@vibesdotdev/account 0.0.0-stage → 1.0.0-rc.3

package/dist/api/account.social.schemas.d.ts

@@ -0,0 +1,160 @@
+import * as z from 'zod/v4';
+/** Narrow public user row embedded in social graph responses. */
+export declare const accountSocialUserSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodNullable<z.ZodString>;
+    displayName: z.ZodNullable<z.ZodString>;
+    image: z.ZodNullable<z.ZodString>;
+    slug: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const accountFriendRequestStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    accepted: "accepted";
+    declined: "declined";
+}>;
+export declare const accountIncomingFriendRequestSchema: z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    requester: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const accountOutgoingFriendRequestSchema: z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    addressee: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const accountIncomingFriendRequestListSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    requester: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>>;
+export declare const accountOutgoingFriendRequestListSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    addressee: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>>;
+/**
+ * Responding to a friend request returns either the incoming or the outgoing
+ * shape depending on which side the caller is on. The incoming shape is tried
+ * first (it carries `requester`); the outgoing shape (carrying `addressee`) is
+ * the fallback.
+ */
+export declare const accountFriendRequestRespondResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    requester: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    requesterId: z.ZodString;
+    addresseeId: z.ZodString;
+    status: z.ZodEnum<{
+        pending: "pending";
+        accepted: "accepted";
+        declined: "declined";
+    }>;
+    createdAt: z.ZodString;
+    addressee: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>]>;
+export declare const accountDiscoverHitSchema: z.ZodObject<{
+    user: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    profile: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const accountDiscoverHitListSchema: z.ZodArray<z.ZodObject<{
+    user: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        displayName: z.ZodNullable<z.ZodString>;
+        image: z.ZodNullable<z.ZodString>;
+        slug: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    profile: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
+}, z.core.$strip>>;
+export declare const accountFriendRespondStatusSchema: z.ZodEnum<{
+    accepted: "accepted";
+    declined: "declined";
+}>;
+export declare const accountFriendRequestErrorSchema: z.ZodObject<{
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AccountSocialUser = z.infer<typeof accountSocialUserSchema>;
+export type AccountIncomingFriendRequest = z.infer<typeof accountIncomingFriendRequestSchema>;
+export type AccountOutgoingFriendRequest = z.infer<typeof accountOutgoingFriendRequestSchema>;
+export type AccountDiscoverHit = z.infer<typeof accountDiscoverHitSchema>;
+export type AccountFriendRespondStatus = z.infer<typeof accountFriendRespondStatusSchema>;
+//# sourceMappingURL=account.social.schemas.d.ts.map

package/dist/api/account.social.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.social.schemas.d.ts","sourceRoot":"","sources":["../../src/api/account.social.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,iEAAiE;AACjE,eAAO,MAAM,uBAAuB;;;;;;iBAMlC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;EAA8C,CAAC;AAE5F,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;iBAW7C,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;iBAS7C,CAAC;AAEH,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;kBAA8C,CAAC;AAClG,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;;;;;kBAA8C,CAAC;AAElG;;;;;GAKG;AACH,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mBAGpD,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;iBAGnC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;kBAAoC,CAAC;AAE9E,eAAO,MAAM,gCAAgC;;;EAAmC,CAAC;AAEjF,eAAO,MAAM,+BAA+B;;iBAE1C,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}

package/dist/api/account.social.schemas.js

@@ -0,0 +1,54 @@
+import * as z from 'zod/v4';
+/** Narrow public user row embedded in social graph responses. */
+export const accountSocialUserSchema = z.object({
+    id: z.string(),
+    name: z.string().nullable(),
+    displayName: z.string().nullable(),
+    image: z.string().nullable(),
+    slug: z.string().nullable()
+});
+export const accountFriendRequestStatusSchema = z.enum(['pending', 'accepted', 'declined']);
+export const accountIncomingFriendRequestSchema = z.object({
+    id: z.string(),
+    requesterId: z.string(),
+    addresseeId: z.string(),
+    status: accountFriendRequestStatusSchema,
+    createdAt: z.string(),
+    // The list endpoint (`/friends/pending`) embeds the requester user join, but
+    // the write paths (`sendFriendRequest`/`respondToFriendRequest`) return the
+    // raw `userFriendships` row with no join — so the key is absent there.
+    // Optional+nullable accepts both; consumers already guard `requester?`.
+    requester: accountSocialUserSchema.nullable().optional()
+});
+export const accountOutgoingFriendRequestSchema = z.object({
+    id: z.string(),
+    requesterId: z.string(),
+    addresseeId: z.string(),
+    status: accountFriendRequestStatusSchema,
+    createdAt: z.string(),
+    // As above: `/friends/sent` embeds the addressee join; the write paths return
+    // the raw row without it. Optional+nullable accepts both.
+    addressee: accountSocialUserSchema.nullable().optional()
+});
+export const accountIncomingFriendRequestListSchema = z.array(accountIncomingFriendRequestSchema);
+export const accountOutgoingFriendRequestListSchema = z.array(accountOutgoingFriendRequestSchema);
+/**
+ * Responding to a friend request returns either the incoming or the outgoing
+ * shape depending on which side the caller is on. The incoming shape is tried
+ * first (it carries `requester`); the outgoing shape (carrying `addressee`) is
+ * the fallback.
+ */
+export const accountFriendRequestRespondResponseSchema = z.union([
+    accountIncomingFriendRequestSchema,
+    accountOutgoingFriendRequestSchema
+]);
+export const accountDiscoverHitSchema = z.object({
+    user: accountSocialUserSchema,
+    profile: z.unknown().nullable().optional()
+});
+export const accountDiscoverHitListSchema = z.array(accountDiscoverHitSchema);
+export const accountFriendRespondStatusSchema = z.enum(['accepted', 'declined']);
+export const accountFriendRequestErrorSchema = z.object({
+    error: z.string().optional()
+});
+//# sourceMappingURL=account.social.schemas.js.map

package/dist/api/account.social.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.social.schemas.js","sourceRoot":"","sources":["../../src/api/account.social.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,wEAAwE;IACxE,SAAS,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,8EAA8E;IAC9E,0DAA0D;IAC1D,SAAS,EAAE,uBAAuB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAClG,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAElG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,KAAK,CAAC;IAChE,kCAAkC;IAClC,kCAAkC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC"}

package/dist/api/failure-message.d.ts

@@ -0,0 +1,11 @@
+import { type CaughtFailure } from '@vibesdotdev/kernel';
+/**
+ * A message safe to show a user for a failed account call. The one text taken
+ * from a failure is the account service's own `{ error }` string on a rejected
+ * request (status 400 to 499, at most 500 characters): it is written for the
+ * person. Every other failure gets fixed text chosen by its code, or
+ * `fallback`; its own message (a transport's text, a request value) never
+ * reaches the page.
+ */
+export declare function failureMessage(failure: CaughtFailure, fallback: string): string;
+//# sourceMappingURL=failure-message.d.ts.map

package/dist/api/failure-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-message.d.ts","sourceRoot":"","sources":["../../src/api/failure-message.ts"],"names":[],"mappings":"AACA,OAAO,EAAgC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwBvF;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAW/E"}

package/dist/api/failure-message.js

@@ -0,0 +1,49 @@
+import * as z from 'zod/v4';
+import { isCapabilityError, settleNow } from '@vibesdotdev/kernel';
+import { AccountApiError } from "./account.api-client.types.js";
+/** What a user is told for the failures they can act on, by the failure's code. */
+const CODE_MESSAGES = new Map(Object.entries({
+    AUTH_REQUIRED: 'Sign in to continue.',
+    PERMISSION_DENIED: 'You do not have permission to do that.',
+    NOT_FOUND: 'That could not be found.',
+    RATE_LIMITED: 'Too many requests. Try again shortly.',
+    UNAVAILABLE: 'This is not available right now. Try again shortly.'
+}));
+/** The service's own refusal text: `{ "error": "<text>" }`, at most 500 characters. */
+const serviceRefusalSchema = z.object({ error: z.string().min(1).max(500) });
+/** The text of a service refusal body, or `undefined` when the body is not one (an HTML page is expected, not a fault). */
+function serviceRefusalText(body) {
+    const parsed = settleNow(() => serviceRefusalSchema.safeParse(JSON.parse(body)));
+    if (parsed.ok)
+        return parsed.value.success ? parsed.value.data.error : undefined;
+    // Only JSON's own SyntaxError means "not a refusal body"; any other failure of the parse is not.
+    if (parsed.cause instanceof SyntaxError)
+        return undefined;
+    throw parsed.cause;
+}
+/**
+ * A message safe to show a user for a failed account call. The one text taken
+ * from a failure is the account service's own `{ error }` string on a rejected
+ * request (status 400 to 499, at most 500 characters): it is written for the
+ * person. Every other failure gets fixed text chosen by its code, or
+ * `fallback`; its own message (a transport's text, a request value) never
+ * reaches the page.
+ */
+export function failureMessage(failure, fallback) {
+    if (failure instanceof AccountApiError && failure.status >= 400 && failure.status < 500) {
+        const refusal = serviceRefusalText(failure.body);
+        if (refusal)
+            return refusal;
+        if (failure.status === 403)
+            return CODE_MESSAGES.get('PERMISSION_DENIED') ?? fallback;
+        if (failure.status === 404)
+            return CODE_MESSAGES.get('NOT_FOUND') ?? fallback;
+        if (failure.status === 429)
+            return CODE_MESSAGES.get('RATE_LIMITED') ?? fallback;
+        return fallback;
+    }
+    if (!isCapabilityError(failure))
+        return fallback;
+    return CODE_MESSAGES.get(failure.code) ?? fallback;
+}
+//# sourceMappingURL=failure-message.js.map

package/dist/api/failure-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-message.js","sourceRoot":"","sources":["../../src/api/failure-message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAsB,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,mFAAmF;AACnF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAiB,MAAM,CAAC,OAAO,CAAC;IAC5D,aAAa,EAAE,sBAAsB;IACrC,iBAAiB,EAAE,wCAAwC;IAC3D,SAAS,EAAE,0BAA0B;IACrC,YAAY,EAAE,uCAAuC;IACrD,WAAW,EAAE,qDAAqD;CAClE,CAAC,CAAC,CAAC;AAEJ,uFAAuF;AACvF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAE7E,2HAA2H;AAC3H,SAAS,kBAAkB,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,iGAAiG;IACjG,IAAI,MAAM,CAAC,KAAK,YAAY,WAAW;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,MAAM,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB,EAAE,QAAgB;IACtE,IAAI,OAAO,YAAY,eAAe,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzF,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,aAAa,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC;QAC9E,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC;QACjF,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;AACpD,CAAC"}

package/dist/api/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Public barrel for the `@vibesdotdev/account/api` subpath.
+ *
+ * Exports the descriptor + types. Implementations are loaded by the account
+ * plugin via `loader()` and are NOT re-exported here — consumers resolve
+ * instances through `getVibesClient<AccountApiClient>('account', runtime)`.
+ */
+export { default as accountApiClientDescriptor } from './account.api-client.descriptor.ts';
+export { failureMessage } from './failure-message.ts';
+export { AccountApiError, AccountNotSignedInError, type AccountActiveOrgResponse, type AccountApiClient, type AccountApiClientRequestOptions, type AccountBillingSummary, type AccountConnectedProvider, type AccountNotification, type AccountNotificationListOptions, type AccountOrgSettings, type AccountOrgSettingsPatch, type AccountOrgSettingsResponse, type AccountPreferences, type AccountPreferencesPatch, type AccountProviderLinkResponse, type AccountProviderUnlinkResponse, type AccountPublicUser, type AccountResolvedSettings, type AccountSettingsPatch, type AccountSettingsRecord, type AccountThemeAssets, type AccountThemeCatalogPreset, type AccountThemeCatalogProjection, type AccountThemePresetSummary, type AccountUser, type AccountDiscoverHit, type AccountFriendRespondStatus, type AccountIncomingFriendRequest, type AccountOutgoingFriendRequest, type AccountSocialUser } from './account.api-client.types.ts';
+export { accountConnectedProvidersResponseSchema, accountResolvedUserSchema, accountResolveUsersRequestSchema, accountResolveUsersResponseSchema, ACCOUNT_RESOLVE_USERS_MAX_IDS, accountThemeCatalogProjectionSchema, accountOrgMembershipRoleSchema, accountValidateOrgMembershipRequestSchema, accountValidateOrgMembershipResponseSchema } from './account.api-client.schemas.ts';
+export type { AccountResolvedUser, AccountResolveUsersRequest, AccountResolveUsersResponse, AccountOrgMembershipRole, AccountValidateOrgMembershipRequest, AccountValidateOrgMembershipResponse } from './account.api-client.schemas.ts';
+export { accountDiscoverHitListSchema, accountIncomingFriendRequestListSchema, accountOutgoingFriendRequestListSchema, accountSocialUserSchema } from './account.social.schemas.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,eAAe,EACf,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,8BAA8B,EACnC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,iBAAiB,EACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,uCAAuC,EACvC,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,6BAA6B,EAC7B,mCAAmC,EACnC,8BAA8B,EAC9B,yCAAyC,EACzC,0CAA0C,EAC1C,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACX,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,4BAA4B,EAC5B,sCAAsC,EACtC,sCAAsC,EACtC,uBAAuB,EACvB,MAAM,6BAA6B,CAAC"}

package/dist/api/index.js

@@ -0,0 +1,13 @@
+/**
+ * Public barrel for the `@vibesdotdev/account/api` subpath.
+ *
+ * Exports the descriptor + types. Implementations are loaded by the account
+ * plugin via `loader()` and are NOT re-exported here — consumers resolve
+ * instances through `getVibesClient<AccountApiClient>('account', runtime)`.
+ */
+export { default as accountApiClientDescriptor } from "./account.api-client.descriptor.js";
+export { failureMessage } from "./failure-message.js";
+export { AccountApiError, AccountNotSignedInError } from "./account.api-client.types.js";
+export { accountConnectedProvidersResponseSchema, accountResolvedUserSchema, accountResolveUsersRequestSchema, accountResolveUsersResponseSchema, ACCOUNT_RESOLVE_USERS_MAX_IDS, accountThemeCatalogProjectionSchema, accountOrgMembershipRoleSchema, accountValidateOrgMembershipRequestSchema, accountValidateOrgMembershipResponseSchema } from "./account.api-client.schemas.js";
+export { accountDiscoverHitListSchema, accountIncomingFriendRequestListSchema, accountOutgoingFriendRequestListSchema, accountSocialUserSchema } from "./account.social.schemas.js";
+//# sourceMappingURL=index.js.map

package/dist/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,eAAe,EACf,uBAAuB,EA6BvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,uCAAuC,EACvC,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,6BAA6B,EAC7B,mCAAmC,EACnC,8BAA8B,EAC9B,yCAAyC,EACzC,0CAA0C,EAC1C,MAAM,iCAAiC,CAAC;AASzC,OAAO,EACN,4BAA4B,EAC5B,sCAAsC,EACtC,sCAAsC,EACtC,uBAAuB,EACvB,MAAM,6BAA6B,CAAC"}

package/dist/billing/caller-quota.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The signed-in caller's own quota decision for one feature, asked of the
+ * account billing API as that caller (`GET /api/billing/quota/check` with the
+ * caller's bearer). This is the consumer-side counterpart of the service
+ * `checkQuotaInternal` seam: no service token, so it is safe on any host.
+ *
+ * TRANSPORT: the canonical account client (`vibesAccountClient`), whose origin
+ * is the handed runtime's declared `account` `infra/service` (`serviceOrigin`).
+ *
+ * TRUTHFUL OUTCOMES: only a decided answer is a decision. A 401 means the
+ * caller's session is not accepted (`signed-out`). Network failure, 5xx, 429,
+ * an undecided body or an invalid body is `UNAVAILABLE`
+ * `billing-quota-unavailable`: never read as "free" and never as "allowed".
+ * Any other 4xx is `INVALID_INPUT` `billing-quota-rejected`.
+ *
+ * NEVER logs or returns the bearer.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { FeatureSlug } from './schemas/core/feature-slugs.ts';
+export type CallerFeatureDecision = {
+    status: 'entitled';
+    feature: string;
+} | {
+    status: 'not-entitled';
+    feature: string;
+    limit: number | null;
+} | {
+    status: 'signed-out';
+    feature: string;
+};
+/**
+ * Ask account whether the caller holding `bearer` may use `feature`
+ * (`amount` units, default 1). Throws typed when billing cannot decide.
+ */
+export declare function checkCallerFeature(runtime: RuntimeRef, params: {
+    feature: FeatureSlug;
+    bearer: string;
+    amount?: number;
+}): Promise<CallerFeatureDecision>;
+//# sourceMappingURL=caller-quota.d.ts.map

package/dist/billing/caller-quota.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-quota.d.ts","sourceRoot":"","sources":["../../src/billing/caller-quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAA6C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAYnE,MAAM,MAAM,qBAAqB,GAC9B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjE;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;GAGG;AACH,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,qBAAqB,CAAC,CA2ChC"}

package/dist/billing/caller-quota.js

@@ -0,0 +1,77 @@
+/**
+ * The signed-in caller's own quota decision for one feature, asked of the
+ * account billing API as that caller (`GET /api/billing/quota/check` with the
+ * caller's bearer). This is the consumer-side counterpart of the service
+ * `checkQuotaInternal` seam: no service token, so it is safe on any host.
+ *
+ * TRANSPORT: the canonical account client (`vibesAccountClient`), whose origin
+ * is the handed runtime's declared `account` `infra/service` (`serviceOrigin`).
+ *
+ * TRUTHFUL OUTCOMES: only a decided answer is a decision. A 401 means the
+ * caller's session is not accepted (`signed-out`). Network failure, 5xx, 429,
+ * an undecided body or an invalid body is `UNAVAILABLE`
+ * `billing-quota-unavailable`: never read as "free" and never as "allowed".
+ * Any other 4xx is `INVALID_INPUT` `billing-quota-rejected`.
+ *
+ * NEVER logs or returns the bearer.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { vibesAccountClient } from "../client/factory.js";
+import { failureStatus } from "./failure-status.js";
+/** Bound on one quota read; the account API answers from its own database. */
+const CALLER_QUOTA_TIMEOUT_MS = 10_000;
+const callerQuotaResponseSchema = z.object({
+    feature: z.string(),
+    allowed: z.boolean(),
+    decision: z.string().optional(),
+    limit: z.number().nullable().optional()
+});
+/**
+ * Ask account whether the caller holding `bearer` may use `feature`
+ * (`amount` units, default 1). Throws typed when billing cannot decide.
+ */
+export async function checkCallerFeature(runtime, params) {
+    const { feature } = params;
+    const client = await vibesAccountClient(runtime);
+    const fetched = await settle(() => client.get('/api/billing/quota/check', {
+        query: { feature, amount: params.amount ?? 1 },
+        headers: { Authorization: `Bearer ${params.bearer}` },
+        timeout: CALLER_QUOTA_TIMEOUT_MS
+    }));
+    if (!fetched.ok) {
+        const status = failureStatus(fetched.cause);
+        const cause = valueFreeFailure(fetched.cause);
+        if (status === 401)
+            return { status: 'signed-out', feature };
+        if (status !== undefined && status >= 400 && status < 500 && status !== 429) {
+            throw new CapabilityError(`The billing quota check for '${feature}' was rejected (${status}).`, 'INVALID_INPUT', {
+                reason: 'billing-quota-rejected',
+                retryable: false,
+                details: { feature, status },
+                cause
+            });
+        }
+        const details = { feature };
+        if (status !== undefined)
+            Object.assign(details, { status });
+        throw new CapabilityError(`Billing could not be reached to check '${feature}'.`, 'UNAVAILABLE', {
+            reason: 'billing-quota-unavailable',
+            retryable: true,
+            details,
+            cause
+        });
+    }
+    const parsed = callerQuotaResponseSchema.safeParse(fetched.value);
+    if (!parsed.success || parsed.data.decision !== 'decided') {
+        throw new CapabilityError(`Billing did not decide '${feature}'.`, 'UNAVAILABLE', {
+            reason: 'billing-quota-unavailable',
+            retryable: true,
+            details: { feature, decision: parsed.success ? (parsed.data.decision ?? 'absent') : 'invalid-body' }
+        });
+    }
+    return parsed.data.allowed
+        ? { status: 'entitled', feature }
+        : { status: 'not-entitled', feature, limit: parsed.data.limit ?? null };
+}
+//# sourceMappingURL=caller-quota.js.map

package/dist/billing/caller-quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller-quota.js","sourceRoot":"","sources":["../../src/billing/caller-quota.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,8EAA8E;AAC9E,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAOH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAmB,EACnB,MAAiE;IAEjE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CACjC,MAAM,CAAC,GAAG,CAAC,0BAA0B,EAAE;QACtC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE;QAC9C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE;QACrD,OAAO,EAAE,uBAAuB;KAChC,CAAC,CACF,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7E,MAAM,IAAI,eAAe,CAAC,gCAAgC,OAAO,mBAAmB,MAAM,IAAI,EAAE,eAAe,EAAE;gBAChH,MAAM,EAAE,wBAAwB;gBAChC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC5B,KAAK;aACL,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,eAAe,CAAC,0CAA0C,OAAO,IAAI,EAAE,aAAa,EAAE;YAC/F,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,IAAI;YACf,OAAO;YACP,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,2BAA2B,OAAO,IAAI,EAAE,aAAa,EAAE;YAChF,MAAM,EAAE,2BAA2B;YACnC,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE;SACpG,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO;QACzB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;QACjC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;AAC1E,CAAC"}

package/dist/billing/client/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Billing Client barrel for `@vibesdotdev/account/billing/client`.
+ *
+ * Pure-TS billing client utilities — no Svelte, no server code.
+ * Apps and libraries import from here instead of account-web.
+ */
+export { preflightQuota, quotaResponseSchema, type PreflightQuotaOptions, type QuotaResponse, type QuotaStatus } from './quota-guard.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/billing/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/billing/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,cAAc,EACd,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,MAAM,kBAAkB,CAAC"}

package/dist/billing/client/index.js

@@ -0,0 +1,8 @@
+/**
+ * Billing Client barrel for `@vibesdotdev/account/billing/client`.
+ *
+ * Pure-TS billing client utilities — no Svelte, no server code.
+ * Apps and libraries import from here instead of account-web.
+ */
+export { preflightQuota, quotaResponseSchema } from "./quota-guard.js";
+//# sourceMappingURL=index.js.map

package/dist/billing/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/billing/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACN,cAAc,EACd,mBAAmB,EAInB,MAAM,kBAAkB,CAAC"}

package/dist/billing/client/quota-guard.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Quota Guard Client
+ *
+ * Preflight a quota check for a feature before performing an action.
+ * Returns status; UI can open a credits dialog when not allowed.
+ *
+ * Canonical source: account — apps and libraries import from here.
+ * Formerly at account-web/billing/client/helpers/useQuotaGuard.
+ */
+import * as z from 'zod/v4';
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+/** Response from the /api/billing/quota/check endpoint. */
+export declare const quotaResponseSchema: z.ZodObject<{
+    feature: z.ZodString;
+    requested: z.ZodNumber;
+    allowed: z.ZodBoolean;
+    usage: z.ZodNumber;
+    limit: z.ZodNullable<z.ZodNumber>;
+    remaining: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type QuotaResponse = z.infer<typeof quotaResponseSchema>;
+/** Result of a preflight quota check, normalized for UI consumption. */
+export interface QuotaStatus {
+    allowed: boolean;
+    usage: number;
+    limit: number | null;
+    remaining: number | null;
+}
+export interface PreflightQuotaOptions {
+    /** Account service origin. Browser callers default to window.location.origin. */
+    accountOrigin?: string | null;
+    /** Advisory UI may opt into availability over enforcement during transport failure. */
+    failOpen?: boolean;
+    /** Abort a stalled preflight. */
+    timeoutMs?: number;
+}
+/**
+ * Preflight a quota check for a feature before performing an action.
+ *
+ * Calls /api/billing/quota/check with the feature slug and requested amount.
+ * Returns a normalized QuotaStatus that UI components can use to decide
+ * whether to proceed, show a credits dialog, or block the action.
+ *
+ * On fetch failure or non-OK response, returns a conservative "not allowed"
+ * status to prevent accidental quota overruns.
+ */
+export declare function preflightQuota(runtime: RuntimeRef, feature: string, amount?: number, options?: PreflightQuotaOptions): Promise<QuotaStatus>;
+//# sourceMappingURL=quota-guard.d.ts.map

package/dist/billing/client/quota-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-guard.d.ts","sourceRoot":"","sources":["../../../src/billing/client/quota-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAA4B,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIhF,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB;;;;;;;iBAO9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACrC,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,uFAAuF;IACvF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAQD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CACnC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,MAAM,EACf,MAAM,SAAI,EACV,OAAO,GAAE,qBAA0B,GACjC,OAAO,CAAC,WAAW,CAAC,CAmCtB"}

package/dist/billing/client/quota-guard.js

@@ -0,0 +1,69 @@
+/**
+ * Quota Guard Client
+ *
+ * Preflight a quota check for a feature before performing an action.
+ * Returns status; UI can open a credits dialog when not allowed.
+ *
+ * Canonical source: account — apps and libraries import from here.
+ * Formerly at account-web/billing/client/helpers/useQuotaGuard.
+ */
+import * as z from 'zod/v4';
+import { getLogger } from '@vibesdotdev/logging';
+import { settle, valueFreeFailure } from '@vibesdotdev/kernel';
+// ── Schemas ──────────────────────────────────────────────────────────
+/** Response from the /api/billing/quota/check endpoint. */
+export const quotaResponseSchema = z.object({
+    feature: z.string(),
+    requested: z.number(),
+    allowed: z.boolean(),
+    usage: z.number(),
+    limit: z.number().nullable(),
+    remaining: z.number().nullable()
+});
+function unavailableQuotaStatus(failOpen) {
+    return { allowed: failOpen, usage: 0, limit: null, remaining: null };
+}
+// ── Preflight ─────────────────────────────────────────────────────────
+/**
+ * Preflight a quota check for a feature before performing an action.
+ *
+ * Calls /api/billing/quota/check with the feature slug and requested amount.
+ * Returns a normalized QuotaStatus that UI components can use to decide
+ * whether to proceed, show a credits dialog, or block the action.
+ *
+ * On fetch failure or non-OK response, returns a conservative "not allowed"
+ * status to prevent accidental quota overruns.
+ */
+export async function preflightQuota(runtime, feature, amount = 1, options = {}) {
+    // A browser surface defaults to its own page origin; the runtime declares the surface.
+    const origin = options.accountOrigin?.trim().replace(/\/$/, '') ??
+        (runtime.scope.surface === 'browser' ? window.location.origin : '');
+    const failOpen = options.failOpen ?? false;
+    if (!origin)
+        return unavailableQuotaStatus(failOpen);
+    const url = new URL('/api/billing/quota/check', origin);
+    url.searchParams.set('feature', feature);
+    url.searchParams.set('amount', String(amount));
+    const checked = await settle(async () => {
+        const res = await runtime.lifecycle.wait((signal) => fetch(url.toString(), { credentials: 'include', signal }), { timeoutMs: options.timeoutMs ?? 5000, reason: 'account quota preflight' });
+        return res.ok ? quotaResponseSchema.parse(await res.json()) : null;
+    });
+    if (!checked.ok) {
+        getLogger('account.billing.quota-guard', runtime).warn('preflightQuota: quota check failed', {
+            feature,
+            failOpen,
+            error: valueFreeFailure(checked.cause)
+        });
+        return unavailableQuotaStatus(failOpen);
+    }
+    const data = checked.value;
+    if (!data)
+        return unavailableQuotaStatus(failOpen);
+    return {
+        allowed: data.allowed,
+        usage: data.usage,
+        limit: data.limit,
+        remaining: data.remaining
+    };
+}
+//# sourceMappingURL=quota-guard.js.map

package/dist/billing/client/quota-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quota-guard.js","sourceRoot":"","sources":["../../../src/billing/client/quota-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAEhF,wEAAwE;AAExE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAqBH,SAAS,sBAAsB,CAAC,QAAiB;IAChD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,yEAAyE;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,OAAmB,EACnB,OAAe,EACf,MAAM,GAAG,CAAC,EACV,UAAiC,EAAE;IAEnC,uFAAuF;IACvF,MAAM,MAAM,GACX,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;QACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EACrE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAC3E,CAAC;QACF,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,oCAAoC,EAAE;YAC5F,OAAO;YACP,QAAQ;YACR,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC;QACH,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEnD,OAAO;QACN,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;KACzB,CAAC;AACH,CAAC"}