@vertesia/common 1.5.0-dev.20260725.083715Z → 1.5.0-dev.20260804.124748Z

package/lib/user.d.ts

@@ -1,47 +1,31 @@
+import type { z } from 'zod';
+import type { AccountBillingSchema, AccountSchema, UpdateAccountPayloadSchema } from './api-schemas/account.js';
+import type { AccountProjectsResponseSchema, AccountRefSchema, InviteAcceptanceResponseSchema, InviteDeclineResponseSchema, InviteUserRequestPayloadSchema, InviteUserResponsePayloadSchema, OnboardingProgressSchema } from './api-schemas/invites.js';
+import type { SignupDataSchema, SignupPayloadSchema, UpdateUserPayloadSchema, UserRefSchema, UserSchema } from './api-schemas/user.js';
 import type { ApiKey } from './apikey.js';
-import type { ProjectRef, SystemRoles } from './project.js';
+export * from './account-values.js';
 export interface UserWithAccounts extends User {
     accounts: AccountRef[];
 }
-export interface User {
-    id: string;
-    externalId?: string;
-    email: string;
-    name: string;
-    username?: string;
-    picture?: string;
-    language?: string;
-    phone?: string;
-    sign_in_provider?: string;
-    last_selected_account?: string;
-    source?: 'firebase' | 'scim';
-    updated_by?: string;
-    /** Custom properties for dynamic permission matching */
-    properties?: Record<string, unknown>;
-    /** BLP clearance level — determines max document sensitivity the user can access */
-    clearance?: number;
-    /** Compartments the user belongs to — restricts access to documents in matching compartments */
-    compartments?: string[];
-    /** Free-form user metadata - restricted to internal use */
-    annotations?: string[];
-}
-export interface UpdateUserPayload {
-    name?: string;
-    username?: string;
-    picture?: string;
-    language?: string;
-    phone?: string;
-    last_selected_account?: string;
-    properties?: Record<string, unknown>;
-    clearance?: number;
-    compartments?: string[];
-}
-export interface UserRef {
-    id: string;
-    name: string;
-    email: string;
-    picture?: string;
-}
+/**
+ * The user and its update payload as they cross the wire.
+ *
+ * Derived from the schemas in `./api-schemas/user.js`, which are what OpenAPI publishes and AJV
+ * compiles. The descriptions live there too — Zod reads `.meta()`, not TSDoc.
+ *
+ * NOTE for server code: this is the RESPONSE shape, not the stored document. `IUser` in
+ * `@dglabs/server-common` describes what Mongo actually holds (optional email, ObjectId
+ * references, Date timestamps) and is deliberately independent of this type.
+ */
+export type User = z.infer<typeof UserSchema>;
+export type UpdateUserPayload = z.infer<typeof UpdateUserPayloadSchema>;
+/**
+ * The compact user shape embedded in other resources' responses, derived from `UserRefSchema`.
+ *
+ * `UserRefPopulate` is the Mongoose projection that produces it, and the two are meant to stay in
+ * step: a field added here without adding it there yields a response missing the field.
+ */
+export type UserRef = z.infer<typeof UserRefSchema>;
 export declare const UserRefPopulate = "id name email picture";
 /**
  * Annotation marker (stored in {@link User.annotations}) that grants a user access to
@@ -55,104 +39,35 @@ export declare const EARLY_ACCESS_ANNOTATION = "early-access";
  * annotation. The UI keys its dedicated rejection screen off this code.
  */
 export declare const RESTRICTED_ENVIRONMENT_ERROR_CODE = "restricted_environment";
-export declare enum Datacenters {
-    aws = "aws",
-    gcp = "gcp",
-    azure = "azure"
-}
-export declare enum BillingMethod {
-    stripe = "stripe",
-    invoice = "invoice"
-}
-export declare enum AccountType {
-    vertesia = "vertesia",
-    partner = "partner",
-    free = "free",
-    customer = "customer",
-    prospect = "prospect",
-    unknown = "unknown"
-}
-export interface AccountBilling {
-    method: BillingMethod;
-    stripe_customer_id?: string;
-}
 /**
- * Quota/rate-limit tier assigned to an account. Code-defined tiers live in `@dglabs/quota`
- * (`QUOTA_TIERS`); these names must match its keys.
- * - `standard` — protective baseline limits (the default for most accounts).
- * - `enterprise` — high limits for contracted customers / internal / partners.
+ * The account as it crosses the wire.
  *
- * An account with no explicit `quota_tier` derives its tier from its `account_type`.
+ * Derived from `AccountSchema`, not written alongside it: the schema is what OpenAPI publishes and
+ * what AJV compiles, so a hand-written twin could only ever drift from the contract actually being
+ * enforced. `import type` erases at compile time, so nothing here pulls zod into a browser or SDK
+ * bundle — runtime consumers reach the schemas through the `@vertesia/common/api-schemas` entry
+ * point instead.
  */
-export declare enum QuotaTier {
-    standard = "standard",
-    enterprise = "enterprise"
-}
+export type Account = z.infer<typeof AccountSchema>;
+export type AccountBilling = z.infer<typeof AccountBillingSchema>;
+export type UpdateAccountPayload = z.infer<typeof UpdateAccountPayloadSchema>;
+export type AccountRef = z.infer<typeof AccountRefSchema>;
+export declare const AccountRefPopulate = "id name";
 /**
- * Default tier for an account that has no explicit `quota_tier`, derived from its `account_type`:
- * contracted customers and internal Vertesia accounts get `enterprise`; everyone else (partner,
- * free, prospect, unknown) gets the protective `standard` baseline.
+ * The account invite, onboarding and project-listing wire types, derived from
+ * `./api-schemas/invites.js`.
+ *
+ * `AccountRef` above is the one member of this closure that stays hand-written, and only because
+ * `Interaction` and `PromptTemplate` still reference it through the TypeScript scanner, which cannot
+ * expand a `z.infer<>`. Everything here is reachable only from converted slots, so nothing derived
+ * reads it and the alias is safe. `AccountRefSchema` is still the runtime source of truth, and the
+ * `Equals` assertion in `invites.contract.test.ts` is what holds the interface to it.
  */
-export declare function quotaTierForAccountType(accountType: AccountType | undefined | null): QuotaTier;
-export declare const ACCOUNT_NAMESPACE_MAX_LENGTH = 63;
-export declare const ACCOUNT_APP_ACCESS_MESSAGE_MAX_LENGTH = 1000;
-export declare const RESERVED_ACCOUNT_NAMESPACES: readonly ["admin", "api", "apps", "auth", "cdn", "docs", "internal-auth", "mcp", "status", "sts", "www"];
-export declare function normalizeAccountNamespace(namespace: string): string;
-export declare function getAccountNamespaceValidationError(namespace: string): string | undefined;
-export interface Account {
-    id: string;
-    name: string;
-    /** Public DNS-label-compatible identifier used by organization app domains. */
-    namespace?: string;
-    /**
-     * Plain-text instructions shown when a signed-in user has no application access.
-     * @maxLength 1000
-     */
-    app_access_message?: string;
-    email_domains: string[];
-    onboarding: {
-        completed: boolean;
-        completed_at: Date;
-    };
-    datacenter: string;
-    account_type: AccountType;
-    billing: AccountBilling;
-    /** Quota/rate-limit tier. Unset → the deployment default tier (env `QUOTA_BASE_TIER`). */
-    quota_tier?: QuotaTier;
-    created_by: string;
-    updated_by: string;
-    created_at: string;
-    updated_at: string;
-}
-export interface UpdateAccountPayload {
-    name?: string;
-    /** @maxLength 1000 */
-    app_access_message?: string;
-    email_domains?: string[];
-    billing?: AccountBilling;
-    quota_tier?: QuotaTier;
-}
-export interface AccountRef {
-    id: string;
-    name: string;
-}
-export declare const AccountRefPopulate = "id name";
-export interface InviteUserRequestPayload {
-    email: string;
-    role: SystemRoles;
-}
-export interface InviteUserResponsePayload {
-    action: 'invited' | 'added';
-}
-export interface InviteAcceptanceResponse {
-    status: 'added';
-}
-export interface InviteDeclineResponse {
-    status: 'deleted';
-}
-export interface AccountProjectsResponse {
-    data: ProjectRef[];
-}
+export type InviteUserRequestPayload = z.infer<typeof InviteUserRequestPayloadSchema>;
+export type InviteUserResponsePayload = z.infer<typeof InviteUserResponsePayloadSchema>;
+export type InviteAcceptanceResponse = z.infer<typeof InviteAcceptanceResponseSchema>;
+export type InviteDeclineResponse = z.infer<typeof InviteDeclineResponseSchema>;
+export type AccountProjectsResponse = z.infer<typeof AccountProjectsResponseSchema>;
 type UserOrApiKey<T extends User | ApiKey> = T extends User ? User : ApiKey;
 type SessionType<T extends User | ApiKey> = T extends User ? 'user' : 'apikey';
 export interface SessionInfo<T extends User | ApiKey> {
@@ -166,29 +81,13 @@ export interface UserSessionInfo extends SessionInfo<User> {
 }
 export interface ApiKeySessionInfo extends SessionInfo<ApiKey> {
 }
-export interface OnboardingProgress {
-    interactions: boolean;
-    prompts: boolean;
-    environments: boolean;
-    default_environment_defined: boolean;
-}
+export type OnboardingProgress = z.infer<typeof OnboardingProgressSchema>;
 /**
- * Data collected at signup
- * used for onboarding and segments
- **/
-export interface SignupData {
-    accountType: string;
-    companyName?: string;
-    companySize?: number;
-    companyWebsite?: string;
-    maturity?: string;
-}
+ * Data collected at signup, used for onboarding and segments.
+ */
+export type SignupData = z.infer<typeof SignupDataSchema>;
 /**
- * Signup Payload: used to create a new user
+ * The `POST /auth/signup` request body.
  */
-export interface SignupPayload {
-    firebaseToken: string;
-    signupData: SignupData;
-}
-export {};
+export type SignupPayload = z.infer<typeof SignupPayloadSchema>;
 //# sourceMappingURL=user.d.ts.map

package/lib/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../src/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE5D,MAAM,WAAW,gBAAiB,SAAQ,IAAI;IAC1C,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,IAAI;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,oFAAoF;IACpF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,2BAA2B,CAAC;AAE1E,oBAAY,WAAW;IACnB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,KAAK,UAAU;CAClB;AAED,oBAAY,aAAa;IACrB,MAAM,WAAW;IACjB,OAAO,YAAY;CACtB;AAED,oBAAY,WAAW;IACnB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACtB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,oBAAY,SAAS;IACjB,QAAQ,aAAa;IACrB,UAAU,eAAe;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,SAAS,CAQ9F;AAED,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,qCAAqC,OAAO,CAAC;AAC1D,eAAO,MAAM,2BAA2B,0GAY9B,CAAC;AAIX,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWxF;AAED,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IAEb,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,aAAa,EAAE,MAAM,EAAE,CAAC;IAExB,UAAU,EAAE;QACR,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC;KACtB,CAAC;IAEF,UAAU,EAAE,MAAM,CAAC;IAEnB,YAAY,EAAE,WAAW,CAAC;IAE1B,OAAO,EAAE,cAAc,CAAC;IAExB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,SAAS,CAAC;IAEvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,UAAU,CAAC,EAAE,SAAS,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAE5C,MAAM,WAAW,wBAAwB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACtC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACrC,MAAM,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IAClC,MAAM,EAAE,SAAS,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,KAAK,YAAY,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAC5E,KAAK,WAAW,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC/E,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAEzB,eAAe,EAAE,OAAO,CAAC;IAEzB,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW,CAAC,IAAI,CAAC;CAAG;AAC7D,MAAM,WAAW,iBAAkB,SAAQ,WAAW,CAAC,MAAM,CAAC;CAAG;AAEjE,MAAM,WAAW,kBAAkB;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,2BAA2B,EAAE,OAAO,CAAC;CACxC;AAED;;;IAGI;AACJ,MAAM,WAAW,UAAU;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CAC1B"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../src/user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAChH,OAAO,KAAK,EACR,6BAA6B,EAC7B,gBAAgB,EAChB,8BAA8B,EAC9B,2BAA2B,EAC3B,8BAA8B,EAC9B,+BAA+B,EAC/B,wBAAwB,EAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACR,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,aAAa,EACb,UAAU,EACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,cAAc,qBAAqB,CAAC;AAEpC,MAAM,WAAW,gBAAiB,SAAQ,IAAI;IAC1C,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAC9C,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,iBAAiB,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,2BAA2B,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,kBAAkB,YAAY,CAAC;AAE5C;;;;;;;;;GASG;AACH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,KAAK,YAAY,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC;AAC5E,KAAK,WAAW,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC/E,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM;IAChD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAEzB,eAAe,EAAE,OAAO,CAAC;IAEzB,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAgB,SAAQ,WAAW,CAAC,IAAI,CAAC;CAAG;AAC7D,MAAM,WAAW,iBAAkB,SAAQ,WAAW,CAAC,MAAM,CAAC;CAAG;AAEjE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/lib/user.js

@@ -1,3 +1,4 @@
+export * from './account-values.js';
 export const UserRefPopulate = 'id name email picture';
 /**
  * Annotation marker (stored in {@link User.annotations}) that grants a user access to
@@ -11,83 +12,5 @@ export const EARLY_ACCESS_ANNOTATION = 'early-access';
  * annotation. The UI keys its dedicated rejection screen off this code.
  */
 export const RESTRICTED_ENVIRONMENT_ERROR_CODE = 'restricted_environment';
-export var Datacenters;
-(function (Datacenters) {
-    Datacenters["aws"] = "aws";
-    Datacenters["gcp"] = "gcp";
-    Datacenters["azure"] = "azure";
-})(Datacenters || (Datacenters = {}));
-export var BillingMethod;
-(function (BillingMethod) {
-    BillingMethod["stripe"] = "stripe";
-    BillingMethod["invoice"] = "invoice";
-})(BillingMethod || (BillingMethod = {}));
-export var AccountType;
-(function (AccountType) {
-    AccountType["vertesia"] = "vertesia";
-    AccountType["partner"] = "partner";
-    AccountType["free"] = "free";
-    AccountType["customer"] = "customer";
-    AccountType["prospect"] = "prospect";
-    AccountType["unknown"] = "unknown";
-})(AccountType || (AccountType = {}));
-/**
- * Quota/rate-limit tier assigned to an account. Code-defined tiers live in `@dglabs/quota`
- * (`QUOTA_TIERS`); these names must match its keys.
- * - `standard` — protective baseline limits (the default for most accounts).
- * - `enterprise` — high limits for contracted customers / internal / partners.
- *
- * An account with no explicit `quota_tier` derives its tier from its `account_type`.
- */
-export var QuotaTier;
-(function (QuotaTier) {
-    QuotaTier["standard"] = "standard";
-    QuotaTier["enterprise"] = "enterprise";
-})(QuotaTier || (QuotaTier = {}));
-/**
- * Default tier for an account that has no explicit `quota_tier`, derived from its `account_type`:
- * contracted customers and internal Vertesia accounts get `enterprise`; everyone else (partner,
- * free, prospect, unknown) gets the protective `standard` baseline.
- */
-export function quotaTierForAccountType(accountType) {
-    switch (accountType) {
-        case AccountType.customer:
-        case AccountType.vertesia:
-            return QuotaTier.enterprise;
-        default:
-            return QuotaTier.standard;
-    }
-}
-export const ACCOUNT_NAMESPACE_MAX_LENGTH = 63;
-export const ACCOUNT_APP_ACCESS_MESSAGE_MAX_LENGTH = 1000;
-export const RESERVED_ACCOUNT_NAMESPACES = [
-    'admin',
-    'api',
-    'apps',
-    'auth',
-    'cdn',
-    'docs',
-    'internal-auth',
-    'mcp',
-    'status',
-    'sts',
-    'www',
-];
-const ACCOUNT_NAMESPACE_PATTERN = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
-export function normalizeAccountNamespace(namespace) {
-    return namespace.trim().toLowerCase();
-}
-export function getAccountNamespaceValidationError(namespace) {
-    if (!namespace) {
-        return 'Account namespace is required';
-    }
-    if (namespace.length > ACCOUNT_NAMESPACE_MAX_LENGTH || !ACCOUNT_NAMESPACE_PATTERN.test(namespace)) {
-        return 'Account namespace must be a lowercase DNS label containing only letters, numbers, and hyphens';
-    }
-    if (RESERVED_ACCOUNT_NAMESPACES.includes(namespace)) {
-        return `Account namespace '${namespace}' is reserved`;
-    }
-    return undefined;
-}
 export const AccountRefPopulate = 'id name';
 //# sourceMappingURL=user.js.map

package/lib/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sourceRoot":"","sources":["../src/user.ts"],"names":[],"mappings":"AAiDA,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,wBAAwB,CAAC;AAE1E,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,0BAAW,CAAA;IACX,0BAAW,CAAA;IACX,8BAAe,CAAA;AACnB,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB;AAED,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACrB,kCAAiB,CAAA;IACjB,oCAAmB,CAAA;AACvB,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,MAAM,CAAN,IAAY,WAOX;AAPD,WAAY,WAAW;IACnB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;IACnB,4BAAa,CAAA;IACb,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;IACrB,kCAAmB,CAAA;AACvB,CAAC,EAPW,WAAW,KAAX,WAAW,QAOtB;AAOD;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,SAGX;AAHD,WAAY,SAAS;IACjB,kCAAqB,CAAA;IACrB,sCAAyB,CAAA;AAC7B,CAAC,EAHW,SAAS,KAAT,SAAS,QAGpB;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAA2C;IAC/E,QAAQ,WAAW,EAAE,CAAC;QAClB,KAAK,WAAW,CAAC,QAAQ,CAAC;QAC1B,KAAK,WAAW,CAAC,QAAQ;YACrB,OAAO,SAAS,CAAC,UAAU,CAAC;QAChC;YACI,OAAO,SAAS,CAAC,QAAQ,CAAC;IAClC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACvC,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,eAAe;IACf,KAAK;IACL,QAAQ;IACR,KAAK;IACL,KAAK;CACC,CAAC;AAEX,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAE3E,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACvD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,SAAiB;IAChE,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,+BAA+B,CAAC;IAC3C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,4BAA4B,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChG,OAAO,+FAA+F,CAAC;IAC3G,CAAC;IACD,IAAK,2BAAiD,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,sBAAsB,SAAS,eAAe,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAmDD,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC"}
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../src/user.ts"],"names":[],"mappings":"AAoBA,cAAc,qBAAqB,CAAC;AA2BpC,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,wBAAwB,CAAC;AAqB1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC"}

package/lib/versions.d.ts

@@ -1,6 +1,29 @@
+/**
+ * The header a caller names an API version in, as `YYYYMMDD` — see {@link ApiVersions}.
+ *
+ * Declared here rather than in the client, because both ends of the negotiation need it: the
+ * servers register it with `withVersionHeader` and read it when deciding how strictly to hold a
+ * request to its published schema, and `@vertesia/client` sets it on every call. It kept the
+ * spelling it has always had on the wire.
+ */
+export declare const VERSION_HEADER = "x-api-version";
 export declare enum ApiVersions {
     COMPLETION_RESULT_V1 = 20250925,
     DOWNLOAD_URL_NO_MIME_TYPE_V1 = 20260210,
-    MEDIA_BLOB_STORAGE_V1 = 20260319
+    MEDIA_BLOB_STORAGE_V1 = 20260319,
+    /**
+     * Request bodies and parameters are rejected when they do not match the published component.
+     *
+     * The endpoints did not change shape at this date — the schemas they had always published
+     * started being enforced. A body carrying an undeclared property against a closed component,
+     * or a query parameter of the wrong type, used to be accepted and silently ignored; from here
+     * it is a 400.
+     *
+     * Unlike the milestones above, this one is not about a route: it gates the enforcement policy
+     * itself, so a caller pinned below it gets the old lenient behaviour on EVERY endpoint while
+     * the mismatch is logged. Sending nothing means the current API, so the strict reading is what
+     * a new caller gets by default and leniency has to be asked for.
+     */
+    REQUEST_CONTRACT_ENFORCEMENT_V1 = 20260803
 }
 //# sourceMappingURL=versions.d.ts.map

package/lib/versions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"versions.d.ts","sourceRoot":"","sources":["../src/versions.ts"],"names":[],"mappings":"AAAA,oBAAY,WAAW;IACnB,oBAAoB,WAAW;IAC/B,4BAA4B,WAAW;IACvC,qBAAqB,WAAW;CACnC"}
+{"version":3,"file":"versions.d.ts","sourceRoot":"","sources":["../src/versions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAE9C,oBAAY,WAAW;IACnB,oBAAoB,WAAW;IAC/B,4BAA4B,WAAW;IACvC,qBAAqB,WAAW;IAChC;;;;;;;;;;;;OAYG;IACH,+BAA+B,WAAW;CAC7C"}

package/lib/versions.js

@@ -1,7 +1,30 @@
+/**
+ * The header a caller names an API version in, as `YYYYMMDD` — see {@link ApiVersions}.
+ *
+ * Declared here rather than in the client, because both ends of the negotiation need it: the
+ * servers register it with `withVersionHeader` and read it when deciding how strictly to hold a
+ * request to its published schema, and `@vertesia/client` sets it on every call. It kept the
+ * spelling it has always had on the wire.
+ */
+export const VERSION_HEADER = 'x-api-version';
 export var ApiVersions;
 (function (ApiVersions) {
     ApiVersions[ApiVersions["COMPLETION_RESULT_V1"] = 20250925] = "COMPLETION_RESULT_V1";
     ApiVersions[ApiVersions["DOWNLOAD_URL_NO_MIME_TYPE_V1"] = 20260210] = "DOWNLOAD_URL_NO_MIME_TYPE_V1";
     ApiVersions[ApiVersions["MEDIA_BLOB_STORAGE_V1"] = 20260319] = "MEDIA_BLOB_STORAGE_V1";
+    /**
+     * Request bodies and parameters are rejected when they do not match the published component.
+     *
+     * The endpoints did not change shape at this date — the schemas they had always published
+     * started being enforced. A body carrying an undeclared property against a closed component,
+     * or a query parameter of the wrong type, used to be accepted and silently ignored; from here
+     * it is a 400.
+     *
+     * Unlike the milestones above, this one is not about a route: it gates the enforcement policy
+     * itself, so a caller pinned below it gets the old lenient behaviour on EVERY endpoint while
+     * the mismatch is logged. Sending nothing means the current API, so the strict reading is what
+     * a new caller gets by default and leniency has to be asked for.
+     */
+    ApiVersions[ApiVersions["REQUEST_CONTRACT_ENFORCEMENT_V1"] = 20260803] = "REQUEST_CONTRACT_ENFORCEMENT_V1";
 })(ApiVersions || (ApiVersions = {}));
 //# sourceMappingURL=versions.js.map

package/lib/versions.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.js","sourceRoot":"","sources":["../src/versions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,WAIX;AAJD,WAAY,WAAW;IACnB,oFAA+B,CAAA;IAC/B,oGAAuC,CAAA;IACvC,sFAAgC,CAAA;AACpC,CAAC,EAJW,WAAW,KAAX,WAAW,QAItB"}
+{"version":3,"file":"versions.js","sourceRoot":"","sources":["../src/versions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;AAE9C,MAAM,CAAN,IAAY,WAkBX;AAlBD,WAAY,WAAW;IACnB,oFAA+B,CAAA;IAC/B,oGAAuC,CAAA;IACvC,sFAAgC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,0GAA0C,CAAA;AAC9C,CAAC,EAlBW,WAAW,KAAX,WAAW,QAkBtB"}