE,SAAS,aAAa;AAAA,IACxB;AAAA,EACF;AACJ;AAGO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzB;AAAA,EACA;AAAA,EAEhB,YAAY,UAA2B,SAAmC;AACxE,UAAM,SAAS,OAAO;AACtB,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,WAAW,WAAiE;AAC1E,WAAO,oBAAoB,KAAK,UAAU,KAAK,SAAS,SAAS;AAAA,EACnE;AACF;;;ACnKA,SAAS,aAAa,kBAAkB;AAExC,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB;AAatB,SAAS,eAAe,cAA+B,QAAyB;AACrF,QAAM,SAAS,gBAAgB,SAAS,sBAAsB;AAC9D,QAAM,aAAa,YAAY,oBAAoB,EAChD,SAAS,WAAW,EACpB,MAAM,GAAG,EAAE;AAEd,QAAM,MAAM,GAAG,MAAM,GAAG,UAAU;AAClC,QAAM,YAAY,IAAI,MAAM,GAAG,EAAE;AACjC,QAAM,UAAU,WAAW,GAAG;AAE9B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAMO,SAAS,WAAW,KAAqB;AAC9C,SAAO,WAAW,QAAQ,EAAE,OAAO,GAAG,EAAE,OAAO,KAAK;AACtD;AAKO,SAAS,oBAAoB,KAAsB;AACxD,QAAM,cAAc;AACpB,QAAM,cAAc;AACpB,SAAO,YAAY,KAAK,GAAG,KAAK,YAAY,KAAK,GAAG;AACtD;AAKO,SAAS,iBAAiB,KAAqB;AACpD,SAAO,IAAI,MAAM,GAAG,EAAE;AACxB;AAKO,SAAS,UAAU,KAAsB;AAC9C,SAAO,IAAI,WAAW,mBAAmB;AAC3C;AAKO,SAAS,WAAW,KAAqB;AAC9C,MAAI,IAAI,SAAS,GAAI,QAAO;AAC5B,SAAO,GAAG,IAAI,MAAM,GAAG,EAAE,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;AAC/C;;;ACvEA;AAAA,EACE;AAAA,EACA;AAAA,EACA,eAAAA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB;AAE1B,IAAM,cAAc,UAAU,MAAM;AACpC,IAAM,YAAY;AAClB,IAAM,YAAY;AAClB,IAAM,cAAc;AAEpB,IAAM,aAAa;AAQnB,eAAsB,QAAQ,MAAc,QAAiC;AAC3E,QAAM,OAAOC,aAAY,WAAW;AACpC,QAAM,KAAKA,aAAY,SAAS;AAChC,QAAM,MAAO,MAAM,YAAY,QAAQ,MAAM,UAAU;AAEvD,QAAM,SAAS,eAAe,WAAW,KAAK,EAAE;AAChD,QAAM,YAAY,OAAO,OAAO;AAAA,IAC9B,OAAO,OAAO,MAAM,MAAM;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AACD,QAAM,MAAM,OAAO,WAAW;AAG9B,SAAO;AAAA,IACL,KAAK,SAAS,QAAQ;AAAA,IACtB,GAAG,SAAS,QAAQ;AAAA,IACpB,IAAI,SAAS,QAAQ;AAAA,IACrB,UAAU,SAAS,QAAQ;AAAA,EAC7B,EAAE,KAAK,GAAG;AACZ;AAQA,eAAsB,QACpB,eACA,QACiB;AACjB,QAAM,QAAQ,cAAc,MAAM,GAAG;AACrC,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,QAAM,CAAC,SAAS,OAAO,QAAQ,YAAY,IAAI;AAE/C,QAAM,OAAO,OAAO,KAAK,SAAU,QAAQ;AAC3C,QAAM,KAAK,OAAO,KAAK,OAAQ,QAAQ;AACvC,QAAM,MAAM,OAAO,KAAK,QAAS,QAAQ;AACzC,QAAM,YAAY,OAAO,KAAK,cAAe,QAAQ;AAErD,QAAM,MAAO,MAAM,YAAY,QAAQ,MAAM,UAAU;AAEvD,QAAM,WAAW,iBAAiB,WAAW,KAAK,EAAE;AACpD,WAAS,WAAW,GAAG;AAEvB,SAAO,SAAS,OAAO,SAAS,IAAI,SAAS,MAAM,MAAM;AAC3D;AAMO,SAAS,2BAAmC;AACjD,SAAOA,aAAY,EAAE,EAAE,SAAS,KAAK;AACvC;","names":["randomBytes","randomBytes"]}

package/dist/types/index.d.mts

@@ -0,0 +1,122 @@
+type SubscriptionTier = 'free' | 'starter' | 'pro' | 'enterprise';
+type SubscriptionStatus = 'active' | 'canceled' | 'past_due' | 'trialing' | 'incomplete';
+interface UserProfile {
+    id: string;
+    email: string;
+    fullName: string | null;
+    avatarUrl: string | null;
+    subscriptionTier: SubscriptionTier;
+    subscriptionStatus: SubscriptionStatus;
+    stripeCustomerId: string | null;
+    stripeSubscriptionId: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+interface ApiKey {
+    id: string;
+    userId: string;
+    name: string;
+    keyPrefix: string;
+    lastUsedAt: string | null;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    createdAt: string;
+}
+interface ApiKeyWithSecret extends Omit<ApiKey, 'revokedAt'> {
+    key: string;
+}
+interface UsageEvent {
+    id: string;
+    userId: string;
+    apiKeyId: string | null;
+    toolName: string;
+    tokensUsed: number;
+    latencyMs: number | null;
+    success: boolean;
+    errorCode: string | null;
+    requestId: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+}
+interface UsageSummary {
+    period: {
+        start: string;
+        end: string;
+    };
+    summary: {
+        totalToolCalls: number;
+        totalTokensUsed: number;
+        quotaUsed: number;
+        quotaLimit: number;
+        quotaPercentage: number;
+    };
+    byTool: Array<{
+        tool: string;
+        calls: number;
+        tokensUsed: number;
+        avgLatencyMs: number;
+    }>;
+}
+declare const QUOTA_LIMITS: Record<SubscriptionTier, number>;
+declare const RATE_LIMITS: Record<SubscriptionTier, {
+    perMinute: number;
+    perDay: number;
+}>;
+type IntegrationProvider = 'jira' | 'linear' | 'github' | 'gitlab' | 'asana';
+interface IntegrationToken {
+    id: string;
+    userId: string;
+    provider: IntegrationProvider;
+    tokenType: string;
+    expiresAt: string | null;
+    scopes: string[] | null;
+    providerUserId: string | null;
+    providerEmail: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+interface IntegrationStatus {
+    provider: IntegrationProvider;
+    connected: boolean;
+    connectedAt?: string;
+    providerEmail?: string;
+    scopes?: string[];
+    metadata?: Record<string, unknown>;
+}
+type McpToolName = 'synthesize_requirements' | 'review_prd' | 'explode_backlog' | 'generate_architecture' | 'sync_to_tracker' | 'infer_prd_from_code' | 'reverse_engineer_user_flows' | 'generate_test_specs' | 'explain_codebase' | 'validate_implementation' | 'suggest_refactors' | 'generate_api_docs' | 'dependency_audit' | 'estimate_migration';
+interface McpToolResult<T = unknown> {
+    content: Array<{
+        type: 'text' | 'image' | 'resource';
+        text?: string;
+        data?: string;
+        mimeType?: string;
+    }>;
+    data?: T;
+    tokensUsed?: number;
+    isError?: boolean;
+}
+interface ApiSuccessResponse<T> {
+    success: true;
+    data: T;
+    meta?: {
+        requestId: string;
+        timestamp: string;
+    };
+}
+interface ApiErrorResponse {
+    success: false;
+    error: {
+        code: string;
+        message: string;
+        details?: Record<string, unknown>;
+        docUrl?: string;
+    };
+    meta?: {
+        requestId: string;
+        timestamp: string;
+    };
+}
+type ApiResponse<T> = ApiSuccessResponse<T> | ApiErrorResponse;
+
+export { type ApiErrorResponse, type ApiKey, type ApiKeyWithSecret, type ApiResponse, type ApiSuccessResponse, type IntegrationProvider, type IntegrationStatus, type IntegrationToken, type McpToolName, type McpToolResult, QUOTA_LIMITS, RATE_LIMITS, type SubscriptionStatus, type SubscriptionTier, type UsageEvent, type UsageSummary, type UserProfile };